User comments on ISPs
  >> Sky Broadband


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | (show all)   Print Thread
Standard User iand
(fountain of knowledge) Sat 11-Jun-16 17:39:15
Print Post

SKY IPv6


[link to this post]
 
So my line has IPV6 installed.

Looking at the address issued, and assuming that my numbers are correct....

Sky can allocate over 150Million unique ipv6 delegated addresses, which means it can connect to over 150Million different broadband routers. Now the UK has around 54M homes, so this means SKY could possibly hand out a router to all UK homes and all UK businesses and still not run out of router IP addresses.

Then each house can have over 350 Million Trillion different IPv6 devices connected to the internet. I can not get my head around that figure and hay I may be wrong by a few million trillion, but who is counting.

I am not going to be worried about not being able to get onto the internet for all my devices anytime soon. I could not afford to buy them all...


now back to counting grains of sand, 1..2..3..4..5..

IanD
Standard User jchamier
(eat-sleep-adslguide) Sun 12-Jun-16 15:23:55
Print Post

Re: SKY IPv6


[re: iand] [link to this post]
 
That is kinda the point of IPv6, its completely insane number of addresses. So in theory you no longer need to do Network Address Translation at the router, just firewall what you want allow. So UPNP and NAT etc all disappear and life is a lot easier for the network admins. Every device (every sensor in the IoT) can have a globally routable IP.

Now who thinks that's a good idea in 2016 ? Need some strong firewalls.

plusnet unlimited fibre 80/20 since 2 Jun 14 / Sync 6th Nov: 58,280/10,784 kbps with G.INP
16 years UK broadband (Since 1999 ntl:cable trial), Asus RT-AC68U & HG612 - BQM - Flash Speedtest - HTML Speedtest
Standard User Oliver341
(eat-sleep-adslguide) Tue 14-Jun-16 13:54:27
Print Post

Re: SKY IPv6


[re: jchamier] [link to this post]
 
In reply to a post by jchamier:
Every device (every sensor in the IoT) can have a globally routable IP.

Now who thinks that's a good idea in 2016 ? Need some strong firewalls.

The SR102 has a decent IPV6 IPSec firewall which is by default enabled, all unsolicited inbound packets are dropped and any desired inbound services have to be configured manually. I suspect this will be the norm.

Oliver.


Register (or login) on our website and you will not see this ad.

Standard User Ignitionnet
(knowledge is power) Tue 14-Jun-16 14:37:37
Print Post

Re: SKY IPv6


[re: jchamier] [link to this post]
 
In reply to a post by jchamier:
Now who thinks that's a good idea in 2016 ? Need some strong firewalls.


The firewalls on IPv6 work the same way as now. If there's no connection state outbound then unless told otherwise drop.

Standard User jchamier
(eat-sleep-adslguide) Tue 14-Jun-16 22:36:36
Print Post

Re: SKY IPv6


[re: Ignitionnet] [link to this post]
 
Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not). So lots more rules smile

plusnet unlimited fibre 80/20 since 2 Jun 14 / Sync 6th Nov: 58,280/10,784 kbps with G.INP
16 years UK broadband (Since 1999 ntl:cable trial), Asus RT-AC68U & HG612 - BQM - Flash Speedtest - HTML Speedtest
Standard User iand
(fountain of knowledge) Fri 17-Jun-16 21:10:52
Print Post

Re: SKY IPv6


[re: jchamier] [link to this post]
 
is there going to be some form of ISP firewall put in place?

IanD
Standard User Oliver341
(eat-sleep-adslguide) Fri 17-Jun-16 22:08:33
Print Post

Re: SKY IPv6


[re: iand] [link to this post]
 
In reply to a post by iand:
is there going to be some form of ISP firewall put in place?

No, the router has an inbound policy with a default of block all.

Oliver.
Standard User Pipexer
(eat-sleep-adslguide) Sat 18-Jun-16 15:09:43
Print Post

Re: SKY IPv6


[re: jchamier] [link to this post]
 
In reply to a post by jchamier:
Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not).

Just to be picky, NAT instead of having a direct public IP is a form of security in a configuration, so "even if its not" is not true..

ZeN Fibre Unlimited 2
Standard User jchamier
(eat-sleep-adslguide) Sat 18-Jun-16 19:58:33
Print Post

Re: SKY IPv6


[re: Pipexer] [link to this post]
 
Security by obscurity isn't really security. Should NAT and firewall as well on IPv4.

plusnet unlimited fibre 80/20 since 2 Jun 14 / Sync 6th Nov: 58,280/10,784 kbps with G.INP
16 years UK broadband (Since 1999 ntl:cable trial), Asus RT-AC68U & HG612 - BQM - Flash Speedtest - HTML Speedtest
Standard User Ignitionnet
(knowledge is power) Sat 18-Jun-16 20:46:50
Print Post

Re: SKY IPv6


[re: jchamier] [link to this post]
 
In reply to a post by jchamier:
Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not). So lots more rules smile


Allowing in-bound connections to devices is the new port mapping.

Pages in this thread: 1 | 2 | (show all)   Print Thread

Jump to