MadaMada

@madamada@snac.void.my

SysAdmin with a simple life..interested in FOSS, FreeBSD, Linux, IPv6, cloud stuff and whatever things that come along the way I find interesting..
JabberID: madamada@xpath.my
Matrix: @madamada:matrix.org
Email: mada@void.my
Web: https://buster.xpath.my
Gemini: gemini://warlock.xpath.my
TheFediPeople: https://fediverse.info/explore/people
Yggdrasil: https://yggdrasil-network.github.io/
3 ★ 0 ↺

[?]MadaMada »
@madamada@snac.void.my

@leean00@discuss.systems In IPv6, the main 3 types of addresses are:

- 2001:: = Global Unique Address
- fd00:: = Unique Local Address
- fe80:: = Link Local Address

Knowing those 3 is enough to get you going in most cases..

ARP is for IPv4 what NDP is for IPv6..

There is no broadcast address in IPv6..

IPv6 is a completely different protocol and addressing..looking at it from an IPv4 mindset just complicates things..

    ...

    [?]goetz »
    @goetz@ipv6.social

    @madamada @leean00
    Changing prefix and FW rules is easy to handle with as FW4 allows for negative subnet masks. e.g. ::a1/-64

    If you run services on a dynamic prefix delegation, you need to update your DNS records in a dynamic way, Depending what is at your disposal.
    If you have a dyndns provider which allows only for a prefix update and updates all RRs is the easiest.

    As @madamada said, forget you legacy protocol mind set. And start with a clean sheet.

      ...

      [?]Loafer »
      @leean00@discuss.systems

      @goetz @madamada Wow! What does that mean!?!! Negative masks?!?!

        [?]Loafer »
        @leean00@discuss.systems

        @goetz @madamada Yeah but what about the servers? Don't they need their IPs updated, or is to totally dependent on the DNS name being resolved and you have to use something like a DDNS and the PowerDNS API internally?

          ...
          1 ★ 0 ↺

          [?]MadaMada »
          @madamada@snac.void.my

          @leean00@discuss.systems @goetz@ipv6.social Ideally you'd want a static IPv6 prefix for your network..makes things alot easier,

          However most of us live with dynamic prefixes, and this becomes a problem..luckily one way around this is to use ULA addressing internally, and map those addresses in DNS.

          Then combine that with DynDNS or nsupdate if you are using your own domain name for the WAN side and configure port forwarding or a reverse proxy. You could also probably use NPTv6 to deal with dynamic prefix mapping but that's another beast all together..

            [?]Loafer »
            @leean00@discuss.systems

            @goetz @madamada Oh yeah, and what happens to the concepts of actual DNS Server and DNS Forwarder under IPv6?

              ...
              1 ★ 0 ↺

              [?]MadaMada »
              @madamada@snac.void.my

              @leean00@discuss.systems @goetz@ipv6.social It works similarly to IPv4 just with IPv6 addresses..

                ...

                [?]Loafer »
                @leean00@discuss.systems

                @madamada @goetz I will try it and eventually, hopefully report back to you.

                  ...

                  [?]goetz »
                  @goetz@ipv6.social

                  @leean00
                  Negative network masks with the FW4 in works the way that you allow whatever network prefix you have this rule will allow access to the host with the ::a1 host address.

                  DynDNS or nsupdate depending on your setup works. There are a few DynDNS providers that allow to update only the prefix and all AAAA RRs are updated automatically. Meaning that the router could run a script or ddnsclient and no need on the hosts.

                  My take on ULAs: use only where necessary.

                  @madamada

                    [?]Loafer »
                    @leean00@discuss.systems

                    @madamada Are adhock network connection possible?

                      ...
                      0 ★ 0 ↺

                      [?]MadaMada »
                      @madamada@snac.void.my

                        ...

                        [?]Loafer »
                        @leean00@discuss.systems

                        @madamada When I was younger, I used to take my wiki on the train with me and I'd create a direct IPv4 connection between the laptop and the Raspberry Pi.

                        It required that you set the gateway and the netmask the same as to that of the other machine. No router involved, but a cross over cable.

                        Then I'd use the routing percentage thing to make sure I was equally connected between the ethernet to the pi and the wifi of the train (MTU, I think).

                        And I could access both the raspberry pi and the wifi internet.

                          ...
                          1 ★ 0 ↺

                          [?]MadaMada »
                          @madamada@snac.void.my

                          @leean00@discuss.systems Then it's the same with IPv6, both Pi and Laptop will have a preset ULA address on them..

                            ...

                            [?]Loafer »
                            @leean00@discuss.systems

                            @madamada okay thanks again, I'll have to try that out too

                              ...
                              1 ★ 0 ↺

                              [?]MadaMada »
                              @madamada@snac.void.my

                              In the original post, you mentioned laptop -> pi using IPv4 where pi acts as a gateway.

                              In IPv6, it's the same, for example:
                              pi
                              - fdaa::1/64

                              Laptop
                              - fdaa::2/64

                              On Laptop, after connecting cable, ping fdaa::1, if you get reply, then proceed to route -6n add default fdaa::1 and update /etc/resolv.conf to use fdaa::1 as default nameserver

                                [?]Loafer »
                                @leean00@discuss.systems

                                @madamada One more ... sorry, if I want to redo the HE.net Cert, any idea what domains it will accept?

                                Already tried Gmail and protonmail

                                  ...
                                  0 ★ 0 ↺

                                  [?]MadaMada »
                                  @madamada@snac.void.my

                                  You'd have to engage HE.NET for that..

                                    History

                                    about this site - powered by snac/2.83