SKY IPv6

So my line has IPV6 installed.

Looking at the address issued, and assuming that my numbers are correct....

Sky can allocate over 150Million unique ipv6 delegated addresses, which means it can connect to over 150Million different broadband routers. Now the UK has around 54M homes, so this means SKY could possibly hand out a router to all UK homes and all UK businesses and still not run out of router IP addresses.

Then each house can have over 350 Million Trillion different IPv6 devices connected to the internet. I can not get my head around that figure and hay I may be wrong by a few million trillion, but who is counting.

I am not going to be worried about not being able to get onto the internet for all my devices anytime soon. I could not afford to buy them all...


now back to counting grains of sand, 1..2..3..4..5..

That is kinda the point of IPv6, its completely insane number of addresses. So in theory you no longer need to do Network Address Translation at the router, just firewall what you want allow. So UPNP and NAT etc all disappear and life is a lot easier for the network admins. Every device (every sensor in the IoT) can have a globally routable IP.

Now who thinks that's a good idea in 2016 ? Need some strong firewalls.

In reply to a post by jchamier:

Every device (every sensor in the IoT) can have a globally routable IP.

Now who thinks that's a good idea in 2016 ? Need some strong firewalls.

The SR102 has a decent IPV6 IPSec firewall which is by default enabled, all unsolicited inbound packets are dropped and any desired inbound services have to be configured manually. I suspect this will be the norm.

In reply to a post by jchamier:

Now who thinks that's a good idea in 2016 ? Need some strong firewalls.

The firewalls on IPv6 work the same way as now. If there's no connection state outbound then unless told otherwise drop.

Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not). So lots more rules

is there going to be some form of ISP firewall put in place?

In reply to a post by iand:

is there going to be some form of ISP firewall put in place?

No, the router has an inbound policy with a default of block all.

In reply to a post by jchamier:

Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not).

Just to be picky, NAT instead of having a direct public IP is a form of security in a configuration, so "even if its not" is not true..

Security by obscurity isn't really security. Should NAT and firewall as well on IPv4.

In reply to a post by jchamier:

Yes, but every network admin has got used to NAT giving a default feeling of security (even if its not). So lots more rules

Allowing in-bound connections to devices is the new port mapping.