Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[flac.rules]

If i try to connect to a server via IPv6 I get the message "please enter a valid access key or URL", is IPV6 not supported at all? Or does it have to be formatted in a a particular way?

[Hendrik]

IPv6 is not supported at this time, sorry.

[flac.rules]

IPv6 is not supported at this time, sorry.

Ok, thanks for the feedback, I hope you will consider support. IPV6 is more secure, and IPV4 is starting to be a real hassle with ISPs with CG-NAT and the likes.

[JimH]

... IPV6 is more secure ...

I had to look this up.  I don't think it's so.  Here's a reddit discussion:  https://www.reddit.com/r/sysadmin/comments/xrk4a6/ipv6_vs_ipv4_security/?rdt=52894

[flac.rules]

I had to look this up.  I don't think it's so.  Here's a reddit discussion:  https://www.reddit.com/r/sysadmin/comments/xrk4a6/ipv6_vs_ipv4_security/?rdt=52894

I am not an networking expert but i would say it is more secure, especially in the context of external access for two main reasons.

- Ipv6 uses temporary adresses as a default for external communications, the permanent address you use for access is largely unknown to eventual bad actors.
- The address space makes port scanning totally unfeasible. You can based on location and ISP guess the first parts, but scanning the possible adresses for a given port would tak 100s of years just to hit a port at a single customer.

So an open ipv6 port is functionally extremely difficult to even know about.

[Hendrik]

- Ipv6 uses temporary adresses as a default for external communications, the permanent address you use for access is largely unknown to eventual bad actors.

This is true for you accessing a (foreign) service - however, not applicable if you are hosting something yourself, as you need a defined endpoint to host on, which the temporary address is not used for.

We're definitely thinking about future IPv6 support though, but it likely won't be very soon.

[flac.rules]

This is true for you accessing a (foreign) service - however, not applicable if you are hosting something yourself, as you need a defined endpoint to host on, which the temporary address is not used for.

We're definitely thinking about future IPv6 support though, but it likely won't be very soon.

Yeah for hosting you use the permanent address, but "everyone else" only knows your temp address, and them not knowing the permanent address gives some security.

[zybex]

This can be done if your router supports NAT64 to translate an external IPv6 connection to an internal IPv4 port.
This is common on enterprise routers/firewalls, not sure about SOHO routers.

[flac.rules]

This can be done if your router supports NAT64 to translate an external IPv6 connection to an internal IPv4 port.
This is common on enterprise routers/firewalls, not sure about SOHO routers.

How would this be done in practice? The MC client doesn't support connecting to the IPV6 address

[zybex]

Right. It should work for MCWS and Panel, but not with the existing MC client/apps.