Google Hits 50% IPv6

(blog.apnic.net)

91 points | by barqawiz 2 hours ago ago

61 comments

  • mmwelt 17 minutes ago

    Interesting to see the per-country rates[1]. France is up to 85%, apparently!

    [1] https://www.google.com/intl/en/ipv6/statistics.html#tab=per-...

    • Leonard_of_Q 5 minutes ago

      The more mobile traffic, the more IPv6. Have a look at India, it is not as if everyone has a fibre connection running IPv6.

  • MYEUHD an hour ago

    Thread from two months ago (626 comments): https://news.ycombinator.com/item?id=47777894

  • spockz an hour ago

    Meanwhile T-Mobile/Odido in the Netherlands is still not supporting IPv6 despite promising to have been working on it for years.

    Ubiquity gateways also seem to not support it sadly. It would be awesome if they supported something like Hurricane Electric’s tunneling.

    • jon-wood 20 minutes ago

        $ curl -v https://news.ycombinator.com
        * Host news.ycombinator.com:443 was resolved.
        * IPv6: 2606:7100:1:67::26
        * IPv4: 209.216.230.207
        *   Trying [2606:7100:1:67::26]:443...
        * ALPN: curl offers h2,http/1.1
        * TLSv1.3 (OUT), TLS handshake, Client hello (1):
      
      Works fine through a Ubiquiti gateway here.
    • kay_o 18 minutes ago

      It is entertaining that the situation becomes opposite in T-Mobile on States does not support IPv4 and only assigns IPv6 with 464xlat for "Fake-NAT" to IPv4.

    • mtucker502 39 minutes ago

      They support it. I have it enabled with Spectrum. No file modification necessary; all configurable from the UI.

    • newsclues 16 minutes ago
    • kuschku an hour ago

      Huh? Ubiquity has dropped support? I can't believe that, even the older EdgeRouter series supported it.

      • mkj 38 minutes ago

        Old Nanostations as a client seem to need to do proxy arp or something, which doesn't handle ipv6. That said it's probably 15 year old hardware. I ended up using a wireguard tunnel across it instead.

  • ThePhysicist an hour ago

    Noooo, my /22 IPv4 subnet allocation is my personal 401k, I need this money to retire.

    • jampekka 5 minutes ago

      You'll be really screwed in around the year 2100!

    • mimsee an hour ago

      Time to cash in?

      • scandox 12 minutes ago

        About 2023 I think

  • coldstartops an hour ago

    Google hits 50% IPv6, very good for accessing websites.

    But my TP-Link router blocks by default inbound IPv6 connections, without any option to configure it, still bad for pure IPv6 bidirectional streaming, gaming or services on home networks.

    • Leonard_of_Q a minute ago

      Put OpenWRT on the thing and you'll be able to do what you want. Experience the joy of adding not port forwarding rules for IPv4 but more or less identical (same ports) access rules for IPv6.

    • jmyeet 34 minutes ago

      All these systems are a reflection of the time that they were designed. IPv6 is 30 years old. At that time a lot of threats just didn't exist. One of my favorite is the decision to default to /64 blocks. There was a time when the designers believed that you'd use your 48 bit MAC address as part of this. Now we know that's a PII nightmare and nobody does it. Yet we're still stuck with the 128 bit addresses that came from that.

      To your point, IPv6 sought to replace NAT with just having enough addresses but interestingly, that created a problem. If you used NAT and had a service on your computer request a port for incoming connections, that showed intent on behalf of the owner of that service. IPv6 doesn't have that intent, which forces home router makers do block addresses by default because you don't want most PCs on the Internet such that an external agent can scan your PC. You may end up with an unintended service on the open Internet.

      So is the bigger address range better? Technically, maybe? But you have to consider defaults and intents of users. And that can take a good technical solution to a bad solution or at least create a whole bunch of problems.

      • gucci-on-fleek 2 minutes ago

        > There was a time when the designers believed that you'd use your 48 bit MAC address as part of this. Now we know that's a PII nightmare and nobody does it.

        Nobody includes their MAC address in their public IPv6 addresses anymore, but every IPv6 setup that I've seen still gives every device a unique globally-routable IPv6 address, with no NAT at all.

        > One of my favorite is the decision to default to /64 blocks.

        The nice thing is that a /64 is big enough that clients can just randomly pick any address, and it will almost certainly be available, meaning that you don't need DHCP. This is actually widely implemented, and is known as SLAAC [0].

        > Yet we're still stuck with the 128 bit addresses that came from that.

        The extra address space only adds 16 bytes to every packet, and it ensures that we will never run out of addresses like we did with IPv4.

