100

Stack Overflow has no AAAA record and is not reachable via IPv6, are there any reasons not supporting IPv6? This question has been discussed on Stack Exchange a few times (7 years ago!) but now in 2017 IPv6 is still not working:

Are there any plans for IPv6 support?

4
  • 3
    Why should they support IPv6? What is it that it will give as user experience that IPv4 doesn't? SO is plenty fast and usable already as-is. IPv6 is a relief and convenience for the data carriers, not the end points. Such questions/demands i see posted by "IPv6 activists" trying to "shame" companies into supporting something that has no user benefit ...
    – Nas Banov
    Commented Apr 22, 2017 at 18:08
  • 10
    it's not about trying to "shame" stackoverflow for that fact. the reason i'm asking is that i tried to reach stackoverflow from an ipv6 only vserver, and there we are...
    – cyptus
    Commented Apr 24, 2017 at 7:25
  • there is something wrong with your IPv6 config then. IPv6 was designed to handle that... where is your NAT64/DNS64 proxy?
    – Nas Banov
    Commented Apr 27, 2017 at 17:45
  • Related: meta.stackexchange.com/q/331191/168273 Commented Jul 25, 2019 at 18:27

2 Answers 2

112

Honest answer? We haven't gotten to it yet. It's a non-trivial time sink and we just haven't had that chunk of time to spend on it yet. It's not a high priority, or we'd allocate the (large) amount of time this requires.

Off the top of my head, here's what needs doing:

  • IP allocations (we have the blocks from ARIN already)
  • Work on all 8 ISP connections to our data centers (BGP, etc.)
  • Research everyone who'd hit us for IPv6 (for firewall rules)
  • All firewall rules need to be duplicated in IPv6 form
  • Logging everywhere we record an IP would have to change
  • Rewriting any and all code with IPv4 format assumptions (logging)
  • Rewrite of X-Forwarded-For handling
  • Expanding database fields (and adding them) for IPv6 length (let's not even talk about IPv6to4)
  • Rewriting all of the mod dashboards/tooling that query based on IP
  • Rate limiting backend code (and time buckets)
  • CDN/Proxy setup (Fastly)
  • Load balancer bindings (front and backends)
  • Load balancer ACLs

(Edit) Adding additional things as our internal chat comes up with them to make this as helpful as possible to others:

  • GeoIP databases (we have a custom implementation for speed) would need to be written and tested. Memory usage and accuracy is also a concern there.
  • Proxy IPv6to6, 4to6 (and back again?) handling for X-FF would be new.

...and it's really not worth using internally. Not at our size. So we're likely talking about a 6to4 transition at the door (HAProxy). Or we go IPv6 internally and make our lives much easier and harder at the same time (it definitely goes both ways). That has a whole other set of issues again with firewalls, routing, etc.

It's just a lot of work for honestly not a lot of gain just yet. Things like HTTPS and HTTP/2 are far more impactful for users. We'll get to IPv6 eventually, but it's unlikely to happen any time soon. There are simply far more impactful things we can do with our time on the sysadmin front for the foreseeable future.

(Edit) Let me clarify something important: This is something everyone on our SRE team would like to do. We just don't have the time yet, even more important things are in queue.

