22 Jul
2019
22 Jul
'19
7:17 a.m.
Rob;
On Mon, 2019-07-22 at 09:42 +0200, Rob Janssen via 44Net wrote:
Of course you will not need to have some unusual
protocol like IPIP operational over
that IPv6 connection, and usually the plain TCP and UDP ports can be opened without
problem so it should be possible to run the usual services.
No it is not possible with my ISP. To run any local services is a
violation of the ToS agreement. The ports and services they close they
will not open. I've tried. They also incorporate a watchdog on all
sockets that destroys them after so many minutes of "birth". This kills
client services such as VPN, SSH, etc. Web services often aren't
affected since most web elements are downloaded within 300 seconds +/-.
A tunnel broker introduces an additional dependency
and additional weird routing, so
when people complain that using some VPN servers across the world instead of a tunnel
mesh is objectionable, they certainly should not use an IPv6 tunnel broker!
IMHO the dependency is a moot issue. If I used your VPN I'd be dependent
on you... but you're suggesting that you can still reach me if my ISP's
edge router dies and this is not true. Also if I were on your VPN, I
would have to travel all the way to the netherlands and back half way
across the US to reach say Indiana. So very inefficient. While I
understand this would be the same logic that would make you NOT want to
use the IPIP at UCSD, the same would be true for me using another VPN
elsewhere. I know this to be true because I tried it prior to going on
IPIP.
Not only are there the visible hops but the invisible core router hops
of dependency that aren't accounted for that could cause failures not to
mention the baseline of VPN routing is IPIP. It's quite safe to say what
may work for one may not be the best for another which is why we need to
keep multiple methods available.
--
If a rabbit is raised indoors, would it be an ingrown hare?
-----
73 de Brian N1URO - President of EastNet
IPv6 Certified
n1uro-dawt-ampr-dawt-org
uronode-dawt-n1uro-dawt-com