mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,5 Tsd.
aktive Profile

#dualstack

0 Beiträge0 Beteiligte0 Beiträge heute
goetz<p><span class="h-card" translate="no"><a href="https://ipv6.social/@tschaefer" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>tschaefer</span></a></span><br>1&amp;1 with Roaming <a href="https://ipv6.social/tags/VodafoneNL" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>VodafoneNL</span></a> <a href="https://ipv6.social/tags/Dualstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Dualstack</span></a> works. <a href="https://ipv6.social/tags/IPv6only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6only</span></a> without <a href="https://ipv6.social/tags/NAT64" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NAT64</span></a> works too.</p>
goetz<p>For <span class="h-card" translate="no"><a href="https://ipv6.social/@tschaefer" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>tschaefer</span></a></span> <br><a href="https://ipv6.social/tags/Telekom" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Telekom</span></a> <a href="https://ipv6.social/tags/Roaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Roaming</span></a> in NL with <a href="https://ipv6.social/tags/Odido" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Odido</span></a><br>Only <a href="https://ipv6.social/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> works. <a href="https://ipv6.social/tags/IPv6only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6only</span></a> is not possible.</p><p><a href="https://ipv6.social/tags/bgptools" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bgptools</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://framapiaf.org/@pmevzek" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>pmevzek</span></a></span> <span class="h-card" translate="no"><a href="https://mstdn.jp/@landley" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>landley</span></a></span> I wish I had this luxury.</p><ul><li>Cuz I often have to deal with <em>fucked-up networks</em> that are <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4only</span></a> and sometimes going <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> is flatout not being allowed and even having <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> at the public-facing side is seen as a problem.</li></ul><p>And I'm more often than not not the guy who gets to make that decision.</p><ul><li>I was only able to get IPv6 allowed WAN-side at one place after my employer encountered the problem that some workers have shitty <a href="https://infosec.space/tags/CGNAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CGNAT</span></a> that bricks <a href="https://infosec.space/tags/OpenVPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenVPN</span></a> so they could not <a href="https://infosec.space/tags/VPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>VPN</span></a> to the HQ.</li></ul>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://oldbytes.space/@drscriptt" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>drscriptt</span></a></span> again: I'd see this as more error-prone than <a href="https://infosec.space/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DNSSEC</span></a> and only hindering the transition from <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> to <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> if not bricking <em>proper <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a></em>…</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mastodon.ip6.li/@net_gremlin" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>net_gremlin</span></a></span> </p><p><code>1.</code> Obviously...<br><code>2.</code> Not gonna argue with that.<br><code>3.</code> as long as there are <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4only</span></a> services and applications, I do at least need proper <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a>. Regulators like <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BNetzA</span></a></span> refuse to mandate <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> connectivity and I only get <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> from my <a href="https://infosec.space/tags/ISP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISP</span></a>. </p><ul><li>I guess some day I'll be forced to get a <span class="h-card" translate="no"><a href="https://mastodon.social/@ripencc" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>ripencc</span></a></span> membership just to get a Provider-Independent allocation.</li></ul>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://chaos.social/@dickenhobelix" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>dickenhobelix</span></a></span> ich hätte auch gern mindestens nen /64 zu.meinrm /28.</p><ul><li>Kriege aber kein <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> vom <a href="https://infosec.space/tags/ISP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISP</span></a>!</li></ul>
Marius Biebel<p>Finally found the time to make our student council website <a href="https://infosec.exchange/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> <a href="https://infosec.exchange/tags/dualstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>dualstack</span></a> <a href="https://fs.cs.hm.edu/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">fs.cs.hm.edu/</span><span class="invisible"></span></a> 😅</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mstdn.jp/@landley" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>landley</span></a></span> <span class="h-card" translate="no"><a href="https://mstdn.social/@jschauma" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>jschauma</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.exchange/@ryanc" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>ryanc</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.exchange/@0xabad1dea" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>0xabad1dea</span></a></span> yeah, the exhaustion problem would've been shoved back with a <a href="https://infosec.space/tags/64bit" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>64bit</span></a> or sufficiently delayed by a 40bit number.