38
  • 138
    So, 6 to 8 weeks, then?
    – TripeHound
    Commented Apr 21, 2017 at 11:40
  • 4
    @Machavity - not anymore Commented Apr 21, 2017 at 12:33
  • 5
    @Machavity "automatically" is not an accurate statement. Much of the above still applies, and doing that creates many other issues - such as IP banning the wrong people.
    – Nick Craver Mod
    Commented Apr 21, 2017 at 13:39
  • 10
    iOS Apps are required to work on iPv6 only networks, how is the SO iOS app running? The servers it talks to are iPv6? Or I guess it just uses the IPV6 version of the IPv4 address? (sorry, not a network guru)
    – user128511
    Commented Apr 21, 2017 at 17:08
  • 11
    Interesting read, until I hit the word "impactful" and my leg automatically kicked out. I've got two broken toes and a busted cpu case now. I'll send the bill.
    – user1228
    Commented Apr 21, 2017 at 17:27
  • 8
    Do you need some more excuses? ipv6excuses.com Commented Apr 21, 2017 at 21:13
  • 3
    @Carpetsmoker The ISP is supposed to give each customer a quadrillion IP addresses, and you can easily use that to know if two addresses are supposed to belong to the same customer. Don't trust anybody who says IPv6 makes that harder to achieve, because CGN has already made it impossible to do with IPv4.
    – kasperd
    Commented Apr 22, 2017 at 12:17
  • 5
    @NickCraver IP banning doesn't work anyway and should not be used. Commented Apr 22, 2017 at 17:55
  • 6
    @SargeBorsch keep telling yourself that, I'll be over here in reality where it can be immensely useful :)
    – Nick Craver Mod
    Commented Apr 22, 2017 at 18:09
  • 5
    @SargeBorsch "doesn't work well in some specific cases" != "doesn't work". For example, we can readily ban requests from botnets with only a few thousand IPs attacking us from compromised systems. Show me alternatives that don't exhaust bandwidths at our endpoints, I'll wait here :)
    – Nick Craver Mod
    Commented Apr 22, 2017 at 18:18
  • 3
    @gman - that's a concern of the IPv6-only ISPs that they have tackled already because 99% of the internet traffic is over IPv4 - so the ISPs who want to do pure IPv6 (no dual stack) have to bridge it. Apple's demand was that iOS apps do not trip by implying they'll always see IPv4 on their socket ends
    – Nas Banov
    Commented Apr 22, 2017 at 18:29
  • 2
    [feature-request]: make honest answers the default :P Commented Apr 23, 2017 at 16:52
  • 4
    @AndrasDeak My answers fall into 4 categories, I can't speak for the rest of the team. Personally, my 4 are: smartass, intolerable smartass, honest, and brutally honest.
    – Nick Craver Mod
    Commented Apr 23, 2017 at 20:54
  • 2
    @JonathonReinhart not really. We made conscious decisions along the way. It's not worth the cost and never has been for the life of this company. When that changes, we'll do it. Much more important things have been in queue before IPv6. I'm working on a blog post about HTTPS right now that'll shed a little light into how extensive that list of other things is.
    – Nick Craver Mod
    Commented Apr 23, 2017 at 20:58
  • 2
    @NasBanov No, IPv6 is not unnecessary. Most end users don't even get in contact with which IP they use, so there's no complication for them. On the contrary: with IPv6 they don't need to care about port forwarding. End-to-end communcation, especially with UDP, which is used for VoIP, becomes possible. And yes, we do have run out of addresses. Just think of all the mobile devices. Having to rely on cloud services for every single application because of missing E2E-connectivity, THAT is the real PITA!
    – TJJ
    Commented Oct 2, 2017 at 14:09
1

It seems hard to find real data on what % of the Internet traffic is IPv6 vs IPv4.

The data that is readily available and shoved in your face is by promoters of IPv6 conversion (like WorldIPv6Launch.org, Google and Akamai) - who however don't tell you such number but instead should for another statistic - the % of Internet users could use IPv6 now, if say IPv4 suddenly dropped dead somehow - and per Google it's somewhere around 15% now (that includes both dual stack and single stack). The bias in presenting the info is understandable in the case of WorldIPv6Launch, which is a "stooge" :) to promoting IPv6. Akamai does it, since their concerns are carrier-grade ones, just like the ISPs.

Now, another question - how much of the Internet actually runs on IPv4 v. IPv6 - that one was hard to find, at least for me. So far i only ran into this paper https://thesai.org/Downloads/Volume7No12/Paper_33-Analysis_of_IPv4_vs_IPv6_Traffic_in_US.pdf . I hope the data they use is correct, supposedly couple of data sets from CAIDA for Chicago and San Jose data centers of Equinix. Quick glance at the charts shows that IPv6 traffic is <1%, the other 99% being IPv4.

Does somebody have better data at hand? I am am unsure about the paper and journal reliability.

