Potholes to avoid when migrating to IPv6

Re:Potholes to avoid when migrating to IPv6 by yrro on Monday December 31, 2018 @07:58AM (#18794296)

pfft, who is still using iptables? :)

FYI, nftables has the 'inet' table which processes both IPv4 and IPv6 packets, and 'ip' and 'ip6' which processes each respectively.

[ Parent | on HN ]

Re:Potholes to avoid when migrating to IPv6 by z3t4 on Monday December 31, 2018 @08:30AM (#18794393)

iptables' are easy to configure and available almost everywhere.

[ Parent | on HN ]

Re:Potholes to avoid when migrating to IPv6 by floatboth on Monday December 31, 2018 @08:59AM (#18794486)

easy to configure?? iptables is the most infamously difficult firewall to configure.

Ubuntu created the ufw "uncomplicated firewall" wrapper for a reason :D

[ Parent | on HN ]

Re:Potholes to avoid when migrating to IPv6 by z3t4 on Wednesday January 02, 2019 @07:29AM (#18805763)

I think it's similar to CSS... I however have a sense that IPv6 is much different so we might get better and easier tools for future IP versions once IPv4 is gone, I however don't expect that to happen during my lifetime :/

[ Parent | on HN ]

Re:Potholes to avoid when migrating to IPv6 by romeisendcoming on Monday December 31, 2018 @09:54AM (#18794707)

And your an authority on this? I find PF much more difficult to deal with and I like having two clean interfaces to v4 and v6 in iptables....rather than some overeager tool set that thinks it knows what I mean when I create a rule and the tool then (willy-nilly) applies it across both stacks.

[ Parent | on HN ]

Re:Potholes to avoid when migrating to IPv6 by dan1234 on Monday December 31, 2018 @11:57AM (#18795434)

I’m curious to know what you find so difficult about iptables?

It has always seemed reasonably straightforward to me, although I will concede that not being able to combine tcp & udp into the same rule is a bit annoying (though also rarely needed).

[ Parent | on HN ]