8 ms·
not disagreeing with your point here, or in the follow-ups of the pain of https for "local network" apps... but I really wish that we could get to a place where
by addisonj 10mo ago
not disagreeing with your point here, or in the follow-ups of the pain of https for "local network" apps... but I really wish that we could get to a place where we could get away from this distinction. Obviously, ipv6 is not that easy or realistic, but that really is, imho, the "right" long term answer.
Having gone down the path of being able to just spin up "local" services that get a publicly routable (but most often firewalled off) ipv6 IPs and then good DNS integration is really neat... but still requires lots of technical chops. I wish that weren't the case
- mort96 10mo agoI work with embedded Linux stuff and MCU stuff where we make a significant number of units. Even in an IPv6 world, there's no way each of those would get their own public static IPv6 address with an associated DNS record just for the purpose of being able to spin up a debug web interface. It's explicitly desirable for these devices to not be reachable through the public Internet.
- stavros 10mo agoWell then you set your firewall to default-deny. It doesn't make sense to hobble the internet just because NATs are inadvertently a convenient firewall.
- mort96 10mo agoAnd how do I assign the devices globally unique IP addresses? SLAAC is only for local addresses, right?
- stavros 10mo agoWouldn't IPv6 work for that?
- mort96 10mo agoI don't know what you mean. I asked what process you would use to assign IPv6 addresses.
- stavros 10mo agoMaybe I'm not understanding the use case. Why can't you use DHCPv6 or SLAAC wherever the device is deployed?
- mort96 10mo agoDHCP doesn't give you a globally unique IP address... If you're suggesting getting using a non-unique DHCP-assigned local IP address, I don't understand what difference you think v6 does compared to v4.
- stavros 10mo agoDHCP does give you a globally unique IP address when your ISP has allocated a prefix to your router, that's how all the Internet-connected IPv6 devices get their addresses. Where is our misunderstanding?
- mort96 10mo ago... For many of these systems, I don't control the user's router. I don't know how you imagine I'm supposed to create DNS records for each device when they're assigned some random IP address at some random network I don't control.
- stavros 10mo agoHave the device ping a central server and create randomword.centralserver.com, for example. However, if the problem is the DNS record, why has this thread been exclusively about globally routable IP addresses until now?