Hacker News new | ask | show | jobs
by infensus 871 days ago
This a thing which boggles my mind. Does this mean everyone gets /64 addresses to circumvent IP bans?
2 comments

While your device will rotate privacy addresses within a /64, online service operators can ban your /64.
IPv6 banning would likely happen at that subnet level, not individually.
Ah right. But it will be a bit problematic, since the subnet size may vary between different ISPs, no?
The general approach is to gradually expand the size of a block to cover more subnets if needed, e.g. three /64s banned from the same /60 -> ban the /60, and three /60s banned from a /56 -> ban the /56, or whatever thresholds work. You already need to do this in v4 to cover people with dynamic IPs anyway, so it's not a new concept.
I don't know how things are being done by global consumer ISPs... Whether they are handing out /56 or /60 commonly. Even then, you're talking about dealing with a few hundred /64 sized nets to potentially block, rather than the quadrillions initially feared.