sep

@sep@lemmy.world
0 Post – 168 Comments
Joined 1 years ago

I felt dirty! and broke so much shit when i had to implement NAT on networks in the mid 90's. Nowdays with ipv6 and getting rid of NAT is much more liberating. The difference is staggering!

  • you do not need NAT any longer, firewall is the security, just like on ipv4, just less obscurity.

  • you do not need dns views, to workaround NAT any more

  • you do not need hairpin NAT to workaround NAT any more

  • you do not need to renumber to resize a network. they are always /64, and the answer to how many hosts can it fit is: ALL of them!

  • many ALG's will be unnecessary since there is not NAT.

  • vpn's are easier, since it can be the same address both inside and outside the vpn, the firewall (or host even) enforces the encryption.

  • vpn's are MUCH easier since you will have less rfc1918 collisions due to some other network using the rfc1918 of the vpn's network

  • vpn's are MUCH MUCH easier since you will have less rfc1918 collisions due to you using the rfc1918 of the vpn partner network, to 1:1 nat a previous vpn network you collided with some months ago... ARGH!!!

  • vpn are generally less required, heck i swear 95% of the time the VPN are just to workaround the NAT problem and the data is pointlessly double or triple encrypted.

  • you can make more granular firewall rules (eg the spesific host, or network of the source address, instead of the whole enterprise's public ip) this is real tangible improved security, where any random machine in a network you do not control. do not automatically have openings into your own network.

  • firewall objects can if it is suited easily use and depend on FQDN DNS objects when allowing traffic. reducing the need of coordinating firewall object ip address changes between 15 companies.

  • firewall rules are easier, more readable, and much more predictable how they will work. All the hairpin nat, public to private nat, private to public nat for a thing that need a different public ip, 1:1 nat for a separate zone, NAT to a vpn or 50 (where 10 of them are 1:1 nat due to collisions, making you require 4 dns views of the same ip space!! ) very quickly gets messy and unreadable. this is probably the largest security benefit. just to reduce the complexity.

  • much easier to get people to use dns, since nobody wants to remember ipv6 addresses :D

  • nibbles in the ipv6 address can have meanings you assign to them, making the networks and structure both easy to remember and logically structured.

  • aggregating routes becomes very easy if you design your network that way.

  • firewall policies can become easier if you design your network that way.

  • your routing tables is leaner and easier, and of a better consistency. We have 1 large public ipv6 prefix, but 25ish ipv4 prefixes of all kinds of various sizes.

  • no need to spend $$ to buy even more ipv4 prefixes.

  • no need to have spent hundreds of $$ on a new ipv4 prefix only to be unable to use them for over a year because you need to sanitize the addresses from all the reputation filters. and constantly hound geo ip database providers to update the new country of the prefix. (i am bitter,, can you tell..)

  • did i mention no need to renumber since you need to grow the /24 to /23 due to to many hosts in a network ?

  • did i mention no need to renumber 2 /24's to /25's to make space for that larger /23.

  • you do not even need any ipv4 addresses any more, use a public NAT64 service, for outgoing. and for incoming just use one of the many free public ipv4 to ipv6 proxies for your services online. for a homelab i really like http://v4-frontend.netiter.com/ (go support them) But most large business l networks use cloudflare, or akamai

  • since you do not need your ipv4 address space any more, you can ~~sell them for a profit $$$ ~~ return them to the RIR and give some address space to one of the thousands of companies struggling because they do not have any IPv4 : https://www.ripe.net/manage-ips-and-asns/ipv4/ipv4-waiting-list/

  • much lower latency on ipv6, since you do not go across a cloud based ipv4 to ipv6 proxy in order to reach the service ;)

Now the greatest and best effect of ipv6 is none of the above. It is that with ipv6 we have a slim hope of reclaiming some of what made the Internet GREAT in the first place. When we all stood on equal footing. Anyone could host their own service. Now we are all vassals of the large companies that have made the common person into a CGNAT4444 using consumer mindlessly lapping up what the large company providers sees fit to provide us. with no way to even try to be a real and true part of the Internet. Fight the companies that want to make you a eyeball in their statistic, Set up your own IPv6 service on the Internet today !

35 more...

But there are so very many games that do work. That those that do not, i can easily ignore.

Steam is the only store putting the customer first. The refund policy is top notch. Heck just making proton, giving gamers the choice of os, is the best thing for gamers since computers was invented!

https://youtu.be/gwoAmifo9r0

10 more...

I do not think that ever worked.

3 more...

They saw the the writing on the wall, and turned colours as soon as they saw they were fighiting a loosing battle.

Family sharing is also very great

4 more...

Why you should write rm /path/to/dir -rf ; and not rm -rf /[cat jumps here]

1 more...

If mozilla gets market share, google will defund them. That mozilla have a money will help.

Also mozilla's other projects are also good ;)

1 more...

Depending on the games you play. Steam on linux really works well. I have not had a dualboot windows partition for games in several years.
There are some games with windows only drm/anticheat, that do not work. I just do not buy them. There are enough games that works well on linux that I do not care.

Factorio and Rimworld have kept me entertained several thousand houers each. Hands down the best value for money on steam. Even beat out free to play games ;)

1 more...

