Hacker News new | past | comments | ask | show | jobs | submit login

I can trivially remember a bunch of ipv4 addressed, and recognize them at a glance (”oh that’s just our office vpn endpoint, that traffic is benign”). No hope of that with ipv6.



If your office has a /48 you could surely memorize the subnet itself and/or give your important endpoint the shortest possible IP address like: 2001:db8:a0b0::1 or even something funny like 2001:db8:a0b0::0ff1:ce


Yeah, just pick <prefix>::200 instead of <WAN IP>+<RFC 1918>.200. Forget "no hope", that actually looks easier than the v4 case to me... especially if you have any RFC1918 clashes going on, which many companies do.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: