Re:Tell HN: Hacker News now supports IPv6
by JohnFen on Tuesday January 23, 2024 @12:11PM
(#39106201)
I assume it's possible to prevent machines from changing their IP address? I have a few where DNS cannot reasonably be used and I use raw IP addresses instead.
[ Parent
| on HN ]
You can disable IPv6 privacy extensions. The exact process depends on the operating system you use.
Re:Tell HN: Hacker News now supports IPv6
by soneil on Tuesday January 23, 2024 @01:44PM
(#39107709)
IPv6 not just allowing, but expecting multiple scoped addresses relieves this quite nicely.
The most common setup for this is that you have a static link-local address, and a static global address. And listening processes should listen to these static addresses.
Then you have a temporary global address, and outbound connections should use the youngest temporary global address (because temporary addresses don't disappear when they age out, they disappear when they age out AND no existing connection is still using them).
The net effect is that the address you leave in example.com's httpd logs is a temporary address that has no listening processes. And the address you use in dns, mdns, when connecting intentionally, etc is a static address.