If you're concerned about security, yeah I would disable IPv6. Until all firewal...

josho · on Nov 5, 2020

To provide a data point to your assertion my brand new tp-link wifi router has a setting for ipv6 firewall, but it does nothing. Yes all my home devices are exposed to the public internet. Yikes!

The tech support team even confirmed that ipv6 firewall support is coming ‘soon’.

Meanwhile my ASUS router’s ipv6 support is broken as well for dns configuration.

So, yeh it is still early days for consumer ipv6 adoption.

redis_mlc · on Nov 5, 2020

Thanks for the consumer datapoints. I don't expect much from consumer networking gear, good to see I won't be disappointed.

I was actually referring to rack gear, but hey.

redis_mlc · on Nov 5, 2020

Can somebody explain what the downvotes are for?

Are you IPv6 fanbois?

Have you audited all the firmware and software on your firewalls and routers?

alphager · on Nov 5, 2020

Have you audited the IPv4-codepaths?

Your comment contained no information above "I don't trust it".

redis_mlc · on Nov 5, 2020

> Have you audited the IPv4-codepaths?

Are you for real?

There's been decades of production experience with IPv4 and does mostly what's expected.

Of course IPv6 shouldn't be trusted.

New software has bugs. That applies doubly for networking code.

Get your fuzzers started ...