21
  • 4
    google.com/intl/en/ipv6/statistics.html
    – DavidG
    Commented Apr 22, 2017 at 23:58
  • 4
    If you don't trust the data of google, akamai, apnic and ripe then you have a problem except you have an own source. I can't force you to trust someone. Additionally the statistics have some minor differences. In Germany a very popular it-news-portal and forum has recently published his access by IPv6: m.heise.de/newsticker/meldung/… Commented Apr 23, 2017 at 17:12
  • @DavidG - that is the wrong kind of statistics, did you read what i said above? It shows % reaching google over IPv6, where IPv6 is preferred. That was not the question!
    – Nas Banov
    Commented Apr 27, 2017 at 17:48
  • @ThomasSchäfer - i trust google and akamai but their statistics shows something else. Please pay close attention what they show and what i ask? Remember the "3 types of lies: lies, damn lies and statistics"? The data they show is absolutely, 100% correct. It is a convenient statistics though - seeing 16% there does not mean 16% of the internet is running on IPv6...
    – Nas Banov
    Commented Apr 27, 2017 at 17:52
  • 1
    @NasBanov How do you define internet? Packets? Users? (Web)-Servers? If 100%of the users use IPv6, automatically also every packet is IPv6. I showed you a statistic from heise - they count user accesses. I also provide you a number from my campus(Munich), without URL, because the statistics are not public: The IPv6-part on the whole traffic in/out from/to the campus is ca. 19% (Trafficbytes not Users, the campus hasn't finished the IPv6-rollout) The de-cix unfortunately doesn't publish separate IPv6-statistics since 2013. Commented Apr 28, 2017 at 20:17
  • 1
    You doubt to much. You could setup you own mail, web ...- server with the ultimate killer app - then you can count v4 and v6-bytes - I hope you trust yourself. If IPv4 would suddenly dropped - stackoverflow would be offline. Other services (like Facebook or google) would only have 80% less users. My systems would work further without big problems. Commented Apr 28, 2017 at 20:18
  • @ThomasSchäfer - i admit i did not understand what the Heise page talks about, since can't read German (google translate only part helpful). What i gather is that SixXS was a "IPv6 tunnel broker" (rfc3053) service who was making it easy to run IPv6 over existing IPv4 networks - and that they have decided to discontinue that in an activist effort to push ISPs implementing native IPv6 - because that is easy for ISPs now. This will sound like conspiracy theory - but why doesn't de-cix publish IPv6 stats since 2013? ;-) How odd, no?
    – Nas Banov
    Commented Apr 29, 2017 at 21:42
  • @ThomasSchäfer - i asked for existing statistics. % of datagrams or traffic MB through backbone would do. But no single web properties, pls! Current Google numbers are 14% during the week, 17% on weekend. Google and Facebook are biased because set as "IPv6-preferentials", meaning they always try IPv6 first and fallback to IPv4 on failure.
    – Nas Banov
    Commented Apr 29, 2017 at 21:53
  • 1
    @ThomasSchäfer, saying "IPv4 would suddenly dropped... My systems would work further without big problems" is like saying "what if the EU electrical power grid suddenly fails - i will do w/o big problems because my house has solar panels". Well, no! Maybe you'll have power for your TV/computers/phone but that will do you no good since the providers will be down. In the same way the IPv4 backbone cannot vanish and leave IPv6 working
    – Nas Banov
    Commented Apr 29, 2017 at 21:59
  • Your assumption was to drop IPv4 suddenly not to break down the wires. e.g. bgp-failures could drop down IPv4 while IPv6 would be still running. In that case 30% of the users in US and Germany would have still Internet with a limited offer of services, Netflix and YouTube would work, the German public TV wouldn't. Commented Apr 30, 2017 at 22:37
  • m.heise.de/newsticker/meldung/… that's​ a diagram, IPv6 part of the whole traffic to heise, time Commented Apr 30, 2017 at 22:44
  • 1
    Why are google and Facebook"biased"? It is normal behavior, that dualstack-clients prefer IPv6 to dualstack-server. Some CGNAT-gateways in Germany would crash more often otherwise. Commented Apr 30, 2017 at 22:54
  • You want statistics closer to the backbone: v6asns.ripe.net/v/6?s=_ALL;s=FI;s=NO;s=CH;s=DE;s=JP;s=FR Commented May 1, 2017 at 6:59
  • 1
    @NasBanov There is not "IPv6-preference" by Google, Facebook, etc. The preference is made by your computer. If a site is accessible by IPv6, it will use IPv6, the site itself doesn't have much to do with it (well, they could tweak it so that IPv6 is slower to respond, but that would be biased again then, wouldn't it?). And why is the amount of megabytes so important for you? What's wrong with a chart showing number of connections instead of number of packets?
    – TJJ
    Commented Aug 23, 2017 at 10:55
  • 2
    @NasBanov I'm not sure if it is you that has no idea? you even mention "Happy Eyeballs", otherwise known as fast fallback, where indeed connections on both IPv4 and IPv6 are tries. And again, the preference is not made by the site, but by your computer. Yes, there are techniques to make IPv6 replies be faster (or better: less slow) than IPv4. But if Facebook prefers IPv6 and is more responsive over this connection, why is it biased? They want you to connect using IPv6, but provide IPv4 fallback for those who cannot.
    – TJJ
    Commented Aug 24, 2017 at 12:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .