Slashdot Mirror


After Launch Day: Taking Stock of IPv6 Adoption

darthcamaro writes "So how did World IPv6 Launch go? Surprisingly well, according to participants at the event. Google said it has seen 150% growth in IPv6 traffic, Facebook now has 27 million IPv6 users and Akamai is serving 100x more IPv6 traffic. But it's still a 'brocolli' technology. 'I've said in the past that IPv6 is a 'broccoli' technology,' Leslie Daigle, CTO of the Internet Society said. 'I still think it is a tech everybody knows it would be good if we ate more of it but nobody wants to eat it without the cheese sauce.'" Reader SmartAboutThings adds a few data points: "According to Google statistics, Romania leads the way with a 6.55% adoption rate, followed by France with 4.67%. Japan is on the third place so far with 1.57% but it seems here 'users still experience significant reliability or latency issues connecting to IPv6-enabled websites.' In the U.S. and China the users have noticed infrequent issues connecting to the new protocol, but still the adoption rate is 0.93% and 0.58%, respectively."

244 comments

  1. IPV6 is BROCCOLI!? by X0563511 · · Score: 4, Funny

    What a terrible metaphor. Everyone knows that IPv6 is closer to a Brussels Sprout.

    --
    For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    1. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      no, IPv6 is more like spinach without the salad dressing.

    2. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      More like Kale without.... Can't really think of anything to make that better. Damned CSA Kale with every delivery.

    3. Re:IPV6 is BROCCOLI!? by neokushan · · Score: 1

      That was true when people only used it once a year.

      --
      +1 IDisagreeSoHeMustBeATrollOrAnAstroturferOrAShill
    4. Re:IPV6 is BROCCOLI!? by Inda · · Score: 1

      What's with all this vegetable hate?

      And why ruin a good piece of broccoli with cheese sauce? Just boil it for a few minutes, and serve it while it's got a slight crunch. If you must add butter, only use half a teaspoon. Cheese sauce? Sounds fatty.

      IPv6 is more like a red double-decker bus.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    5. Re:IPV6 is BROCCOLI!? by jones_supa · · Score: 2

      It's a great term actually. Linux & OSS could be called the "broccoli technology" of Slashdot.

    6. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      George Bush said he hated broccoli, but I liked it even before that.

      Do old routers need updates to support IPv6? Do those with community support work fine? Does IPv6 help with net constipation?

    7. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Fat with your vegetables improves their nutritional content (fat soluble nutrients don't get absorbed without them). Cheese sauce sounds good. IPv6 sounds good too. What can I do to make time warner cable provide me with service?

    8. Re:IPV6 is BROCCOLI!? by ThurstonMoore · · Score: 2

      Vinegar, try vinegar on your kale. That metaphor is for the younger generation that grew up eating pizza and chicken nuggets. I have always liked broccoli, brussell sprouts and kale.

    9. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      I don't think Brussels sprout goes well with cheese sauce, and broccoli (unless it is cooked very badly) tastes so good by itself that it is a waste to put sauce on. The best choice of vegetable for the metaphor would be cauliflower.

      What were we talking about again?

    10. Re:IPV6 is BROCCOLI!? by PlastikMissle · · Score: 1

      Boil it?! Heavens! Just steam it a bit. Boiling takes out too much flavor and nutrients. Steaming keeps all that and gives broccoli a really nice radiant green color and a good crunch to boot.

    11. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      But I LOVE pickled Brussels Sprouts... broccoli on the other hand is always just bad

    12. Re:IPV6 is BROCCOLI!? by I_am_Jack · · Score: 4, Informative

      Blanch it, which is to say boil it for no longer three minutes. The general rule about steaming versus blanching is if it grows below the ground, steam it; if it grows above the ground, blanch or braise it. And no, boiling doesn't remove any more nutrients than steaming does. /off topic.

    13. Re:IPV6 is BROCCOLI!? by X0563511 · · Score: 4, Insightful

      To be fair, broccoli is good if it's fresh and is in the "goldilocks zone" - not too crisp, not too soggy. Brussels sprouts are similar: Obviously don't give them to me raw, but I'd prefer to not eat a soggy bitter mass of plant pulp.

      Can't say I've ever had kale. I enjoy collard greens, does that count?

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    14. Re:IPV6 is BROCCOLI!? by Merk42 · · Score: 1

      Broccoli and Brussels Sprouts are both cabbages anyway

    15. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Olive oil + garlic + red pepper flakes + kale in large pan. Wilt the kale, cook the garlic a bit. Add chicken stock. Braise until tender. Serve with a poached egg on top.

    16. Re:IPV6 is BROCCOLI!? by Bengie · · Score: 1

      Boil it and kill lots of the nutrients?! Nah, just wash it off and nom nom nom. The fiber-ish stalks are surprisingly filling. I used to hate broccoli even a few years back, now I love it.

    17. Re:IPV6 is BROCCOLI!? by Hatta · · Score: 3, Interesting

      Fat with your vegetables improves their nutritional content (fat soluble nutrients don't get absorbed without them).

      This is an interesting claim. Do you have a reference for it? I'm imagining people being fed broccoli with and without fat, and then serum concentrations of vitamins being tested shortly after. Would be an interesting experiment.

      --
      Give me Classic Slashdot or give me death!
    18. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      I love both steamed (or even raw in a salad for broccoli) without any dressings, who are the people complaining about these?

    19. Re:IPV6 is BROCCOLI!? by Lumpy · · Score: 1

      "What a terrible metaphor. Everyone knows that IPv6 is closer to a Brussels Sprout."

      Which is better with bacon instead of Cheese sauce.

      --
      Do not look at laser with remaining good eye.
    20. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      To maintain vibrant colour, dip the broccoli in ice cold water for a few seconds. Otherwise the brocolli will turn a grey-ish green.

    21. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 5, Informative

      Here is an example Carotenoid bioavailability is higher from salads ingested with full-fat than with fat-reduced salad dressings as measured with electrochemical detection. It is basically accepted lore in the field that fat is required to absorb fat-soluble nutrients (if there were no fats, all the hydrophobic molecules would cluster together into unabsorbabably large clumps; with fats they would dissolve into them, which can then be absorbed in the intestines).

    22. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Or add lemon juice

    23. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      What's surprising about fiber being filling?

    24. Re:IPV6 is BROCCOLI!? by Dogtanian · · Score: 1

      And why ruin a good piece of broccoli with cheese sauce? [..] Sounds fatty.

      It's true that broccoli tastes better when you're eating it with something saucy, but I've never heard of it being covered in cheese sauce in itself. Is someone confusing it with cauliflower and cauliflower cheese? (Article says this is a British dish, so maybe the Yanks eat broccoli with cheese instead, but I've never heard of that, and its article doesn't mention cheese).

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    25. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Blanch it, which is to say boil it for no longer three minutes. The general rule about steaming versus blanching is if it grows below the ground, steam it; if it grows above the ground, blanch or braise it. And no, boiling doesn't remove any more nutrients than steaming does. /off topic.

      Actually, thanks for the info! I love to cook, but hadn't heard that. I steam my corn on the cob, though, and it comes out perfect; saves having to boil a gallon of water.

    26. Re:IPV6 is BROCCOLI!? by Billhead · · Score: 1

      While we're at it, raw cauliflower dipped in ranch dressing is wonderful.
      Cauliflower has always reminded me of broccoli.

    27. Re:IPV6 is BROCCOLI!? by mcgrew · · Score: 1

      Screw that, just slop it in a bowl and throw it in the microwave for a couple of minutes. Then put melted velveeta on it. Not all of us have a weight problem, and I imagine that few of us who actually LIKE brocooli and Brussels Sprouts have a weight problem. I mean, when was the last time you ordered brocolli at Burger King?

      "Let's see, I'll have two Whoppers, a large... no, make that HUGE fries, half a gallon of Coke... oh, and a plate of brocolli!

    28. Re:IPV6 is BROCCOLI!? by The+Mighty+Buzzard · · Score: 1

      Head over to their local office. Find the boss. Pour molten cheese over his head.

      --
      Violence is like duct tape. If it doesn't solve the problem, you didn't use enough.
    29. Re:IPV6 is BROCCOLI!? by mcgrew · · Score: 1

      Yeah, they even sell frozen broccoli with the cheese already in it. Throw the bag in the microwave, nuke it, pour it into a bowl and you're done. Cauliflower's good with cheese, too.

    30. Re:IPV6 is BROCCOLI!? by ShanghaiBill · · Score: 1

      Can't say I've ever had kale. I enjoy collard greens, does that count?

      Kale and collard greens are similar enough that the same people usually like both. But many people don't know how to cook collard greens. You need to bring them to a boil, drain the water, add cold water, and bring them to a boil a second time.

    31. Re:IPV6 is BROCCOLI!? by icebraining · · Score: 1

      Hmm, most people I know with a weight problem don't eat regularly at fast food joints, and they do like vegetables. And I don't know about Burger King, but MacDonalds had Broccoli soup at least a few years ago.

    32. Re:IPV6 is BROCCOLI!? by suutar · · Score: 1

      I would, if they offered broccoli. Well, one double whopper with cheese and bacon, broccoli instead of fries, and a gallon of diet coke. hmmm. I think I see your point...

    33. Re:IPV6 is BROCCOLI!? by suutar · · Score: 1

      All things are better with bacon. Well, all savory things. Some sweet things get dicey. But whipped cream will handle them.

    34. Re:IPV6 is BROCCOLI!? by Hatta · · Score: 1

      Very cool. I figured the fatty nutrient corpuscules would be phagocytosed or something like that. I'll be sure to have some feta cheese around for future salads.

      --
      Give me Classic Slashdot or give me death!
    35. Re:IPV6 is BROCCOLI!? by Sunshinerat · · Score: 2

      Ranch Dressing makes EVERYTHING better.
      The only way to make Ranch Dressing better is if someone figured out put caffeine in it.
      Yum, Caffeinated Ranch Dressing!

      --
      Load New Commander (Y/N)?
    36. Re:IPV6 is BROCCOLI!? by Samantha+Wright · · Score: 2

      Sadly, not everyone shares your enlightened views.

      --
      Bio questions? Ask me to start a Q&A journal. Computer analogies available for most topics!
    37. Re:IPV6 is BROCCOLI!? by X0563511 · · Score: 1

      Wilt the kale

      Huh? Chef jargon. I'm not sure what that means.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    38. Re:IPV6 is BROCCOLI!? by X0563511 · · Score: 1

      Before or after blanching?

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    39. Re:IPV6 is BROCCOLI!? by X0563511 · · Score: 1

      but MacDonalds had Broccoli soup at least a few years ago.

      Water, salt, fat/oil/lard/whatever, broccoli flavoring, green food dye.

      Just a guess, but it IS McDonalds after all...

