Remix.run Logo
▲ shubhamjain 4 hours ago

India: 47M

China: 358M

Both countries have roughly the same population. The IPv4 problem has been swept under the rug with CGNAT and a normal person doesn't even notice it. But it sucks. Forget having a dedicated IP, even on a broadband connection, you don't get a public IP that's truly yours. According to IPInfo[1], there are around 1,000 users sharing my IP. I get flagged for malicious activity, and online gaming is impossible without a Tailscale relay.

Of course, much of this comes down to the bad luck (+ policies) of developing late, when most IPv4 blocks had already been allocated. But it's pretty unfair how US DoD, Apple, Ford, and others [1] are sitting on enormous IPv4 blocks they'll probably never fully use, and may never sell. Meanwhile I am sharing a single public IP with a thousand strangers.

[1]: https://ipinfo.io/223.233.77.184

[2]: https://en.wikipedia.org/wiki/List_of_assigned_/8_IPv4_addre...

▲cowlevel 5 minutes ago | parent | next [-]

China mandates IPv6. So does the US, but the US drags their feet. Meanwhile in Europe it's near universal even though not mandated and no v4 shortage.

▲kube-system 3 hours ago | parent | prev | next [-]

> But it's pretty unfair how US DoD, Apple, Ford, and others [1] are sitting on enormous IPv4 blocks

Maybe Apple and Ford, but it's more than fair that DoD has large blocks since they created ipv4 to connect themselves to other networks. It was only 10 years ago that the US government decided to give up control of IANA.

▲matja 3 hours ago | parent | prev | next [-]

s/IP/IPv4/g

Configuring my OS to prefer IPv6 addresses of DNS responses significantly reduced the number of web captchas I see (on NAT444 with native IPv6).

IPv4 is old and broken, use IPv6.

▲TacticalCoder 3 minutes ago | parent | next [-]

> IPv4 is old and broken

IPv4 is old, very old. But how is it broken? It's literally been working just fine since it came out.

That there are limited addresses is something else: it doesn't mean it's broken.

I don't care that spying/surveillance devices have more trouble spying on me with IPv4 than with IPv6 and I don't care that some apps have a harder time establishing connection.

IPv4 works. SSH over IPv4 works. Browsing the Web over IPv4 works.

▲malfist 3 hours ago | parent | prev | next [-]

I'd love to do that, if my ISP would provide me an IPv6 address. Windstream doesn't provide IPv6s. They did a trial a few years ago rolling it out and then undid it.

It's crazy I can get fiber to my house in the US, but not IPv6.

▲dijit 2 hours ago | parent | next [-]

iirc, hurricane electric was offering IPv6 via tunnelling somehow.

https://tunnelbroker.net

I was doing this back when I had BT in London, my internet speed back then was pretty abysmal and it would randomly drop routes- ironically this tunnel actually improved my internet (because of the routes not being dropped, not the speed).

▲cowlevel 4 minutes ago | parent [-]

They do this for free because they're a tier 1, meaning everyone pays to connect to them and they benefit from having more things hosted on their network. It's free because your ISP pays for it.

And they can always tell your ISP if they don't like paying to connect to the tunnelling server they should just implement v6.

▲jon128 2 hours ago | parent | prev [-]

  Our free tunnel broker service enables you to reach the IPv6 Internet by tunneling over existing IPv4 connections from your IPv6 enabled host or router to one of our IPv6 routers.

  https://tunnelbroker.net/
▲w3ll_w3ll_w3ll 3 hours ago | parent | prev [-]

There is no need for that, every modern OS prefer IPv6 over IPv4

▲matja 2 hours ago | parent [-]

Depends on the application, a web-browser that implements Happy Eyeballs protocol may prefer IPv4 if the IPv6 latency is higher.

▲swores 2 hours ago | parent | prev | next [-]

> "India: 47M

> "China: 358M

> "Both countries have roughly the same population"

To save anyone else curious from looking it up - their populations are about 1.4 billion (1400 million) each.

