toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

372
active users

#ipv6

5 posts5 participants1 post today

Just wanted to share some thoughts on #RFC9715 - an #RFC that defines standards on reducing the #DNS issue of IP fragmentation over #UDP. It's not a long read, but a good one for everyone who understands the issues of large UDP responses on the #Internet. A great leap forward to (hopefully) reduce the reflection/amplification #DDoS potential of DNS.

Just today I learned that #Google will configure their public DNS resolvers to limit to ~1400 bytes (smaller adjustments expected while figuring out the sweet spot in production). From now on, DNS responses which exceed this limit will have the truncated flag set instructing the client to resolve back to #TCP.

Replied in thread

@matdevdug According to github.com/netbirdio/netbird/i Netbird still does not support the *current* Internet Protocol. I've evaluated it last year to replace the #IPSec VPN at $WORK and lack of IPv6 was the reason I had to give up on Netbird. I have quite many #IPv6 -only hosts and my colleagues need to be able to access them.

Hello, In the README I only see IPv4 subnets, is wiretrustee working with IPv6 subnets? If not, is it possible to add a support for IPv6?
GitHubFeature Request: internal IPv6 support · Issue #46 · netbirdio/netbirdBy unixfox

Oops! The MXP01 (Italy) peer had some fuck ups, followed by some insane traffic f*ckups at 3AM & 6AM on the other instances.

Rule Nr. 1: Even changing a single character can result in f*ckups. Always test!

#devops#bgp#peering
Replied to Ryan Peters

@ryan

For the resolver side:

When you only have an IPv4 resolver configured, your clients will only use this one. When your clients get an IPv6 resolver, either via Router Advertisement or DHCPv6, they will try that one. They should fall back.

As with any service: Configure the service first, check the connection, then configure your clients to use the service.

Replied to Ryan Peters

@ryan You pretty much can't use IPv6 without DNS. Sure, technically, you can just fine; but it's really rather impractical.

I would go with what's one of nuintari's rules of networking: start small. Get one small piece to run IPv6, then expand from there. If that means start out by setting up your local DNS resolver to accept queries over IPv6, sure, why not?

Replied to Ryan Peters

@ryan Yes, you should learn IPv6.

You can find a collection of training material here:

gitlab.com/jenslink/ipv6-resou

BTW, In many cases you don't need DHCPv6, you can just use router advertisements to configure your clients. And if you are running Android, DHCPv6 does not work at all.

I really should start working on the IPv6 tutorial YouTube videos...

GitLabresources.md · main · Jens Link / IPv6 Resources · GitLabGitLab.com

For those that run a homelab with DNS and DHCP, are you using IPv6? I'm running BIND and debating if I need to configure IPv6 just to future-proof myself. I'm not seeing any issues, at least any that I notice.

Also, I know little about IPv6, so I admit I need to do some learning.

#homelab#dns#dhcp
Replied to Michael

@michael I am not aware of any end-user ISP providing only #IPv6 connectivity. I do know of some VPS hosts providing only IPv6 to customer nodes. This has impacted folk wanting to write code that interact with other services (eg: Discord bots).

Replied in thread

@freifunkMUC ansonsten fände ich es auch noch sehr spannend, wenn man als weiteren Service für VPN und die VMs auch #Multicast dann anbieten könnte. Auch per #IPv6 und #PIM / #pim6sd über das #IntercityVPN zwischen Communities dann irgendwann. Das gäbe es meines Wissens nach auch bei keinem kommerziellen Angebot bisher.
Aber dann müssten wir nochmal schauen, wie man das gerade mit euren #GluonParker Bestrebungen noch hinbekommen könnte.

Question to the network people out there:

Are there any ISPs that are IPv6 only (without providing a NAT/whatever)?

Background: Having an argument with a provider that hasn't published any AAAA records, and whilst I think that's poor form, I'm wondering if this would actually negatively affect any actual users in practice?

#ip#ipv6#ipv4
Replied in thread

@DoctorBrodsky @woe2you @miah given #Quad9 bowed before the #Contentmafia and censored #DNS requests, I'll continue to recommend using #OpenNIC's Servers instead

94.103.153.176 & 2a02:990:219:1:ba:1337:cafe:3 as well as
144.76.103.143 & 2a01:4f8:192:43a5::2

  • If you only add a single #IPv4 address, no #IPv6 resolution will take place over said provider or worse even no IPv6 connectivity at all...

I merely retain quad9 on said list for archival purposes. I Yeeted #CloudFlare aka. #ClownFlare since they are a #RogueISP!