DistroWatch Finally Adds Support For IPv6 (distrowatch.com)
We've frequently linked to DistroWatch for their coverage of Linux package and release announcements. Now an anonymous reader writes: The DistroWatch website introduced IPv6 support on Friday and the new protocol has been getting a lot of attention. "Over 8% of our traffic this weekend came from IPv6 addresses," commented DistroWatch contributor Jesse Smith. "It was a pleasant surprise, we were not expecting that many people would be using IPv6 yet."
When asked why DistroWatch enabled IPv6 access to their server at this time, Smith answered: "Partly it was an experiment to see how much interest there was in IPv6. Partly it was because it is a little embarrassing (in 2016) to have a technology focused website that is not making use of IPv6."
When asked why DistroWatch enabled IPv6 access to their server at this time, Smith answered: "Partly it was an experiment to see how much interest there was in IPv6. Partly it was because it is a little embarrassing (in 2016) to have a technology focused website that is not making use of IPv6."
Everybody should be using it, but nobody does. This has been the steady state for what, 20 years? We probably should re-do the thing and skip to IPv9 with a less grandiose than this second system but a nice and functional third. Perhaps with a different crew this time. That'd be nice.
Finding it hard to reconcile the "finally" with the surprise and the 8% bit.
Everybody should be using it, but nobody does. This has been the steady state for what, 20 years? We probably should re-do the thing and skip to IPv9 witha less grandiose than this second system but a nice and functional third. Perhaps with a different crew this time. That'd be nice.
Partly it was because it is a little embarrassing (in 2016) to have a technology focused website that is not making use of IPv6."
Amazon AWS, are you listening?
92% of DistroWatch visitors have no use for IPv6
or
99.9% of DistroWatch users don't care if DistroWatch uses IPv4 or IPv6.
or
An anonymous reader writes of utterly useless factoids and other navel gazing.
IPv6 would change the Internet fundamentally as it ends privacy and anonymity. Your 128-bit address most often will contain your device's 48-bit hardware MAC directly in the lower 64 bits (split by FE:FE). That MAC can track you across networks. Cookies become superfluous except as session variable holders (shopping cart). And for everything IP (incl UDP), not just HTTP[S].
Yes, I'm aware that DHCPv6 servers might anonymize the interface address, locally translating (hiding) the MAC as NATv4 currently does. Or you might be able to rewrite your MAC. Do you believe TPTB will encourage this? A dozen hw mfrs who need radio (FCC) approvals will be easy to pressure. The few non-MAC routers serve as a useful marker (surveillence filter) and can easily be tracked.
it was because it is a little embarrassing (in 2016) to have a technology focused website that is not making use of IPv6
Hmm... then let's see the aaaa records for slashdot.org...
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
Just say 0.
The IPv6 unspecified address, 0:0:0:0:0:0:0:0 [is] ::
10GbE please, I think we need decently priced 10GbE hardware (HP Procurves or something) over IPv6 behind pushed out.
There is only so many ports we can aggregate without cables becoming like an undersea duct.
The NAT argument is by now old, given that the IETF itself has endorsed a single official NAT standard called Network Prefix Translation. That avoids the problems that IPv4 NAT had - being either static or dynamic or a Port Address Translation NAT. NPT is in improvement in that it preserves a 1:1 relationship between routable and private addresses, while providing the insulation that some applications such as load balancing need. The 1:1 is not a problem due to the 2^64 addresses that each subnet has.
Port numbers were something that had to be used b'cos it was otherwise difficult to map public IPv4 addresses to private ones without being merely static or dynamic. NPT eliminates the need for that just like it eliminates the need for any address conservation. Port Addresses are needed for other things, like in mapping applications, so freeing them up from being used for address re-mapping is a good thing. Aside from that, requirements that make use of some of the advantages of NAT, such as load balancing/multihoming as well as address insulation can easily use NPT: just that NPT won't be used for address conservation, which won't be needed, nor will it be used as a firewall, since that is something an IPv6 gateway is supposed to do with their globally routable addresses as well as link local or unique local addresses
Well, it's the default setting for the operating systems favored by those "less knowledgeable", so that pretty much covers that, doesn't it. Android (the world's most popular OS), Windows (your grandparents most popular OS), and iOS (hipsters most popular OS) all randomize the address by default.
Whether or not that's a GOOD idea is certainly debateable, but it's what you wanted.
So the less knowledgeable, people who don't even know what IPv6 is, get a randomized address. People even less knowledgeable than that make panicky, mis-informed posts on Slashdot about OMG I'll be tracked.
Wrong on most counts. There is RFC 6296 - Network Prefix Translation - that translates a Global Prefix into a Unique Local Prefix. DHCPv6 can be used to assign the Interface ID: the prefix assignment comes in from the RAs. In fact, if one has an IPAM system, DHCPv6 is the way to do it.
The EUI-64 is used only to derive Link Local addresses - the fe80::/10, while the 'privacy addresses' are used in the same way that dynamic addresses are used in IPv4. And again, one doesn't have to use totally random transient addresses if one is concerned about ARP tables
You can use the sarcastic "finally" in the headline when you publish a single AAAA record, Slashdot, that "news for nerds" who can't be nerdy enough to turn on IPv6 themselves but are happy to report on it all the time.
Should have called them ip1980 and ip1998 instead.
Even today, many ISPs consider IPv6 some futuristic thing they don't need to worry about, but imagine calling them and asking if they are still limited to ip1980...
Anybody using ipv6 are sitting ducks for sneaky traffic. ipv4 logs are easier to notify suspicious
traffic.
Spies do know this. Hackers do know this. I suggest disabling ipv6 on anything you want secure.
Windows is absolutely not secure and nobody should be running ipv6 on it.
As for distrowatch.com permitting ipv6 traffic that is fine. That site is just a hub to connect you
with downloads of the best operating systems on Earth. The big non-story about it is that when you
click a link on distrowatch to go download your Linux... you are probably going right back to an ipv4
address.
Total non-story all hype of ipv6. There needs to be a simple-to-read OPEN SOURCE firewall app with
user-friendly logging so noobs don't think "whoopee wow I'm high tech with ipv6 now" and get
compromised by baby hax0rz or state influenced companies like Google.
ipv6 is akin to Windows hexadecimal error codes. you see it and go oh wtf do I have to look up now
instead of just reading it and knowing it.
Shame. Shame may be what finally gets IPv6 in commonplace use, worldwide.
I hear they say it's embarrassing to have a technology-related web site without IPv6 in 2016:
potomac:~ carlos$ host slashdot.org
slashdot.org has address 216.34.181.45
slashdot.org mail is handled by 10 mx.sourceforge.net.
potomac:~ carlos$ host www.slashdot.org
www.slashdot.org has address 216.34.181.48
potomac:~ carlos$
Where are your quad-A records ?