←back to thread

597 points classichasclass | 1 comments | | HN request time: 0.346s | source
Show context
ta8645 ◴[] No.45010694[source]
If ipv6 ever becomes a thing, it'll make blocking all that much harder.
replies(3): >>45010765 #>>45010843 #>>45011858 #
rnhmjoj ◴[] No.45010843[source]
No, it's really the same thing with just different (and more structured) prefix lengths. In IPv4 you usually block a single /32 address first, then a /24 block, etc. In IPv6 you start with a single /128 address, a single LAN is /64, an entire site is usually /56 (residential) or /48 (company), etc.
replies(2): >>45011168 #>>45015011 #
Arnavion ◴[] No.45015011[source]
Note that for the sake of blocking internet clients, there's no point blocking a /128. Just start at /64. Blocking a /128 is basically useless because of SLAAC.
replies(1): >>45025378 #
1. Avamander ◴[] No.45025378[source]
Some cloud providers only give out /128 so it's fair to start blocking just a /128 at first.