Weekend Reads

* IPv6 adoption measurement https://arxiv.org/abs/2507.11678
* Starlink capacity analysis https://thexlab.org/wp-content/uploads/2025/07/Starlink_Analysis_Working_Paper_v0.2.pdf
* How subsea cables are made https://www.nytimes.com/2025/07/14/business/undersea-power-cables-electricity.html?unlocked_article_code=1.XU8.sGVr.yJ6BP0S1lC5Z
* Monitoring DNS root prefixes https://www.thousandeyes.com/blog/monitoring-root-dns-prefixes
* Internet yellow pages censorship measurement https://petsymposium.org/foci/2025/foci-2025-0007.pdf

#IPv6 #Starlink #SubseaCable #DNS #Censorship

#IPv6 PR incoming to automagically check also IPv6:

https://github.com/testssl/testssl.sh/pull/2852

ntfy.sh now has full #IPv6 support!

#aws #ipv6

Amazon SNS expands IPv6 support to VPC endpoints in AWS commercial Regions
Posted on: Jul 18, 2025

https://aws.amazon.com/about-aws/whats-new/2025/07/amazon-sns-ipv6-vpc-endpoints-commercial-regions/

As much as I wish #IPv6 was an option, even I, a rabid ISP employee who has been successfully deploying IPv6 to carrier grade networks for well over 15 years now has to admit, most big ISPs SUCK at IPv6.

Spectrum is no longer advertising me a default route in IPv6. WTF? It was working in 2016 when I subscribed to TWC.

Then Charter bought them, became Spectrum and IPv6 was ripped out of the entire network.

It has reappeared, been broken, and reappeared several times since.

It was working three weeks ago.

And no, tunnel brokers are not an option. First of all, we can't scale the entire IPv6 Internet through Hurricane's network, and secondly, most tunnel broker blocks are blocked damn near everywhere useful.

#aws #ipv6

Amazon SQS expands IPv6 support to VPC endpoints in AWS commercial Regions
Posted on: Jul 18, 2025

https://aws.amazon.com/about-aws/whats-new/2025/07/amazon-sqs-ipv6-vpc-endpoints-aws-commercial-regions/

Does the services you provide on Internet are #IPv6 enabled ?

so it turns out you can use Apache mod_proxy to proxy to an IPv6 link-local address, but it's a bit roundabout.

in /etc/hosts:

fe80::2%vm.cgit cgit-backend.internal

in Apache:

<Location />
ProxyPass http://cgit-backend.internal:80/
</Location>

i feel like there should be a better method to do this. any suggestions?

trying to ProxyPass to "http://[fe80::2%vm.cgit]:80" doesn't work:

AH01083: error parsing URL http://[fe80::2%vm.cgit]:80: Invalid host/port

#ipv6

paper about #ipv6

( maybe boring )

https://www.arxiv.org/abs/2507.11678

#ipv6 #aws

AWS DataSync now supports IPv6
Posted on: Jul 16, 2025

https://aws.amazon.com/about-aws/whats-new/2025/07/aws-datasync-supports-ipv6/

#ipv6

https://www.iol.unh.edu/news/2025/07/16/nist-usgv6-test-program-achieves-significant-milestone

First draft of a script that seems to do what I want: https://dpaste.org/SCAQ7 (expires in 1 week, since I'll probably be tweaking the code)

I put #IPv6 resolvers before IPv4 because it's right and to hell with what Lenny says.

Grabbing the information per interface means one could potentially write separate files for consumption by resolvconf. I've only tested on a single interface system so far.

Seems like this sort of thing could be plumbed with https://gitlab.com/craftyguy/networkd-dispatcher in configured.d .

If you didn't know: #IPv6 works for testssl.sh since an eternity. For historical reasons it needs to be enabled via "-6" on the command line or "HAS_IPv6=true" in your environment.

