Bottomley: Creating a home IPv6 network

Posted Sep 19, 2020 18:11 UTC (Sat) by abo (subscriber, #77288)
In reply to: Bottomley: Creating a home IPv6 network by Lennie
Parent article: Bottomley: Creating a home IPv6 network

Yes, it's reasonable on its own, although it's problematic that the policy would be different between IPv4 (where everything is blocked by default due to NAT) and IPv6. It may lead to "surprises" for those who expected their service on a dynamic port to only be available "inside their network" (whatever that may mean).

Excluding incoming connections to "guessable" addresses may mitigate that though, while still allowing communication using ephemeral private addresses.

Bottomley: Creating a home IPv6 network

Posted Sep 22, 2020 14:17 UTC (Tue) by Lennie (subscriber, #49641) [Link]

Different between IPv4 and IPv4 ... well, that's just life I'm afraid.

The alternatives would be: default closed or default open for IPv6.

I personally am not convinced default open is a good solution for IPv6. My suggestion is a safe default.

And default closed for incoming connection means IPv6 doesn't have no end to end connectivity at all by default which is one of the advantages IPv6 could give us which it wouldn't have anymore.

A port range open high up in the port range I think would only gives us: happy surprises because it would mean some things 'just work', nothing fancy to do.