[oS-en] I have IPv6! Now what?

newer
Info question: do we use now qt6...

Carlos E. R.

17 Apr 2023 17 Apr '23

21:52

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I asked to participate in a beta testing of deployment of IPv6 by my ISP, Telefónica. After many weeks, they mailed me to say they would activate it today. And yes, my machines are getting, besides the IPv4 local address, two _dynamic_ IPv6 addresses. Why two, what's the difference? Telcontar:~ # ip addr 2: eth0: mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 00:d8:... altname enp34s0 inet 192.168.1.14/16 brd 192.168.255.255 scope global eth0 valid_lft forever preferred_lft forever inet6 2a02:9140:1180:0:634a:...:...:.../64 scope global temporary dynamic valid_lft 86397sec preferred_lft 80397sec inet6 2a02:9140:1180:0:2d8:..:...:.../64 scope global dynamic mngtmpaddr valid_lft 86397sec preferred_lft 86397sec inet6 fe80::2d8:...:...:.../64 scope link valid_lft forever preferred_lft forever Telcontar:~ # The site https://test-ipv6.com/ confirms. It says, though, that: Your browser has real working IPv6 address - but is avoiding using it. We're concerned about this. [more info] → https://test-ipv6.com/index.html.en_US#found I don't understand this. Meaning, what can I do to make firefox use IPv6 and why exactly it doesn't? If I point firefox to my IPv6 address, it instead asks google to search for that text. I asked google: https://support.mozilla.org/en-US/questions/1111992 How to type ipv6-address and port number in URL bar? which does not apply, it is about link-local addresses, and mine are not. Finally I found that the syntax is: http://[2a02:9140:...]:port/path/ and it does work :-) The route has not changed: Isengard:~ # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default router.valinor 0.0.0.0 UG 0 0 0 eth0 192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 Isengard:~ # Should it have also an IPv6 entry? I must try another machine that uses only DHCP. I have no idea which is the IPv6 address of the router or how to find it. Maybe "fe80::8626:2bff:fe6e:c571", but a ping6 to it fails. Ok, finally found one, 2a02:...:75b5... but that IP can change every day, I can not put that in my hosts file. Ok, I can find my own router address doing a traceroute6 to google or any outside address. The first line. Huh, will that be the external or the internal address of it? - -- Cheers Carlos E. R. (from 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZD2/kBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVU2AAnjsFlw7Dns9pQFiTp8Ic Xk7n3G7QAJ45lLwxcaYTXvMy6UeEMjkjuFpu7w== =3/ZO -----END PGP SIGNATURE-----

Show replies by date

James Knott

17 Apr 17 Apr

22:20

On 2023-04-17 17:52, Carlos E. R. wrote:

...

Why two, what's the difference?

The question should be why ONLY two. I get 2^72 addresses from mine. Yep, a gazillion addresses! Even my cell phone gets 2^64 addresses. As for two, check again tomorrow and the next day, etc. If they're using SLAAC, you get in addition to a consistent address, up to 7 privacy addresses, with a new one every day. The global dynamic address is your consistent address and may be based on your MAC address. The other one is a privacy address. Are you connecting directly to your ISP? Or through a router that supports IPv6? If a router, you may have more than 1 /64 available. I have 256. You can split off the /64s to different networks. For example, I have 1 for my guest WiFi, in addition to my main LAN. BTW, I run pfSense for my firewall/router and it supports multiple /64s. If my modem was in gateway mode, I'd only get a single /64.

Carlos E. R.

22:41

On 2023-04-18 00:20, James Knott wrote:

...

On 2023-04-17 17:52, Carlos E. R. wrote:

...
Why two, what's the difference?

The question should be why ONLY two. I get 2^72 addresses from mine. Yep, a gazillion addresses! Even my cell phone gets 2^64 addresses.

Of course I have a /64. But each machine gets two on the DHCP.

...

As for two, check again tomorrow and the next day, etc. If they're using SLAAC, you get in addition to a consistent address, up to 7 privacy addresses, with a new one every day. The global dynamic address is your consistent address and may be based on your MAC address. The other one is a privacy address. Are you connecting directly to your ISP? Or through a router that supports IPv6?

A router, of course.

...

If a router, you may have more than 1 /64 available. I have 256. You can split off the /64s to different networks. For example, I have 1 for my guest WiFi, in addition to my main LAN.

BTW, I run pfSense for my firewall/router and it supports multiple /64s. If my modem was in gateway mode, I'd only get a single /64.

We can not change the router. Basically, not supported, despite what the law says. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)

Carlos E. R.

22:43

On 2023-04-17 23:52, Carlos E. R. wrote:

...

Hi,

I asked to participate in a beta testing of deployment of IPv6 by my ISP, Telefónica. After many weeks, they mailed me to say they would activate it today.

...

Finally I found that the syntax is:

http://[2a02:9140:...]:port/path/

and it does work :-)

But on Firefox on my phone, the same syntax does not work and does a google search instead. I can not find my own server on IPv6 from outside. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)

James Knott

18 Apr 18 Apr

01:03

On 2023-04-17 18:43, Carlos E. R. wrote:

...

But on Firefox on my phone, the same syntax does not work and does a google search instead. I can not find my own server on IPv6 from outside.

If you have an Android phone, it won't work with DHCPv6.