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    40. Re:IPV6 is BROCCOLI!? by Dragonslicer · · Score: 1

      The only way to make Ranch Dressing better is if someone figured out put bacon in it.

      Fixed that for you.

      Oh, wait, they already did.

    41. Re:IPV6 is BROCCOLI!? by jsdcnet · · Score: 1

      More like Kale without.... Can't really think of anything to make that better. Damned CSA Kale with every delivery.

      I make this all the time and it is fantastic. And I hate any other form of kale. http://www.foodnetwork.com/recipes/aarti-sequeira/massaged-kale-salad-recipe/index.html

      --
      no longer working for cnet
    42. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Best way to eat Brussel Sprouts is to dip/coat them in a sauce consisting of Grey Poupon and honey (proportion to your taste).

    43. Re:IPV6 is BROCCOLI!? by DroolTwist · · Score: 1

      I heard a Denny's advertisement for a bacon milkshake. I just couldn't go there.

    44. Re:IPV6 is BROCCOLI!? by unixisc · · Score: 1

      It's more like caesar salad and crutons w/ the ranch dressings. The people who don't like it are the ones complaining about the lack of grated cheese.

    45. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      But I like Brussels Sprouts.

    46. Re:IPV6 is BROCCOLI!? by osvenskan · · Score: 5, Informative

      Can't say I've ever had kale. I enjoy collard greens, does that count?

      Amazingly enough (getting way OT now), broccoli, kale, collard greens, cauliflower and cabbage are all the same species. Ladies and gentlemen, I present to you Brassica oleracea.

    47. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Try avocados as well.

    48. Re:IPV6 is BROCCOLI!? by DMUTPeregrine · · Score: 1

      Or roast them. Put them on a baking sheet, brush lightly with olive oil, turn the oven to a medium temp, and roast for about a half hour. Works for most vegetables.

      --
      Not a sentence!
    49. Re:IPV6 is BROCCOLI!? by camperslo · · Score: 1

      This is an interesting claim. Do you have a reference for it?

      This FAQ mentions fat for absorbing vitamin A.
      Perhaps unsaturated fats also work.

      http://www.fatfree.com/FAQ/alt-food-fat-free-faq

    50. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Boil it and kill lots of the nutrients?! Nah, just wash it off and nom nom nom. The fiber-ish stalks are surprisingly filling. I used to hate broccoli even a few years back, now I love it.

      You can blanch it or cook it al dente without "killing lots of nutrients", that only happens when you boil it until it's limp, or as most Americans do it... a mushy paste.

    51. Re:IPV6 is BROCCOLI!? by Midnight+Thunder · · Score: 1

      They need to be upgraded, but not all manufacturers are going to offer the option - though if it is recent you could always make some noise with the company. Ohers options include a new router or seeing if DDWRT can be installed.

      --
      Jumpstart the tartan drive.
    52. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Oh for God's sake, if you're going for taste, do anything *but* microwave with Velveeta. Ew.

      Here's what you do: Put fat, preferably pork or duck fat, but anything oily will do, in a frying pan. Turn the heat up *high*. Throw in the greens cut to bite-sized pieces and keep stirring. When they're just browned enough to be tasty, take them out and serve them, or, if they're not done, toss a bit of water/vinegar/wine in and cover to steam them a tiny bit.

      Salt, if they need it. That's delicious.

    53. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Or roast them. Put them on a baking sheet, brush lightly with olive oil, turn the oven to a medium temp, and roast for about a half hour. Works for most vegetables.

      It never ceases to amaze me how Slashdot can start out by talking about the next generation of IP connectivity--something that's definitely 'news for nerds' and 'stuff that matters' and the conversation veers off into how to roast collard greens.

      Everyone complains when a non-nerdy fluff story gets posted--but does it really matter? The discussion will end up where ever the hell it wants anyways...

    54. Re:IPV6 is BROCCOLI!? by Anonymous Coward · · Score: 0

      Yeah, they even sell frozen broccoli with the cheese already in it. Throw the bag in the microwave, nuke it, pour it into a bowl and you're done. Cauliflower's good with cheese, too.

      Frozen broccoli? Broccoli smothered in cheese sauce? or with the nutrients boiled out of it?

      No thanks.

      The only way to fly is to dice it up and saute it in real genuine butter. Maybe add a touch of celery salt.

    55. Re:IPV6 is BROCCOLI!? by nobaloney · · Score: 1

      All things are better with bacon. Well, all savory things. Some sweet things get dicey. But whipped cream will handle them.

      Everything's better with Blue Bonnet on it: http://www.youtube.com/watch?v=Pkm4HY-3cD8

    56. Re:IPV6 is BROCCOLI!? by Phoghat · · Score: 1

      While we're at it, raw cauliflower dipped in ranch dressing is wonderful. Cauliflower has always reminded me of broccoli.

      Because they're closely related members of the cabbage family

      --
      Think of how stupid the average person is, and realize half of them are stupider than that.
  2. Privacy Concerns by Anonymous Coward · · Score: 0

    So I know marketers will love it if everyone gets out from behind their NAT and faces the world with a naked IPv6 address.

    Why is that so great?

    1. Re:Privacy Concerns by Anonymous Coward · · Score: 3, Insightful

      NAT isn't a security feature, that was a consequence of it breaking things to try and patch a bandaid fix on the problem IPv6 solves.

    2. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      So I know marketers will love it if everyone gets out from behind their NAT and faces the world with a naked IPv6 address.

      Why is that so great?

      I suspect using cookies and or fingerprinting will still be more accurate. For starters windows users have ever changing privacy addresses enabled by default. There will always be people hiding behind NATs or proxies and content filters. With cookies and fingerprinting they get to tag and follow just about everyone.

    3. Re:Privacy Concerns by Mitchell314 · · Score: 1

      I don't know much about IPv6. Does it not allow private networks?

      --
      I read TFA and all I got was this lousy cookie
    4. Re:Privacy Concerns by Jon+Stone · · Score: 4, Interesting

      I've never understood this concern. With IPv6 I have, say, 2^64 addresses to use. I could use a different source IP address for each and every HTTP request I send out. Even at 1000 requests a second we'll all be long dead before you had to reuse a source address.

      IPv6 gives you loads of room to hide. This is my concern - address based blocklists will quickly become infeasible.

    5. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      At a billion requests per second, though, it's looking a bit shaky. What price your privacy now?

    6. Re:Privacy Concerns by SuricouRaven · · Score: 3, Informative

      Not quite. Your ISP still assigns you a /64 (typically) so all your requests would have to come from within that - and the other end could easily recognize this. The only real privacy implication of ipv6 is that it'd be possible for a server to tell via IP address which computer in a household a request came from, rather than just the house - so it could make different profiles for the teenage daughter to see lots of clothes and music ads while the mother gets lots of furniture and household products advertising. But even without ipv6, this is trivial anyway - it just needs to be done by cookies, which is how every major profile-building ad network does it already.

    7. Re:Privacy Concerns by Bengie · · Score: 1

      1 bil 64byte packets per second is almost 500Gbit/s, and that doesn't include the HTTP payload or the hand-shakes. You won't really need to worry about your IP addresses getting scanned until the average person has a 1Tb/s internet connection, even then you're talking about 500+years.

      To make an effective scan of the first half of a /64, one would need ~54.5Pb/s of dedicated bandwidth between the two networks.

    8. Re:Privacy Concerns by imemyself · · Score: 1

      It's actually even better than that. The official recommendation is a /48 per end-site. As far as I have been able to tell, I think ISP's are generally following that. I had heard something about using /56 per end site for residential users. That still gives people plenty of room to have multiple subnets though.

      --
      Every time you post an article on Slashdot, I kill a server. Think of the servers!
    9. Re:Privacy Concerns by Anonymous Coward · · Score: 2, Insightful

      No, they won't. It would be more work for them to give out a single IPv6 address than to give out a block. The official recommendation for residential customers is a /56, in Comcasts trials so far they've been giving out /64s. That's 18,446,744,073,709,551,616 addresses for each home. I don't think you remotely understand the size of the IPv6 space. NAT will die.

    10. Re:Privacy Concerns by Anonymous Coward · · Score: 1

      It allows everything IPv4 did. People like the grandparent are just malfeasant temper-tantrum throwers screaming "I'll show you!"

      Absolutely nothing forbids private networks (in fact, there's a massive fc00::/7 address space dedicated to roughly the same purpose as 10.*, 192.168.* etc with a bonus pseudorandom prefix to make VPN address collisions less likely).

      Likewise, absolutely nothing forbids you from having a firewall that blocks incoming connections.

    11. Re:Privacy Concerns by mSparks43 · · Score: 0

      NAT isn't a security feature

      No, but enterprise security features require NAT.

    12. Re:Privacy Concerns by growse · · Score: 1

      Just unplug your internet connection. Voila, a private network.

      --
      There is nothing interesting going on at my blog
    13. Re:Privacy Concerns by mikael_j · · Score: 3, Insightful

      Mostly because a lot of enterprise IT departments have serious issues with anything new and thus "scary" and "untested". Hell, I know places that still critical production systems on NT4 and think Subversion is too new and untested to be used as a production VCS so they just stick to CVS since "everyone knows it and it works".

      On a similar note, these are the kind of places that mandate that all database queries be made as stored procedures (T-SQL, of course) since that's the only "safe" way of accessing a database. Bring up parameterized queries and they look at you like you're mad. In places like that they have working security put in place 10 - 15 years ago and they have no intention of changing anything until they absolutely have to. In their world security "needs" NAT (because that's what their equally old firewall appliance needs).

      --
      Greylisting is to SMTP as NAT is to IPv4
    14. Re:Privacy Concerns by WaffleMonster · · Score: 4, Interesting

      I've never understood this concern.

      Me either.

      IPv6 gives you loads of room to hide. This is my concern - address based blocklists will quickly become infeasible

      It it won't be that much different with v6 and a slight change in mindset. Instead ofblocking an IP you go after the prefix instead.

      For example an ISP customer is abusing my service and I want to block him. I don't go after his IPv6 IP I go after his entire /64, /48 prefix or whatever it is his ISP allocated to him. He can change his local bits all he wants he is still blocked.

      There are other examples where it is difficult such as blocking some computers on the same /64 segment as others you want to allow however when we look at this problem today all we see most of the time is a NAT for the whole network with a single IP.

      The address space is bigger and there is more room to hide yet allocation is still hierarchical and we still know what blocks are allocated to who via SWIP or working an ISPs abuse channels.

    15. Re:Privacy Concerns by welshie · · Score: 1

      Sure, there's ways of addressing IPv6 with link-local style addresses, these tend to start fe80::, but if you want your packets to be routed out onto the big wide Internet and back, they'd better have proper addresses. IPv6 doesn't do NAT, but if you really need to renumber your network (say, if you've changed ISPs, and have got far too much statically configured kit, and don't know how to do a simple search and replace on some configs), you can do a network prefix translation thing, which is a bit of a bodge, in the same way that NAT is a bodge.

