Slashdot Mirror
Comcast Begins Native IPv6 Deployment To End Users
First time accepted submitter Daaelarius writes "Comcast has begun deployment of Native IPv6 access to end users. The deployment is starting out small with a single market, but is expected to expand rapidly. They have provided ... more in depth technical details."
Finally; native dual-stack IPv6 for home customers. Perhaps we can avoid a post-exhaustion future of NAT-upon-NAT and use restrictions.
People underestimate the address space in IPv6 when they make remarks like this.
In principle IPv6 could hold more than 10^38 addresses. Now due to structuring and various reservations and so on there is considerably fewer. So for the sake of argument, let's say it is "only" 10^20. That's still enough that for every present IPv4 address you could add an entire internet and still have addresses left over.
What this means is that even if ISPs were incredibly wasteful and basically trashed 99.9% of the address space due to bad practices, you'd still have millions of addresses for every person in the world.
not being directly connectable (ie., behind NAT)
WRONG.
on ipv4 NAT is generally implemented as a stateful firewall that also rewrites addresses.
There is absolutely nothing preventing a firewall on ipv6 that is stateful, that leaves addresses alone.
The security gain comes from the stateful firewall, not the rewriting addresses.
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
That's reverse thinking. If you need a firewall, setup a firewall, don't setup NAT instead.