Rob;

On Mon, 2019-07-22 at 09:42 +0200, Rob Janssen via 44Net wrote:

Of course you will not need to have some unusual protocol like IPIP operational over that IPv6 connection, and usually the plain TCP and UDP ports can be opened without problem so it should be possible to run the usual services.

No it is not possible with my ISP. To run any local services is a violation of the ToS agreement. The ports and services they close they will not open. I've tried. They also incorporate a watchdog on all sockets that destroys them after so many minutes of "birth". This kills client services such as VPN, SSH, etc. Web services often aren't affected since most web elements are downloaded within 300 seconds +/-.

A tunnel broker introduces an additional dependency and additional weird routing, so when people complain that using some VPN servers across the world instead of a tunnel mesh is objectionable, they certainly should not use an IPv6 tunnel broker!

IMHO the dependency is a moot issue. If I used your VPN I'd be dependent on you... but you're suggesting that you can still reach me if my ISP's edge router dies and this is not true. Also if I were on your VPN, I would have to travel all the way to the netherlands and back half way across the US to reach say Indiana. So very inefficient. While I understand this would be the same logic that would make you NOT want to use the IPIP at UCSD, the same would be true for me using another VPN elsewhere. I know this to be true because I tried it prior to going on IPIP.

Not only are there the visible hops but the invisible core router hops of dependency that aren't accounted for that could cause failures not to mention the baseline of VPN routing is IPIP. It's quite safe to say what may work for one may not be the best for another which is why we need to keep multiple methods available.