If there are two things to learn from all the new information presented at last week’s (October 24–28, 2016) RIPE-73 meeting in Madrid/Spain, then it’s that IPv4 is quickly going down the drain and IPv6 deployment are still in many areas lacking to replace it.
The RIPE-72 meeting in København (Copenhagen (Denmark)) from March 23–27, 2016 showed a remarkable prominence of IPv6 related matters. Yes, we (as in “the Internet community”) do make progress, and the presentations clearly show so, which is a Good Thing[TM] to happen. Not quite as inspiring is the fact that the IP address market is […]
Filtering ICMP packets for IPv6 (or ICMPv6, or ICMP6, depending on the texts you read) is somewhat daunting at first. But once you’ve thrown your fears and possibly dogmatic attitude towards ICMP out the window, setting up a reasonable packet filter configuration is actually fairly straightforward. This video is basically a translated re-run of a […]
Here are my personal highlights from last week’s RIPE-68 in Warsaw/Poland, and some quick info on a secret little project of mine.
In a reply to the previous episode, Matthias pointed out that while the ramond is a useful tool, it is little if any use against a malicious attacker. Right, but if you let an attacker into a subnet with potential targets, you are in some very serious trouble anyway.
As promised in episode #22, here are some simple but useful things you can do with IPv6 Autoconfiguration but can’t do with DHCP.
In virtually all IPv6 trainings and consulting sessions the question pops up if DHCPv6 or Stateless Address Autoconfiguration (SLAAC) is the way to go. Here’s why you quite likely need both.
If you think that IPv6 is a “network job”, you are in for a nasty surprise: The fun really only starts once the network provides IPv6 and you have to make your applications IPv6-aware. And even that’s not primarily a technical job…
If you plan to wait for IPv6 to become “necessary” and then deploy it only on your external interfaces, usually your mail and web servers, you are likely in for a whole range of nasty surprises.
What if you need more than one Ethernet interface on a notebook? A IEEE 802.1Q tagged VLAN capable switch solves the problem.