</p><p>Unless we also hate <a href="https://infosec.space/tags/NAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NAT</span></a> and expect every device to have a unique static <a href="https://infosec.space/tags/IP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IP</span></a> (which is a <a href="https://infosec.space/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>privacy</span></a> nightmare at best that <em>"<a href="https://infosec.space/tags/PrivacyExtensions" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PrivacyExtensions</span></a>"</em> barely fixed.) </p><ul><li>I mean they could've also gone the <a href="https://infosec.space/tags/DECnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DECnet</span></a> approach and use the <a href="https://infosec.space/tags/EUI48" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EUI48</span></a> / <a href="https://infosec.space/tags/MAC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MAC</span></a>-Address (or <a href="https://infosec.space/tags/EUI64" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EUI64</span></a>) as static addressing system, but that would've made <a href="https://infosec.space/tags/vendors" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>vendors</span></a> and not <a href="https://infosec.space/tags/ISPs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISPs</span></a> the powerful forces of allocation. (Similar to how technically the <a href="https://infosec.space/tags/ICCID" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ICCID</span></a> dictates <a href="https://infosec.space/tags/GSM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GSM</span></a> / <a href="https://infosec.space/tags/4G" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>4G</span></a> / <a href="https://infosec.space/tags/5G" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>5G</span></a> access and not the <a href="https://infosec.space/tags/IMEI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IMEI</span></a> unless places like Australia ban imported devices.</li></ul> <p>I guess using a <a href="https://infosec.space/tags/128bit" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>128bit</span></a> address space was inspired by <a href="https://infosec.space/tags/ZFS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ZFS</span></a> doing the same <em>before</em>, as the folks who designed both wanted to design a solution that clearly will outlive them (<em>way harder</em> than COBOL has outlived Grace Hopper)...</p><ul><li>Personally I've only had headaches with <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> because not only do I only have <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4only</span></a> <a href="https://infosec.space/tags/Internet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Internet</span></a> but my <a href="https://infosec.space/tags/ISP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISP</span></a> refuses to allocate even a singe /64 to me (but has no problem throwing in a free /29 of <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a>'s in with my contract!)and stuff like <a href="https://infosec.space/tags/HurricaneElectric" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HurricaneElectric</span></a> / <a href="https://infosec.space/tags/HEnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HEnet</span></a>'s <a href="https://infosec.space/tags/Tunnelbroker" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Tunnelbroker</span></a> fail face first due to <a href="https://infosec.space/tags/Geoblocking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Geoblocking</span></a> and the fact that <a href="https://infosec.space/tags/ASNs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ASNs</span></a> get geolocated, not their <a href="https://infosec.space/tags/PoPs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PoPs</span></a>... </li></ul><p>If I was <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BNetzA</span></a></span> I would've mandated <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> and banned <a href="https://infosec.space/tags/CGNAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CGNAT</span></a> (or at least the use of CGNAT in <a href="https://infosec.space/tags/RFC1918" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RFC1918</span></a> address spaces) as well as <a href="https://infosec.space/tags/DualStackLite" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStackLite</span></a>!</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://awawa.meo.ws/@fusl" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>fusl</span></a></span> <span class="h-card" translate="no"><a href="https://mastodon.online/@mnalis" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>mnalis</span></a></span> <span class="h-card" translate="no"><a href="https://infosec.exchange/@0xF21D" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>0xF21D</span></a></span> </p><p>I do that with <a href="https://infosec.space/tags/pfSense" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>pfSense</span></a> &amp; <a href="https://infosec.space/tags/OPNsense" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OPNsense</span></a> (depending on the exact network in question) and have it merge <a href="https://github.com/greyhat-academy/lists.d/blob/main/dns.servers.list.tsv" rel="nofollow noopener" target="_blank">multiple sources</a> that get cached.</p><p>In total, I do may out the 30 DNS servers and whilst I have <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4only</span></a>, I have everything ready for <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> (<a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> + <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a>) once my ISP stops keeing it's thumbs um their ass...</p><p><a href="https://infosec.space/tags/sarcasm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>sarcasm</span></a></p>