The leftover / historical reason is an large error message when users don't have a fully working connectivity . That'll be squashed soon... so that the switch above is not needed anymore

#azure #ipv6

https://techcommunity.microsoft.com/blog/appsonazureblog/announcing-app-service-outbound-ipv6-support-in-public-preview/4423368

I tried to use a SearX instance again but it kept getting throttled so I had to fall back to something else. Why can't we have a nice, non-AI-inundated, #IPv6 enabled search engine?

Planning out VLANs and IP Subnetting etc for some new greenfield data centers, and oh man I wish I'd specialised in Networking. I love this shit.

Yes, #IPv6 is in the plan from the get go. Anyone know if you can use ARIN IPv6 assignments partially out-of-zone? I'm assigning a /48 to each site, but currently all from our ARIN assignment and not all sites will be in ARIN geography.

Hab mal eine Frage an all die #Netzwerk-Enthusiasten unter euch:
Nutzt ihr Zuhause #IPv6-Adressen?

#GerneBoosten

Heise pusht die Verwendung von DHCPv6 IA_NA für Windows.
https://www.heise.de/ratgeber/Stabile-IPv6-Adressen-fuer-Fritzbox-Hosts-10462116.html

Weiß jemand, wie man unter Windows ohne DHCP stabile iid bekommt?

Kann man auch Token setzen?

Oder eben vielleicht doch eui64 erzwingen?

#ipv6

ICH HASSE #IPV6

das ist der grösste krüppel aller zeiten

from now on, if someone asks me to interact with source code on GitHub, i am simply going to say "sorry, i cannot, GitHub does not allow IPv6 access”.

i've run into this too many times to make working around it my problem. now it's someone else's problem.

#ipv6 #github

Did anybody manage to combine #fritzbox with #dnsmasq to send 2 #ipv6 #dns servers to the client? Works fine for #ipv4.

Part of me wants to upgrade the WNDR3800 I'm using for my portable #IPv6 lab to the latest OpenWrt, but part of me is rather skittish about it after the debacle with the Ubiquiti hardware.

Virgin Media users have waited 15 years for IPv6. In that time:

* World IPv6 Day (2011) & World IPv6 Launch (2012) happened
* Apple launched the iPad... first generation. Since then there has been 10 more.
* Windows 7, 8, 10 and 11 came out
* Game of Thrones aired… and ended
* We had three Spider‑Men
* The entire Infinity Saga of the MCU began and concluded
* The UK had five Prime Ministers

Still no native IPv6. 🫠 #IPv6 #VirginMedia

https://www.havevirginmediaenabledipv6yet.co.uk/

#ipv6 #blog

https://blog.rwth-aachen.de/itc/2025/07/14/aci-user-group-treffen-2025/

Letsencrypt staff testing SSL certs for IP address.
I like how they only have a IPv6 address to test.

https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certificates/238777

#letsencrypt #IPv6

@drscriptt again: I'd see this as more error-prone than #DNSSEC and only hindering the transition from #IPv4 to #IPv6 if not bricking proper #DualStack…

@drscriptt Naive question: WHEN does the average #Internet #user ever open up a webpage with an #IP address instead of a #domain or even #FQDN?

• Seriously, the only cases I saw were either some old, non-public - facing server in some B2B/API setting or a test that #httpd / #ngnix / #ssh / … function properly on like a #VPS and that the #DNS hasn't been updated (yet!) to include said host / FQDN in the records, and even then it's bad cuz you'd rather want to use it's FQDN instead because with #IPv4 shortages on one hand and tools like #Portainer on the other, one should not use an #IPaddress as addressing method because #WAF / #Proxies used to "#MUX" / "#NAT" services under one IP address or #IPv6 block may need that distinction by being queried for a specific FQDN...

The Idea if !SSL / #TLD for #IPaddresses makes me feel like Jeff Goldblum!

Same..., different day.

#ipv6

https://www.google.com/intl/en/ipv6/statistics.html

Alt...

