Conversation

Notices

1. Embed this notice
   Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 21:59:07 JST Diego Elio Pettenò

   > Read this: Docker currently does not expose the IPv6 ports properly, as it does not interface with ip6tables. Read FAQ section and be very careful. We do NOT recommend that you enable this!

   Ah yeah, there's nothing stopping IPv6 adoption at all. Everything and everybody is ready and it's just naysayers all around.

   _sigh_

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 11-Sep-2023 21:59:51 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @flameeyes Or you could take Docker as something broken.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 11-Sep-2023 22:34:23 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @flameeyes That's something else entirely.
     After all a technical debt exists when something broken is relied on.
   • Embed this notice
     Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 22:34:26 JST Diego Elio Pettenò

     in reply to

     • Haelwenn /элвэн/ :triskell:

     @lanodan sure, nobody is relying on it, right?

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 11-Sep-2023 22:56:52 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Rich Felker
     @flameeyes @dalias IPv4 is costing significant money on quite a lot of hosters and ISPs, that's why I'm saying it's broken and not just calling it a bummer (like I would maybe say 5 years ago).
   • Embed this notice
     Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 22:56:53 JST Diego Elio Pettenò

     in reply to

     • Haelwenn /элвэн/ :triskell:
     • Rich Felker

     @dalias @lanodan or, hear me out, nobody really suffers from lacking that, and only the few of us who care about it end up noticing?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Monday, 11-Sep-2023 22:56:54 JST Rich Felker

     in reply to

     • Haelwenn /элвэн/ :triskell:

     @lanodan @flameeyes Also, the bar for fixing this seems so low. It's probably just wiring up a simple script. It speaks volumes that nobody using this product is sufficiently capable and motivated to do that...

   • Embed this notice
     Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 23:13:59 JST Diego Elio Pettenò

     in reply to

     • Haelwenn /элвэн/ :triskell:
     • Rich Felker

     @lanodan @dalias still not costing enough to cover the risks associated though, for enough small-to-medium businesses.

     Which is why I refuse to call v4 "legacy." v4 is the present — we need to care about the future, but that's what "v6 only" still is: the future (for many, even dual-stack is still the future!)

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 11-Sep-2023 23:13:59 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Rich Felker
     @flameeyes @dalias IPv4 is seriously falling out though, not only it means slower traffic on several networks (due to things like CGNAT or worse) but there's also some IPv4-less networks.
     
     It's a mess of a migration (reminds me of python2) but there's 0 excuses for things like Docker, a software written merely 10 years ago to not have IPv6 support, specially as it feels like a feature that would be critical in containers so you can actually give routable IPs to containers (which doesn't means you can't firewall them).
   • Embed this notice
     Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 23:38:47 JST Diego Elio Pettenò

     in reply to

     • Haelwenn /элвэн/ :triskell:
     • Rich Felker

     @lanodan @dalias there's no realistic network that is "IPv4-less" — at least not in terms of egress.

     They may be NAT64 or have a proxy (if it's a backend network with limited egress), but if you don't have v4 egress of some kind you have an unusable network (https://flameeyes.blog/2023/04/30/ipv6-in-real-life/).

     Otherwise — yeah it's silly that they put these warnings for Docker in 2023 (given that, btw, getting this to work "right" even without ip6tables is relatively straightforward¹), but it's important still a thing.

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Monday, 11-Sep-2023 23:38:47 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Rich Felker
     @flameeyes @dalias Well at least Asian branches of Schneider Electric reported that they couldn't access some IPv6-only ressources back in 2020.
     
     Got it from https://www.arcep.fr/uploads/tx_gspublication/guide-entreprises-IPv6_dec2020.pdf sadly in French, page 7. Arcep being the french telecommunications regulatory authority comparable to like the American FCC.
   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Monday, 11-Sep-2023 23:56:40 JST Rich Felker

     in reply to

     • Haelwenn /элвэн/ :triskell:

     @flameeyes @lanodan I think your claims are making a lot of assumptions about what you're doing. A web service offered to arbitrary members of the public needs both v4 and v6, and a client device intended to access arbitrary websites still needs both v4 and v6. But application specific devices don't. There's no reason I should want v4 connectivity for a home automation device. There's no reason medical devices in a hospital need v4 addresses. Etc.

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Diego Elio Pettenò (flameeyes@mastodon.social)'s status on Monday, 11-Sep-2023 23:56:41 JST Diego Elio Pettenò

     in reply to

     • Haelwenn /элвэн/ :triskell:
     • Rich Felker

     @lanodan @dalias (français n'est pas un probleme — though I'm very rusty in writing it)

     That sounds about right, though? You can have _some_ problems not having v6, but you don't have access to the Internet without v4.

     Dual-stack is the minimum bar to be a modern service (glaring at GitHub as always) but it's way too early to disable v4. (Nit: if you're developing software/firmware/products that are supposed to last more than a year you should test them on v6-only networks!)