News for hackers. Stuff that matters.
Re:India is leading IPv6 migration with 61.67% adoption by citrin_ru on Sunday August 15, 2021 @12:03PM (#28189839)
It's too late to discuss alternatives to IPv6, so I haven't spend time collecting what I think wrong with it (and below just random thoughts).

The main reason I don't like it - it is much more complex than IPv4 and this complexity provides from little to now real benefits (but a lot of advertised by IPv6 evangelists). The only reason networks migrate to IPv6 is the scarcity of IPv4 addresses, not other features which was envisioned as improvements over IPv4, but on practice turned out to be not very useful.

128bit per address from which usable only 64bit looks like a waste of resources (CPU/RAM) to me. Idea was to embed MAC-address in lower 64bit, but it turned out to be a bad idea because of privacy implications and for most end-user devices lower 64bit are now random. Given that /64 prefix in most cases used by single host a 64bit address would be sufficient. If we had 64bit addresses we would save RAM for routers and OS kernels and simplify implementation (64bit integers are available in practically all modern programming languages and 64bit operations are fast, while 128bit is a slower extension which is not universally available).

For me IPv6 is an example of the second-system effect: https://en.wikipedia.org/wiki/Second-system_effect

Re:India is leading IPv6 migration with 61.67% adoption by betterunix2 on Sunday August 15, 2021 @12:47PM (#28190232)
In my experience IPv6 is much simpler to deal with than IPv4; in fact the large address space with a 64-bit prefix as the network number greatly simplifies management and configuration and theoretically improves the CPU performance of routers by allowing allowing more aggressive route aggregation. When ISPs give /56 prefixes to users, users can easily set up subnets according to their own needs without requiring extra coordination and without breaking end-to-end connectivity. You are wrong that /64 prefixes are usually assigned to a single host; in fact the number of Internet-connected devices in a typical home has grown over time and can easily be a dozen or more.

If I were running an ISP, I would migrate the backbone network to IPv6 and just use embedded IPv4 addresses to avoid the headaches that come with router-to-router IPv4 links. With IPv6 you always have a link-local address on every port that can be used by routing protocols without relying on proprietary solutions that are not interoperable between vendors or having to assign an IPv4 address (and hoping that you assigned a large enough subnet for future growth). It is much easier to scale up an IPv6-only network and much easier to connect one IPv6-only network to another.

Of course IPv6 is not perfect. SLAAC did not really work out as planned and now we are stuck with an annoying mix of SLAAC and DHCPv6. Reverse-DNS is still a bit of a pain. IPSec is not what it should have been and too many IPv6 standards rely on IPSec for security/authentication. Even so, the core of IPv6 is a huge improvement over IPv4 for individual users, small network operators, large network operators, and the Internet as a whole.

Re:India is leading IPv6 migration with 61.67% adoption by magicalhippo on Sunday August 15, 2021 @05:16PM (#28192596)
> In my experience IPv6 is much simpler to deal with than IPv4

My experience is the complete opposite. Lot of software is still very immature when it comes to IPv6. A prime example is that I had to abandon pfSense because it just didn't handle prefix delegation. And no, switching ISP is not an option for me.

I'm now on OpenWRT which is miles better, but getting IPv6 to play nice is still lot more work. For example there were a lot more steps to getting split-horizon DNS working compared to regular IPv4.

> Even so, the core of IPv6 is a huge improvement over IPv4 for individual users, small network operators, large network operators, and the Internet as a whole.

Maybe in another decade or two when IPv6 and the ecosystem around it has matured a bit. Though it still seems to have a lot of moving parts compared to IPv4, thus requiring more to keep track of.

Re:India is leading IPv6 migration with 61.67% adoption by Dagger2 on Wednesday August 18, 2021 @03:15AM (#28218443)
It shouldn't be any harder to get split-horizon DNS working on v6... and in fact v6 should eliminate the need for it in the first place, since the IP of a computer is just its IP.
Re:India is leading IPv6 migration with 61.67% adoption by Dagger2 on Sunday August 15, 2021 @12:58PM (#28190303)
All 128 bits are usable, it's not limited to just 64.

A total length of 64 bits would be too small for the eventual size of the internet. Our choice was between deploying something with too many addresses or something with too few addresses, and the former is by far better than the latter. We do not want to be going through another IP family transition to increase the bit length again, so we need to get it right the first time.

v6 mostly just took v4 and made the addresses longer, so I'm not sure it's reasonable to describe it as bloated. About the only thing it actually adds over v4 is SLAAC (and IPsec, but that was immediately backported to v4).