    16. Re:Privacy Concerns by mikael_j · · Score: 2

      Not to mention that software-wise if you truly wanted to use your entire /64 (or /48) to stay somewhat anonymous it shouldn't be extremely hard to hack up an IPv6 stack that uses one address per remote host. So facebook.com sees one address, slashdot.org sees another, google.com sees a third. Doesn't even have to be sequential.

      --
      Greylisting is to SMTP as NAT is to IPv4
    17. Re:Privacy Concerns by Jon+Stone · · Score: 2

      Remember - we're comparing IPv4 with NAT against IPv6.

      Yes the ISP allocates the IPv6 prefix, but then again with NAT every source packet has the same IPv4 address. The real difference is that with IPv6 every single request can be given a different source address. If the source addresses are picked randomly from the /64 pool then it should be impossible to identify individual hosts within the /64 based solely on IP address information. As you rightly point out there are other effective ways of doing this already, but that's not an argument against using IPv6.

    18. Re:Privacy Concerns by icebraining · · Score: 3, Informative

      IPv6 most certainly does NAT: http://tools.ietf.org/html/rfc6296

    19. Re:Privacy Concerns by Lennie · · Score: 1

      What privacy concernts ?

      In Windows XP (if IPv6 is enabled), Windows Vista, Windows 7, newer Mac OS X, newer iOS, Android, newer Ubuntu IPv6 privacy extensions are all enabled by default.

      So it is pretty much the same privacy-wise as IPv4.

      (Just checked and Fedora does NOT enable privacy extensions, not sure why)

      --
      New things are always on the horizon
    20. Re:Privacy Concerns by ThatsMyNick · · Score: 2

      Then what makes you think advertisers/data-gathers will not start assume that all requests from the same /64 block come from the same person?

    21. Re:Privacy Concerns by Lennie · · Score: 1

      There is already something called IPv6 privacy extensions, which is enabled by default on most operating systems, and it will create a random IPv6 address ones every 24 hours which it uses to connect to other hosts.

      --
      New things are always on the horizon
    22. Re:Privacy Concerns by Lennie · · Score: 1

      Which computer,..? Well, with IPv6 privacy extensions enabled (which is the default in most operaring systems) a new random IPv6 address will be generated at every startup or every 24 hours.

      So that is hardly useful at the server to distingues between client computers.

      --
      New things are always on the horizon
    23. Re:Privacy Concerns by Bengie · · Score: 2

      He never mentioned anything about privacy, only about the 1 IP address comment. Tracking Ip address doesn't matter much anyway, except for geolocation. One's browser fingerprint is unique enough to track.

    24. Re:Privacy Concerns by Bengie · · Score: 1

      Since blocks are hierarchical and sequential, it should be quite easy to block countries almost entirely. Don't like Russia/China connecting to you? Get their ranges.

    25. Re:Privacy Concerns by unixisc · · Score: 1

      Actually, it's fe80::/10 that's dedicated to the same purpose as private addresses, and can be assigned in anyway one feels like. fc00::/7 is supposed to be globally unique, but unroutable. Looks like they couldn't figure out how to implement this, so left it unimplemented, but really, it would be great for connecting VPNs, for instance.

    26. Re:Privacy Concerns by unixisc · · Score: 1

      Uh, private addresses need to be assigned as well. Private addresses for IPv4, and Link-local addresses - fe80::/10 for IPv6.

    27. Re:Privacy Concerns by unixisc · · Score: 1

      The official recommendation is /48, but only ARIN and LACNIC seem to be following that. APNIC very clearly states that they'll assign /56, and if one wants more, they have to justify it. I believe the same policy is being followied by RIPE.

      As was mentioned in the previous IPv6 thread yesterday, for things like multiple SSIDs, having wired and wireless on different networks to prevent collisions, and so on, a customer may need more than one subnet. Since the ISPs aren't going to split them by bit, chances are they'll either assign a nybble or a byte. If the last hex digit of the subnet address is assigned to a customer, that gives them 16 networks to play w/, which is presumably enough for a household. I think most ISPs may have a tiered plan for /128, /64 and /56 or /60.

    28. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      With IPv6 it's routers, routers, routers. Everything depends on how they are setup.

    29. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      Bring up parameterized queries and they look at you like you're mad.

      While parameterized queries are perfectly safe from an SQL Injection point of view the connected user still needs permissions on the raw tables/views to use them. Requiring all access through stored procedures is better because the connected users only need permissions on the stored procedures and all other objects can be inaccessible to them.

      We actually combine the two in our shop - all access is through stored procedures, but the stored procedures themselves write parameterized queries based on the supplied input to the stored procedures (i.e.: a stored procedure with 10 parameters may only have 3 parameters specified, so the generated parameterized query only includes those three parameters). This is done because each paramaterized query gets its own query plan cache, so there is a better chance that performance can be optimized for each query type.

    30. Re:Privacy Concerns by WaywardGeek · · Score: 1

      As far as I can tell, it looks like we'll still have NATs by default in our Cicso/LinkSys/whoever home routers and wireless access points. NAT works just fine with IPv6, and our ISP service providers would prefer that it remain difficult to impossible for P2P applications to work at all.

      --
      Celebrate failure, and then learn from it - Nolan Bushnell
    31. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      Oh look 30% of IPv6 just broke right there.

    32. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      IPv6 most certainly does NAT: http://tools.ietf.org/html/rfc6296

      Read his post again:

      you can do a network prefix translation thing, which is a bit of a bodge, in the same way that NAT is a bodge.

      Then read the title of the RFC you linked to:

      IPv6-to-IPv6 Network Prefix Translation

    33. Re:Privacy Concerns by isdnip · · Score: 1

      No, NAT will not die. NAT is a good idea, not a bad one. Virtually everyone uses firewalls nowadays, most of which do NAT, which adds a level of security (not enough by itself, but it helps).

      It is a critical flaw in TCP/IP architecture that the application translates the name to the address and sees the IP address. And there's never a good reason for applications to have numeric IP addresses inside them. NAT only breaks broken applications. IPv6 is Just Plain Stupid. It's ugly and it wants to die. And it will. The people who are pushing it are the kind of people who seek out authority in order to obey it blindly.

    34. Re:Privacy Concerns by Anonymous Coward · · Score: 0

      per, subversion. We still use cvs because it works and we have quite a number of build tools/etc built around it. We have considered switching vcs a few times but frankly CVS works really well, especially when compared to subversion which swaps one set of ugly problems for another. Frankly given how simple CVS is, allows it to be extended/worked around a lot easier than SVN. Basically, while claiming SVN is crap isn't popular but myself and a number of other developers all seem to agree that its better to have the simple problems of cvs than the complex ones of svn.... That said we have run GIT, and find it a far more worthy replacement.

    35. Re:Privacy Concerns by CjKing2k · · Score: 1

      IPv6 blocklists will most likely block entire /64's instead of single addresses. This has the potential of blocking an entire organization for one user's bad behavior, but so does blocking a single IPv4 address that is the public side of a NAT.

    36. Re:Privacy Concerns by siride · · Score: 1

      Correct me if I'm wrong, but I believe in MySQL, at least, you can have procedures run in the context of the defining user, not the invoking user. Thus, the procedures can access tables that the user calling the procedures cannot.

    37. Re:Privacy Concerns by unixisc · · Score: 1
      Read that document again:

      This document is not an Internet Standards Track specification; it is published for examination, experimental implementation, and evaluation.

      It's still under evaluation, but has not been officially approved by the IETF. Anything today that does IPv6 doesn't support this spec.

    38. Re:Privacy Concerns by unixisc · · Score: 1

      Come again?

    39. Re:Privacy Concerns by green1 · · Score: 1

      No, enterprise security features require a firewall. Currently NAT devices incorporate firewalls, but the NAT part isn't needed for the security part to work.

    40. Re:Privacy Concerns by green1 · · Score: 1

      Address based blocklists aren't going to vanish, only change.
      When your ISP gives you an address, they'll actually be giving you a subnet, so blocklists will do the same, block small subnets instead of individual addresses. (of course that's only if the person you're trying to block is very persistent, because just like now, they're likely to stay on the same IP they were originally given.

    41. Re:Privacy Concerns by grahamm · · Score: 1

      All the address based blocklists have to do is block the whole /64 which is the smallest allocation ipv6 allocation unit.

    42. Re:Privacy Concerns by Midnight+Thunder · · Score: 1

      Well RFQ 4941 addresses some of your concerns: http://tools.ietf.org/html/rfc4941

      Additionally if you at worried a privacy, then put all web traffic behind a web proxy and filter out certain cookies.

      --
      Jumpstart the tartan drive.
    43. Re:Privacy Concerns by Midnight+Thunder · · Score: 1

      Also worth noting that fe80::/10 is self assigned and non-routable. This means you can just connects bunch of computers together with a switch and they will have an address to speak to each other with, but you won't be using it to speak to computers outside of the net. I suppose this is roughly equivalent to the IPv4 169.*, except the IPv6 equivalent is a bit more static.

      Maybe fc00::7 was a fallback plan in case NATing became necessary? First I have heard of the prefix.

      --
      Jumpstart the tartan drive.
    44. Re:Privacy Concerns by Dagger2 · · Score: 1

      They will.

      But then we're just back to the IPv4 situation, with them only being able to distinguish between networks rather than individual machines. At that point, the original complaint of "they'll be able to distinguish between individual machines" starts looking rather silly.

    45. Re:Privacy Concerns by unixisc · · Score: 1

      I doubt it. fc00::/7 was more likely a plan to assign everyone in the world unique non routable addresses so that for applications like VPN, whereas in IPv4, one could have multiple 192.168.0.5s albeit in different networks, here, the chances that 2 computers even on different networks would have the same private address is ruled out. I guess they couldn't find a reliable algorithm that guarantees that uniqueness, and therefore went for fd00::/7, where the uniqueness is not essential.

      Btw, I thought that one could manually assign link local addresses to different computers in one's network if one wanted. Anything in either the OS or the standard that stops it?

    46. Re:Privacy Concerns by Bengie · · Score: 1

      "access through stored procedures is better because the connected users only need permissions on the stored procedures and all other objects can be inaccessible to them" yep

    47. Re:Privacy Concerns by rb12345 · · Score: 1

      Actually, that shouldn't be too hard to do; just replace the initial "2001:" of your global prefix with "fc00:" and you should be done. (You could probably do something similar with 6to4, where the network prefix is defined by your external IPv4 address.)

