undefined | Better HN

0 pointsunethical_ban4y ago0 comments

They should be giving you at least a /64 if not a /60. That way, you can have multiple subnets that are publicly addressable. The ISP should be informed they're out of best practice/RFC.

And while I get your "double" theme, most of them are non-points. Header size? Use adblock. Routes? Oh no, a residential router will now have four instead of two!

Yes, it's another addressing scheme and I agree, the benefits for many peoples' usage is low. But it isn't so bad.

0 comments

otabdeveloper44y ago

> I want to have multiple publicly addressable subnets in my home LAN

...is something nobody in the history of home LANs has ever said.

Dagger24y ago

Because they don't know the words. It's not uncommon for people to want to do things that would be best done with a separate subnet though.

For example, VPNing in from your phone or making a separate isolated network for untrusted IoT devices.

unethical_banOP4y ago

being publicly addressable != being publicly accessible

I work in network security. I know what words I'm using.

otabdeveloper44y ago

You want your network of untrusted IoT devices to be publicly accessible??

(Probably not.)

1 more reply

unethical_banOP4y ago

NAT is a "constrained resource" solution that cosplays as a security solution. Firewalls and ACLs are meant for governing traffic, not NAT.

lokedhs4y ago

My home LAN setup has exactly that, and I even switched ISPs to get it.

My old ISP only have me a /64 which is completely useless if you want to create subnets. The new one gave me a static /48.

j / k navigate · click thread line to collapse

0 pointsunethical_ban4y ago0 comments

They should be giving you at least a /64 if not a /60. That way, you can have multiple subnets that are publicly addressable. The ISP should be informed they're out of best practice/RFC.

And while I get your "double" theme, most of them are non-points. Header size? Use adblock. Routes? Oh no, a residential router will now have four instead of two!

Yes, it's another addressing scheme and I agree, the benefits for many peoples' usage is low. But it isn't so bad.

0 comments

otabdeveloper44y ago

> I want to have multiple publicly addressable subnets in my home LAN

...is something nobody in the history of home LANs has ever said.

Dagger24y ago

Because they don't know the words. It's not uncommon for people to want to do things that would be best done with a separate subnet though.

For example, VPNing in from your phone or making a separate isolated network for untrusted IoT devices.

unethical_banOP4y ago

being publicly addressable != being publicly accessible

I work in network security. I know what words I'm using.

otabdeveloper44y ago

You want your network of untrusted IoT devices to be publicly accessible??

(Probably not.)

1 more reply

unethical_banOP4y ago

NAT is a "constrained resource" solution that cosplays as a security solution. Firewalls and ACLs are meant for governing traffic, not NAT.

lokedhs4y ago

My home LAN setup has exactly that, and I even switched ISPs to get it.

My old ISP only have me a /64 which is completely useless if you want to create subnets. The new one gave me a static /48.

j / k navigate · click thread line to collapse