• Melody Fwygon@lemmy.one
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    3 months ago

    This is why I use PFSense and Hurricane Electric as a v6 tunnelbroker. I have working functional IPv6 with SLAAC and DHCPv6 and full Routing Advertisements on my LAN running side-by-side so that no matter which the device implements how poorly; it gets an IPv6 address and it works and is protected by the firewall.

    • henfredemars@infosec.pub
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      3 months ago

      That sounds awesome.

      I really like stateless, but it bugs me that the router has to snoop on traffic if you want a list of devices. The good ones will actually do this, but most are blind to how your network is being used with IPv6.

      And it really bothers me that Android just refuses to support DHCPv6 in any capacity. Seems like a weird hill to die on. There are too many legitimate use cases.

      • Melody Fwygon@lemmy.one
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        I run both because of this; and because SLAAC enables features in Desktop OSes that offer some level of additional privacy.

        For example; Windows can do “Temporary IPv6 Addressing” that it will hand out to various applications and browsers. That IPv6 address rotates on a periodic basis; once every 24 hours by default; and can be configured to behave differently depending on your needs via registry keys.

        This could for example, allow you to quickly spin up a small application server for something; like a gaming session; and let you use/bind that IPv6 address for it. Once the application stops using it and the time period has elapsed; Windows drops the IP address and statelessly configures itself a new one.