IPv6 reporting??

[websquadza]

Don't really care about IPV6.... long ago they said IPv4 will run out of IP addresses, but perhaps Port Forwarding / NAT saved the IPv4 and it might still be around for quite a while.

From what I know Before NAT each device connected to the internet had basically a "public" IP address then, which meant IPv4 was running out fast, fastforward a couple years, most devices now are likely to be behind a router/gateway, which freed up all the device public IP addresses and basically only the router / gateways are actually having the real public IP, so ja might be a while still before we see IPv6 in full action

We should care about v6. iPv4 shortages are a reality. ISPs, cloud vendors, enterprises are all struggling to get IPv4 allocations, they are expensive (only getting more-so) and obtaining resources is incredibly complicated. And we're getting less and less. Enterprises are lucky to get a /24. ISPs, irrespective of their size, are lucky to get a /22 (1024 addresses) per allocation.

1) The largest IP holder in the world, AWS, and now a few other cloud vendors, started charging for IPs last year - this is the way the entire industry is going to move as the resource becomes more scarce, which means everyone pays.
2) NAT really sucks. Just because something works so-so, doesn't mean we should tolerate it. Spend enough time dealing with random gaming issues, VoIP, CCTV and other real time applications that suffer from complicated NAT tables and inconsistent NAT processing (port to port mapping) and v6 is a no-brainer.
3) IPv6 is more secure. NAT is not security (see above). Firewalls have cleaner connection tables to manage. DPI and Threat management works better.
4) At scale (carrier), NAT (CGNAT) is hard, pricey and adds unnecessary complexity.

 

[EmmanuelGoldstein]

We should care about v6. iPv4 shortages are a reality. ISPs, cloud vendors, enterprises are all struggling to get IPv4 allocations, they are expensive (only getting more-so) and obtaining resources is incredibly complicated. And we're getting less and less. Enterprises are lucky to get a /24. ISPs, irrespective of their size, are lucky to get a /22 (1024 addresses) per allocation.

1) The largest IP holder in the world, AWS, and now a few other cloud vendors, started charging for IPs last year - this is the way the entire industry is going to move as the resource becomes more scarce, which means everyone pays.
2) NAT really sucks. Just because something works so-so, doesn't mean we should tolerate it. Spend enough time dealing with random gaming issues, VoIP, CCTV and other real time applications that suffer from complicated NAT tables and inconsistent NAT processing (port to port mapping) and v6 is a no-brainer.
3) IPv6 is more secure. NAT is not security (see above). Firewalls have cleaner connection tables to manage. DPI and Threat management works better.
4) At scale (carrier), NAT (CGNAT) is hard, pricey and adds unnecessary complexity.

I get that.
Problem is, one person cannot change an industry

 

[Meester]

I get that.
Problem is, one person cannot change an industry

Well, start by pestering your Bank, your Cellphone provider, your ISP (if they don't yet have it) -> you are now an EXTRA voice complaint to them, thus your are NOT a single person anymore....


Oh, and there are enough of us smaller network operators that yearns for and begs and pleads for it, and are deploying IPv6 .. we just need some nudging from journalists at the banks and MNOs and the FNOs that doesn't yet provide it!

 

[Sinbad]

 

[EmmanuelGoldstein]

Well, start by pestering your Bank, your Cellphone provider, your ISP (if they don't yet have it) -> you are now an EXTRA voice complaint to them, thus your are NOT a single person anymore....


Oh, and there are enough of us smaller network operators that yearns for and begs and pleads for it, and are deploying IPv6 .. we just need some nudging from journalists at the banks and MNOs and the FNOs that doesn't yet provide it!

So then do what all the other lads do.
Get yourself a subscription here . Poegert and Miles will gladly spin for you

 

[Gozzy]

We should care about v6. iPv4 shortages are a reality. ISPs, cloud vendors, enterprises are all struggling to get IPv4 allocations, they are expensive (only getting more-so) and obtaining resources is incredibly complicated. And we're getting less and less. Enterprises are lucky to get a /24. ISPs, irrespective of their size, are lucky to get a /22 (1024 addresses) per allocation.

1) The largest IP holder in the world, AWS, and now a few other cloud vendors, started charging for IPs last year - this is the way the entire industry is going to move as the resource becomes more scarce, which means everyone pays.
2) NAT really sucks. Just because something works so-so, doesn't mean we should tolerate it. Spend enough time dealing with random gaming issues, VoIP, CCTV and other real time applications that suffer from complicated NAT tables and inconsistent NAT processing (port to port mapping) and v6 is a no-brainer.
3) IPv6 is more secure. NAT is not security (see above). Firewalls have cleaner connection tables to manage. DPI and Threat management works better.
4) At scale (carrier), NAT (CGNAT) is hard, pricey and adds unnecessary complexity.

Valid points and I get that.... but NAT doesn't suck, if it weren't for NAT you would have an even bigger issue with IPs, all it does it changes the header of the packet so that the traffic can be routed from private to the public space etc, also I have never had an issue hosting or playing games using NAT, the lack of knowledge on how to configure the router to host games and play games are likely the issue, which will probably still be around even with IPV6.