    48. Re:Privacy Concerns by Qzukk · · Score: 2

      NAT only breaks broken applications

      Such as everything that needs to receive a connection from the outside, like chat, games, etc.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    49. Re:Privacy Concerns by unixisc · · Score: 1

      No, people could have public IPs starting w/ 2001, 2400, 2600 and so on, so that one doesn't guarantee uniqueness. I agree though that it's not too hard, but am surprised that nobody figured out how to guarantee something to that effect.

    50. Re:Privacy Concerns by rb12345 · · Score: 1

      I'd forgotten about the Sprint 2600:: address. :(

      I suspect that the real answer was that fc00::/7 was created just to keep all the anti-publicly-allocated-address people happy, and was never taken that seriously. All the real connectivity would use link-local or suitably firewalled global address space. VPNs between separate companies would be handled via IPSEC, and no new addresses would be needed. Of course, that works fine in theory, but will probably never happen in reality...

    51. Re:Privacy Concerns by 3.1415926535 · · Score: 1

      You can generate your own globally-unique private networks. See, for example, http://www.simpledns.com/private-ipv6.aspx

    52. Re:Privacy Concerns by Midnight+Thunder · · Score: 1

      I haven't seen anything about manually assigning a link local address and imam not even sure what the benefit would be, since it is essentially static for a given device?

      --
      Jumpstart the tartan drive.
    53. Re:Privacy Concerns by unixisc · · Score: 1

      Benefit would be if people needed to remember their IP addresses, and therefore chose to assign it manually, so that they could have fe80::1 to fe80::10 for all their devices. If it was automatically assigned, they might get something like fe80:947d:feed:ad65::d09:95b2:f00d:f2cb, which would be tough to remember, especially if they have to enter it repeatedly in different applications that work better w/ an actual IP as opposed to a resolved name.

    54. Re:Privacy Concerns by Midnight+Thunder · · Score: 1

      With things like mDNS or routers athat uto register host names, it may be more effort than it is worth?

      --
      Jumpstart the tartan drive.
  3. Facebook.com AAAA records by Anonymous Coward · · Score: 4, Funny

    http://blogs.voxeo.com/speakingofstandards/2011/05/22/fun-with-ipv6-addresses-check-out-facebooks-aaaa-record-in-dns/

  4. Network gear features are still WAY behind v4 by BagOBones · · Score: 4, Informative

    On the consumer front only just recently did home WiFi routers start shipping or start getting IPv6 support, even then finding an ISP that will provision you is next to impossible.

    On the enterprise front gear has been labeled as IPv6 ready or compatible or even listed it as a feature for a long time. However if you work in security and have to implement policy control over content, you quickly see that the functionality is years behind when applied to IPv6 flows... At an enterprise level switching isn't easy without swamping out a lot of gear, or reducing expectations... IPv6 enabled deep inspection, and application layer inspection tools are only now becoming available, or only now becoming mature enough to roll out.

    --
    EA David Gardner -"... but the consumers have proven that actually what they want is fun."
    1. Re:Network gear features are still WAY behind v4 by imemyself · · Score: 4, Informative

      I definitely agree with the concerns about IPv6 in the enterprise. Sure, almost everything has had some IPv6 support for years, but the feature parity with IPv4 was not there. (For example maybe something supports OSPF / BGP with IPv4 but only static routes with IPv6...or you can reference address groups from within a IPv4 ACL but not from IPv6). Even today some vendors (*cough* Juniper on their EX switches *cough*) see IPv6 routing as "extra" feature that isn't available on the basic license level. This is unacceptable, and shows a complete disconnect between vendors and enterprises / service providers with respect to what's actually needed for real world IPv6 deployments.

      --
      Every time you post an article on Slashdot, I kill a server. Think of the servers!
    2. Re:Network gear features are still WAY behind v4 by Anonymous Coward · · Score: 0

      The router provided to me by my ISP supports IPv6, but the ISP itself does not...

    3. Re:Network gear features are still WAY behind v4 by BagOBones · · Score: 1

      I can forgive Juniper when compared to Cisco on the topic of licensing and complexity.

      Despite advancements for support at the device level the next major hurdle for large enterprise is the management tools and monitoring tools not fully supporting IPv6.

      It is really hard to manage a modern network without flow monitoring, snmp and syslog data from all systems. This is another area where you end up with a setback or compromise if you try and roll out right now.

      --
      EA David Gardner -"... but the consumers have proven that actually what they want is fun."
    4. Re:Network gear features are still WAY behind v4 by Melkman · · Score: 2

      I totally agree with the Juniper EX licensing issue. Why is there a difference between OSPF and OSPFv3 ? I could understand if an advanced license was needed for both or for none of them but the split is just awkward.

    5. Re:Network gear features are still WAY behind v4 by Anonymous Coward · · Score: 0

      XS4ALL will provide you with an IPv6 capable router. They even have a special offer for existing customers. Of course, not everyone can get an account with the world's most awesome ISP. (not a shill, just a very happy customer ;-) - except for the one time when they bought up demon internet :-P . dangit, I'd just moved away from demon!)

    6. Re:Network gear features are still WAY behind v4 by Hatta · · Score: 1

      On the consumer front only just recently did home WiFi routers start shipping or start getting IPv6 support, even then finding an ISP that will provision you is next to impossible.

      That's what custom firmware and 6 to 4 gateways are for.

      policy control over content, you quickly see that the functionality is years behind when applied to IPv6 flows

      That's a feature, not a bug.

      --
      Give me Classic Slashdot or give me death!
    7. Re:Network gear features are still WAY behind v4 by BagOBones · · Score: 1

      Out of the box you get access to a lot more (ipv4 features) than with Cisco without extra licensing, however you are right that the split is odd.

      --
      EA David Gardner -"... but the consumers have proven that actually what they want is fun."
    8. Re:Network gear features are still WAY behind v4 by Anonymous Coward · · Score: 0

      OpenWRT runs IPv6 well. I run it on a (refurbished) WRT160NL. I use a tunnel to Hurricane Electric to get IPv6.

    9. Re:Network gear features are still WAY behind v4 by Anonymous Coward · · Score: 0

      I totally agree with the Juniper EX licensing issue. Why is there a difference between OSPF and OSPFv3 ? I could understand if an advanced license was needed for both or for none of them but the split is just awkward.

      Because OSPF is part of the core code base, but v3 isn't... yet. At least for the Enterprise series models. Usually the license pricing is a result of costs to develop and test the code on that particular platform. Part of why Enterprise licenses are cheaper is because the hardware is a more fixed configuration compared to the Carrier grade models, so it's a little easier to support a single unified code base. But it's still a lot more demanding than a SOHO grade switch/router where you have a very limited array of hardware.

      But it's not any different than any of the other major vendors, or even the 2nd Tier players. Sure, the specifics can vary as to which features come with which licenses and models, but overall the practice is a reflection of development and support costs. In a SOHO/consumer model all the costs are wrapped up in a single price, as you work your way up the food chain the costs become more itemized, so to speak. But yea, it can result in some odd mismatches between what would seem to make sense and reality.

    10. Re:Network gear features are still WAY behind v4 by Midnight+Thunder · · Score: 1

      You could probably use a tunnel for now. Check out tunnel brokers such as Hurricane Electric or SiXXS.net.

      --
      Jumpstart the tartan drive.
    11. Re:Network gear features are still WAY behind v4 by Soruk · · Score: 1

      Neither my router nor ISP support IPv6, however I'm running a SixXS tunnel, so my IPv6 router is my main server. And for some reason I've been assigned a /48. No idea what I'm going to do with them all...

      --
      -- Soruk
    12. Re:Network gear features are still WAY behind v4 by BagOBones · · Score: 1

      Hacking in a custom firmware like OpenWRT, Tomato or DD-WRT isn't the point when it comes to mass penetration of IPv6, devices need to officially ship with it for it to spread.

      --
      EA David Gardner -"... but the consumers have proven that actually what they want is fun."
    13. Re:Network gear features are still WAY behind v4 by Midnight+Thunder · · Score: 1

      A /48 is what is normally assigned based on IETF recommendations. Now you are free to build your own Internet ;)

      BTW you say your router doesn't support IPv6, but it using using a SixXS tunnel. Did I miss something?

      --
      Jumpstart the tartan drive.
  5. nat routers... by Anonymous Coward · · Score: 3, Interesting

    How many ipv4 nat routers are out there? How many of the big ISP's turned it on (or will by 'end of the year')?

    Take my ISP for example (a pretty big one). They are just talking about turning it on this year 'by the end of the year' (which is marketing speak for next year).

    Then how many consumer grade routers out there can you buy that are still only ipv4 (a lot btw). You have to go out of your way to get something with IPv6 you need to know exactly which router to get. You even had one decent sized manufacture yank the feature out for all intents and purposes so be careful which firmware you are running... Sure you can flash the firmware on many to get it. But what a pain. I dont feel like playing root my wireless access point to get a feature which should ALREADY be included... In 2005 this was understandable. In 2012 not so much anymore...

    Then we can talk about the devices themselves. There are thousands of embedded devices out there sold within the past 2 years that ONLY do IPv4. TV's being the worst of the offenders... Bought a network enabled bluray a couple of months ago. IPv4 only... And both of these devices are from major manufactures...

    the tl;dr ver 'it will take time not enough devices that support it yet'.

    1. Re:nat routers... by Pi1grim · · Score: 1

      I see this problem being solved by ISP by selling IPv6 access with old prices and declare IPv4 access "legacy" and charge extra. That would surge demand for end-user IPv6 capable devices, which, in it's turn would cause an increase in manufacture of such devices (if people want it, why not slap a new shiny sticker on it "Killer IPv6 feature" and sell them to all the users, that had once bought IPv4 devices.

    2. Re:nat routers... by Mashiki · · Score: 1

      Take my ISP for example (a pretty big one). They are just talking about turning it on this year 'by the end of the year' (which is marketing speak for next year).

      Is it rogers? They've been saying that up here in Canada for the last few years, heck my ISP(teksavvy) who leases from their headend still doesn't have IPv6 for cable. Though they've been working to get IPv6 for DSL up and running for the last couple of years and you can opt in via their beta program, and they even provide a compatible firmware for most open-standard routers.

      --
      Om, nomnomnom...
    3. Re:nat routers... by Midnight+Thunder · · Score: 1

      Could be Bell. They have a page on getting ready for IPv6 ( http://ipv6.bell.ca/ ), but there is no way to actually get IPv6 capability from them!? Though, is there any ISP in Canada providing means to natively get onto IPv6?

      --
      Jumpstart the tartan drive.
    4. Re:nat routers... by Mashiki · · Score: 1

      All to true. Any ISP? Hmm electrobox I think, they have their own dslams and plants.