Native: 49.56% 6to4/Teredo: 0.00% Total IPv6: 49.56% | Jul 12, 2025

@jima Minnesota and #IPv6 represent: https://openriver.winona.edu/rca/2025/schedule/92/

I wish we could see their code. I see lots of chatter about NAT64 and eBPF but I haven't yet found anything I can actually load.

@leyrer @farbenstau #ipv6 by default, that sounds proper!

@niklas @mattgrayyes worse even if one doesn't setup an account just to watch videos!

Then one cannot disable that shite which solely selects the used language based off vibes, which is really annoying when one has different #GeoIP "localizations" depending on whetger #IPv4, #IPv6 and whether one is on #Mobile or at home or at work!

Really makes me angry af!

https://medium.com/@emmanuelvitus/afrinic-hope-hijack-and-the-harsh-lessons-of-african-multistakeholderism-8e8378797101

#afrinic
#ipv4
#ipv6

https://mybroadband.co.za/news/internet/602273-africas-internet-registry-faces-liquidation.html

Countries, where all mobile networks provide #IPv6 for data use.

de (Telekom, Vodafone, O2, 1&1)
fr (bouygues, free, orange, sfr)
cz (O2, Vodafone, T-Mobile)

partly:
at(a1, magenta) drei?

in (jio) ??

us (T-Mobile, Verizon, AT&T, ?) ?

Is there a overview?

Can you confirm that your mobile ISP in your country supports ipv6?

When your free service (@BoxyBSD) kicks you out of bed on a Saturday morning.

The monitoring just alerted me about a potential abuse at my free hosting project and indeed - much traffic from a single user but luckily legit traffic.

Better safe than sorry.

#hosting #isp #network #freeVPS #vps #vm #boxybsd #runbsd #ipv6 #bgp #peering #opensource #education

Yes, The Book of PF, 4th Edition Is Coming Soon https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html

Long rumored and eagerly anticipated by some, the fourth edition of The Book of PF is now available for preorder https://nostarch.com/book-of-pf-4th-edition #openbsd #pf #packetfilter #freebsd #networking #security #tcpip #ipv6 #ipv4 #bookofpf

Does anyone know how to run an #IPv6 #464XLAT #CLAT client inside a #Proxmox LXC container? clatd ( https://github.com/toreanderson/clatd ) doesn't work because tayga is unable to create a tun interface inside the LXC and I have some software to run that, you guessed it, is still stuck on the obsolete protocol + I don't want to create a full VM just for it.

- cc @apalrd

@lafibreinfo @arcep

Bouygues-Telecom with #iOS

Using defaults during roaming results in ipv4-only.

https://www.thomas--schaefer.de/apn-ipv4-ipv6.html#bouygues
https://www.thomas--schaefer.de/roaming/Bouygues-Telecom.mobileconfig

Using that profile enables #ipv6 .

Hotspot during roaming works now. IPv4(clat) is broken and IPv6-mostly is not provided. But in generell IPv6 with NAT64 works.

Alt...

«'| Telekom Deutsc... 5G 20:26 92 % (wm) 8 v6.de/ C IPv4/IPv6 test page This is a test page to see whether a client can connect over IPv The main page is on a dual-stacked server, you are using IPv6 2a04:cec0:1197:2887:39dd:e37d:1fb:3a36 ((none)) The server address you have reached is: 2001:608:0:1007::34 Here comes an iframe that is loaded from an IPv4-only-server: your IP address is: 80.215.129.139 ((none)) Here comes an iframe that is loaded from an IPv6-only-server: your IP address is: 2a04:cec0:1197:2887:39dd:e37d:1fb:3a36 ((none)) Here comes an iframe that is loaded from an IPv4-literal-only-se your IP address is: 80.215.129.139 ((none)) Here comes an iframe that is loaded from an IPv6-literal-only-se your IP address is: 2a04:cec0:1197:2887:39dd:e37d:1fb:3a36 ((none)) This site runs on systems operated by EDV-Beratung

I think the @BoxyBSD project is one of the best ideas for the #opensource community. Providing real and completely free #VPS instances (#VMs) with #IPv6 is really great for testing and learning.

