Tootfinder

from my link log —
Deploying IPv6-mostly access networks.
https://labs.ripe.net/author/ondrej_caletka_1/deploying-ipv6-mostly-access-networks/
saved 2023-05-07

Deploying IPv6-Mostly Access Networks
Dual stack is the most common way of deploying IPv6 in access networks. A recent standard defines IPv6-mostly access networks, providing IPv4 connectivity only for legacy devices while allowing modern devices to run IPv6-only. It is already well supported and allows network operators to gradually p…

Has anyone tried to advance the idea of GLOP-like #IPv6 prefix assignments?
There are probably at least as many arguments against such a proposal than there would be to advance it, but is often useful to say we asked that question and came to a consensus in why or why not.
The reasons for might include using it for private address space or just to have globally autonomous assignments o…

Question for those who know: is it meaningful to attempt to geolocate an #IPv6 address?

welp

Weekend Reads
* IPv6 adoption measurement https://arxiv.org/abs/2507.11678
* Starlink capacity analysis https://

Towards a Non-Binary View of IPv6 Adoption
Twelve years have passed since World IPv6 Launch Day, but what is the current state of IPv6 deployment? Prior work has examined IPv6 status as a binary: can you use IPv6, or not? As deployment increases we must consider a more nuanced, non-binary perspective on IPv6: how much and often can a user or a service use IPv6? We consider this question as a client, server, and cloud provider. Considering the client's perspective, we observe user traffic. We see that the fraction of IPv6 traffic a user …

A Detailed Measurement View on IPv6 Scanners and Their Adaption to BGP Signals
Isabell Egloff, Raphael Hiesgen, Maynard Koch, Thomas C. Schmidt, Matthias W\"ahlisch
https://arxiv.org/abs/2506.20383

A Detailed Measurement View on IPv6 Scanners and Their Adaption to BGP Signals
Scanners are daily visitors of public IPv4 hosts. Scanning IPv6 nodes successfully is still a challenge, which an increasing crowd of actors tries to master. In this paper, we analyze current IPv6 scanning under various network conditions. We observe scanner behavior during eleven months in four network telescopes, one of which is periodically reconfigured by changing BGP announcements. We analyze and classify the observed scanners w.r.t. their temporal behavior, their target, and network selec…

After a couple of years assuming my #Unifi USG wouldn't handle #IPv6 on my #KPN line. Learned last week that some updates down the line fixed that. So now enjoying that sweet sweet duals…

TIL handy tip for sorting IPv6 addresses:
$ printf -- '%s\n' ff02::1 2001:db8:1::1 fe80::33 2001:db8::15 | decorate -k1:ipv6
2001:db8::15
2001:db8:1::1
fe80::33
ff02::1
(from "datamash" package on Debian)
via comment on https://utcc.uto…

My main bugbear with OVH is that they *still* don't offer "failover IP" (where you can fairly quickly move an IP between different dedicated servers) for IPv4, not IPV6.
And, no, they don't offer "Bring Your Own IP" for IPv6 either, only for IPv4.
So when I recently migrated us to a new server I had to do the DNS TTL dance with the IPv6 side of things.
Oh, and it's still only a /64 per server. Not that anything stops you from just using <…

Towards a Non-Binary View of IPv6 Adoption
Sulyab Thottungal Valapu, John Heidemann
https://arxiv.org/abs/2507.11678 https://arxiv.or…

Towards a Non-Binary View of IPv6 Adoption
Twelve years have passed since World IPv6 Launch Day, but what is the current state of IPv6 deployment? Prior work has examined IPv6 status as a binary: can you use IPv6, or not? As deployment increases we must consider a more nuanced, non-binary perspective on IPv6: how much and often can a user or a service use IPv6? We consider this question as a client, server, and cloud provider. Considering the client's perspective, we observe user traffic. We see that the fraction of IPv6 traffic a user …

IPv6 woes solved, I now have (I think, still testing) fully working IPv6 again.
The fix was incredibly braindead and stupid: turning on the IPv4 DHCP server on the LAN side of the Comcast CPE (i.e. on the point to point link between the CPE and my border router).
This would be completely unnecessary in a sane world, since I'm never going to DHCPDISCOVER on this subnet (the CPE and border router both have static world routable IPv4 addresses).
But apparently turning on t…

Some days it just blows my mind how some pieces of software have gained so much traction, with so little in the way of support for some common use cases.
Today; #Docker running on an IPv6 only host.
Who thought assigning IPv4 addresses to containers running on an IPv6 only host was a sensible default that is so difficult to override?
🤯

IPv6 get!

TIL handy tip for sorting IPv6 addresses:
$ printf -- '%s\n' ff02::1 2001:db8:1::1 fe80::33 2001:db8::15 | decorate -k1:ipv6
2001:db8::15
2001:db8:1::1
fe80::33
ff02::1
(from "datamash" package on Debian)
via comment on https://utcc.uto…

My #CenturyLink DSL Internet is down... except for one computer where I'd previously configured DNS to use Google's Public DNS. I'm assuming this is somehow key to why it still works. I've tried to reproduce this onto another computer, but no luck so far.