      --
      Om, nomnomnom...
  6. Horrible Analogy by Mullen · · Score: 1

    Calling IPv6 broccoli is a horrible analogy. IPv6 is chocolate, vanilla, cake, topped in cheese sauce. The only reason it is not being widely used is that IPv4 is working for the vast majority of people and they are not willing to invest time or money on equipment in switching to IPv6. Hopefully, this will change.

    The day my ISP and my home hardware (MacOSX, Roku, iPhone, Android) support IPv6, I am using it.

    --
    Linux O Muerte!
    1. Re:Horrible Analogy by gstoddart · · Score: 4, Funny

      Calling IPv6 broccoli is a horrible analogy. IPv6 is chocolate, vanilla, cake, topped in cheese sauce.

      So, it sounds disgusting and nobody wants it? Cheese sauce on cake?

      That would explain a lot.

      --
      Lost at C:>. Found at C.
    2. Re:Horrible Analogy by Megane · · Score: 1

      Maybe cheesecake with cheese sauce would be a better analogy. They're both cheese, right? So it's got to be good!

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    3. Re:Horrible Analogy by m.ducharme · · Score: 2

      All your Apple gear has supported IPv6 out of the box for a few years now. I think Windows supports it out of the box, and probably your Android phone too, though I'm less sure about that. Most likely the missing link is your NAT box (unless you have an Apple box, which as I said is IPv6 ready), and your ISP.

      --
      Rule of Slashdot #0: You and people like you are not representative of the larger population. - A.C.
    4. Re:Horrible Analogy by amRadioHed · · Score: 1

      Cream cheese frosting is delicious and fairly common. If you've never had it you're missing out.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
    5. Re:Horrible Analogy by virgnarus · · Score: 2

      I think he's implying that the cheese sauce is the effort needed to implement it. IPv6 sounds ever increasingly delicious, that is until you get to where you actually need to lift up a finger to add it to your network, in which case then that delectable chocolate vanilla cake has been soured by the cheddar of corporate laziness.

    6. Re:Horrible Analogy by gstoddart · · Score: 1

      Cream cheese frosting is one thing.

      Cheese sauce in the context of broccoli (which is how we got here) is an entirely different thing ... that's either Cheese Whiz, or a bechamel sauce with cheese melted into it.

      On cake, cheese sauce sounds nasty.

      --
      Lost at C:>. Found at C.
    7. Re:Horrible Analogy by unixisc · · Score: 1

      Doesn't OS-X support IPv6, given its FreeBSD underpinnings?

    8. Re:Horrible Analogy by Mullen · · Score: 1

      A little research shows that:
      - iPhone/iPad does supports IPv6
      - Android ICS does not support IPv6
      - OSX does support IPv6
      - Roku does not support IPv6
      - My ISP (Cox) does not support IPv6
      - My wireless router (Linksys E2100) does not support IPv6

      --
      Linux O Muerte!
    9. Re:Horrible Analogy by isdnip · · Score: 1

      No, it's not broccoli. Nor chocolate. It's creamed chipped beef on toast a/k/a sh*t on a shingle. Only on stale toast. You eat it because you are there to take orders. Not to think.

    10. Re:Horrible Analogy by green1 · · Score: 1

      Seems like the article is blaming end users for not wanting to adopt IPv6, which is ludicrous when you realize that in my country there isn't a single ISP selling IPv6 access. (and in most of the rest of the world the situation isn't that far ahead of us, sure some places have some IPv6 access, but it's hardly ubiquitous)

      As for support, well my desktop has a toredo tunnel for IPv6 (though rarely used because the tunnel is slower than the direct IPv4 connection, it still provides access to any IPv6 specific things I want) my server is located in a country, and with an ISP that does support IPv6, so that one is already taken care of, my android devices, well I haven't had much luck with them yet, but then again, my home router doesn't support it yet either (though I have considered trying to remedy that... might be interesting to move my home network to IPv6)

    11. Re:Horrible Analogy by green1 · · Score: 1

      You say that Android ICS does not support IPv6... and yet my Android phone has a setting on the APN for IPv4 or IPv6... seems an odd setting for a device that doesn't support IPv6... (of course I know that neither my home network, nor my carrier support IPv6, so there hasn't exactly been an opportunity to try.)

    12. Re:Horrible Analogy by daniel23 · · Score: 1

      As to Android it is not true that it does not support IPv6, my HTC Desire displays v6-only web sites just fine when it connects via wlan, k9 connects to the mail server on v6, even the kWS web server on the Desire is reachable from outside on IPv6.
      But IPv6 support is incomplete http://code.google.com/p/android/issues/detail?id=3389 (long entry with various issues)

      --
      605413? Yes, it's a prime.
  7. Quick Fix by Sponge+Bath · · Score: 1

    I wonder how a quick fix approach would have been accepted. Something simple like slapping another 32bits on an "extended" IPv4 address and assuming leading zeros on any packet with an old 32 bit address.

    1. Re:Quick Fix by gstoddart · · Score: 2

      I wonder how a quick fix approach would have been accepted. Something simple like slapping another 32bits on an "extended" IPv4 address and assuming leading zeros on any packet with an old 32 bit address.

      Except of course everyone would still need to upgrade to versions which would work with that.

      Which would be just as big as getting to them to upgrade to IPv6. Probably even bigger since nobody has ever written code to handle your solution.

      I don't think there's anything "quick" about your solution.

      --
      Lost at C:>. Found at C.
    2. Re:Quick Fix by Sponge+Bath · · Score: 1

      Yes, clearly either would need an upgrade, but IPv6 is a lot more than just an address extension so the work involved is much greater. Was the extra engineering and features worth the extra delay in adoption?

    3. Re:Quick Fix by doshell · · Score: 3, Insightful

      Routers and end systems would still need to be taught how to speak a new protocol; machines that only know how to construct and decode packets in IPv4 format would be unable to deal with your "extended addresses". What exactly would you gain?

      Also, IPv6 is much more than just an extension of the addressing space. I won't bother listing all the niceties here since it has been done before (and you can find them easily). But to think that everything IPv6 has to offer is a lot more addresses is extremely narrow-minded.

      --
      Score: i, Imaginary
    4. Re:Quick Fix by ongelovigehond · · Score: 1

      What you gain is simplicity. Extending an IPv4 stack to use 64 bit addressing is a trivial amount of work. The rest of the IPv6 features aren't really that important. We managed to do without them for years without a problem.

    5. Re:Quick Fix by Anonymous Coward · · Score: 0

      That wouldn't be a quick fix. You'd still need to upgrade equipment to understand the newer packet format (routers, cable modems, computer operating systems...), user interfaces to accept the longer addresses, DNS servers to resolve names to the new addresses.....in the end you might as well just go to IPv6, which has a 20-year head start on all these issues.

    6. Re:Quick Fix by Anonymous Coward · · Score: 0

      There was no delay in adoption. The engineering and specification writing were trivial compared to the abysmal delay we've had in getting the damn thing adopted. The organizations behind IPv6 could have run rings around vendors and ISPs with dozens of specifications in the time it has taken them to even notice IPv6 exists. It's not as if Comcast was calling them up and nagging them about the delays in finalizing the spec.

    7. Re:Quick Fix by Sponge+Bath · · Score: 1

      There was no delay in adoption.

      Did you even read the article? You know, the one with the adoption rate in the US of less than 1%?

    8. Re:Quick Fix by Sponge+Bath · · Score: 1

      still need to be taught how to speak a new protocol

      Yes, I said so above though not in the original post. Nobody said anything about not needing an upgrade. You are arguing against a phantom.

      IPv6 is much more than just an extension of the addressing space.

      Yes, I said so above, again not explicitly in the original post because that was the point: the extra features slowed adoption.

    9. Re:Quick Fix by icebraining · · Score: 1

      We have also managed to do without the Internet as a whole for years without a problem. Or without computers. Or without electricity. Hell, we've managed to do without toilets for years.

      That argument is completely useless. Yes, we did, but that doesn't mean they aren't useful, and if we're upgrading anyway, might as well put them in now because FSM knows we won't have another opportunity like this soon.

    10. Re:Quick Fix by Lennie · · Score: 1

      1. As mentioned by others, people would still need to upgrade their hardware/software to work with it.

      2. we already had fixed to extend the life of IPv4:
      - Classless Inter-Domain Routing (CIDR)
      - Use of private network addressing / NAT
      - Name-based virtual hosting of web sites
      - Tighter control by regional Internet registries on the allocation of addresses to local Internet registries

      3. the other thing people keep mentioning is reclaiming the large legacy IPv4-address blocks from for example Apple and HP.

      As the Internet growth is still accelerating, it turns out that if we do that, it will only extend the life of IPv4 by only a few months

      --
      New things are always on the horizon
    11. Re:Quick Fix by Bengie · · Score: 4, Insightful

      Extending an IPv4 stack to use 64 bit addressing

      Almost as much work as IPv6. You would still have to change out ALL of the hardware in the world and still have to update ALL of the software. If it's going to be the same amount of large scale work, just do it correctly the first time.

    12. Re:Quick Fix by Bengie · · Score: 1

      Nearly all new hardware supports IPv6. DOCSIS, fiber, etc... If your connection supports more than 40Mb/s, it's more that likely IPv6 capable. The entire USA back-bone has been IPv6 capable since 2005 and one of the major back-bone providers were IPv6 back in 2002.

      The only thing left is for ISPs to activate and end-user routers/network to be upgraded. Most new computer hardware in the last 5 years supports IPv6, so it's just a matter of the NAT/routers. Most residential NATs that support more than 40Mb/s are IPv6. As people want to upgrade their routers to actually make use of their new 100/200/300Mb internet connections, they will naturally gain IPv6 full capabilities.

      It's not all gloom and doom like you're putting on.

      The biggest issue, like other have pointed out, is Layer3 switches that don't support IPv6 asic hardware. This kind of stuff will slow down small/medium businesses.

    13. Re:Quick Fix by Tough+Love · · Score: 1

      As the Internet growth is still accelerating, it turns out that if we do that, it will only extend the life of IPv4 by only a few months

      When do those few months begin, in your opinion? (Rest assure that I will remind you of your guess when whatever time period you pick has expired.)

      --
      When all you have is a hammer, every problem starts to look like a thumb.
    14. Re:Quick Fix by Anonymous Coward · · Score: 0

      Where i work we use a FULL (Non-channelized) Tier1 DS3 line (45 up/down) And their DNS services that are provided DO NOT support AAAA requests, I've had to resort to disabling IPV6 completely on OS-X and other ipv6 default OSes since my DNS servers are flooded with unexpected RRCode errors (our servers forward all unknown queries that are not our domain to UUNet DNS servers and they fail because they don't know what to do with AAAA requests. (mostly from Mac and iPad clients)

      And with some of the modern browsers trying ipv6 dns queries before falling back to ipv4 there are delays.

