News for hackers. Stuff that matters.

A comment on New Perspectives on the Active IPv4 Address Space. Parent comment

Re:New Perspectives on the Active IPv4 Address Space by ghshephard on Tuesday July 19, 2016 @07:07PM (#12125639)
The thing you quickly realize is that IPv6 isn't so much about a large number of 128 bit addresses, it's about a large number of 64 bit networks. Each network capable of handling essentially unlimited number of addresses.

So, when people talk about how many "Addresses" are available, they are barking up the wrong tree, they should talk about how many networks are available.

Ironically, I've seen tens of thousands of IPv6 networks deployed, and almost all of them are in RFC 4193 space, which is the equivalent of IPv4s RFC 1918 (10.x.x.x/8, 172.16.x.x/12, and 192.168.x.x/16).

But, unlike RFC 1918, where the space is constricted, and too many people use 10.1.x.x or 192.168.1.x, and end up in conflict, companies are pretty good about choosing a completely random ::/48 from FD::/8 - odds of a conflict are pretty minimal between two companies.

[ Parent | on HN ]
Re:New Perspectives on the Active IPv4 Address Space by dsl on Tuesday July 19, 2016 @07:42PM (#12125781)
Yeah, everyone treats non-routable space as a security control. So expect to only see DMZs and edges of networks in the routable IPv6 space.
[ Parent | on HN ]
Re:New Perspectives on the Active IPv4 Address Space by ghshephard on Wednesday July 20, 2016 @01:16AM (#12127041)
Non Routability has a really bad reputation, but enterprise/corporate IT people are fond of it.

The nice meet-in-the-middle approach is to use a RFC 4193 space + NAT-PT. Gives you close to best of both worlds - you get end-end connectivity, but full address portability with little effort when you change ISPs.

[ Parent | on HN ]