this post was submitted on 18 Jun 2024
360 points (98.9% liked)

Selfhosted

39251 readers
246 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 22 points 3 months ago (37 children)

Very useful, but I don't understand concept 1, "Don't pick numbers".

If I'm right, it's basically saying don't do stuff manually, just let the computer do it. I kind of disagree with this. All of my fixed devices have a fixed IP that I manually assigned and derived from the original v4 schema I also have. For example 192.168.x.y becomes prefix::y

Am I misunderstanding something?

[–] [email protected] 27 points 3 months ago* (last edited 3 months ago) (18 children)

Ipv6 requires fundamental rethinking about how addressing is done. If you're trying to apply v4 concepts to V6 you likely end up running into something they intentionally designed out.

A unique local address is an address space where you could do that. It's the equivalent to RFC1918 eg. 172/192/10. So you could statically assign fd0::x, and that is expected, but not required generally.

I wouldn't give each device a static unique global address unless they need to be accessed via wan without domain consistently. You lose device privacy really quickly that way because every device gets a unique globally routable address. It's fine for internet facing services but most Linux, Windows, and mobile implementations are using ipv6 privacy extensions by default to ensure you get a random GUA every day.

My network is dual stack and I connect mostly over ipv6 to all my internal clients using internal DNS. If my internal DNS is ever down I can fall back to ipv4 or it's basically the one box on my network with an easy to remember ULA.

[–] [email protected] 22 points 3 months ago* (last edited 3 months ago) (17 children)

Each year I seem to think “this will be the year I set up IPv6 in my homelab” - but then I never get around to it.

If I have to run both v4 and v6 concurrently, there isn’t much incentive/motivation for me to use v6 locally.

Maybe I’ll get around to it when there’s a net benefit for me for my use case, or when I’m forced to.

Am I just imagining it to be more complicated than it actually is?

My router runs pfsense and I have 6 VLANs each with its own subnet - Management, Trusted, IoT, Cameras, Guest, and Web Facing Servers.

[–] [email protected] 2 points 3 months ago

If you happen to torrent a fair bit (especially public trackers) then ipv6 can make a huge difference, there's loads of ipv6 only seeders and leechers I'm suddenly reaching.

load more comments (16 replies)
load more comments (16 replies)
load more comments (34 replies)