Comcast Begins Native IPv6 Deployment To End Users

First time accepted submitter Daaelarius writes "Comcast has begun deployment of Native IPv6 access to end users. The deployment is starting out small with a single market, but is expected to expand rapidly. They have provided ... more in depth technical details." Finally; native dual-stack IPv6 for home customers. Perhaps we can avoid a post-exhaustion future of NAT-upon-NAT and use restrictions.

Re:Yeah right

[vlm]

not being directly connectable (ie., behind NAT)

WRONG.

on ipv4 NAT is generally implemented as a stateful firewall that also rewrites addresses.

There is absolutely nothing preventing a firewall on ipv6 that is stateful, that leaves addresses alone.

The security gain comes from the stateful firewall, not the rewriting addresses.

Re:Yeah right

[Bill, Shooter of Bul]

If my toaster is smart enough to realize that the toast is burning, and communicate that fact to another device, it should be capable of not burning the toast in the first place.

Re:Yeah right

[tchuladdiass]

And what makes you think that the IPv6 off-the-shelf routers won't default to a stateful firewall? In fact, I can't see any vendor not enabling that by default, and advertizing it in big bold letters (not the techno-jargon, but "Buy this box and keep the hackers out"). And the ISPs are likely to include such functionality in their cable/DSL modem, since they could benefit from fewer zombies on the network.

Re:Yeah right

[GPLHost-Thomas]

That's reverse thinking. If you need a firewall, setup a firewall, don't setup NAT instead.