News for hackers. Stuff that matters.
Re:A public letter to CloudFlare to fix their snoopy vendor by JimDabell on Friday January 07, 2022 @11:05AM (#29840700)
It’s super common for cellular networks. Apple even has a rule for the App Store to reject any applications that don’t work in an IPv6-only environment because of this. They’ve had this rule for six years.
Re:A public letter to CloudFlare to fix their snoopy vendor by jaywalk on Friday January 07, 2022 @11:08AM (#29840762)
Must be smaller providers doing this? In the US, we've got CGNAT IPv4 and regular IPv6 for cellular.
Re:A public letter to CloudFlare to fix their snoopy vendor by tedivm on Friday January 07, 2022 @11:31AM (#29841130)
It's driven mostly by adoption outside of the US, particularly in Asia. In 2019 over half of the connections in India were IPv6 (of 475 million devices, 52.49 percent are IPv6 devices, according to the APNIC report).
Re:A public letter to CloudFlare to fix their snoopy vendor by jsodw on Friday January 07, 2022 @11:12AM (#29840832)
That’s not the whole story. Your service doesn’t need to be accessible through ipv6. Just over 464XLAT. That won’t be a problem if you use high level system apis to make connections. All of my servers are ipv4-only and I haven’t had any apps rejected by apple.
Re:A public letter to CloudFlare to fix their snoopy vendor by TrueDuality on Friday January 07, 2022 @11:19AM (#29840929)
You're partially right. Your apps need to support IPv6 because the internet connections can be IPv6 only. I believe T-Mobile is a big one does this. They do translation for their clients to the IPv4 internet, so they'll be hitting your IPv4 server through a translation layer. The client is still IPv6 only.
Re:A public letter to CloudFlare to fix their snoopy vendor by ec109685 on Friday January 07, 2022 @01:20PM (#29842666)
That doesn't make sense. If I hit amazon.com on my browser, which is IPv4 only, t-mobile needs to provide a (private) IPv4 IP to the phone to make that possible.

Edit: was totally wrong about this: https://www.internetsociety.org/resources/deploy360/2014/cas...

iOS (since IOS 12) and Android have native clients that can tunnel IPv4 requests over an IPv6 only network that are used for providers like T-Mobile.

Re:A public letter to CloudFlare to fix their snoopy vendor by Sohcahtoa82 on Friday January 07, 2022 @01:41PM (#29842961)
Not necessarily.

T-Mobile could respond to DNS requests with an IPv6 address that includes an encoding of Amazon.com's IPv4 address in it so that when you try to connect it it, the gateway knows what IP address you're looking for and can do the NATing there.

Of course, this is just conjecture about a possible way of making it work, and it could easily get broken if you configure your phone to use a different DNS server.

Re:A public letter to CloudFlare to fix their snoopy vendor by ec109685 on Friday January 07, 2022 @02:35PM (#29843657)
Thanks, that's a good point. Apple talks about it here: https://developer.apple.com/library/archive/documentation/Ne...