Hacker News new | ask | show | jobs
by ectospheno 330 days ago
“Just need to deal with firewalls.”

The only sane thing to do in a SLAAC setup is block everything. So no, it isn’t a solved problem just because you used ipv6.

1 comments

No. Here's a simple strategy: the two peers send each other a few packets simultaneously, then the firewall will open because by default almost all firewalls allow response traffic. IPv6 simplifies things because you know exactly what address to send to.
That is my point. You hole punch in that scenario even without NAT. It is no easier.
It's easier since you don't don't have to deal with symmetric nat, external IP address discovery and port mapping.