On Sat, Nov 15, 2025 at 08:40:56PM +0000, H. Hartzer wrote:
> On Sat Nov 15, 2025 at 7:52 PM UTC, Crystal Kolipe wrote:
> > To make that setup work, you could use proxy NDP on the host.
> 
> Interesting!
> 
> So to do that, would run something like this?
> 
> ndp -s 2001:db8::1 (mac address of physical nic) proxy

Yes, that's correct.

> It seems like I would have to do this for every address in the range, if
> I understand it correctly. Of course if it supports a whole range, it
> would seem more practical.

The ndp command line tool in base only supports single addresses.

> > By the way, /112 is a fairly small allocation for IPv6.
> 
> Indeed, it is. Maybe /72 would be more sensibile for what I'm doing,
> though I'm not really sure how many would exhaust even a /112.

With IPv6, the focus is not really on whether every address the delegation
will be exhausted but more whether it gives enough flexibility for the
expected use-cases.

In reality, a lot of places treat a /64 similarly to a single IPv4 address in
terms of blocking, filtering, etc.  So the more you divide it, the more you
are potentially dividing the reputation of the smaller IP block with other
users.

> I'm not sure this design is the best.

It almost certainly isn't :-).

Reply via email to