nanog mailing list archives

Re: Where to buy Internet IP addresses


From: Charles Wyble <charles () thewybles com>
Date: Tue, 05 May 2009 13:35:21 -0700



Ricky Beam wrote:
On Tue, 05 May 2009 13:28:25 -0400, Charles Wyble <charles () thewybles com> wrote:
Utility companies utilize Zigbee pretty extensively. So that's millions and millions of addresses right there.

But does the entire planet need to talk to those critters? No. Nor should they even be able to.


Really.... we don't have enough debates going on in this thread?

Those little gadgets can very happily live within a link-local only network, or isolated private network.

Exactly. Behind the utilities (closely monitored and highly restrictive) firewall. Most likely behind multiple firewalls. (border fw, internal operations fw, monitoring network firewall). No reason they shouldn't have a fully routeable address.



I know the subject of "nat" in IPv6 will have people chasing me with pitchforks, but there are a lot of things in the world that don't need to be accessable by the entire world and should be (must be) protected from even accidentally being exposed to the Evil Internet(tm). Everyone will chime in with "firewall them", but the risk exists as long as they have global addresses. Having to break into a machine in order to get at the internal network (ala today's NAT) makes the network much safer -- not "safe", but safer than directly naked on the internet.

This is no different then having machines with a public IP on the net today. A firewall is such a small part of an overall security architecture.

Don't troll.



Current thread: