Whatever Happened To the IPv4 Address Crisis?
alphadogg writes "In February 2011, the global Internet Assigned Numbers Authority (IANA) allocated the last blocks of IPv4 address space to the five regional Internet registries. At the time, experts warned that within months all available IPv4 addresses in the world would be distributed to ISPs. Soon after that, unless everyone upgraded to IPv6, the world would be facing a crisis that would hamper Internet connectivity for everyone. That crisis would be exacerbated by the skyrocketing demand for IP addresses due to a variety of factors: the Internet of Things (refrigerators needing their own IP address); wearables (watches and glasses demanding connectivity); BYOD (the explosion of mobile devices allowed to connect to the corporate network); and the increase in smartphone use in developing countries. So, here we are three years later and the American Registry for Internet Numbers is still doling out IPv4 addresses in the United States and Canada. Whatever happened to the IPv4 address crisis?"
When that particular comment was made, the ubiquity of the home router dolling out DHCP addresses probably wasn't considered. Nowadays, you only need one IP address for your home and let the router sort it out.
There's still a problem, but people seem to prefer to adapt and come up with (very) clever workarounds rather than get some new solution shoved down their throat that renders existing equipment obsolete for no good reason.
That was the point of having DNS in the first place. Four octets just weren't bad enough.
Fixed:
"Hey Joe, what's your IP address?"
"I don't have one, I'm behind a NAT and firewall that I don't control."
Of the two problems, I find yours the lesser of two evils.
In short, it's just too early to tell. Just because the RIRs ran out of addresses, it doesn't mean that the LIRs have yet (the ISPs).
Based on my experience as a network engineer at an ISP, the following is happening already:
Small ISPs and ISPs that have not been in the business for a long time* have either run out or are on the verge of doing so. They are doing the following:
* Purchasing legacy IPv4 addresses from enterprises with /16 networks from the old days where available.
* Deploying CGN-like solutions for their end-customers if their end-customers are residential users.
Larger ISPs and older ISPs with allocations from ye old pre-RIR days continue to hold addresses and are often able to free large quantities of addresses from old deployments. Mind you, a lot of public IPv4 space have been "wasted" on infrastructure addressing, and management of devices that were not even connected to the internet. Devices such as modems, DSLAMs, CPEs and similar.
One could easily speculate that the business of ISPs will be severely affected in the future, as customers will go to the old providers that have plenty of v4-space available at the cost of newer players who followed the RIR regulations of only applying for the address space they needed based on relative short-term predictions.
If you are a registered LIR you will see a flood of SPAM from so-called IP brokers who are trying to purchase unused IPv4 space in hope of selling this to LIRs in need. That market will probably become quite desperate in the coming years.
Oh, and by the way, I see no evidence that IPv6 deployment is taking any noticeable speed.
*) Long as in they were in the game when classfull allocations were made.
There are 2 dimensions to the IPv4 problem - the user end; and the server end. Except for newly formed companies looking to provide internet access to their users through a proxy server; the individual users are largely oblivious to the crisis; as you rightly mentioned.
But try hosting your own server (non-cloud provider) - your ISP forces you to acquire IPv6; and you have to jump through hoops to make it smoothly accessible over VPNs and the general inernet.
If you keep throwing chairs, one day you'll break windows....
I'm glad you brought this up, as it is an excellent parallel. The Y2K crisis was real just as the IPv4 shortage was real. In both cases people took pro-active steps to head off disaster. Now, because those proactive steps averted the disaster all those who had no hand in it and didn't understand it proclaim: See! It was never an issue! It didn't happen!. No shit sherlock; it didn't happen because people saw the potential for disaster and took steps to avoid it.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
To embellish smash's response, no there is no privacy benefit to using NAT. If you want some sort of a privacy benefit, you still need to add a firewall to your connection that can monitor your traffic for the very same things it would have to monitor for if you use global addressing. The only thing that NAT provides is an address translation interface, too allow you to have a larger pool of addresses to use than your provider can grant. If there is a port forward for a service set up either statically or dynamically (upnp) any flaws in the service that is being forwarded can be exploited in the same way it would be if there were no NAT involved.
You never know...