Re:IPv6 Is Hard
by Hikikomori on Sunday February 16, 2025 @03:21PM
(#43071310)
You can forward all ports to a device, pretty common feature.
Right but that only leaves that device vulnerable. The other devices are not.
In practice, that makes the entire network vulnerable.
Yeah, server-side NAT + use of a reverse proxy makes hosting many websites from one IPv4 a possibility, albeit a relatively difficult one. You are only really in trouble if two consumers want raw TCP/UDP on one port.
Not just difficult, but impossible, even in principle, because there are more than one device sharing the same IP so at most one host would be vulnerable. Not the same as with IPv6, where screwing up the defaults leaves your entire network vulnerable.