      Home ISP are not the only ones behind some major commercial business ISP don't have it either, I'll hold off on ipv6 until it actually is there to use and works.

    15. Re:Quick Fix by ongelovigehond · · Score: 1

      The difference is that shortcomings of IPv4 have already been solved in other ways. Once a problem has been fixed, there's no need to convert to a new solution for the same problem. Really, the only thing missing was an extended address space.

    16. Re:Quick Fix by ongelovigehond · · Score: 1

      No, because a simple, backwards compatible, change is much easier to slip into a standard upgrade than a complete rewrite of the stack. For example, for my job I've implemented a simple IPv4 stack in an embedded device. I have no plans to support IPv6, but I would have been happy to add 50 lines of code to support optional 64 bit addressing.

    17. Re:Quick Fix by Midnight+Thunder · · Score: 1

      I wonder how a quick fix approach would have been accepted. Something simple like slapping another 32bits on an "extended" IPv4 address and assuming leading zeros on any packet with an old 32 bit address.

      That would not have worked. Everything assumed an IP address was 32 bits. Any other solution would have had the same challenges as IPv6.

      --
      Jumpstart the tartan drive.
    18. Re:Quick Fix by Anonymous Coward · · Score: 0

      You would still have to change out ALL of the hardware in the world and still have to update ALL of the software.

      Not true. See RFC1365.

    19. Re:Quick Fix by Bengie · · Score: 1

      While I understand protocols, I don't understand most general policies. Is there a reason why you're stuck using your ISPs DNS server? Couldn't you run your own with IPv6 support?

    20. Re:Quick Fix by Bengie · · Score: 1

      If the new class F address is seen by a host that does not support it the IP datagram will be ignored. So communication will not be possible with existing hosts, but the amount of modification for existing hosts is much less than implementing an entirely different IP header structure or a different protocol.

      Interesting idea, but it isn't any better than IPv6. Ohh look, it claims to be IPv4, but it doesn't work with IPv4, that'll make things simpler. Router and end-points would still have to be upgraded, otherwise they would just silently drop packets. The only thing you gain is you get to keep the same header, which is a horrible variable length header.

    21. Re:Quick Fix by Dagger2 · · Score: 1

      Except we managed to slip stack upgrades into the vast majority of Windows, Linux, OSX and BSD installs out there without any hassle. That's clearly not the bit that needs to be easier.

      The bit we're stuck on is actually configuring networks to use the new protocol. This is something that your "let's just increase the number of bits in v4" approach won't help with at all, because you'd still have to do the configure step, and that would have involved the same amount of effort as with v6.

  8. I Tried by bazald · · Score: 2

    I really tried. I tried versions of DD-WRT, OpenWRT, and Tomato on my WRT54GL. I tried using 6to4 using both anycast and tunnelbroker. The best I managed to achieve with either method was successfully pinging ipv6.google.com. I never succeeded in pulling it up in a browser on any of my computers. I thought I got radvd working, but it must not have been working well enough. Maybe next year.

    --
    Insert self-referential sig here.
    1. Re:I Tried by Anonymous Coward · · Score: 0

      I had trouble getting radvd working properly on dd-wrt as well. In the end I just gave my computers static IPv6 addresses. The biggest problem i ran into was just the lack of support in the UI. Now I'm up and running just fine with tunnelbroker.net for my IPv6 access.

      Last night I did a "netstat -an" on my notebook and was pleased to see that *all* my active connections (several dozen, mostly to Google and FB) where to IPv6 addresses. Performance-wise I didn't even notice the transition; if I hadn't thought to check I would never have known I was on IPv6.

    2. Re:I Tried by Lennie · · Score: 1

      Well, that is at least one thing that the World IPv6 day actually brought us.

      Facebook, Google/Youtube, Bing, Akamai, Netflix and others now all have IPv6 enabled and they are going to keep it that way.

      So pinging ipv6.google.com isn't needed anymore, you can just ping www.google.com ;-)

      And there is nothing to change in the browser, the websites all look the same anyway.

      --
      New things are always on the horizon
    3. Re:I Tried by bazald · · Score: 1

      Having iPv6 enabled on the big servers sounds good, but pinging www.google.com won't help me test anything unless I set my system to prefer IPv6 over iPv4. Seeing as I utterly failed to forward any actual IPv6 connectivity through my router, I'm still cut off from the IPv6 world. It's a good thing it shouldn't matter much until the ISPs will be virtually required to support it. By then I'll probably be inclined to just buy a new router that fully supports the IPv6 stack out of the box--no need for 6to4. (Maybe I'd have succeeded without the need for 6to4 anyway.)

      --
      Insert self-referential sig here.
    4. Re:I Tried by Lennie · · Score: 1

      Maybe you should try this on your desktop machine instead:

      http://www.sixxs.net/pops/

      It should by pass a NAT router just fine.

      --
      New things are always on the horizon
    5. Re:I Tried by JImbob0i0 · · Score: 1

      FYI My WRT54GS (version 2) couldn't handle IPv6 over my 20Mbps ADSL2+ ... just locked up. The teeny CPU just couldn't cope..... Switched out to a Netgear WNDR3700v2 and my he.net tunnel works a treat (openwrt).

    6. Re:I Tried by bazald · · Score: 1

      Yeah, I had problems with OpenWRT almost entering a bootloop. I didn't have any trouble with Tomato, but I seemed to be missing RADVD. I think I've gotten closest with DD-WRT, but I'll probably just wait until I finally decide to spring for a router upgrade. Thanks for the suggestion.

      --
      Insert self-referential sig here.
    7. Re:I Tried by bazald · · Score: 1

      I saw references to SixXS, and that's just about the only thing I haven't tried yet. Maybe when I get some spare time I'll try it, but I'd really rather get it working using my router than just passing through it. It's all just an experiment for me anyway.

      --
      Insert self-referential sig here.
    8. Re:I Tried by Anonymous Coward · · Score: 0

      Like most people are going to go to all the trouble to write a huge fucking essay (and set up a linkedin account) just to get IPv6 working. Sorry, too much trouble.

  9. I Tried Anyway... by Anonymous Coward · · Score: 3, Informative

    I bought a business connection from my local provider, asked my salesperson if they had IPv6, they said yes. Tried to set it up for World IPv6 day. Well, their tech support says no they do not have IPv6. So, that was my IPv6 day experience.

    1. Re:I Tried Anyway... by TeddyR · · Score: 2

      Front line tech support and supervisors have NO idea what ipv6 is or how to get it to you.

      I have Charter cable, and "just for fun", called tech to ask about if they had native ipv6 availible, and if not, if they had better "regional" tunnels or 6rd gateways. Note that I already had the info from http://www.myaccount.charter.com/customers/Support.aspx?SupportArticleID=2665 working with my Linksys E4200v2; I just wanted to see if there was a closer 6rd tunnel gateway to my location. Over 45 mins and no help at all from the support or the supervisor. Neither had any idea about ipv6 even after I directed them to their own internal support article.

      --

      --
      Time is on my side
    2. Re:I Tried Anyway... by archen · · Score: 1

      That's been my experience with asking sales about anything.

    3. Re:I Tried Anyway... by mikael_j · · Score: 3, Interesting

      When I last worked in the ISP business, or more specifically for an open citynet which handled last-mile access for a number of ISPs, we would get the occasional request about IPv6, both from regular customers who couldn't get a clear answer from their ISP and from the ISPs using "our" network. From the number of requests and the tone of the requests from the ISPs there was clearly customer demand for IPv6.

      After a very long time of us forwarding all of these requests to upper management the reply finally came through. The official stance of the citynet was that there had been no noticeable demand for IPv6 and thus there were currently no plans to make the network IPv6-capable. This was told to all tech support and customer service staff as well, any requests from ISPs (or customers calling us directly) was to be answered with some version of "well as far as I know you're the first to ask and we currently don't have any plans to make our network IPv6-capable in the foreseeable future.".

      Yup, upper management thought the investment would be too big so they "decided" that there was no demand and ordered everyone else to play along with their little fantasy.

      --
      Greylisting is to SMTP as NAT is to IPv4
    4. Re:I Tried Anyway... by Anonymous Coward · · Score: 0

      Yeah, it would be nice to go IPv6 native, but there really is nothing wrong with the 6to4 tunneling. Instead of laying IPv6 over Ethernet, it lays it over IPv4. Perfectly valid. You get all the benefits right away.

    5. Re:I Tried Anyway... by Lennie · · Score: 1

      The network hardware vendors tried this and their strategy failed, it might have delayed it, guess what will happen to an ISP or other network provider that doesn't do IPv6 ?

      --
      New things are always on the horizon
    6. Re:I Tried Anyway... by Anonymous Coward · · Score: 0

      I've been in and out of IPv6 with he.net tunneling and Centurylink 6rd. I found the he.net to be unreliable over periods of several days. I would be unable to reach anything, and would have to turn it off for a few days. I know that many people have perfect luck with he.net, but I didn't. The Centurylink 6rd has worked fine for long periods. The biggest problem with both in ordinary use is the long (1-2 sec or so) delays in DNS lookup in many cases. I've done about a dozen different tests with various sites on many different days. IPv6 has consistently been slower. I'll probably turn it on and off from time to time, to see if the lookups get any better. Overall, it has been fine, except for the DNS problem.

    7. Re:I Tried Anyway... by Midnight+Thunder · · Score: 1

      When enough people start phoning up about IPv6, maybe the company will clue in that is cheaper to actually do something about proving IPv6 and the associated support staff training?

      --
      Jumpstart the tartan drive.
  10. Bing and yahoo by synapse7 · · Score: 2

    I though tit was sad that bing.com and yahoo.com did not return a v6 address yesterday.

    1. Re:Bing and yahoo by daniel23 · · Score: 1

      They might be waiting for the tech savvy slashdot folks to lead the way...

      ; > DiG 9.8.1-P1 > aaaa slashdot.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER- opcode: QUERY, status: NOERROR, id: 26261 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

      --
      605413? Yes, it's a prime.
    2. Re:Bing and yahoo by Sunshinerat · · Score: 1

      But to be honest, I am not sure if that held the adoption rate down...

      --
      Load New Commander (Y/N)?
    3. Re:Bing and yahoo by Lennie · · Score: 1

      bing.com and yahoo.com don't return a v6-address, but they both are only a redirect.

      www.bing.com and www.yahoo.com do return a v6-address.

      --
      New things are always on the horizon
    4. Re:Bing and yahoo by klapaucjusz · · Score: 2

      They might be waiting for the tech savvy slashdot folks to lead the way...