        [0]: https://en.wikipedia.org/wiki/IPv6#Stateless_address_autocon...

      • fc417fc802 2 minutes ago

        > Now we know that's a PII nightmare and nobody does it. Yet we're still stuck with the 128 bit addresses that came from that.

        Randomizing the local address doesn't mean it isn't useful. You can't scan a /64 so that's already a major improvement. The fact that randomly selecting a number is effectively never going to collide greatly simplifies automatic network configuration.

        The major issue is that the /64 isn't mandatory from a technical perspective. Being merely a subset of the larger address it's nothing more than a convention. In the end not all providers make it available to you even though supposedly they ought to.

        If we're going to complain about anything it should be the godawful notation that so easily breaks parsers. Or the fact that the width is massively excessive which creates a usability nightmare due to normal humans not being able to readily recall 128 bit numbers (let alone how long it takes to type them in).

      • BadBadJellyBean 24 minutes ago

        I don't think this is inherently a problem. It's good for home routers to have sensible defaults. Blocking incoming IPv6 connections is such a thing. Opening a port in the firewall shows the same kind of intent as forwarding a port with NAT. The burden is on the router manufacturers to expose these options in a sensible way. My router for example has a similar UI to forwarding a port with IPv4 and opening the port for IPv6.

        Using NAT as a firewall might work but it brings it's own problems. I find the IPv6 way better.

  • BadBadJellyBean an hour ago

    I wonder if there will ever come a day when IPv6 will provide a better web experience than IPv4.

    At the moment pretty much every website is reachable via IPv4 but a lot not via IPv6. Will there be a day when this turns around?

    • mritzmann an hour ago

      > a better web experience than IPv4

      That's already the case. IPv6 is often faster because most ISPs these days use cgnat for IPv4.

      • jck86 4 minutes ago

        In my experience not true in practice cause I have experienced way more issues with the IPv6 endpoints of sites than their IPv4 counterparts.

        This becomes noticeable when pipelines on IPv6 connected servers suddenly have random request/post failures to public services. Then either the whole service is temporarily having issues or there are a few bad IPv6 endpoints while all the IPv4 endpoints are fine.

        Seemingly this failure mode can go unnoticed for days while the same won't be true for IPv4 due IPv4-only still being the norm for corporate networks. And no, current form of happy eyeballs v2 won't account for this.

        Besides bad endpoints it could also be a problem with bgp route advertisements where the IPv6 prefix takes a weird path and ends up being blocked by a CDN at the other side of the ocean. This happens more than you'd think. Obtaining pypi packages was quite a challenge last year for us for a couple of weeks due to this.

        Not really a fault of IPv6 technology wise, and in general can be solved client side through retry functionality, but in practice it still can lead to a worse outcome due to lackluster IPv6 adoption.

        I used to think ISPs, organisations, admins and users were just being lazy for not implementing IPv6 or turning it off as the first thing to do when network problems happen, but when this far in the rollout such basic things still lead to difficult troubleshooting sessions then perhaps time has come to say something has gone terribly wrong.

        It saddens me to say that I totally understand that businesses do not want to pay the price for implementing IPv6 unless absolutely necessary, because until the majority of traffic is IPv6 or even IPv6-only it does not make a lot of sense.

        The flipping point is nearer than ever, though I fear it will in the short term lead to even worse stability for both protocols until IPv6 truly becomes the norm, whenever that may be.

      • mort96 an hour ago

        That fraction of a millisecond doesn't meaningfully translate into a better experience for users.

        • kalleboo an hour ago

          You're assuming the ISP has dimensioned their CGNAT properly and it's not congested.

        • Hendrikto 17 minutes ago

          Milliseconds matters for gaming, for example.

      • BadBadJellyBean an hour ago

        True but not deploying any IPv4 connectivity would be a worse experience than not deploying IPv6.

    • telesilla an hour ago

      Faster webrtc establishments and other negotiated connections. CGNAT means more relayed than P2P connections so it should be possible to have more direct traffic for services that want to save that bandwidth.

    • AndyMcConachie an hour ago

      I would expect online video games to be a more important driver.

  • jdw64 an hour ago

    I made my homepage (www.makonea.com) support IPv6 too, but the number of people actually using it is much smaller than I expected. Is IPv6 really that widely used? I'm supporting both because I heard it's good to support both, but I'm not sure what the actual benefit is. Sometimes, when behind Cloudflare, I think even if someone connects via IPv6, it ends up coming through as IPv4

    • Hendrikto 20 minutes ago

      > Is IPv6 really that widely used?

