Hacker News Reader

> A lot of sites out there are still not supporting IPv6 because ... you'll never guess, but dealing with DDoS on IPv6 where your attackers can rotate through addresses quickly is not easy.

Sure it is. You block the /64.

View on HN

So now everyone should acquire as many IPv6 addresses as possible so they can spread their services over many /64s so if their server gets compromised and put on a blacklist somewhere they can just burn that /64 and move on to another?

No, everyone should secure their servers... IPv4 hoarding isn't happening for the reason you propose so why would it for IPv6?

Nobody blocks entire /24s because of one bad address

The only way to guarantee your server is secure is to never connect it to a network.

Reply on news.ycombinator.com