Re:New 5G protocol vulnerabilities allow location tracking
by Arnavion on Sunday March 28, 2021 @06:18PM
(#26615231)
I feel this worry about having to type in /128s is overblown. The only times I've had to type a full /128 when setting up my IPv6-only homelab was for adding DHCP static leases for my pet machines.
If you're configuring LANs you're unlikely to be configuring anything deeper than a /64 per LAN, so the effort is approximately the same as IPv4 (four numbers, except that each number is four hex digits instead of three decimal digits).
Similarly, if you're setting up IP rules on a firewall, you're unlikely to care about anything smaller than a /64. If you want to ban a bad actor, blocking a specific /128 isn't going to achieve anything, since the bad actor likely has the ability to use any address within the /64 (SLAAC). You'd just ban the /64.
Lastly, if you're picking your /128s like the static DHCP leases case I mentioned above, nothing prevents you from zeroing all the segments you don't care about. Each of my static leases has all zeroes in the lower /64 except for the last hex digit. Net result is 2001:db8:1234:1::1, 2001:db8:1234:2::1, 2001:db8:1234:3::1, etc. The 2001:db8:1234::/48 is what I get from my ISP so it's already in my muscle memory, so it's negligible extra effort to remember individual machines' IPs.
If you're configuring LANs you're unlikely to be configuring anything deeper than a /64 per LAN, so the effort is approximately the same as IPv4 (four numbers, except that each number is four hex digits instead of three decimal digits).
Similarly, if you're setting up IP rules on a firewall, you're unlikely to care about anything smaller than a /64. If you want to ban a bad actor, blocking a specific /128 isn't going to achieve anything, since the bad actor likely has the ability to use any address within the /64 (SLAAC). You'd just ban the /64.
Lastly, if you're picking your /128s like the static DHCP leases case I mentioned above, nothing prevents you from zeroing all the segments you don't care about. Each of my static leases has all zeroes in the lower /64 except for the last hex digit. Net result is 2001:db8:1234:1::1, 2001:db8:1234:2::1, 2001:db8:1234:3::1, etc. The 2001:db8:1234::/48 is what I get from my ISP so it's already in my muscle memory, so it's negligible extra effort to remember individual machines' IPs.