Re:India is leading IPv6 migration with 61.67% adoption by tsimionescu on Sunday August 15, 2021 @01:24PM (#28190522)
> A total length of 64 bits would be too small for the eventual size of the internet.

Even home consumers are getting at least a /64. Unless you're expecting consumers to start having ~2^64 devices, it doesn't seem like anyone is concerned with the public internet needing more than ~2^64 addresses.

Re:India is leading IPv6 migration with 61.67% adoption by Dagger2 on Sunday August 15, 2021 @02:33PM (#28191154)
Don't think in terms of addresses. In a hierarchically-allocated and aggregated space like IP addresses, there's a massive difference between 64 bits of address space and 2^64 usable addresses.

By the time you've gone through six levels of allocations (IANA -> RIR -> ISP -> Customer -> Network -> Device) the vast majority of the total address space will be unused -- or rather: used for the purpose of aggregation, but not used for end machines. A 64-bit address space might only reasonably be able to handle something like 2^40-2^48 devices in total, which isn't that much more than we already have today.

> Unless you're expecting consumers to start having ~2^64 devices

You'd definitely need something longer than 64 bits long, long before this point.

Re:India is leading IPv6 migration with 61.67% adoption by tsimionescu on Tuesday August 17, 2021 @04:36AM (#28207549)
If ISPs are allocating /64s or more to end consumers, how is this different from a 64 bit address space where they handed out a single address to each consumer?
Re:India is leading IPv6 migration with 61.67% adoption by Dagger2 on Wednesday August 18, 2021 @04:03AM (#28218708)
In terms of rate of consumption of the overall address space, it's not. But consumers have started to have more than one device at home -- in fact almost everybody has an entire network with multiple machines these days, so a single address isn't sufficient.

v6 has enough space to give everybody multiple networks, not just multiple addresses (and those networks are always big enough for however many devices you end up attaching to them).

Re:India is leading IPv6 migration with 61.67% adoption by throw0101a on Sunday August 15, 2021 @05:33PM (#28192725)
To illustrate the scale, 2^32:

* is roughly equal to 4 300 000 000 (4e9, 4B)

* it is also the maximum number of IPv4 addresses

Going back to math class:

* 2^64 = 2^(32+32) = 2^32 * 2^32 = (4B) * (IPv4 Internet)

So a single /64 IPv6 subnet can hold four billion IPv4 Internets worth of systems.

Re:India is leading IPv6 migration with 61.67% adoption by tsimionescu on Tuesday August 17, 2021 @04:33AM (#28207533)
The point was whether 128 bit addresses are actually required - someone was claiming that 64 bit addresses would have also been exhausted, and I pointed out that the current strategy for handing out IPv6 is anyway using up the address space at a similar pace to the situation where we had a 64 bit address and were handing out /64 addresses to individual consumers. There were even some comments claiming certain ISPs are handing out /56 spaces to end consumers.
Re:India is leading IPv6 migration with 61.67% adoption by throw0101a on Tuesday August 17, 2021 @01:59PM (#28212858)
Ethernet MACs have 48-bit addresses, and I don't think we've run out of those, and I also don't think is anyone is even worrying about running out of those, so 64-bit IP addresses probably would have been sufficient.

But given all the drama with IPv6, I think it was reasonable to go with 128-bit addresses just so we don't have to go through all of this again.

On a related note, messing up the assignment of IPv6 address was actually accounted for. If you look at any unicast address that's currently live, you'll see that it begins with a "2". This is because addresses are only being assigned from 2000::/3:

* https://www.iana.org/assignments/ipv6-address-space/ipv6-add...

If, for some reason, we realize there's a mistake in how things were done with that space, it will be declared legacy/deprecated, and IANA will start over with addresses from 4000::/3. If that is screwed up, then 6000::/3 will be next, then 8000::/3, a000::/3, and finally c000::/3.

So the Internet community has six tries to get IPv6 addressing correct.

Re:India is leading IPv6 migration with 61.67% adoption by throw0101a on Sunday August 15, 2021 @04:50PM (#28192418)
> 128bit per address from which usable only 64bit looks like a waste of resources (CPU/RAM) to me.

I would recommend you check out Tom Coffeen, who wrote a book on IPv6 address planning for O'Reilly. Even with half the bits going to the subnet, there is a astronomical amount of addresses available:

* https://www.youtube.com/watch?v=7Tnh4upTOC4&t=27m