kazen44

this works nicely in IPV6, where true seperation of layer 2 and layer 3 exist. This does not exist in practice in ethernet, because ARP is required as a mechanism to learn MAC IP bindings and is dependant on IP AND Ethernet.

IPv6 solves this by doing neighbour discovery on link local addresses and multicast addresses.

CGNAT is also not cheap and very complex from a architectural point of view.

Vendors have been pushing it though, because implementing IPV6 only somehow is still a very, very scary thing for large ISP's to pull off.

what should happen is it should be very easy to deploy ipv6/4 translation mechanisms in ipv4 only networks, this would allow easy interopability and make it easier for the large networks to push IPV6.

while i agree with your sentiment, i personally think that the foundational design pattern of the internet as a network is highly decentralized. once you get public IP space and the infrastructure required to talk BGP, making decentralized designs is actually quite easy.

The issue that ipv4 exhausting and "solutions" around it like NAT are making it very hard for actual users (bussiness, people etc) to get access to public IP space without strings attached.

IPv6 solves a lot of this, especially because IP space is so massive LIR's don't need to be so spare with giving out address space.

The far larger issue we have is that applications are ingrained in a client server mindset, in which big incumbents want to have this architecture because it forces control from the server towards to client. And control usually also means having the data itself, which is where the real value lies.

same goes for dutch intelligence agencies and i highly doubt others inside the EU sharing data willy nilly.

https://nos.nl/artikel/2586859-aivd-en-mivd-delen-minder-inf...

then it becomes a political issue between the EU and the US?

mind you, prior to this administration the EU was more then happy to help the US DOJ in such cases.

considering the stuff that happened in the past year or so, i doubt that would happen again. Actually calling bluff on the US is the only way to play this properly, because it gives the EU a mandate to strike back geopolitically if the US wants to retaliate for non-compliance by fastmail.

the alternative being hetzner giving away EU based information to the US? which would absolutely destroy their reputation in the EU. (which is a far larger market for them).

The only way to spin this as hetzner is to go public with this and make it a political point for geopolitics between the EU and the US, and take the loss /call the bluff on the US threat.

a combination of many things.

For one, Cities in the netherlands are already quite dense, and the dutch are focused on building family houses attachted to each other mostly (row housing).

Also, thanks to the massive agricultural sector and a lack of oversight on industry, the netherlands has a massive problem with nitrogen in its soil which prevents building because building stuff generates more nitrogen.

Speculation and the liberalisation of the housing market has also massively contributed to price increases.

https://en.wikipedia.org/wiki/Nitrogen_crisis_in_the_Netherl...

also, in my experience high grades are rare in the netherlands at all education levels. I did both mbo and hbo levels, and on both levels getting a "A" (10/10 or 9/10) was a very uncommon thing.

also, DAF was large in a very specific time in a very specific place. Let's not forget that the dutch car industry has always being dependant on german car industry.

this is still kind of possible, by doing neighbour discovery and querying the host for its hostname with mdns.

In my opinion, this automatic mapping of DNS names to addresess is not part of the IP protocol, and shouldn't be.

SLAAC is probably one of the better improvements of IPV6. DHCP breaks down at scale. Managing many DHCP prefixes becomes a massibe pain, SLAAC is far more scalable, far more easy to make redundant if you have redundant gateway's and protocol wise is really simple.

arp simply breaks down in very large networks aswell.

Think about things like the following: you are a datacenter and are providing connectivity to the internet for your customers. Each customer get a vlan with a specific ip prefix attached to it. You prove the gateway for each customers subnet.

ARP crosses the L2 vs L3 boundary to do succesful address resolution. The problem this creates in large (mainly datacenter) networks is that a router needs to do arp resolution for for a LOT of networks. (i am talking about 100's of networks in past, many thousands with something like an EVPN vxlan).

Why is this a problem? Layer 2 lookups are usually done in the forwarding plane, and ARP resolution is usually a routing engine task. Doing it this way is very expensive compared to the IPV6 way of doing things. (multicast based address resolution).

The router only needs to send out one multicast packet per vlan, instead of doing arp resolution for each specific host in the vlan.