      Mobile carriers use it almost exclusively, which is already a huge chunk of the internet, and newer ISPs are switching to it too.

      > I'm supporting both because I heard it's good to support both, but I'm not sure what the actual benefit is.

      The benefit is that you allow IPv4-only and IPv6-only clients to connect.

    • jon-wood 14 minutes ago

      When hosting a server IPv6 doesn't make a huge difference beyond your logs will probably be a bit more accurate, people behind CGNAT where an ISP has multiple customers sharing a block of IPv4 will show up with their actual IPv6 address. They'll maybe also find it slightly quicker because they're not being funnelled through NAT gateways but realistically not enough to notice.

      From the user side IPv6 is great for me. My ISP is using CGNAT and would bill me ten pounds a month for a static IPv4 address but I automatically get a vast block of IPv6. I'm using that block to allow me to VPN back home when out and about, and if I wanted to I could also host services from devices on my home network without needing any NAT nonsense, I can just open access to the relevant device on the router. (Because this is a world where not everywhere supports IPv6 yet if I'm on an IPv4 only network the VPN endpoint is a dedicated server I rent which forwards the relevant port back to my home router over IPv6)

    • BadBadJellyBean 41 minutes ago

      It's good to support it to resolve the chicken egg problem. If no service supports it, there is no sense in deploying it to the customers and the other way around.

      Also you made the life better of people who have DS lite. They only get a public IPv6 and all their IPv4 traffic goes through a CGNAT.

      • reddalo 32 minutes ago

        For people like me: DS Lite stands for "IPv6 dual-stack lite". My mind went directly to Nintendo and I was confused.

      • ash 12 minutes ago

        Unfortunately, individual actions are never be enough to solve the IPv6 chicken and egg problem. See djb's "IPv6 mess" article:

        https://cr.yp.to/djbdns/ipv6mess.html

        Yes, it is old, many examples are outdated, but the main points still hold. Decades later his suggestions for making IPv6 succeed are still not implemented.

        • BadBadJellyBean 9 minutes ago

          It's not a lot but it's better to be part of the solution than the problem even if it is an insignificant contribution.

      • fc417fc802 20 minutes ago

        For client server web browsing what's the downside of CGNAT? I'd understand if we were talking about self hosting a service from home but for typical consumer usage?

        • gucci-on-fleek 9 minutes ago

          1. Peer-to-peer networking won't usually work correctly. And quite a bit of software uses P2P networking these days---BitTorrent, Zoom/Teams (via WebRTC), Tailscale, PlayStation/Xbox multiplayer, etc. Most of these services have automatic fallbacks when P2P networking doesn't work, but these fallbacks are usually slower and less reliable.

          2. Most websites assume that 1 IPv4 address==1 household, so you'll often run into rate limits. Or even worse, you might be blocked entirely if your CGNAT neighbours are spammers or otherwise breaking website rules.

  • Cider9986 an hour ago

    How does IPV6 affect ip blocking. As a VPN user I wish it wasn't used as a metric for sites shaking you down.

    • BadBadJellyBean 23 minutes ago

      I assume for aggressive blocking the only prefix size will change. What is a /32 for IPv4 might become a /64 or smaller for IPv6.

  • PacificSpecific an hour ago

    First thing I do on a fresh Linux install is set ipv6 to deactivated. Fixes all my initial Linux install problems. I don't question it, it just works every time.

    • BadBadJellyBean an hour ago

      Something is very wrong with your network then. I never needed to disable IPv6. Maybe you should question it.

      • ash 9 minutes ago

        It is harder to maintain two networks instead of one. Potential problems double. Hacks like RFC8305 "Happy Eyeballs" become a must.

      • PacificSpecific an hour ago

        Fair enough. I do question it often.

        It's a standard Asus router but it's given me a lot of ire. I hate to say it but it's never a problem when I install windows on the same machines

        (I'm currently in the process of trying to completely remove windows from my life)

        • CrLf 40 minutes ago

          There are maybe many buggy routers still out there that reset the IPv6 flow label field when they shouldn't, breaking hash-based load-balancers (the symptom is TCP connections spontaneously reset).

          IIRC, a workaround was to prevent Linux from setting this field, or force-reset it on every outbound packet using netfilter.

    • xyst 42 minutes ago

      Skill issue.

      • CrLf 36 minutes ago

        UX issue, and UX issues are often downplayed by engineers, leading to adoption failures.

        Another such example is SELinux, which would have prevented so many vulnerabilities from being exploited, but whose poor UX also caused everyone to disable it at install time.

