News for hackers. Stuff that matters.
Re:Reasons for servers to support IPv6 by gumby on Saturday January 29, 2022 @10:16PM (#30133539)
These stateful devices have to look at all the traffic and maintain connection data for every transaction. That takes space and time and is bounded in volume.
Re:Reasons for servers to support IPv6 by tsimionescu on Sunday January 30, 2022 @04:12AM (#30135242)
The same is true of firewalls, so I don't get your point. Even in IPv6, your router-level firewall will need to know if a packet with dst_port=31536 is part of an existing connection or not, which means it has to monitor all traffic and maintain connection data for every transaction, no different from a NAT device.
Re:Reasons for servers to support IPv6 by gumby on Sunday January 30, 2022 @06:00PM (#30142149)
What is the point of a perimiter firewall in the modern Internet? Those TV and lightbulbs are attack vectors inside the firewall. And there are (and will be more) plenty of devices that bridge the cellular networks and the LAN.

You need a defense at depth, not a crunchy perimeter with a squishy inside.