krithin<p>Anyone know why opening <a href="https://sfba.social/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> ports on <a href="https://sfba.social/tags/GoogleWifi" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GoogleWifi</span></a> might be failing for me? I have IPv6 service from my ISP (sonic.net - they're awesome!) and have a web server set up on my <a href="https://sfba.social/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RaspberryPi</span></a>.</p><p>Requests from outside my network sent to the pi's IPv6 GUA keep failing, even though I have ports 80 and 443 open for the pi in the "Port Management" section of the google home app. Requests made to that same IPv6 GUA work fine within my network.</p><p>(I also have IPv4 port forwarding set up on that same page, and that seems to work fine to forward requests made to my router's external IPv4 address to the pi, so I could simply not set up an AAAA record and move forward with only IPv4 access to my server, but I'd prefer having a working dual-stack setup!)</p><p><a href="https://sfba.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>networking</span></a> <a href="https://sfba.social/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HomeLab</span></a> <a href="https://sfba.social/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> <a href="https://sfba.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Google</span></a> <a href="https://sfba.social/tags/techsupport" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>techsupport</span></a> <a href="https://sfba.social/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://digitalcourage.social/@krzym" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>krzym</span></a></span> <span class="h-card" translate="no"><a href="https://oxytodon.com/@fuchsiii" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>fuchsiii</span></a></span> solange <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BNetzA</span></a></span> nicht mindestens ein /64 an <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> pro <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> vorschreibt wird sich nix dran ändern.</p><ul><li>Erst wenn <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> flächendeckend ist kann IPv4 abgeschaltet werden!</li></ul>
Kevin Karhan :verified:Shitpost, not to be taken serious, Networking
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://ipv6.social/@tschaefer" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>tschaefer</span></a></span> fängt damit an dass bis heute nicht alle <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> haben oder bekommen können...</p><ul><li>Bspw.: Verweigert mein <a href="https://infosec.space/tags/ISP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISP</span></a> die Bereitstellung von echtem <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a>. (Deshalb kann ich <a href="https://ipv6.social/@tschaefer/113453220246374691" rel="nofollow noopener" target="_blank">diesen Post</a> auch nicht direkt aufrufen!)</li></ul><p>Umgekehrt sind bis heute nicht alle <a href="https://infosec.space/tags/Diensteanbieter" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Diensteanbieter</span></a> &amp; Services von <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> auf <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> migriert worden.</p><ul><li><a href="https://infosec.space/tags/IPv6only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6only</span></a> ist anders als ein <a href="https://infosec.space/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Windows</span></a>-Verbot (was <a href="https://infosec.space/tags/BDSG" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BDSG</span></a> &amp; <a href="https://infosec.space/tags/DSGVO" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DSGVO</span></a> eigentlich verlangen!) illusorisch.</li></ul><p>Sorgt zwar für Henne-Ei-Problem, wäre aber durch die <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BNetzA</span></a></span> lösbar indem diese zwangsweise je IPv4 mindestens ein /64 an IPv6 vorschreibt und Bullshit wie <a href="https://infosec.space/tags/CGNAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CGNAT</span></a> [insbesondere mit <a href="https://infosec.space/tags/RFC1918" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RFC1918</span></a>-Addressraum] verbietet!</p><ul><li>Besonders Bullshit wie <a href="https://infosec.space/tags/DualStackLite" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStackLite</span></a> ist murks: Entweder korrekt Dual-Stack oder lasst es sein!!!</li></ul>
David<p>Funktioniert <a href="https://ipv6-test.com/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">ipv6-test.com/</span><span class="invisible"></span></a> nur bei mir nicht oder ist das allgemein kaputt? Zeigt bei mir nur <a href="https://hachyderm.io/tags/ipv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ipv4</span></a> als funktionierend an, laut anderer Tests und `ping6` ist mein <a href="https://hachyderm.io/tags/dualstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>dualstack</span></a> aber okay. 🤔</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://troet.cafe/@jue" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>jue</span></a></span> <span class="h-card" translate="no"><a href="https://chaos.social/@goetz" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>goetz</span></a></span> <span class="h-card" translate="no"><a href="https://chaos.social/@fluepke" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>fluepke</span></a></span> Until you have some <a href="https://infosec.space/tags/remote" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>remote</span></a> workers who only have <a href="https://infosec.space/tags/CGNAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CGNAT</span></a> + pseudo-static <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> addresses on a <a href="https://infosec.space/tags/consumer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>consumer</span></a> line...</p><p>Then it's not an option and you'll have to resort to <a href="https://infosec.space/tags/RFC1918" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RFC1918</span></a> and <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> <a href="https://infosec.space/tags/WAN" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WAN</span></a>-side, as I had to setup for a fmr. employer / client...</p>
