[181799] in North American Network Operators' Group
Re: Dual stack IPv6 for IPv4 depletion
daemon@ATHENA.MIT.EDU (Josh Moore)
Sun Jul 5 09:59:20 2015
X-Original-To: nanog@nanog.org
From: Josh Moore <jmoore@atcnetworks.net>
To: Mel Beckman <mel@beckman.org>
Date: Sun, 5 Jul 2015 13:57:43 +0000
In-Reply-To: <C4FBCBEC-43D8-4AC9-ABD9-478F561F7DB9@beckman.org>
Cc: "johnl@iecc.com" <johnl@iecc.com>, "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
We are the ISP and I have a /32 :)
I'm simply looking at the best strategy for migrating my subscribers off v4=
from the perspective of solving the address utilization crisis while still=
providing compatibility for those one-off sites and services that are stil=
l on v4.
Thanks,
Joshua Moore
Network Engineer
ATC Broadband
912.632.3161
On Jul 5, 2015, at 9:55 AM, Mel Beckman <mel@beckman.org> wrote:
>>=20
>> Josh Moore wrote:
>>=20
>> Tunnels behind a CPE and 4to6 NAT seem like bandaid fixes as they do not=
give the benefit of true end to end IPv6 connectivity in the sense of ever=
y device has a one to one global address mapping.
>=20
> No, tunnels do give you one to one global IPv6 address mapping for every =
device. From a testing perspective, a tunnelbroker works just as if you ha=
d a second IPv6-only ISP. If you're fortunate enough to have a dual-stack I=
SP already, you can forgo tunneling altogether and just use an IPv6-capable=
border firewall.=20
>=20
> William Waites wrote:
>> I was helping my
>> friend who likes Apple things connect to the local community
>> network. He wanted to use an Airport as his home gateway rather than
>> the router that we normally use. Turns out these things can *only* do
>> IPv6 with tunnels and cannot do IPv6 on PPPoE. Go figure. So there is
>> not exactly a clear path to native IPv6 for your lab this way.
>=20
> Nobody is recommending the Apple router as a border firewall. It's terrib=
le for that. But it's a ready-to-go tunnelbroker gateway. If your ISP can't=
deliver IPv6, tunneling is the clear path to building a lab. If you have a=
dual-stack ISP already, the clear path is to use an IPv6-capable border fi=
rewall.=20
>=20
> So you are in a maze of non-twisty paths, all alike :)
