[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [GLOBAL-V6] IPV4 to IPv6 migration
sapumal jayatissa wrote:
Hi,
In migration to IPv6 in large scale organization, can we use private
IPv6 addresses ?
You could, but it is most likely much better to avoid any use of
'private' (I do hope you mean ULA here) addresses.
Or do we need to use Global addresses for all the nodes which may never
access Internet ?
Using Global Addresses is generally the smarter thing to do:
a) one will have plenty of addresses anyway
b) one day, a device will have to talk to the public Internet
Especially because of b) and because of things like Path MTU, you will
require a public address in most places.
Can we use proxy servers with IPv6 ?
If you want, of course. But, it does break the end-end idea and when you
are proxying you can also stick to IPv4 and just upgrade the proxy to do
IPv6.
If we NAT, then we have to NAT in between global routable to global
routable,
only to hide the real IP address, Is this o.k ?
You *NEVER EVER EVER EVER* NAT in IPv6.
Please read RFC4864 ("Local Network Protection for IPv6") for a lot more
information about this and how to solve the problems you might have.
If you even are going to remotely think of using NAT, just stick with
IPv4 as that works fine for you and you don't have to upgrade anything.
If you really want to 'hide' real IP addresses there is one solution
that you should be using: don't connect to the Internet, but allow
people to only to use a proxy to use services on the Internet. You are
then of course not talking about Internet connectivity anymore.
Do note that due the use of RFC3041 ("Privacy Extensions for Stateless
Address Autoconfiguration in IPv6") addresses will change rapidly
anyway, thus it will be quite difficult for hosts outside to determine
how many people/addresses/hosts are inside. Unfortunately for you though
the concept of 'cookies' will break this where webservers will have a
lot of other means of tracking people&hosts.
Greets,
Jeroen
Attachment:
signature.asc
Description: OpenPGP digital signature
