nanog mailing list archives
Re: Rate of growth on IPv6 not fast enough?
From: Clue Store <cluestore () gmail com>
Date: Fri, 23 Apr 2010 08:54:58 -0500
I'm just saying it's one valid security issue with using any sort of globally unique IP address (v4 or v6), in that analyzing a bunch of traffic from a particular netblock would allow one to build a topology map. It's easier with IPv6 since you can presume most if not all addresses are on /64s out of a /48 (so look to the fourth quad for the "subnet ID").I understand and totally agree.
Obviously if someone is super concerned with revealing this sort of info there are other things besides NAT they can do, such as using a proxy server(s) for various internet applications, transparent proxies, etc. But it is a valid security concern for some.Could not agree more which is why I stated that there are other ways of accomplishing the "hiding internal topology" using other methodoligies. NAT/PAT has caused me many headaches which is why I am so opposed to using it.
Also, is that your real name? ;-)
No, but this list is great for buying and selling clue. In today's market, clue is equivalent to gold. :)
Current thread:
- Re: Rate of growth on IPv6 not fast enough?, (continued)
- Re: Rate of growth on IPv6 not fast enough? Owen DeLong (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Owen DeLong (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Matthew Kaufman (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Joel Jaeggli (Apr 24)
- Re: Rate of growth on IPv6 not fast enough? Mark Smith (Apr 24)
- Re: Rate of growth on IPv6 not fast enough? Stefan Bethke (Apr 24)
- Re: Rate of growth on IPv6 not fast enough? Owen DeLong (Apr 25)
- Re: Rate of growth on IPv6 not fast enough? Jim Burwell (Apr 22)
- Re: Rate of growth on IPv6 not fast enough? Clue Store (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Jim Burwell (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Clue Store (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Marshall Eubanks (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Joe Greco (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? bmanning (Apr 22)
- RE: Rate of growth on IPv6 not fast enough? John Lightfoot (Apr 22)
- RE: Rate of growth on IPv6 not fast enough? Matthew Huff (Apr 22)
- Re: Rate of growth on IPv6 not fast enough? Charles Mills (Apr 22)
- Re: Rate of growth on IPv6 not fast enough? Larry Sheldon (Apr 22)
- Re: Rate of growth on IPv6 not fast enough? Mark Smith (Apr 23)
- Re: Rate of growth on IPv6 not fast enough? Larry Sheldon (Apr 22)
- Re: Rate of growth on IPv6 not fast enough? Marshall Eubanks (Apr 22)