Thomas Schäfer<p><span class="h-card" translate="no"><a href="https://infosec.space/@kkarhan" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>kkarhan</span></a></span> </p><p>"mandate proper <a href="https://ipv6.social/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> support" (for all) is nonsense</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://chaos.social/@fluepke" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>fluepke</span></a></span> sadly the only way this could be changed if <span class="h-card" translate="no"><a href="https://social.bund.de/@BNetzA" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BNetzA</span></a></span> would mandate proper <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> support.</p><ul><li>And I'd welcome it if they were to mandate a /64 per IPv4 if not a /48 of <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a>'s per <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> block allocation...</li></ul><p>I just don't expect this to happen from the same agency that would rather <a href="https://infosec.space/tags/subsidize" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>subsidize</span></a> <a href="https://infosec.space/tags/Starlink" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Starlink</span></a> that mandate <a href="https://infosec.space/tags/FTTB" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FTTB</span></a> &amp; <a href="https://infosec.space/tags/FTTH" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FTTH</span></a> coverage and installations...</p>
goetz 🚲<p>Using SIM Plans for connectivity abroad shows, draws an interesting picture in terms of <a href="https://chaos.social/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> connectivity. My favorite <a href="https://chaos.social/tags/AIS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AIS</span></a> Sim2Fly Sim and dataplan has <a href="https://chaos.social/tags/Dualstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Dualstack</span></a> connectivity. The really easy to use, no app, <a href="https://chaos.social/tags/esim" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>esim</span></a> from <a href="https://chaos.social/tags/betterroaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>betterroaming</span></a> aka <a href="https://chaos.social/tags/truphone" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>truphone</span></a> has only <a href="https://chaos.social/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a> connectivity. Looking at the <a href="https://chaos.social/tags/ASN" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ASN</span></a> shows they do not have any <a href="https://chaos.social/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> prefixes at all.<br> <a href="https://bgp.tools/as/30967#asinfo" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">bgp.tools/as/30967#asinfo</span><span class="invisible"></span></a></p>
Sly Gryphon<p>A good <a href="https://qoto.org/tags/dualstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>dualstack</span></a> network should still run <a href="https://qoto.org/tags/dns64" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>dns64</span></a> and <a href="https://qoto.org/tags/nat64" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>nat64</span></a>, so that it can fully support <a href="https://qoto.org/tags/ipv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ipv6</span></a> only devices and allow them a way to connect to legacy (ipv4) internet sites. <a href="https://sgryphon.gamertheory.net/2022/12/running-nat64-in-a-dual-stack-network/" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="ellipsis">sgryphon.gamertheory.net/2022/</span><span class="invisible">12/running-nat64-in-a-dual-stack-network/</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://toot.cafe/@baldur" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>baldur</span></a></span> generally, <a href="https://infosec.space/tags/GeoIP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GeoIP</span></a> and other <a href="https://infosec.space/tags/IP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IP</span></a>-based <a href="https://infosec.space/tags/Geolocation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Geolocation</span></a> and <a href="https://infosec.space/tags/Geoblocking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Geoblocking</span></a> is just garbage.</p><p>I'm stuck on an <a href="https://infosec.space/tags/IPv4only" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4only</span></a> conmection because my <a href="https://infosec.space/tags/ISP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ISP</span></a> is unable and/or unwilling to provide proper <a href="https://infosec.space/tags/DualStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DualStack</span></a> connectivity or even a /64 of <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv6</span></a> (when in fact they could easily do a /48 if not /40 since they gave me a /28 of <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>IPv4</span></a>'s at no added cost).</p><ul><li>And no, <a href="https://tunnelbroker.net" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">tunnelbroker.net</span><span class="invisible"></span></a> doesn't work for me because then stuff will prefer IPv6 and a shitload of stuff does <a href="https://infosec.space/tags/GeoIP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GeoIP</span></a> and then geoblocks me despite choosing the <a href="https://infosec.space/tags/PoP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PoP</span></a> in <a href="https://infosec.space/tags/FRA" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FRA</span></a> because they Geolocate entire <a href="https://infosec.space/tags/ASN" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ASN</span></a>|s and not single allocations!</li></ul>