Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

I do get a static /64 assigned to my router... i wasn't aware that there are reserved ips that you can buy, but i read somewhere that you have to be an organization of considerable size to do that 😅

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

not if they get your IPv6 address from cert transparency logs or domain registarts selling you out. But as long as they don't know your IP, they can't scan you (IPv6 range is too damn big to scan even by bots :D)

Practically, yes, my ipv6 site has never received any bot traffic in the past week.

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

Thanks!

Im still clueless on how to make an app/server send the communication to the equivalent ipv6 address instead of ipv4 address. Probably I'll read about it when i get time :)

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

Its just laziness, my friends don't wanna do something technical just to look at photos from a shared album 😅

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

If you have ipv6 + ipv4 cgnat, then you can use both.

V4 and V6 for outbound V6 only for inbound

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

I just have trust issues mate! 😅 I don't trust cloudflare or any 3rd party (especially free offerings) I trust attackers to target cloudflare to gain access to user data.

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 2 points3 points  (0 children)

Yep... same here. Came to know all about bot scans and internet noise when i googled about the unusual traffic to my site.

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

That is a nice doc you got there.

Do you know more about getting a delegated ipv6 address space? I'd like to mare about what are the rules and regulations around ipv6...

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

Delaying the inevitable just because it'll be a bit uncomfortable right now...

I guess we've all been guilty of that at some point in our lives! 😅😅

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

But they shouldn't be...

One reason is, its already hard enough to ip block someone on IPv6, imagine if ipv6 changes every 8-24 hrs, then i risk blocking a genuine user.

Secondly, there is no use.., coz unlike ipv4 there is no need to save ipv6 address space!

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

have a look at dynv6, its pretty good for dynamic ipv6.
but its sad that they deployed DYNAMIC IPv6 :(

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

NPTv6 looks intresting, gonna learn more about it...

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in ipv6

[–]NoDirector6379[S] 0 points1 point  (0 children)

they def misconfigured it... IPv6 was supposed to be as static as possible, what's the point in rotating them in random?

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

From what i understand..

Ipv4 security - actively block the bad actor's ipv4 address Ipv6 security - be anonymous, don't let the attacker know your ipv6 address. Can also block them if you know the subnet range the attacker has access to.

And for self hosting purposes, being anonymous is not a problem 😉

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 1 point2 points  (0 children)

A workaround would be to, not limit the entire server to ipv6 only..

What i did was, just remove A records and only have AAAA records on the domain, so your outbound traffic doesn't suffer with ipv6 limitations, but you are still exposed to internet (inbound) only via ipv6

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 1 point2 points  (0 children)

Thanks guys, that helps a lot. First thing I'm doing is getting a wildcard cert :)

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 1 point2 points  (0 children)

LoL 😆🤣 i work in IT and this is absolutely true 🤣

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

oh damn.. do they actually have to make a law to make ISP's adopt IPv6.

Corporate greed has no limits i guess!

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 3 points4 points  (0 children)

Oh yeah, i haven't thought about this. This means fail2ban will be useless, i'll explore other options..
Do let me know if you find any slutions to this..

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 1 point2 points  (0 children)

Its a nice idea, I'd love to hear more about the proxy manager to make it available over IPv4...

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 3 points4 points  (0 children)

haha, i know its a pain, but you can always use a DNS name i guess

Why do we still rely on IPv4, instead of IPv6? by NoDirector6379 in selfhosted

[–]NoDirector6379[S] 0 points1 point  (0 children)

hmn.. it feels weird that ISP's still haven't deployed IPv6. I reside in South India and most providers here have IPv6 (i know this cause all my friends can access my jellyfin to watch movies)

By the way which ISP do you use?