Hacker News Reader

Comment by hot_gril | Hacker News Reader

I'm a home ipv4 admin. What I or someone similar would need is the last part that shows how you set up a basic network with some local addresses I care about and a few I want to expose publicly. It's nice that the guide includes the concepts, but the first thing anyone will want to do is just make it work.

Step 2 says to set up ULAs. Are these static or dynamic? It says "don't pick numbers." If dynamic, how does step 5 work? If static, what about visitors in my house?

Step 3 mentions a LAN DNS. Where do I set that up? I don't recall my router having that option somewhere, and I'd rather not rely on a machine for it.

View on HN

Step 2 answer: To set up ULA, just assign ULA you want to your LAN interface. Default radvd.conf will now advertise that ULA prefix to the lan, and your hosts will auto configure. Are they static? Yes, in the sense that they don't change. Are they dynamic? Yes in the sense that you didn't have to configure the host manually, it just did slaac.

Once a host picks a ULA (prefix + id), you can get that from the host. It's the same as getting a mac address of a machine, but instead you get the ULA, and add it to your firewall rules.

Step 3 answer: I run unbounded on the router.

Thanks, I get it now. Guess LAN DNS can be optional since the ULAs can be memorized.

ULAs are generally static, almost all IPv6 unicast addresses are static though sometimes you may have "temporary" addresses via privacy extensions on hosts, those should only be for egress traffic out to the internet, intra-lan traffic should use ULAs.

Your ISP can change your prefix delegation, in practice this shouldn't happen often, but if your in a situation where you need to deal with it frequently on the same network (running a service with a short lived delegation) DDNS still works for IPv6.

These steps depend on whether you're using networkd, netplan, NetworkManager, ConnMan, etc.

Huh, whether these addresses are static or dynamic shouldn't depend on that. I just have a typical router at home with a web portal, is that insufficient?

Reply on news.ycombinator.com