Re: [Xen-users] IPV4 is nearly depleted, are you ready for IPV6?

[Jonathan Tripathy <jonnyt@xxxxxxxxxxx>]

On 05/12/10 11:50, Rudi Ahlers wrote:
> Seeing as IPV4 is near it's end of life
> (http://www.internetnews.com/infra/article.php/3915471/IPv4+Nearing+Final+Days.htm),
> I'm curios as who know whether everyone is ready for the changeover to
> IPV6?
>
> Is anyone using it in production already, and what are your experiences with it?
A problem with using IPv6 at the minute is that netfilter doesn't have 
as-advanced filtering capabilities as it does with IPv4. This is 
important when your DomUs are for customers on an unmanaged basis.
The main issue is that IPv6 doesn't use ARP anymore, so all MAC address 
detection is done in the IP layer and AFAIK, netfilter doesn't have the 
proper filtering for IPv6 to prevent MAC spoofing. What we really need 
is an IPv6 equivalent to arptables.
Cheers

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users