Meet Alexius Chipalamwazani - 2023 Emerging NREN Programme (ENP) Participant!
At #TNC23, Alexius joined the ENP—a programme built to equip and empower emerging NREN representatives with the skills, knowledge, and community ties that will drive innovation back home.
In this interview, Alexius reflects on his ENP experience, how it shaped his growth, and the impact it’s had on Malawi’s NRE…

Reflections on the Emerging NREN Programme: a personal journey with the Malawian NREN | GÉANT CONNECT Online
Alexius Chipalamwazani from MAREN shares how the Emerging NREN Programme empowered him to drive innovation and lead IPv6 adoption in Malawi.

US broadband provider Astound, aka RCN, (#AS6079). I've asked if this FAQ is outdated, it doesn't sound right.
"Disabling IPv6
For CA, OR, TX and WA
[...]
IPv6 is not yet widely adopted; most software, routers, modems, and other network equipment does not support this emerging protocol"

Comcast IPv6 decided to bork itself again. Nothing I've tried (restarting DHCPv6 client, power cycling the modem) works.
My router gets a v6 address, can hit the internet without issues.
Router makes a DHCPv6 request, gets a delegated /59 out of my static /56.
But when I try to use an address out of the /59 on the local network (via radvd handing out /64's) it gets nowhere, traceroutes stop at the CPE/CMTS.

This week I have (a) enabled DNS security extensions (first documented in 1997 in RFC 2065) on a domain I control and (b) enabled IPv6 (first documented in 1995 in RFC 1883) on my home router, so I think it's time to break out "The Dream of the '90s" from Portlandia: https://youtu.be/TZt-pOc3moc…

How To Mitigate And Defend Against DDoS Attacks In IoT Devices
Ifiyemi Leigha, Basak Comlekcioglu, Maria Pilar Bezanilla
https://arxiv.org/abs/2507.11772 h…

How To Mitigate And Defend Against DDoS Attacks In IoT Devices
Distributed Denial of Service (DDoS) attacks have become increasingly prevalent and dangerous in the context of Internet of Things (IoT) networks, primarily due to the low-security configurations of many connected devices. This paper analyzes the nature and impact of DDoS attacks such as those launched by the Mirai botnet, and proposes layered mitigation strategies tailored to IoT environments. Key solutions explored include IPv6 Unique Local Addresses (ULA), edge computing, software-defined ne…

Grey Rhino Warning: IPv6 is Becoming Fertile Ground for Reflection Amplification Attacks
Ling Hu, Tao Yang, Yu Pang, Bingnan Hou, Zhiping Cai, Bo Yu
https://arxiv.org/abs/2506.04768

Grey Rhino Warning: IPv6 is Becoming Fertile Ground for Reflection Amplification Attacks
Distributed Denial-of-Service (DDoS) attacks represent a cost-effective and potent threat to network stability. While extensively studied in IPv4 networks, DDoS implications in IPv6 remain underexplored. The vast IPv6 address space renders brute-force scanning and amplifier testing for all active addresses impractical. Innovatively, this work investigates AS-level vulnerabilities to reflection amplification attacks in IPv6. One prerequisite for amplification presence is that it is located in …

I didn't know that the value of IPv4 addresses peaked in 2022 and now appears to be declining.
Everyone sitting on a big chunk of IPv4 space is now holding a depreciating asset. If I were them I'd be minded to accelerate their own IPv6 transition in order to sell it off.
But I'd suggest that regardless.
https://ipv4a-5539a…

"I wanted to see the ratio between IPv4 and IPv6 on my computers and decided to write a litle ncurses based tool that does this"
https://github.com/mdavids/ets

I know its a bad picture, but I got a funny sticker at a conference today and had to share.

#ipv6 is weird...
Laptop <---> Router <---> ISP Router
All of the devices got addresses, non of them are reachable
Laptop <---> ISP Router
2 failed pings and everything works since then. Also plugged back my own router, no issues now
What the fuck

LiSec-RTF: Reinforcing RPL Resilience Against Routing Table Falsification Attack in 6LoWPAN
Shefali Goel, Vinod Kumar Verma, Abhishek Verma
https://arxiv.org/abs/2506.17911

LiSec-RTF: Reinforcing RPL Resilience Against Routing Table Falsification Attack in 6LoWPAN
Routing Protocol for Low-Power and Lossy Networks (RPL) is an energy-efficient routing solution for IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN), recommended for resource-constrained devices. While RPL offers significant benefits, its security vulnerabilities pose challenges, particularly due to unauthenticated control messages used to establish and maintain routing information. These messages are susceptible to manipulation, enabling malicious nodes to inject false routing dat…

Sigh, DHCPv6 still unusable for an IPv6-only Debian 13 (trixie) netinstall. Gets a lease but drops it almost immediately and doesn't renew.
So, I have to:
- Get a lease
- Switch to the shell to see what the lease is
- Go back to network config and select static network
- Set that address with a netmask of ffff:ffff:ffff:ffff:: and a blank gateway
- Proceed with install
#Debian

Using SRv6 to access Edge Applications in 5G Networks
Louis Royer (IRIT-RMESS), Emmanuel Lavinal (UT3, IRIT-SIERA), Emmanuel Chaput (IRIT-RMESS, Toulouse INP)
https://arxiv.org/abs/2506.16808

Using SRv6 to access Edge Applications in 5G Networks
With the emergence of Multi-Access Edge Computing in 5G and beyond, it has become essential for operators to optimize the data path for the end-user while ensuring resources are used according to their policy. In this paper, we review existing solutions to access edge resources, underline their limits, and propose the use of Segment Routing over IPv6 (SRv6) in a 5G/edge architecture.