undefined | Better HN

0 pointsdheera4y ago0 comments

Too much work.

If I type ifconfig on my machine I only have one 'inet6' address and it isn't reachable from the outside.

The relevant people who want to popularize IPv6 should make that "just work". Until then IPv4 works for me, and a port forward is easy to understand, I don't need to google what SLAAC and EU-64.

They advertise it as "oh you don't need a NAT" but in reality IPv4+NAT is easier to deal with.

Most of us have actual jobs and don't have time to also be devops people.

I realize this sounds like a shitpost, but this UX is exactly why IPv6 isn't popular yet. If you want something to be popular, you need to make it easier not harder than the current thing everyone uses.

0 comments

7 comments · 2 top-level

Symbiote4y ago· 3 in thread

Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall.

Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something.

Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.

dheeraOP4y ago

I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes.

Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding.

Back to making breakfast and doing what I needed to actually do.

I use a UDM Pro by the way.

Symbiote4y ago

Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP.

The UDB Pro looks like something for a small/medium business, so you presumably have a business connection. You'd need to ask your ISP for the configuration, as it will depend on what service they're providing. (Just like for IPv4 you'd need configuration if the ISP is providing you with 4, 16, 32, ... IPv4 addresses -- also a common situation.)

If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses.

So far, all global/routable IPv6 addresses begin with 2.

(And for most home users, IPv6 is just as easy as IPv4, i.e. they don't know anything about either. After a test period, ISPs that support IPv6 generally enable it for all the normal home users -- it saves them money! That it is the default is how we got to 35% of Internet users using IPv6.)

deadbunny4y ago

> I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes.

Sorry but how is that any different to IPv4?

> I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes.

If you (the royal you, as in people) don't know how what they are you expecting it to work?

spookthesunset4y ago· 2 in thread

Totally agree. The UX for IPv6 sucks. Every time I poke with it I get worried I'm exposing the guts of my internal network onto the internet. With NAT, at least I know nothing is getting in without me intentionally punching a hole. With IPv6 to do the same I have to go fiddle with the router's command line interface and rules by hand. And even then who knows if I fucked something up or missed something... its just a lot of work.

There is no web UI for managing IPv6 firewall rules but there is for IPv4. On the consumer grade routers I've touched there isn't even a way to configure the IPv6 firewall rules (and again, they all offer web UX for IPv4 rules).

Symbiote4y ago

The interface on the router provided by the UK's largest ISP is almost identical to the interface for IPv4 port forwarding: https://imgur.com/a/NXqwoA6

spookthesunset4y ago

Awesome!

I wish my edgerouter had something like that...

j / k navigate · click thread line to collapse

0 comments

7 comments · 2 top-level

Symbiote4y ago· 3 in thread

Half the discussion is FUD that a consumer router wouldn't have an IPv6 firewall.

Your router, like every other, has a default deny firewall for IPv6. You'll find the settings near to where you set up IPv4 port forwarding. My router calls it "pinholing" or something.

Then you can SSH directly to the servers you allow access to, using port 22 for all of them if you wish.

dheeraOP4y ago

I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes.

Go to main screen. Still only shows my IPv4 WAN address. No IPv6 "pinhole" setting near the port forwarding.

Back to making breakfast and doing what I needed to actually do.

I use a UDM Pro by the way.

Symbiote4y ago

Sorry, I thought you were asking about a home broadband connection with the typical basic router supplied by the ISP.

If ifconfig is showing IPv6 addresses starting with fe80:, these are local/private, a bit like 169.254.x.y IPv4 addresses.

So far, all global/routable IPv6 addresses begin with 2.

deadbunny4y ago

> I tried enabling IPv6 on my router just now. It asked me for a delegation size. How TF do I know. I just randomly put in 60. It's what a google search told me to put in. Save changes.

Sorry but how is that any different to IPv4?

> I tried enabling IPv4 on my router just now. It asked me for a CIDR range. How TF do I know? I just randomly put 143.156.200.0/8. It's what google search told me to put in. Save changes.

If you (the royal you, as in people) don't know how what they are you expecting it to work?

spookthesunset4y ago· 2 in thread

Symbiote4y ago

The interface on the router provided by the UK's largest ISP is almost identical to the interface for IPv4 port forwarding: https://imgur.com/a/NXqwoA6

spookthesunset4y ago

Awesome!

I wish my edgerouter had something like that...

j / k navigate · click thread line to collapse