Price parity with other store fronts is only for steam keys tho? Right? I think the publisher can charge whatever on the other store front if they use the other storefronts infra.
It is just when you in effect sells steam infra, (steam carry the cost) you have to have the same price on steam.

The probably did at the time. There must be something in the water, or after effects of leaded gasoline, or something.
I am from norway so I only see this slow train wreck from the sidelines, but how the heck else can that wierd clown DT have a cult of personality. It boggles the mind.

7 more...

I disbelive the debian answer here. Sounds like a case of frankendebian https://wiki.debian.org/DontBreakDebian

Been usig Debian for home and work and on hundreds of servers for 2 decades and it have been near flawless. Any issues i have had have always been my own fault.

2 more...

What the social media algorithms did to teenagers are for sure a catastrophe involving blood. Suicide went up 48%. 131% for girls.

Jonathan haidt have a public repository of all research on the subject.

https://www.theatlantic.com/technology/archive/2024/03/teen-childhood-smartphone-use-mental-health-effects/677722/

https://jonathanhaidt.com/reviews/

Many types of workers in scandinavia is not as heavily unionized either. Perhaps the ones that are not, enjoy a form of herd immunity from worker abuse from the ones that are.

1 more...

People have experience.

This! That falsehood is so disgusting. And erodes all goodwill they may have accidentaly aquired

Used to do that for decades. Nowadays with steam i just return the game.

5 more...

It is really fantastic. With steam almost all the games i bother playing just works. Deleted the windows partition years ago.
Just have to check the community forum how well it works before buying. Or just get a refund if it does not work.

That only applies for steam keys afaik. You can not sell your steam keys cheaper anywhere else, since steam is on the hook for the cost and services. That is fairly logical.
A dev can charge whatever if they deal with all that themself on their own webpage forinstance.

edit: had a hrd time finding the video i knew i had seen this on : https://v.redd.it/xnl8xyki4h5d1/DASH_1080.mp4

I think the venn diagram overlap of linux users, and users of adblockers or noscript users that block such tracking is quite large. Must impact the statistic significantly.

How to climb the wall of awful with animations. https://m.youtube.com/watch?v=Uo08uS904Rg

2 more...

Did they choose debian? IIirc they tried rolling their own release based on debian and quickly fell behind.
Faulty project management is spot on tho. No control of what hw they were working with. Should anyways have started with 5 years of requiering new hardware to be linux compatible. To weed out the worst win-only-devices

3 more...

Is it really center-right? I think it is more far right and facist extreme right. Atleast when observed from scandinavia

Hosted my own xmpp server back when you could talk to facebook messenger and google chat users via federation. But when they closed their walled garden there were nobody to talk to so i stopped it.

Now with matrix i have again a homeserver. Bridged to messenger, google what the new thing is called, slack, and a few others.

4 more...

Guess the issue is that us big bads are blocked in china. So while ccp can leverage social media to monitor western countries. Western goverments can not leverage western social media to do the same in china.

Rimworld

Avoiding those are priceless

All chat tools after irc have been trash for large communities. That includes slack. Irc somehow still works with 1500 people in it. I can not explain how. With a logging bot the discussions can be archived for google searchabillity. I guess that could be true for a discord or slack also, But i never seen it implemented. In most slacks i can not search more then 60 days back.

6 more...

I assume the normal fear of unknown things. It is hard to hate ipv6 once you have equivalent competence in ipv4 and ipv6.

How acurate is that? 100% of the 8 linux users i know use adblocker and tools like umatrix. I would assume that is very common among linux desktop users. Would any of us show up in those stats?

Debian. Been running debian stable on 99% of my servers at work. And debian testing on the desktop, and daily driver. What orginally made me switch from redhat 7 was how frequent i ran into rpm hell, and how difficult it was to do an inplace upgrade. When i could just dist-upgrad to debian woody and everything worked, with a few well documented tweaks, I was sold. And have been running Debian on everything since 2002 ish.
It is stable, reliable, and dependable for the most critical applications. Truly the universal operating system for me.

Edit: forgot to mention that on the 3 desktop machines i prefer KDE. It looks and acts most similar to amiga os, that i grew up with.

If you hit the hanging bar. You will hit the roof of the garage? In the back there.

Sleep deprivation is a few notches above insanity. You would gladly kill someone if it ment you could sleep on their corps.

2 more...

What is wrong with your system that requires disabeling updates?
Been running debian stable on a few hundred servers for 25 ish years.
And I always install and enable unattended upgrades. And it have never been a problem. Not even once.

1 more...

Ignoring the huge privacy/liabillity issue... there are other llm's then chatgpt.

Is voting not secret is US? Go thru the motions, but once you are in the booth. Vote on your best interest?

3 more...

Having keys to the left of ctrl is a fucking mess! Ine of my kids have a gaming keyboard with a extra column of keys there and it is a pain to use.

What should happen, is move capslock to the locks row on the tip right side. And give us a new meta key there instead! That would be a win-win

2 more...

It is grief. Perfectly natural in those circumstances. Very similar to people loosing their parents to dementia or ALS.

9 more...

been using vim daily for 22 years. condolences to the family. :wq