this post was submitted on 06 Sep 2023
30 points (96.9% liked)

Selfhosted

40183 readers
769 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
30
IPv6 for home lab (lemmy.world)
submitted 1 year ago by Anonymouse@lemmy.world to c/selfhosted@lemmy.world
27 comments fedilink hide all child comments
 

Is anybody using only IPv6 in their home lab? I keep running into weird problems where some services use only IPv6 and are "invisible" to everyone (I'm looking at you, Java!) I end up disabling IPv6 to force everything to the same protocol, but I started wondering, "why not disable IPv4 instead?" I'd have half as many firewall rules, routes and configurations. What are the risks?

you are viewing a single comment's thread
view the rest of the comments
[–] drkt@feddit.dk 2 points 1 year ago (1 children)

Why?

[–] phillaholic@lemm.ee -5 points 1 year ago (2 children)

It fucking sucks. I’ve been hearing about it for twenty plus years and it’s caused me more problems than it’s solved. Comcast DNS routinely breaks connecting to niche sites like Microsoft 365 😑. Its overly complicated and easier to screw up. If turning off IPv6 would stop solving more problems maybe I’d give it a better go, but as it stands it’s like the USB-c standard of a clusterfuck of poor design and implementation in practice.

[–] drkt@feddit.dk 6 points 1 year ago (3 children)

I'm sorry you've had a poor experience, but I've had nothing but smooth sailing since my ISP gave me a /64. I had to re-learn most of what I knew and unlearn a few bad v4 habits, but v6 has solved issues that I was tired of dealing with. I can't imagine what you're doing to think it's more complicated and easier to screw up than v4.

[–] Auli@lemmy.ca 2 points 1 year ago (1 children)

And that is the biggest problem it is different then ipv4 and you have to learn new stuff. My worst was up keeps changing the prefix so I had to find out how to write an allow rule that ignored the prefix and only allowed the end but since they always stayed the same.

[–] drkt@feddit.dk 1 points 1 year ago

What do you mean up keeps changing the prefix?

[–] phillaholic@lemm.ee 2 points 1 year ago

If DNS wouldn’t constantly break I’d be more open to learning. Right now what’s the point?

[–] lilShalom@lemmy.basedcount.com 0 points 1 year ago (2 children)

Lets say you have a bunch of self hosted servers. How are you tracking their ips on ipv6? Are you able to type the ip off the top of your head? I feel like its very simple with ipv4.

[–] Auli@lemmy.ca 2 points 1 year ago* (last edited 1 year ago)

Use the names. I connect to my self hosted services all the time over ipv6 using DNS. Still use ipv4 to ssh though as my prefix changes alot,sometimes multiple times a day.

[–] drkt@feddit.dk 1 points 1 year ago

How are you tracking their ips on ipv6?

Are you able to type the ip off the top of your head?

I write them down, just as I do v4. I don't type v4 off the top of my head any more than I do v6- but even if I did, I'd only have to really memorize the prefix because that's all universal across my whole network. For example, look at this that I ripped from my documentation:

                                == PROXMOX CONTAINERS & VIRTUAL MACHINES ======================
                                C:TorRelay      -       192.168.78.160  /  2a05:f6c7:8039::12ad
                                C:Gonic         -       192.168.78.161  /  2a05:f6c7:8039::1255
                                C:Wireguard     -       192.168.78.162  /  2a05:f6c7:8039::1666
                                V:ADS-B         -       192.168.78.163  /  NA
                                C:Apache        -       192.168.78.164  /  2a05:f6c7:8039::1337
                                C:Backups       -       192.168.78.165  /  2a05:f6c7:8039::0107
                                C:PiHole        -       192.168.78.166  /  2a05:f6c7:8039::1811
                                C:NetworkFun    -       192.168.78.167  /  2a05:f6c7:8039::1192
                                C:MovieSync     -       192.168.78.168  /  2a05:f6c7:8039::2356
                                C:Owncast       -       192.168.78.170  /  2a05:f6c7:8039::1368

Do you see the pattern? I could have made it even simpler. I could've made the last quartet of the v6 address the same as the last octet of the v4 address, but I didn't think of it at the time. I've memorized more credit cards than I have IP addresses in total, which you will surely agree are more complex, so I'm not worried about when the time comes to drop v4 and its time to memorize v6. It will come naturally with use, as the credit cards have

In practice, I've found, that it is simply not a problem. If I don't know the last quartet off the top of my head, I won't know the last octet either so I have to look it up anyway. All my network documentation is available with a simple curl command. If I do know the last quartet but not the prefix, I could type 'ip a' and find the prefix right there.

[–] andrew@lemmy.stuart.fun 1 points 1 year ago (1 children)

Having used Azure for a few years now I feel like that might not be entirely on Comcast.

[–] phillaholic@lemm.ee 1 points 1 year ago

Maybe, but I have yet to see another home ISP with the same problem.