Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Holger Zuleger
On 16.12.2015 10:33, Johannes Weber wrote: > 1) Many DNS changes for services behind the dyn prefix (not all devices > are able to update DNS records) For those of you having its own authoritative DNS server (which is recommended anyway if you want to use DNSSEC), the following tool can help to ma

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 01:16:41PM +0100, Jeroen Massar wrote: > > It's not something that would work for an enterprise network, but as soon > > as the "we need persistant addresses!" phase of denial is over, it's a great > > solution for SoHo networks. And yes, been there, tested OpenWRT HNC

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Jeroen Massar
On 2015-12-16 13:09, Gert Doering wrote: > Hi, > > On Wed, Dec 16, 2015 at 01:01:19PM +0100, Jeroen Massar wrote: >> Routing scaling research will be fun, but in the end, that is the only >> real way to handle that situation. > > Dual-PA multihoming works, and has a number of extra benefits that

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 01:01:19PM +0100, Jeroen Massar wrote: > Routing scaling research will be fun, but in the end, that is the only > real way to handle that situation. Dual-PA multihoming works, and has a number of extra benefits that you cannot get with PI - like, applications can decid

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Jeroen Massar
On 2015-12-16 10:40, Jens Link wrote: > Johannes Weber writes: [..] > 5) Use a SIXXS / HE Tunnel Tunnel brokers (RFC3053) are transition technologies, they won't be here forever. You likely wanted to point out commercial VPN solutions that can provide these services just like the normal ISP who

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Liviu Pislaru
Johannes, I've read your blog post and i fully agree that DNS changes (dynamic DNS) and dynamic IPv6 allocation for LAN (DHCP-PD) is a big issue. Couple of years ago i addressed this issue and came up with a personal solution (you can test it and use it for free if you want). https://www.duiadn

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Gert Doering
Hi, On Wed, Dec 16, 2015 at 10:33:29AM +0100, Johannes Weber wrote: > what are your experiences with dynamic IPv6 prefixes? Here in Germany, > several ISPs only offer dynamic /56 prefixes that change after a router > reboot. Of course, for "normal" end-users this is not a problem. But for > compan

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread sthaug
> > 1) Many DNS changes for services behind the dyn prefix (not all devices > > are able to update DNS records) > > 2) Security policies with DynDNS ranges (how to allow a dyn IPv6-range > > in other firewall policies?) > > 3) Routing inside IPv6 VPN tunnels (solved with OSPFv3, but maybe not > > o

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Bjørn Mork
Johannes Weber writes: > what are your experiences with dynamic IPv6 prefixes? Here in Germany, > several ISPs only offer dynamic /56 prefixes that change after a router > reboot. Of course, for "normal" end-users this is not a problem. But for > companies having several remote offices behind suc

Re: IPv6 Dynamic Prefix Problems

2015-12-16 Thread Jens Link
Johannes Weber writes: > 1) Many DNS changes for services behind the dyn prefix (not all devices > are able to update DNS records) > 2) Security policies with DynDNS ranges (how to allow a dyn IPv6-range > in other firewall policies?) > 3) Routing inside IPv6 VPN tunnels (solved with OSPFv3, but

IPv6 Dynamic Prefix Problems

2015-12-16 Thread Johannes Weber
Hello ipv6-ops, what are your experiences with dynamic IPv6 prefixes? Here in Germany, several ISPs only offer dynamic /56 prefixes that change after a router reboot. Of course, for "normal" end-users this is not a problem. But for companies having several remote offices behind such ISP lines,