In modern datacenters this is "fixed" by doing arp suppression, which is a whole other level of hackary added on top of it.

also, the knowledge about how a nuclear bomb works wasn't a secret. The way to produce one was the hard part to figure out. Without the espionage, a industrialised country like the USSR would have figured out how to produce an atomic bomb eventually.

is it though?

for everything inside the EU, i highly doubt it is. For extraterritioral trade. The EU is large enough to trade with other countries in euros instead of dollars.

> can't decide how to tackle illegal mass migration

the mass migration caused by american wars in the middle east you mean? Also, frontex seems to be working fine so far.

>on a single direction on defeating Russia

unlike the US, which has stopped all military aid to ukraine in 2025, and seems to be favouring russia more and more.

Lets not forget, europe is increasing its military en masse mainly because on one hand you have the russian flattening ukraine, and on other hand you have the US demanding greenland.

Who needs further enemies with friends like this?

also, just like galileo, this seem to be the correct path for europe to take.

atleast most senses of this exceptionalism have been fading away in europe thanks to the result of two world wars. (and many, many conflicts before that)

do any more open applications like this exist? The idea seems great

this depends on your RIR. RIPE has far less strict requirements.

what are you on about? this idea of a referendum is a straw man. Member states joined the EU through mechanisms of their state. (Acts of parlements, referendum or something else).

Also, the votes you are described are all about the implementation of certain ideas/legislation inside the context of the EU, not about the organisation itself?

but the constitution is just a piece of paper with some words written on it. Without an active civic society protection what is enshrined in the document, it is all but powerless.

it is also a very easy pathway to create controlled opposition. When you are a totalitarian dictator without elections, opposition of any kind is hard to control. With faux elections you give people a "choice" which seems reasonable compared the usual extremes in an totalitarian state.

atleast the people's republic of china never claims to be a democracy in the liberal western, sense of the word. Politically (on paper atleast) the chinese goverment is very much a marxist state, and it is very clear about that.

> Secondly, we employ "adversarial" systems for two branches of government (legislative and judicial) because it's a hell of a lot easier to spot flaws in ideas of people you are opposed to (as opposed to some European Judiciaries that have "inquisitorial" systems, where a judge investigates activity).

if that would be the case, why is the adversarial system not working in its current practice?

Also, i think the difference between the judicial systems of parlementary/european and the american system have more to do with the difference between civil and common law.

European goverments are really the legacy of the revolutionary french idea's of a civic state, in which citizens have duties to the state, and have rights being garantueed by the state. The state itself is being granted the authority to do this by its citizens through some process.

no, but incentives to commit genocide are spread through social media. [0]

https://en.wikipedia.org/wiki/Rohingya_genocide

multi-site k8s is also very "interesting" if you encounter anything like variable latency in your network paths. etcd is definitly not designed for use across large distances. (more then a 10km single mode fiber path).

splitting things out in a smaller prefix then a /64 breaks a couple of things. SLAAC will not work, and slaac is actually a really neat usecase for containers. Not having the overhead of DHCP for container addressing is neat. Also, smaller blocks then /64 makes things like prefix delegation (usually) also break from a provider.

which is kind of sad to think about. The US could have invested all that money to actually invest in its infrastructure, schools, hospitals and general wellbeing of its workforce to make the economy thrive.

alright, what you are proposing is kind of hard to do. Source routing is not easy, and source validations is even harder.

and what prevents me, as a abuse hoster or "bad guy" from just announcing my own IP space directly on a transit or IXP?

You might say, the IXP should do source checking aswell, but what if ipspace is distributed/anycasted across multiple ASN's/ on the IXP?

Also, if you add multiple egress points distributed across different routing domains, it gets complicated fast.

Does my transit upstream need to do source validation of my IP space? What about their upstream? Also, how would he know which IPspace belongs to which ASN's considering the allocation of ASN numbers and IP space is distributed across different organisations across the globe. (some of which are more malicious/non function than others[0]). Source routing becomes extremly complex because there is no single, universal mapping between IP space and ASN's they belong too.

[0]https://afrinic.net/notice-for-termination-of-the-receiversh...

oh mind you, the actual routing architecture of the internet was. Cloudflare being down mainly just affects layer 7...