      $ host -t aaaa lwn.net
      lwn.net has no AAAA record
      $ host -t aaaa arstechnica.com
      arstechnica.com has no AAAA record
      $ host -t aaaa tomshardware.com
      tomshardware.com has no AAAA record
      $ host -t aaaa phoronix.com
      phoronix.com has no AAAA record
      $ host -t aaaa smallnetbuilder.com
      smallnetbuilder.com has no AAAA record

  11. China??? by GPLHost-Thomas · · Score: 3, Interesting

    I'd like to know who's the users in China with IPv6. There's no provider, ADSL or otherwise, that provides IPv6. The only place where you could find IPv6 would be universities. And what's funny with it, is that it shows that the Great Firewall of China doesn't cope with v6 at all. All sites that would normally be blocked are wide open. So until the GFW is "patched", I don't think IPv6 will come. That's quite a shame, because I've read multiple times that the big ISPs backbones are already IPv6 capable.

    1. Re:China??? by synapse7 · · Score: 1

      Would it be possible to use a tunnel broker to hit ipv6 sites?

    2. Re:China??? by Anonymous Coward · · Score: 0

      It's China. They'll just pirate IPv4.

    3. Re:China??? by Anonymous Coward · · Score: 0

      Yes, I use Hurricane Electric's service to do just that, among other things.

    4. Re:China??? by Lennie · · Score: 1

      I actually heared, China has some of the biggest installations of Carrier Grade NAT.

      Maybe because Windows XP is still used which doesn't have IPv6-enabled by default (and no GUI to do it) they thought it would be difficult to support IPv6 for those users ?

      --
      New things are always on the horizon
    5. Re:China??? by slimjim8094 · · Score: 1

      XP absolutely has a GUI to do it. Network properties, install, protocol, v6. Works great, but I've only tested with stateless autoconfig so if you need some wacky DHCPv6 you might have problems.

      --
      I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
    6. Re:China??? by Lennie · · Score: 1

      Ohh, yeah, I think it depends on the service pack.

      Whatever, they probably need the Carrier Grade NAT anyway because of the enormous growth grate they probably have in China.

      --
      New things are always on the horizon
    7. Re:China??? by Anonymous Coward · · Score: 0

      I do. For over a year. But via an ipv4 udp tunnel (with miredo on linux).

      Main reason is not not be bothered by random reset packets from the GFW.

      However, since ipv6 day, my connection to google is simply horrible. I guess because suddenly more people are using the tunnel?

    8. Re:China??? by GPLHost-Thomas · · Score: 1

      Maybe for the mobile phones yes, but for ADSL, FTTH, and so on, customers are provided with a public IP address.

    9. Re:China??? by Midnight+Thunder · · Score: 1

      Not only that but Windows 2000 had support though a dev pack.

      On Windows XP you simply need to activate it and it will get a network prefix via rtadv.

      --
      Jumpstart the tartan drive.
  12. Also with enterprise gear by Sycraft-fu · · Score: 4, Informative

    There can be a real difference between "Can do IPv6" and "Can do IPv6 with realistic traffic." Most high end Cisco gear, even older stuff could be updated to support IPv6. However the problem is that it is all in software, all on the rather small CPU. So sure it'll work if you have only a couple IPv6 flows, however if everything went IPv6 it'd fall over. You need support in the ASICs for it, and that means buying new hardware.

    Of course being high end it isn't so cheap. We upgraded all our stuff on campus to do IPv6 and it was millions to get all the hardware needed. Now we are large, but not compared to many ISPs. So it isn't so easy to just say "Oh buy a bunch of new equipment to replace the perfectly good stuff you already have."

    IPv6 is coming, slowly, but it isn't going to be a fast process and anyone who things people, ISPs, etc should "Just do it," hasn't spent any real time looking at what is involved.

  13. Which ISPs support it by Anonymous Coward · · Score: 0

    I checked with my ISP yesterday to see if they would support IPv6. The response I got was they would offer it as an option for business clients, but they didn't support consumer/home clients wanting IPv6. It looks like the move to IPv6 is still a ways off for many people.

    1. Re:Which ISPs support it by Lennie · · Score: 1

      Maybe people it relative.

      Comcast is the largest access provider in the world and they are busy rolling out IPv6 to more and more customers as we 'speak'.

      --
      New things are always on the horizon
    2. Re:Which ISPs support it by Gyorg_Lavode · · Score: 1

      Comcast frustrates the hell out of me though. I know they've got a team working this, but if you try and contact customer support it's like talking to a wall. Questions like, "Is IPv6 available in my area?", "When will IPv6 be available in my area?", "Can I get a static IPv6 assignment?", "Can I be put on a list or something to get IPv6 enabled on my connection?" and "Do you know what IPv6 is?" are met with hours on hold while the tech asks the next level tech who also doesn't know. I appreciate that Comcast has a team working through deploying IPv6 but I'm frustrated they seem to have no interest in supporting the people who actually want to use it! (I'm running business cable so this isn't even the home support guys.)

      --
      I do security
  14. How to eat Kale by camperdave · · Score: 5, Funny

    In one pot, put some kale, some olive oil, water, a little salt and pepper, and let simmer on low heat. In another pan, brown up some ground beef, with some chopped onions, green peppers. Add in a can of salsa or crushed tomatos. If desired, some hot sauce or jalapenos can be added. While that's cooking, do up some Kraft Dinner according to the directions on the box. When the KD is ready, add in the ground beef mix, and serve. Throw out the kale.

    Note: This recipe works well for broccoli, Brussels sprouts, cauliflower, spinach, and many others.

    --
    When our name is on the back of your car, we're behind you all the way!
    1. Re:How to eat Kale by Resol · · Score: 1

      Ah if only I had some mod points left to mod this up!

    2. Re:How to eat Kale by mpbrede · · Score: 1

      Ah if only I had some mod points left to mod this up!

      I did it for you. I felt generous, thought it was funny and had a mod point burning a hole in my pocket. :) Enjoy. Oh wait, replying here undid my moderation. Bummer.

    3. Re:How to eat Kale by Resol · · Score: 1

      Doh! Well thanks for the effort!

    4. Re:How to eat Kale by colinnwn · · Score: 1

      Shoot I thought you were going to say to throw out the KD and mix the beef and kale. I may have to try kale and beef. Kraft is dreck.

    5. Re:How to eat Kale by xaxa · · Score: 1

      Note: This recipe works well for broccoli, Brussels sprouts, cauliflower, spinach, and many others.

      Why poke fun at broccoli -- is it unusual in the US?

      It's probably one of the top 5 vegetables sold in the UK (I'll guess: onions, potatoes, carrots, broccoli and cabbage). I buy it pretty much every week.

      (Also, spinach is my favourite leaf vegetable, especially uncooked in a salad or sandwich.)

    6. Re:How to eat Kale by Rich0 · · Score: 1

      Why poke fun at broccoli -- is it unusual in the US?

      It is fairly common. Many people (myself included) hate it with a passion. As far as I can tell this largely has to do with how your taste buds work. Studies have shown that ability to taste PTC (a simple mendelian trait) is strongly correlated with aversion to broccoli, especially in children.

      The genes involved are reasonably well-understood - just look it up on SNPedia. I'd be interested in comparative frequency in the UK based on what you say.

    7. Re:How to eat Kale by nobaloney · · Score: 1

      Many people (myself included) hate it with a passion. As far as I can tell this largely has to do with how your taste buds work.

      I hated it s a kid because my folks always said to me "eat your broccoli". I hated eggs for the same reason. As an adult I realized I like both. But not together.

    8. Re:How to eat Kale by Phoghat · · Score: 1
      Buy some smoked ham hocks, 2 should do nicely.

      Roast ham hocks until browned

      Place in pot, add greens ( kale is good, or mustard greens)

      Cover with water, add some salt, simmer until pork falls off bone. Eat good down home Southern style

      --
      Think of how stupid the average person is, and realize half of them are stupider than that.
  15. We need a model for consumers by fa2k · · Score: 1

    Hey, cool, facebook now resolves to an IPv6 address by default :)

    As for my point, how will regular consumers deal with firewalling? Modern OSes have to have good firewall protection, because people take laptops to all kinds of insecure networks. Stil, I'm not sure it's a good idea to make all devices directly accessible over the internet, it's kind of like begging for a wormpocalypse. On the other hand, we have UPnP for NAT-ed IPv4, allowing applications to specifically request incoming ports. This is crucial for many applications. What should we do for v6 then? (I run without a separate firewall, even for a windows laptop, but this may not be a great idea on a large scale)

    1. Re:We need a model for consumers by fa2k · · Score: 1

      Btw, one neat solution for TCP if we use stateless firewalls would be to have a third party mediate the initial connection setup, and bypass the SYN/SYN ACK bit. Two IPv6 peers would be able to send normal ACK packets back and forth, if the OS allowed one to create such connections without setup. Maybe UDP could be left wide open, or one could use a stateful firewall for that

    2. Re:We need a model for consumers by heypete · · Score: 1

      NAT isn't security. There's no real difference between IPv4+NAT+stateful firewall and IPv6+stateful firewall in terms of security, with the exception that with IPv6 you don't need port forwarding and other weird hacks like you do with IPv4 NAT.

      I haven't looked into it, but I woudn't be surprised if UPnP had been extended to IPv6 stateful firewalls: rather than forwarding ports to an internal IPv4 address, the firewall could simply open the incoming port to that IPv6 address. Same effect, but with less kludge.

    3. Re:We need a model for consumers by klapaucjusz · · Score: 2

      Stil, I'm not sure it's a good idea to make all devices directly accessible over the internet, it's kind of like begging for a wormpocalypse.

      You're expected to have a stateful firewall at the very same place where you have a NAT right now. This is described in RFC 4864.

    4. Re:We need a model for consumers by jandrese · · Score: 1

      You know what's sad? Some Facebook games are broken on IPv6. My wife was complaining to me yesterday about how I broke the network, even though I've had a v6 tunnel set up for a couple of years now.

      --

      I read the internet for the articles.
    5. Re:We need a model for consumers by fa2k · · Score: 1

      Thanks for clearing that up for me !

    6. Re:We need a model for consumers by fa2k · · Score: 1
      Actually, I was a bit too quick (after being a few days too slow with checking for a reply ;).

      2. The expiration of state to stop receiving any packets when finished with a flow solves a set of problems.

      This is the main reason I got an IPv6 tunnel. My lame (shared) NAT router drops my SSH connections after about 30 minutes. I wish there was a way to avoid having this state on intermediate routers, as it greatly increases the complexity and the possibility for bugs.