        SELinux's UX was significantly improved many years later, but already too late to change ingrained opinions. There are a lot of ingrained opinions about IPv6 too.

  • skywhopper an hour ago

    I’ve yet to live anywhere where the available mainstream ISPs were willing or able to provide IPv6 service. I’d be happy to use it, if I were able.

    I also have built cloud infrastructure for multiple SaaS providers with tens of thousands of customers over the past decade. Only one customer I’m aware of has ever even requested IPv6 support. And if customers aren’t asking for it, my employers have never been interested in the full network re-architecture required to truly support it internally.

    There are still several basic services you can’t run IPv6-only in AWS, and a handful of AWS service features that don’t support it at all.

    As a sysadmin for decades now, I’ve always found IPv6 to be overengineered and in many ways completely ridiculous. But I’d love to be supporting it in everything I do. Only I still can’t, even after 20+ years of being lectured about it; even after complete IPv4 exhaustion has been reached. I don’t think we’re ever going to turn IPv4 off. At best it will be progressively hidden, even from technical users. And folks like me will just have to keep building workarounds to patch the holes where IPv6 still doesn’t work.

  • b112 an hour ago

    And 32% is all llm/bots using AWS and other "pay for ipv4 IP" use cases.

    • benjojo12 an hour ago

      As someone on the fighting end of scrapers, this is absolutely not true. If anything I should bais towards v6 as the traffic is on par better than v4

      • b112 4 minutes ago

        Google is having a real issue with LLMs using it for search. As in, real load issues. Unless you're running a publicly accessible search engine, and the top one at that, the LLM traffic you're seeing is not representative.

      • Sesse__ an hour ago

        Just remove the A record, and nearly all the scrapers disappear. :-) (And then you get one email per month or so that “your host does not resolve in DNS”.)

    • jcgl an hour ago

      Citation needed. These numbers are quite consistent with the growth pattern that started well before usable LLMs were even a thing.

  • xyst 40 minutes ago

    Took them long enough. Now if only Google would follow with their own services.

    Sure Gmail has ipv6 enabled and routable ip6 MX. but sending to those addresses is often rejected and forced to retry over ipv4.

    Don’t get me started on gh

  • shevy-java 6 minutes ago

    I want Google gone. This company is causing too many problems.

    I am still sometimes using Google Search. First results are now almost always videos on youtube, aka self-promo. These videos are in 99.9% of the search results I use, totally useless and worthless. Even searching on youtube has recently gotten worse. It is also crap now. I know that because I bookmark various videos, and I can not find older videos anymore either. I can eliminate some results I don't care via ublock origin hero-blocking this Google garbage, but I really think we should no longer allow this de-facto monopoly to worsen the global situation any longer. The USA is protecting these gangsters - it is time to have true legislation that gets rid of that mafia bloc that is Google.

  • rvba an hour ago

    Great example of how fixing things "the correct way" does not seem to work sometimes.

    They added those new addresses that can store more information.. but this requires a rewrite of old software to make it work.

    If they used the old >bolting on top< method by extending ip4 from 4 octets to 8 (or more) octets, then old software could be extended much easier too / probably addresses could be simply mechanically translated too, so ancient software can work.

    • BadBadJellyBean 33 minutes ago

      There is no space to put the additional octets. Supporting this would have needed a rewrite anyways. Nothing won there. They took that as a chance to improve the protocol overall.

    • johannes1234321 38 minutes ago

      Software availability isn't really the problem. For most software there was no change at all ("connect to that host" or "listen to any device" and operating system will handle details), most software which needed adaption had it for a while (picking up a devices explicitly, handling of IPv6 addressees, ...) while maybe not equally good (missing GUI improvements for better handling of IPV6 addresses)

      The problems, as I observe, are more in network infrastructure, routing, etc.

    • noduerme an hour ago

      I never heard this idea before, but more octets would be a lot prettier!!

      • BadBadJellyBean 11 minutes ago

        They added 12 more octets. I mean we could have written IPv6 addresses in the old format but I don't think that

        42.0.20.80.64.1.192.15.0.0.0.0.0.0.0.113

        is easier to remember than

        2a00:1450:4001:c0f::71 (or 2a00:1450:4001:0c0f:0000:0000:0000:0071)

      • Hendrikto 9 minutes ago

        You have not heard if before, because that is the most naive and stupid take imaginable. It is the “let them eat cake” of networking.

        It does not work like that. Put extra octets where exactly? Where would a hardware router put the extra bytes? Where would software with 32 bit buffers?

        You would still need to replace all of the software and hardware and have the exact same problem.