IPv6-mostly IPv6-only(with dns64/nat64) dual stack at RIPE-meeting
Hi, during the closing plenary were considerations to remove the IPv6-only(with dns64/nat64) network/ssid the next time. I would vote for that. IPv6-mostly covers the traditional IPv6-only. Someone made the proposal to provide a real "ipv6 only" net/ssid instead (without nat64) My first thought was: Never, it will the people just frustrate. My second thought was: Let's try it! After the first shock - only 50% of the websites support IPv6 - we should provide tips for testing: - using public dns64 with own nat64 address space - VPN, the public ones like apple privacy relay, cloudflare warp ... - VPN, own organisation/company like eduvpn for NREN (e.g. DFN supports it, other institutes too, cisco anyconnect... -VPN personal, like wireguard/ipsec to AVMs fritzbox and others, openvpn NAS/ own setups Last but not least I propose to provide that special DNS-resolver: https://gitlab.com/miyurusankalpa/IPv6-dns-server It increases the amount of IPv6 capable destinations. Regards, Thomas
Op 27-05-23 om 10:45 schreef Thomas Schäfer:
during the closing plenary were considerations to remove the IPv6-only(with dns64/nat64) network/ssid the next time.
I would vote for that. IPv6-mostly covers the traditional IPv6-only.
Yes, I agree.
Someone made the proposal to provide a real "ipv6 only" > Let's try it!
A lot will break for sure. It's not just websites. The DNS may break as well. I have test domain that can *only* be resolved via IPv6 and it yielded in some interesting findings. If you would like to try: https://42.dnslabs.nl
- VPN, own organisation/company
At our company we spent quite some effort is getting this right. And it is fun to open the VPN on an IPv6-only network and still get IPv4-access via the VPN. I guess what I'm trying to say is: it can be done! (but not many companies will have done it) -- Marco
Hi, On Sat, May 27, 2023 at 12:28:24PM +0200, Marco Davids via ipv6-wg wrote:
- VPN, own organisation/company
At our company we spent quite some effort is getting this right. And it is fun to open the VPN on an IPv6-only network and still get IPv4-access via the VPN. I guess what I'm trying to say is: it can be done! (but not many companies will have done it)
Off to the tangent of "what can we do for the enterprises" - this is actually one of the important things to do: enable IPv6 on the "outside" endpoints (webserver, mail server, VPN server!!), even if there is no IPv6 on the "inside" network yet. Different zones, different purpose, and "VPN endpoint with IPv6+IPv4" really helps clients sitting in an "IPv6 is good, IPv4 is CGNAT" access network. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
participants (4)
-
Gert Doering -
Marco Davids -
Thomas Schäfer -
tschaefer＠t-online.de