▲jagaerglad a minute ago | parent [-]

and one of the countries has an over-reported while the other is underreporting

▲rayiner 4 hours ago | parent | prev | next [-]

Wow I didn’t know CGNAT was a thing for home users.

▲cykros 4 hours ago | parent | next [-]

It's something I've only recently been made aware of as well. Shocked we're not seeing more push for ipv6 everywhere given that it sounds common enough. If I don't have an IP address, I'm not getting the Internet I'm paying for; I'm getting access to a network that happens to itself have a connection to the Internet. Not unlike some of the BBS's in the early 90s which had Internet access -- I might be dialed in, but that didn't mean my computer itself was on the Internet.

▲orangeboats 4 hours ago | parent | prev [-]

I can't tell if this is sarcasm, Poe's law and all.

But if you are living in a Western country, then you are probably blessed with CGNAT-free residential internet.

▲timpera 4 hours ago | parent | next [-]

I don't think it's sarcasm, I didn't know this was a thing either! At first, I thought OP was writing about their mobile connection.

Some carriers in my country have recently started to share the same IP between 4 customers, each having a port range (1-16363, ...), but you can always request a full IP for free.

▲orangeboats 4 hours ago | parent [-]

That explains a lot of the sentiments I've seen on HN then...

I, unfortunately, have been on CGNATed residential internet since 2016, though I used to still get a public IP on request (they stopped doing that though.) I live in South East Asia, for context.

Without IPv6 my only choice would have been relying on a centralized service like Zerotier and Tailscale.

▲fishtacos 3 hours ago | parent [-]

My current setup is CGNAT on 5G WAN (T-Mobile US), which obviously doesn't open public ports besides needed NAT.

Worse is I have IPv6 connectivity for devices, yet still no open ports available, so no serving available. And I only receive a /64 so no delegation available through router.

So now it's Hurricane Electric tunnel to their nearest (in my city) hosted node for IPv6 and a prepaid 50 USD/year node (technically x2 since I wanted a backup to play around with) for IPv4 port forwarding.

Both options are acceptable because the needed infra is close by in the largest metroplex in Texas, it just sucks to have to do all this extra work to replicate what I could do with a dial-up ISP.

I'll say this - having LLM assistants handle the nasty routing and firewall rules needed to make this hodge podge work without needing to be a network engineer has been very helpful.

▲sandos 4 hours ago | parent | prev [-]

In Sweden CGNAT was not a thing for a long time, the large incumbents still have their huge blocks of IPs so its "just" go to them if you want a pulic IP. Apparently smaller ISPs do use CGNAT, so its fairly common.

Me as somewhat of a nerd, even doubt if I need a public IP, seeing how cyber security is looking today.

▲icedchai 4 hours ago | parent | prev | next [-]

A lot of the original /8 holders have sold off chunks to AWS and other cloud providers.

▲jon128 2 hours ago | parent | prev | next [-]

End users do notice CGNAT when their internet voice/video calls keep dropping for no apparent reason.

▲wtch98 2 hours ago | parent | prev | next [-]

Most people don't care about a private IP, which is why they cost about $20-$25 each (which would be about $2 a year to finance). I've used Airtel in the past and they certainly offer a dedicated IP. Currently I'm with TATA and Vodafone in India

Indeed a shared IP is arguably a benefit in that it makes fingerprinting harder.

If your ISP had customers who were interested it could spend $150k on a /19 block giving 8000 IPv4 addresses and charge an extra ₹100 a month for them and after two years it would be in profit.

In fact I think Jio and Airtel offer static IPs for residential use for something like ₹300 a month, which given how cheap IPv4 addresses are is a massive money spinner, but I have't spoken to anyone living in India about ISPs for a couple of years.

▲bell-cot 4 hours ago | parent | prev | next [-]

Yep. And, insult to injury, the /4's and /8's of little-unused IPv4 special-use addresses - https://en.wikipedia.org/wiki/Ipv4#Special-use_addresses

▲reincoder 2 hours ago | parent | prev [-]

[dead]