Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 01:16:41PM +0100, Jeroen Massar wrote: > > It's not something that would work for an enterprise network, but as soon > > as the "we need persistant addresses!" phase of denial is over, it's a great > > solution for SoHo networks. And yes, been there, tested OpenWRT

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Holger Zuleger
On 16.12.2015 10:33, Johannes Weber wrote: > 1) Many DNS changes for services behind the dyn prefix (not all devices > are able to update DNS records) For those of you having its own authoritative DNS server (which is recommended anyway if you want to use DNSSEC), the following tool can help to

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Jeroen Massar
On 2015-12-16 10:40, Jens Link wrote: > Johannes Weber writes: [..] > 5) Use a SIXXS / HE Tunnel Tunnel brokers (RFC3053) are transition technologies, they won't be here forever. You likely wanted to point out commercial VPN solutions that can provide these services just

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 01:01:19PM +0100, Jeroen Massar wrote: > Routing scaling research will be fun, but in the end, that is the only > real way to handle that situation. Dual-PA multihoming works, and has a number of extra benefits that you cannot get with PI - like, applications can

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Jens Link
Johannes Weber writes: > 1) Many DNS changes for services behind the dyn prefix (not all devices > are able to update DNS records) > 2) Security policies with DynDNS ranges (how to allow a dyn IPv6-range > in other firewall policies?) > 3) Routing inside IPv6 VPN tunnels

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Bjørn Mork
Johannes Weber writes: > what are your experiences with dynamic IPv6 prefixes? Here in Germany, > several ISPs only offer dynamic /56 prefixes that change after a router > reboot. Of course, for "normal" end-users this is not a problem. But for > companies having several

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread sthaug
> > 1) Many DNS changes for services behind the dyn prefix (not all devices > > are able to update DNS records) > > 2) Security policies with DynDNS ranges (how to allow a dyn IPv6-range > > in other firewall policies?) > > 3) Routing inside IPv6 VPN tunnels (solved with OSPFv3, but maybe not > >

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 10:33:29AM +0100, Johannes Weber wrote: > what are your experiences with dynamic IPv6 prefixes? Here in Germany, > several ISPs only offer dynamic /56 prefixes that change after a router > reboot. Of course, for "normal" end-users this is not a problem. But for >