IPV6 has its place definitely, but it also probably adds complexity, which people are not ready for yet.

 

[Meester]

NAT does suck, big time... and painfull everytime I'm forced to use it... but then, guess you aren't a hosting provider that needs to handle the issues...

but NAT doesn't suck

One IP address, many users: Detecting CGNAT to reduce collateral effects

IPv4 scarcity drives widespread use of Carrier-Grade Network Address Translation, a practice in ISPs and mobile networks that places many users behind each IP address, along with their collected activity and volumes of traffic. We introduce the method we’ve developed to detect large-scale IP...

blog.cloudflare.com

The amount of effort involved that you aren't even aware off...

but it also probably adds complexity, which people are not ready for yet.

Actually NOT, it makes life much much easier ask met, I have plentifull of IPv4 space available, but the fact I don't have to worry amount all the small niggly challenges of CIDR, makes life much much easier.


The issue is NOT IPv6 the issue is the IPv4 only stuff

 

[warwickw]

The big issue I see is CG-NAT implementations on MNO's and ISP's, this inevitably leads to double NAT which is a major headache of note for certain services.

If we could get more native services to support IPv6 as standard, then pressure can be applied to MNO's and ISP's to support IPv6 natively..

The solution I see is for us consumers to keep pressure on all our "service" providers to support IPv6 natively, and then to feed back to MNO's and ISP's to say we need IPv6 support.

FNB where is your IPv6 support?
Standard Bank where is your IPv6 support?
Nedbank where is your IPv6 support/
Investec where is your IPv6 support?
Bank Zero where is your IPv6 support?
Tyme Bank where is your IPv6 support/
Old Mutual Bank where is your IPv6 support/

Well done to Capitec Bank. Excelllent work.

I am really amazed that the newer banks Bank Zero / Tyme Bank / Old Mutual Bank don't have native IPv6 support, I understand it would take time for the older banks to support it but really deploying any service these days without IPv6 support is stupid and embarrassing you should fire your networking team immediately.

 

[Next Thing]

The biggest problem with the way fibre providers implement IPv6 is that for some bizarre reason they all still issue dynamic prefixes that change every 24 hours, which, considering the IPv6 address space is so huge, is a bizarre way to implement IPv6.

If you are talking home or business use where you do not have a transit type agreement and your owned ip space which is advertised, why would you have a dedicated ip space which requires additional infra to maintain?

 

[deweyzeph]

If you are talking home or business use where you do not have a transit type agreement and your owned ip space which is advertised, why would you have a dedicated ip space which requires additional infra to maintain?

Because every time the prefix changes every single device on your network's IPv6 address has to change which can cause your devices to lose IPv6 connectivity while the change filters down to each device. It doesn't require any additional infrastructure to maintain at all. You could give every single person on the planet a /60 prefix and you still would only have used 1% of the available IPv6 address space. There is absolutely no need to use dynamic prefixes.

 

[Meester]

I am really amazed that the newer banks Bank Zero / Tyme Bank / Old Mutual Bank don't have native IPv6 support, I understand it would take time for the older banks to support it but really deploying any service these days without IPv6 support is stupid and embarrassing you should fire your networking team immediately.

Don't believe that, could get that most probably going over the weekend... if their Upstreams support it... as we only really need IPv6 on the outside firewall even that can be doing NAT64 quickly... doing it myself.

 

[Meester]

If you are talking home or business use where you do not have a transit type agreement and your owned ip space which is advertised, why would you have a dedicated ip space which requires additional infra to maintain?

Read IP cameras...

 

[HartsockZA]

I'd love to jump onto the band wago on this, so where would one look to grasp a better understanding of how Ipv6 functions and implementation. I'll look into it not to say I can do it over night but sure, I'll attempt it

 

[Meester]

Learn: Together | AFRINIC Academy

afrinic.academy

I'd love to jump onto the band wago on this, so where would one look to grasp a better understanding of how Ipv6 functions and implementation. I'll look into it not to say I can do it over night but sure, I'll attempt it

Youtube does have a bunch of IPv6 information too.
You want to learn from the network operator side, check the ARIN, NANOG, RIPE etc. for IPv6 talks and presentations

 

[HartsockZA]

Learn: Together | AFRINIC Academy

afrinic.academy

Youtube does have a bunch of IPv6 information too.
You want to learn from the network operator side, check the ARIN, NANOG, RIPE etc. for IPv6 talks and presentations

I have done the presentations and believe it I got lost. So Maybe I need to ask Chat Gpt to simplify it right down to a gold retriever Haha

 

[websquadza]

I'd love to jump onto the band wago on this, so where would one look to grasp a better understanding of how Ipv6 functions and implementation. I'll look into it not to say I can do it over night but sure, I'll attempt it

Come visit and have a coffee.

 

[HartsockZA]

Come visit and have a coffee.

If I do Aiden from Uniterm is going to beg me to come trol the new sales guys

 

[websquadza]

If I do Aiden from Uniterm is going to beg me to come trol the new sales guys

that's fine, will make the long trek from Pretoria worthwhile

 

[warwickw]

Excellent v6 course/certification as well at https://ipv6.he.net/certification/