Thoughts On IPv6

[Tiger Shark]

I think, for all the benefits it will bring, it is going to bring a few headaches too for security admins.... Why?

I really like the ability to look into data streams and see in nice clear "English" what the hell (L)user X is up to now. The built in encryption is going to make that a lot more diffucult and is going to make IDS' have to work even harder, (come to that any signature based detection system will have to work harder).

I would really consider placing an IP6to4 DMZ at the perimeter of the network where the traffic can be sniffed in clear and then, if necessary, IP4to 6 it back for when it is inside the network. It would complicate the architecture but I believe it would be possible and useful.

Thoughts.

[rijilv]

I don't see a great rush of people to start using IPV6 until they absolutely need to do so. So either government mandates, default installations of IP6, or ran out of addresses. I prefer the later.

[pwaring]

The main benefit of ipv6 that I can see is the increased address space, so people hopefully won't have to use NAT any more (which is a pain in the backside, especially for games) and finally we'll have the concept of every device having a unique address realised.

[MilitantEidolon]

I have an extra server laying around that is not being used. So I am going to be turning it into a hosting platform using the IPv6 framework. I am wondering if you guys would like to see, hear my finding on the situation.

If so please let me know what type of OS you are running or would like to see it on and or what software packages. I understand that this information could be needed to be kept secret for whatever ever reason. So just let me know which OS you would most likely want to see it configured to.

You may be wondering why I am doing this and the answer is very basic. Times are changing and we need to change with them. I agree that it will be headache for most of us admins but I hope to help with some clarification on the configuration of this server.

- Andrew Hurst

[MoonWolf]

Personally i'd really like to hear about your results.

Windows 2003 server would be fine by me, considering were going to try doing that for a school project in 2 months.(Yes we started planning it already)