I really love this project and if you are into #FreeBSD or any other #BSD this might be interesting for you. Just as it is also a #free alternative to bigger hostels like #Hetzner #OVH or #Netcup. I really love the philosophy and idea behind it

#alternatives

If you believe that AI is inevitable but #IPv6 is not, well, you're probably not even reading this since we don't live in the same reality.

#aws #ipv6

AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs
Posted on: Jul 8, 2025

https://aws.amazon.com/about-aws/whats-new/2025/07/aws-site-to-site-vpn-supports-ipv6-addresses-outer-tunnel-ips/

Some back-of-the-napkin math for those worried that we might still exhaust #IPv6 if we're not careful:

We are currently numbering out of 2000:/3, but effectively it's been 2000::/4 so far. The smallest amount of space that can be announced in BGP is a /48.

4 bits off the top and 16 bits off the bottom leaves us with 2^28 individual /48 networks we _could_ issue (obviously we're issuing larger chunks where possible, eg: /32 for many ISPs). This is representable without having to go to engineering notation: 268,435,456.

Last night's bgp.tools dump shows 117,731 active ASNs. We could issue every org with an ASN a starter /48 and still have several orders of magnitude worth of room for growth. And that's even before we get to 3000::/4.

So, don't worry about filling up the pool. Grab what you need (and maybe a bit more) and build the network you've been dreaming of.

#ipv6
#france

https://www.zdnet.fr/actualites/la-france-championne-du-monde-de-la-migration-vers-lipv6-478703.htm

Publication par l'ARCEP du baromètre annuel de la transition vers IPv6 en France - 1ère position mondiale en juin 2025 pour ce qui est du taux d'utilisation d'IPv6 \o/ #Network #IPv6 https://www.arcep.fr/cartes-et-donnees/nos-publications-chiffrees/transition-ipv6/barometre-annuel-de-la-transition-vers-ipv6-en-france.html

@lafibreinfo @arcep

I bought a eSIM from Bouygues Telecom for travelers.

The default setting on Android for roaming (IPv4) was wrong. But after changing it to #IPv6 it works. Firewall settings seem a little bit strange (no ping, other ICMP packets are also blocked).

464xlat (clat) works.

My first SIM with 464xlat during roaming.

#ipv6only

🙂

Feature request #IPv6 (again)

First comment 🤦

https://meta.stackoverflow.com/questions/434456/stack-overflow-still-not-reachable-via-ipv6

#stackoverflow

One slightly weird thing I had is that inbound #ipv6 traffic on both SSH and HTTPS was returning a "connection reset by peer" for a while. It seems to be working now, but if some IPv6 folks can check https://cablespaghetti.dev loads properly over v6 for them now, it would put my mind at rest.

⚠️ Signups are currently deactivated!

We're now slightly below 1000 free VPS instances!

Within the last few weeks, coming with new locations around the world, we got more and more signups, where people can also test their setups across different geo locations @BoxyBSD.

Unfortunately, this also increases the required support which is really time consuming and only handled by @gyptazy. While everything is fully automated, support is another thing and I need a short break. Hope to open the signups quickly again.

PS: This project is completely free, not even any donation possibilities etc - just imagine a box would only cost 1$.

#FreeBSD #OpenBSD #NetBSD #RUNBSD #BSD #Hosting #IPv6 #network #community #education #learning #VPS #FreeVPS #vServer #server #cloud

from my last boost:

"It's great that the EU is considering it's digital sovereignty, but I'd rather we had distributed rather than centralised resources. We need legislation to ensure that IPv4 is phased out and IPv6 support by our hosting and internet providers is mandatory. Because IP address scarcity is one of the things standing in the way for new hosting providers and digital innovation."

https://www.onepict.com/20250628-plussustain.html

#ipv6