Comment on VLAN’s and Subnets For Home Networks
SnotFlickerman@lemmy.blahaj.zone 4 days ago
I know that people often find IPv6 confusing and that’s fine, but at the very least you need to explain that you’re specifically talking about IPv4 IP and Subnetting configuration and that is very much how things used to be done. IPv6 is finally gaining real adoption and can make a lot of things confusing.
For example, until I got a handle of IPv6, my Android phone never had proper ad-blocking from my Pi-Holes because Google would make Android auto-configure an IPv6 DNS address that would bypass my IPv4 DNS addresses. Even if I filled every IPv4 DNS slot, it would still make a slot for the IPv6 DNS. There were two ways to fix this, and I’ve done both: Set up IPv6 and fill that slot with my Pi-Hole IPv6 DNS address, and/or setting up a VPN that hands out the Pi-Holes as DNS and bypasses Google’s auto-configurations entirely. I ended up with both because I also use the VPN to keep ad-blocking functional on my phone while I’m away from home.
Especially in keeping with your “Zero trust” idea, you can’t have rogue IPv6 traffic all over your network unless you’ve managed to disabled IPv6 on every network interface.
Where would a guy go to learn more about IPv6? Trapped behind CGNAT, have gotten exactly as far as getting my public IPv6 address. Can’t as much as ping it, “name or service not known”
ip6.wtf/#/learn This is the best resource I’ve found so far and I can see the advantages, but am getting absolutely nowhere
I’ve been trying to get my Unifi infrastructure force IPv6 addresses to all my devices at home (mainly laptops, PCs, phones and tablets, potentially media devices as well), but it has proven a huge challenge for me because of my ignorance on IPv6 and how it differs from v4.
For the time being, I have disabled everything v6 in my network, including my ISP provided ONT, but that leaves me with only the option of a commercial VPN when I’m not at home to try and block as much as possible (together with NextDNS for some added blocks).
I know I’m currently open on that front, and would love it if someone could tell me where I can go to try and understand v6 so that I can then make an informed implementation across the board.
Thank you beforehand.
www.oreilly.com/library/view/…/9780132808200/
The thing to know about IPV6 is that while being able to read the addresses and memorize the different kinds seem daunting, the implementation behind it is actually much simpler than IPv4 today.
The biggest mental hurdle to get over is that the way we use IPv4 today is informed by our need to work around the global lack of IPv4 addresses. With IPv6, it sorta turns back the clock to when every machine could just have a globally reputable IP address. Private reserved ranges for locks lans, NAT, etc aren’t necessary with IPv6
Thanks so much. I’ll start here. I really appreciate this.
HamsterRage@lemmy.ca 4 days ago
Thanks for the feedback. I will make some changes to the article. IPv6 wasn’t even on my radar since I haven’t got around to using it myself yet.