Governments should require IPv6 support for any online service or connected device they buy. If that’s not a requirement for (sub)contractors, then they won’t put effort into it.
This kind of requirements might also exclude a lot of crappy devices/services that have an outdated tech stack.
A common requirement in government contracts is “there must be no IPv6 support, and if there is it must be verifiably disabled to decrease the size of the vulnerability surface.”
Many years ago, that misconfigured firewall that let IPv6 traffic through without even bothering to log it, resulting in a years-long compromise scared a lot of govvies, but unfortunately it taught them the wrong lesson.
The wrong lesson learned was, “don’t use IPv6.” Which has, to a large extent, hurt the uptake of IPv6 everywhere, because “if the government doesn’t use it, we’re not going to use it.” Rather than do something sensible, like enable the IPv6 functionality of the firewalls and configure them properly.
I’d have guessed mostly countries which were late to the v4 distribution to be in there - but apart from India and Malaysia everyone should have enough v4.
I guess the long delays combined with changes in v4 usage by cloud hosters gobbling up any v4 addresses while also not properly doing v6 yet changed the situation also in countries which should have had more or less sufficient v4 reserves.
It’s still shocking how long it is taking. I stopped doing IPv6 workshops back in 2006 as I got tired of waiting - and had a few years of no v6 usage myself after sixxs shut down. I only could get proper v6 at home last year.
surprising there’s no china, with billions of connected devices. Maybe you don’t need many public ipv4 when you run a country-wide LAN with limited internet access
There may have been some restriction or legislative reason regarding ipv6 until recently - China has gone from <5% to nearly 30% IPv6 capable since 2019: https://stats.labs.apnic.net/ipv6/CN
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Governments should require IPv6 support for any online service or connected device they buy. If that’s not a requirement for (sub)contractors, then they won’t put effort into it.
This kind of requirements might also exclude a lot of crappy devices/services that have an outdated tech stack.
A common requirement in government contracts is “there must be no IPv6 support, and if there is it must be verifiably disabled to decrease the size of the vulnerability surface.”
Many years ago, that misconfigured firewall that let IPv6 traffic through without even bothering to log it, resulting in a years-long compromise scared a lot of govvies, but unfortunately it taught them the wrong lesson.
Source: I’m a former Beltway Bandit.
The wrong lesson?
I’m not sure how reducing your attack surface area is the wrong lesson here.
deleted by creator
The wrong lesson learned was, “don’t use IPv6.” Which has, to a large extent, hurt the uptake of IPv6 everywhere, because “if the government doesn’t use it, we’re not going to use it.” Rather than do something sensible, like enable the IPv6 functionality of the firewalls and configure them properly.
Just random answers, since you’re question kinda implies it won’t be full with obvious looking countries
I’d have guessed mostly countries which were late to the v4 distribution to be in there - but apart from India and Malaysia everyone should have enough v4.
I guess the long delays combined with changes in v4 usage by cloud hosters gobbling up any v4 addresses while also not properly doing v6 yet changed the situation also in countries which should have had more or less sufficient v4 reserves.
It’s still shocking how long it is taking. I stopped doing IPv6 workshops back in 2006 as I got tired of waiting - and had a few years of no v6 usage myself after sixxs shut down. I only could get proper v6 at home last year.
surprising there’s no china, with billions of connected devices. Maybe you don’t need many public ipv4 when you run a country-wide LAN with limited internet access
There may have been some restriction or legislative reason regarding ipv6 until recently - China has gone from <5% to nearly 30% IPv6 capable since 2019: https://stats.labs.apnic.net/ipv6/CN
That is, by definition, a WAN.
Maybe a CAN?
Country Area Network :p
This abbreviation is already used. Controller Area Network
I’ve heard a couple of folks trying to get traction on NAN (National Area Network) or NWN (Nation Wide Network), but so far no luck.
Now I wonder if the network of Vatican City is considered a WAN. Because there are likely companies with LANs larger than that.
This document suggests that some of our home labs might be bigger than Vatican City’s telecom network. (note: attempt at humor)
I’ve found a couple of articles ostensibly about Vatican City’s telecom network, but they appear to be information-free AI clickbait articles.