https://www.schneier.com/blog/archives/2016/06/fraudsters_are_.html I don't manage any IPv4 allocations, but I'll bet there are some out there on the list that do; it's probably worth taking a peek to ensure that your favorite blocks don't look too disused. The interesting observation on Schneier's blog was that someone mused that, notwithstanding the fraudulent activities going on, it seemed like a useful notion to pry unused IPv4 addresses out of hands that were ignoring them... -- When confronted by a difficult problem, solve it by reducing it to the question, "How would the Lone Ranger handle this?"
On 06/22/2016 03:47 PM, Christopher Browne via talk wrote:
I don't manage any IPv4 allocations, but I'll bet there are some out there on the list that do; it's probably worth taking a peek to ensure that your favorite blocks don't look too disused.
All the more reason to move to IPv6. I'm on Rogers and have a block of 18.4 billion, billion (2^64) addresses to myself. There are so many IPv6 addresses available, that every person on earth could have over 4000 /48 prefixes, of 2^80 addresses each. Not worth anyone's effort to steal them.
On 22 June 2016 at 15:54, James Knott via talk <talk@gtalug.org> wrote:
On 06/22/2016 03:47 PM, Christopher Browne via talk wrote:
I don't manage any IPv4 allocations, but I'll bet there are some out there on the list that do; it's probably worth taking a peek to ensure that your favorite blocks don't look too disused.
All the more reason to move to IPv6. I'm on Rogers and have a block of 18.4 billion, billion (2^64) addresses to myself. There are so many IPv6 addresses available, that every person on earth could have over 4000 /48 prefixes, of 2^80 addresses each. Not worth anyone's effort to steal them.
Actually, this is suggestive of a talk topic... I have thus far pretty actively evaded involvement with IPv6. I keep adding "-4" stanzas to the startups of ISC services ;-) But I'd like to do better than that; my Debian instances would be decently happy speaking IPv6, I think, and probably my Android devices, too. I have a mix of OpenWRT/DDWRT routers, probably could operate IPv6 at that layer, too. Actually, this is perhaps a good place for a meeting of some short topics on IPv6... -- When confronted by a difficult problem, solve it by reducing it to the question, "How would the Lone Ranger handle this?"
On 06/22/2016 04:24 PM, Christopher Browne wrote:
But I'd like to do better than that; my Debian instances would be decently happy speaking IPv6, I think, and probably my Android devices, too.
Yep, Linux has supported IPv6 for years, Windows since XP SP3, Android & iOS phones and tablets all support IPv6. In fact, I have been running IPv6 on my home network for 6 years. Initially I used a 6in4 tunnel to a tunnel broker, but now I'm getting native IPv6 from Rogers. One thing to watch for is dhcpv6-pd, which is how some ISPs, including Rogers, hand out prefixes. I had been using openSUSE for my firewall/router, but it didn't support dhcpv6-pd, so I switched to pfsense, which does. BTW, "prefix" is the IPv6 term for subnet. So, Rogers hands out /64 prefixes, which provide 2^64 addresses. My tunnel gave me a /56 prefix or 2^72 addresses. IPv6 generally works the same as IPv4, other than the longer address, but there are some differences, such as fixed length headers and extension headers vs variable length headers in IPv4. A good reference is IPv6 essentials: http://shop.oreilly.com/product/0636920023432.do It's also currently available on Google Play for $14.74 (U.S.): https://play.google.com/store/books/details/Silvia_Hagen_IPv6_Essentials?id=...
On 22 June 2016 at 17:19, James Knott via talk <talk@gtalug.org> wrote:
On 06/22/2016 04:24 PM, Christopher Browne wrote:
But I'd like to do better than that; my Debian instances would be decently happy speaking IPv6, I think, and probably my Android devices, too.
Yep, Linux has supported IPv6 for years, Windows since XP SP3, Android & iOS phones and tablets all support IPv6. In fact, I have been running IPv6 on my home network for 6 years. Initially I used a 6in4 tunnel to a tunnel broker, but now I'm getting native IPv6 from Rogers. One thing to watch for is dhcpv6-pd, which is how some ISPs, including Rogers, hand out prefixes. I had been using openSUSE for my firewall/router, but it didn't support dhcpv6-pd, so I switched to pfsense, which does.
BTW, "prefix" is the IPv6 term for subnet. So, Rogers hands out /64 prefixes, which provide 2^64 addresses. My tunnel gave me a /56 prefix or 2^72 addresses.
IPv6 generally works the same as IPv4, other than the longer address, but there are some differences, such as fixed length headers and extension headers vs variable length headers in IPv4.
A good reference is IPv6 essentials: http://shop.oreilly.com/product/0636920023432.do
It's also currently available on Google Play for $14.74 (U.S.): https://play.google.com/store/books/details/Silvia_Hagen_IPv6_Essentials?id=...
I seem to recall we had an overview talk about IPv6 some years ago. It may be time for a practical "how to convert your home to IPv6 right now (with the least pain)" talk. This is my vote in favour of such a thing! -- Giles http://www.gilesorr.com/ gilesorr@gmail.com
participants (3)
-
Christopher Browne -
Giles Orr -
James Knott