    7. Re:We need a model for consumers by pantaril · · Score: 1

      As for my point, how will regular consumers deal with firewalling? Modern OSes have to have good firewall protection, because people take laptops to all kinds of insecure networks. Stil, I'm not sure it's a good idea to make all devices directly accessible over the internet, it's kind of like begging for a wormpocalypse. On the other hand, we have UPnP for NAT-ed IPv4, allowing applications to specifically request incoming ports. This is crucial for many applications. What should we do for v6 then? (I run without a separate firewall, even for a windows laptop, but this may not be a great idea on a large scale)

      Imo the best way to handle this problem would be for ISP to set some sane default firewall for all his customers (incoming connections blocked for example) and make some nice web interface where tech-savy users could turn the firewall off or could tweak it to suit their needs.

  16. What about /.? by Anonymous Coward · · Score: 5, Interesting

    Why isn't slashdot accessible over IPv6?

  17. Firewalls? by Anonymous Coward · · Score: 0

    My ISP has some support for IPv6 for some time now. I get an address from the 6to4 range but I don't use it.

    Why?

    Well, if everthing that connects to my network has a public IP address I'd like to have a central firewall rather than having to worry about securing each and every device that I ever connect.
    In case of IPv4 this is done by my router (NAT + static port forwarding), in case of IPv6 things get .... tricky.
    Native firmware only does IPv6 DHCP. No firewalling at all.
    I could get OpenWRT to run, but from what I read that will be more painfull than installing gentoo. And may cause cause me to accidentally go all EMP on the neighbourhood (yay for WiFi drivers that know you're in USA regardless of your actual location and restrict everything, and you have to hack them to get them to support European channels 12&13 ... but you also get Japanese-only channel 14 in the process. Along with no restrictions on transmitted power other than those imposed by hardware itself).

    Also, my Linux box tends to hang up after about 30 minutes of being connected to a IPv6 network via WiFi. (as far as I can make out NetworkManager does some stupid things, then the kernel does some stupid things and it all ends up in a race condition, a bit like here: https://bugs.archlinux.org/task/26847 )

    1. Re:Firewalls? by Tough+Love · · Score: 1

      ...my Linux box tends to hang up after about 30 minutes of being connected to a IPv6 network via WiFi... as far as I can make out NetworkManager does some stupid things...

      NetworkManager is demon spawn.

      --
      When all you have is a hammer, every problem starts to look like a thumb.
  18. Cheese Sauce by PC9001 · · Score: 1

    There is actually a reason for eating broccoli with a cheese sauce - the fat from the cheese helps to dissolve the vitamins contained in the broccoli, and our bodies get more out of it!

  19. IPv6 faster in Romania by Lennie · · Score: 1

    On the Google IPv6 statistics, it says in Romania IPv6 is faster than IPv4.

    --
    New things are always on the horizon
    1. Re:IPv6 faster in Romania by unixisc · · Score: 1

      What is it about Romania that made it the world leader?

    2. Re:IPv6 faster in Romania by Mullen · · Score: 1

      I am going to take a guess that Romania has only one or two ISP's that serve the whole country and they, for some reason, support IPv6.

      --
      Linux O Muerte!
    3. Re:IPv6 faster in Romania by Lennie · · Score: 1

      I actually expected Czech Republic to do well, I know the ISPs there worked hard on it. I didn't know about Romania. Anyway...

      Maybe they have very little ISPs in comparison, but even the Vatican City State has 2 ISP networks.

      Here is the list of ISPs in Romania:

      https://www.ripe.net/membership/indices/RO.html

      Romania has 37 IPv6 "prefixes":

      http://bgpmon.net/weathermap.php?inet=6&focus=eu

      --
      New things are always on the horizon
    4. Re:IPv6 faster in Romania by jrumney · · Score: 1

      On the Google IPv6 statistics, it says in Romania IPv6 is faster than IPv4.

      Interesting, they must have good IPv6 peering arrangements set up in Europe already.

      I have had an IPv6 tunnel working since last IPv6 day, with an exit point in Australia. On Wednesday I tried a traceroute6 to google.com and saw that it picked a server in Google-AP (Asia Pacific) as the end destination (same as IPv4), but to get there, it went via the US, onto Google's network there. So I can see why users in Japan might have been seeing latency issues.

    5. Re:IPv6 faster in Romania by hvm2hvm · · Score: 1

      We have 3 large ones and many small ones scattered here and there (but they are probably going to get bought too). Mine apparently doesn't support IPv6... or maybe it's my router, didn't bother to dig in further.

      --
      ics
    6. Re:IPv6 faster in Romania by Cioby · · Score: 1

      Close to the truth.
      Romania has more ISP's that serve the whole country but the largest (RCS-RDS) started to enable IPv6 by default to his residential users.
      And they did it because at the technical level they are a bunch of nice folks who did all the work in their spare time and didn't really need a big budget :)

      Cioby

    7. Re:IPv6 faster in Romania by pantaril · · Score: 1

      I actually expected Czech Republic to do well, I know the ISPs there worked hard on it. I didn't know about Romania. Anyway...

      I work for small cable ISP in Czech republic and there are IMO not many IPv6 enabled providers outside academic networks. IPv6 is well supported on backbone routers and by content providers (AFAIK Czech rep. is leading in number of web pages accessible via IPv6) but the problem with providing IPv6 for end users of commercial ISPs is security.

      If you want to transparently authorise some port on layer2 switch for one of your customers, you need to make work two things:

      1) you need to make sure that all dhcp requests coming from that switch port are tagged with the port identification, so you know what IP address you shoud offer. (DHCP option 82 serves this purposein IPv4 world)
      2) you need to make sure that customer want steal IP address of his neighbour, so you need some kind of IP ACL support on the switch.

      IPv6 standard has support for similar mechanisms but they are not implemented in any cheap metro-access L2 switch i'm aware of. Simple support of IPv6 traffic is just not enough. This is IMO the main reason why not many comercial cable ISPs supports IPv6 today.

    8. Re:IPv6 faster in Romania by Lennie · · Score: 1

      I think Czech Republic was also one of the countries in the world with more than one Mobile Internet providers with IPv6 available.

      --
      New things are always on the horizon
  20. Bhutan by Anonymous Coward · · Score: 0

    If you look at Google's statistics that are linked in the article, the country leading the way on IPv6 adoption is actually Bhutan, with 8.37%, beating out Romania's 6.55%, it also beats it in latency with an average difference of -20ms, vs Romania's -10ms.

    1. Re:Bhutan by unixisc · · Score: 1

      Bhutan was impossible to mouse over and get the numbers. Anyway, I guess the reason is that most people there are offline, so any new internet additions boosts the numbers a great deal. Maybe their main mode of internet access is mobile services?

  21. The NEW standard by Anonymous Coward · · Score: 1

    Can someone please inform the media that a standard that came out in Dec 1998 is not NEW?

  22. Pathetic by Tough+Love · · Score: 1

    250% of a rounding error is still a rounding error. How many years has it been?

    --
    When all you have is a hammer, every problem starts to look like a thumb.
  23. BROCCOLI! Steam! Genetics! Mad Science! by billstewart · · Score: 1

    Steam! Steam will save your Broccoli!!

    Also, there are some genetic differences that make broccoli and many other cabbages taste bitter to some people. (And similarly, there are genes that affect whether cilantro (aka coriander leaf) tastes really bad to some people.) I love the stuff, but President Bush was well known to be one of those people who hated broccoli, and most people have been kind enough to attribute it to genetics rather than his having been a spoiled child.

    If you hang out with genetics geeks, eventually they're going to hand you pieces of blotter paper and see how they taste to you. If suddenly the whole world turns shiny, please introduce me to your friends, but usually they're either going to taste like paper or they're going to taste like really nasty bitter stuff, depending on which versions of several flavor-tasting genes you've got.

    Also, to tie this vaguely back to IPv6, eventually you're going to run out of asparagus, there won't be any more in the stores, so you'll have to eat broccoli and cabbages until the summer veggies start to come in.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  24. Stateless Auto-Configuration Privacy Concerns by billstewart · · Score: 1

    The original view of IPv6 addressing was that the host portion was going to be assigned automagically based on your MAC address, similar to the way Novell Netware IPX and XNS did things, so not only would that provide trackability to individual computers for traffic from your home location, but if you took your laptop or cellphone somewhere else, the host portion would still be the same, just showing "Your laptop at Starbucks" instead of "Your laptop at home". Eventually, of course, 48-bit MACs got replaced with 64-bit EUI-64, leading to the /48-vs-/56-vs-/65 fights, and SLAAC-vs-DHCP6 fights, and to IPv6 Address Privacy Extensions, so it's a bit less of a concern, just messier.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  25. I've been using native IPv6 for well over a year by tdelaney · · Score: 3, Informative

    My ISP (Internode) has been providing opt-in dual-stack support for at least a couple of years, and enabled it by default for all new customers in January. Internode currently have about 2% of their customer base on IPv6.

    Note: if you go to that page and the logo is spinning, it means you've connected via IPv6.

    I get a static /56 prefix (earlier when it was still considered a trial they gave a /64 that could change when you lost ADSL connection). My router (Billion 7800N) acts as a DHCPv6 server and everything is hunkey-dory except for one minor quibble - the router advertises the upstream DNSv6 servers instead of itself, so if you've done static MAC->IPv4 mapping in the router they won't be returned when a DNSv6 request is made. The fix there is to manually set the link-local address of the router as the DNSv6 server on each of the machines.

  26. Test Your IPv6 Connectivity by sociocapitalist · · Score: 1

    A nice website has been set up for this: http://test-ipv6.com/

    My results on checking (I've removed my addressing for obvious reasons):

    Your IPv4 address on the public Internet appears to be
    Your IPv6 address on the public Internet appears to be

    The World IPv6 Launch day is June 6th, 2012. Good news! Your current browser, on this computer and at this location, are expected to keep working after the Launch. [more info]

    Congratulations! You appear to have both IPv4 and IPv6 Internet working. If a publisher publishes to IPv6, your browser will connect using IPv6. Your browser prefers IPv6 over IPv4 when given the choice (this is the expected outcome).

    Your DNS server (possibly run by your ISP) appears to have no access to the IPv6 Internet, or is not configured to use it. This may in the future restrict your ability to reach IPv6-only sites. [more info]

    --
    blindly antisocialist = antisocial
  27. Netgear Smart Switches (was Re:nat routers... by Anonymous Coward · · Score: 0

    Just bought a Netgear GS108Tv2 smart switch. It can switch IP6 packets at the Layer 2 level, but I don't expect any of the Layer 3 features to work at all, and it needs IP4 for the management console.

    There seems nothing in Netgear's consumer line that does IP6. Given that we knew about IP6 a long time ago this is really bad. Even if my ISP gets IP6 in the next decade or so, I expect I'll be running dual stack for the life of that switch any any equipment I may get that is IP4.

  28. Pass the cheese sauce by Dabido · · Score: 1

    And what is the cheese sauce needed to make it get adopted quicker?

    --
    Sure enough, the cow costume was hanging up next to the superhero outfit and sailors uniform. (S,Spud)