@AMS @cadey well, #Anubis allegedly does account for #Browsers like #LynxBrowser and handles them gracefully, unless they violate thresholds to stop scrapers that fraudulently use a fake #UserAgent, and then it'll soft-ban those.
@AMS @cadey well, #Anubis allegedly does account for #Browsers like #LynxBrowser and handles them gracefully, unless they violate thresholds to stop scrapers that fraudulently use a fake #UserAgent, and then it'll soft-ban those.
Issues aside it's now 15 years since I started using #Tor / @torproject & @guardianproject / #Orbot on #Android full-time.
Because in #EDGEland they yeet users to 64kBit/s if not even lower to 16kBit/s past paid bandwith and instead of properly renegotiating the bandwith, they trottle connections by reducing the packet rate / dropping packets, making it as #laggy as a #GSO-based #SATCOM connection!
Hier ein #CGNAT Beispiel eines regionalen Glasfasernetzbetreibers https://radar.cloudflare.com/adoption-and-usage/as30766
Selbst der Wireguard Tunnel ist nicht stabil.
Dieser #LegacynetServiceProvider bietet nichtmal #IPv6 an. Betrieb von Diensten für die Familie ohne Relay Server nicht möglich.
Zu dem Leserbrief über Glasfaser Anschlüsse aus dem @ct_Magazin
~1000 #IPv4 Adressen müssen für ca. 15k Kunden reichen.
Just got 300mbps (max 1gb) symmetrical fiber at home. This is a ridiculous amount of upload bandwidth. I could run a website, a Fedi instance, an Internet radio, Minecraft servers, all from a box in my kitchen...
except the service is IPv4 provided by CGNAT. Fiber-optic residential CGNAT. And this isn't just my one company: local ISPs everywhere can dig a trench and bury long lines to (semi-)rural homes but can't get enough IPv4 addresses to go around. Completely nuts.
The slow-rolling of IPv6 is a crime and it absolutely stymies self-hosting, forcing people to go to one of a few major players (Google, Amazon, etc) who hoard the magic numbers - or pay external services (Mojang) for shared hosting on a worse platform than we could provide ourselves.
@tschaefer fängt damit an dass bis heute nicht alle #IPv6 haben oder bekommen können...
Umgekehrt sind bis heute nicht alle #Diensteanbieter & Services von #IPv4 auf #IPv6 migriert worden.
Sorgt zwar für Henne-Ei-Problem, wäre aber durch die @BNetzA lösbar indem diese zwangsweise je IPv4 mindestens ein /64 an IPv6 vorschreibt und Bullshit wie #CGNAT [insbesondere mit #RFC1918-Addressraum] verbietet!
@ComputerBase Diskussion das RE.NE nur einen #CGNAT Anschluss bietet https://www.computerbase.de/forum/threads/re-ne-glasfaser-keine-externe-ip.2215611/
Solange die @BNetzA hier nicht tätig wird, wird das die Regel bei. Glasfaser Ausbau werden. #ggew ist Monopolist an der Bergstraße und bietet auch nur so seine Anschlüsse an.
Wie es gehen muss zeigt die Schweiz bzw besonders #init7! https://ripe89.ripe.net/archives/video/1415
@FeilnerIT Bin komplett bei Dir, dass das ein Verständnis- und Ausbildungsthema ist. End-to-End geht halt nur mit #IPv6
Nachdem man in DE bei kleineren ISP nur noch ein #CGNAT internet bekommt ist es echt schade, dass ein Author mit einer riesen Reichweite, so etwas schreibt.
@ericsfraga family member uses hey. It's cgnat but otherwise reliable. (Carrier Grade NAT)
#cgnat
I remember seeing public IPv4 addresses from Xerox and the US DoD assigned to DTAG LTE SIMs internally in Germany (04/2020), probably because they ran out of RFC1918 space. Do you have other such examples? I would like to collect them. (boosts in the IP/ net admin bubble appreciated!)
Friends, I have a problem with the ISP that operates the fiber line to our house.
Pretty much every time they need to reconfigure their CGNAT they for some reason kill IPv6 by feeding our autoconfig'd gear "Unique Local" (fc/7) addresses.
Is this a common problem, seen elsewhere?
I suspect Cisco gear but have no way to check.
@w7voa No mention of IPv6 support or use of CGNAT in there. Perhaps that information would be tucked away in the network management policy link but that seems an oversight.
IPv6 and CGNAT Support Survey of UK AltNet FTTP Broadband ISPs
Kann man bei den aktuellen Tarifen von #DeutscheGlasfaser eigentlich noch #IPv4 dazubuchen oder machen die nur noch #CGNAT und #IPv6. Auf der Webseite ist auf den ersten Blick nichts mehr zu finden.
Don't ever let anyone tell you that no one is using #ipv6
This is a network graph for a small college in the US. Every device is dual stacked. This is just your average 24 hour period. Light blue is IPv6, dark blue is IPv4. As you can see, IPv6 makes up at least 1/2 of the traffic at almost all times of the day.
If deploying IPv6 is something you control, just do it already! Please. I'm begging you. Do it! :)
ISP moved me behind a #CGNAT without informing of that tiny little detail beforehand. Cue spending the rest of the day furiously learning #ipv6 and coming out of it even more confused. i sorta kinda have a /56 but damn if I can make it actually work for incoming connections. Also why did my router put a different network on the wan interface and br0. Silly #unifi gw. At least I got keepalived to play nice with ipv6 ipvs, just need to actually get the packets to come that deep. I also need to actually spin up a third ipvs to separate lan traefik entrypoints from wan since I can't do that anymore at the NAT port forwarding layer. I'm not making any sense anymore am I?
Should get a callback from the ISP tomorrow at which point I'll be "somewhat cross", considering my contract does not say CGNAT and by regulation they're required to be upfront about that and it's effects, since well, it's horrible. *collapses into a puddle* .. not what I had in mind for today.
New Blog Post: Quick and dirty Mikrotik CG-NAT using NETMAP and hardware offload NAT.
https://forwardingplane.net/2023/05/09/mikrotik-cg-nat-using-netmap-and-hardware-offload-nat/
Curses on the ISPs that use #CGNAT because it is breaking the internet. Internet access was never meant to be subjected to a double-NAT situation.
There are few #Internet options where I live. Fiber is 2 years out. I may need to use an ISP that uses #CGNAT, which means no open ports at all. I see that #Tailscale and #Zerotier both use #STUN (or something like it) to solve this problem. Are there any pure Open Source tools that can do this? #Yggdrasil is great, but is TCP based, so can't do direct P2P with blocked ports (it can communicate, but via a public or private intermediary.) Perhaps #Debian packages? #askfedi