I mean on a technical level. Are the devices that make up the infrastructure of the internet hardwired with IPv4? Is the firmware on these devices impossible to upgrade remotely?
If it’s just a matter of software or firmware then adoption should only take like a year but clearly that isn’t the case. So what specifically is stopping us?
Here’s my story of trying to use IPV6 for the past 3 days, and I know I’m not a typical user.
I use Opnsense as a router firewall. Using IPv4, 5/6 VLANs, almost all devices statically addressed with alias’s configured for each. This lets me have firewall rules like “block youtube on the kids devices”, or “use a different DNS server for the wife”, only allow the fire stick to access the internet after 7am. That sort of thing.
First problem is working out how to even get IPv6 on the WAN and what it even means that my ISP has given me a /48 and a /64. Loads of reading and some cobbling together later I have it. But no clients are getting addresses. Eventually fix that and now they have an address. But I don’t want to use SLAAC as that’s a nightmware to keep track of, DHCPv6 doesn’t work for android devices so they’ll be on IPv4 anyway. I don’t want each client to have a globally unique address as that just allows insane tracking. I don’t know if my IPv6 address will ever change, but it seems likley it will and that would be a nightmare to fix. I manage to get private fd00/8 addresses allocated to clients, but I don’t know how to configure IPv6 NAT so devices have an IPv6 IP, but can’t access through the WAN using it. And by that point I just don’t see the point any more. I’d just be duplicating all my rules that would be far too time consuming, confusing and I don’t see the point.
I want local private IP addresses. I don’t want clients to have unique IPs. I want the addresses to be known and static. I want my firewall rules to be tied to specific addresses for 90%+ of devices.
You can still use NAT for IPv6 if it’s something you really want, and it works similarly to IPv4.
But at that point there’s no difference other than it’s less familiar and more fiddly with v6. Why even bother.
To be blunt, I don’t know what 99% of the other commenters are talking about. I’ve never had so many problems with IPv6 in my life, and I’ve been using it for over 10 years now.
At the same time, I’ve only seen less latency and higher bandwidth on IPv6 aware services (though the underlying reasoning is unclear to me).
As someone who builds websites for people all over the globe with any mix of IPv4 and IPv6 it really irks me that people are finding seemingly any excuse to not just move over to IPv6.
What about it is fiddly?
What about it is fiddly?
The insane addresses. The reliance on DNS, the unpredictability of addresses, that each device can have so many addresses and you need to know what each does and is used for and how that impacts inter-network routing and firewall rules. Privacy IPs, what the hell? Its a solution to something that’s fixed by tried and understood IPv4 NAT.
If you just want a flat simple network where everything on your lan is equal, everything has a globally unique and trackable IP I’m sure it’s fine. But if you have something more sophisticated it becomes much more complicated. And I genuinely can’t see how IPv6 advocates can’t see the problems it introduces.
What we need is a larger address space and fast adoption, that’s it. If after 30 years of awful adoption rates and only when people have a gun to their head they begrudgingly might adopt it, then you have a bad protocol.
Nothing, it has never been a technical problem it has always been a business problem. Why spend engineer time and money on deploying V6 when v4 is working perfectly fine and we are not approaching exhaustion of v4 space available for our customers.
Ugh, my job requires us to use their VPN but all IPv6 traffic leaks out of the tunnel because they can’t be bothered to at least blackhole it. I feel like I’m living in 1995 at work.
Same, we started having issues recently when MS enabled IPv6 on their login page. Now some users who are connected to the VPN aren’t able to login because the login request is not coming from a trusted ipv4 address in conditional access .
Everyone’s making money on IPv4, so there isn’t the incentive just yet to really switch or invest in even supporting it. Major clouds now charge per IP, residential ISPs are starting to make having a public IP a feature they charge extra for otherwise you get CGNAT, mobile carriers don’t want people to host stuff and are quite happy with CGNAT.
And then there’s the implementation part where everyone seems to go out of their way to do it wrong and cause trouble. My OVH server for example assigns me a non-routed /56 and I can only use about 8 of them before their router starts ignoring the rest.
At home I have to do 6rd over PPPoE over VLAN which causes my router to not be able to do hardware accelerated routing and I lose 3/4 of my connection speed on top of the resulting tiny MTU, and it turns out IPv6 doesn’t like that. And then a few days later their 6rd endpoint changes and your connection dies until restarted manually, and somehow you end up with another IPv6 block and ugh it’s just so horribly broken.
I want IPv6 to work but damn, ISPs aren’t making it easy to adopt it in the first place.
The hardware and firmware supports it and we have inter protocol solutions to handle edge cases.
The problem is that when the Ipv4 addresses actually ran out, ICANN realized that a metric ton of them were in use because people, especially businesses, were not using NATing.
ICANN (ARIN) slowly grabbed the addresses back, and NATing became the standard so no one really cared that much anymore because the amount of public addresses actually needed was significantly reduced.
Other things like SPN, updates to SSL, and various other address sharing technologies reduced the need for individual public ipv4 addresses even further.
There’s still a shortage and a wait list to get new addresses, but it’s not critical so people don’t have that much of an incentive to switch to ipv6.
People hate change. And even now, IPv6 support in new devices can be hit-or-miss. Even most cellular networks in my country don’t support IPv6.
I think you’ll find the devices support it pretty well but some mobile carrier networks do not.
At an enterprise level, that’s definitely not what we’re seeing. Whenever we try to turn it on for any system, there’s some major downside that the vendor has zero interest in fixing within the next 10 years.
Simply there’s no value for an individual/company to put in the effort.
I have zero need for IP6 in my home network, my company has zero need for it internally.
Honestly, IP6 is useful only for internet backbone at the moment. So long as a packet can reach an edge router/gateway, IP4 is fine internally (because that infrastructure is already in place, and transitioning is costly and has risk).
Follow up question: why would I spend a bunch of extra time adapting something that honestly isn’t useful on the modern web? As it turns out, each device doesn’t need its own public IP. We have NAT which work fine and is potentially more secure and private.
I use ProtonVPN. They don’t use IPv6, so neither do I.
