IPv6 traffic crosses the 50% mark
423 points
1 day ago
| 58 comments
| google.com
| HN
rtdq
5 hours ago
[-]
And still, in the year of our lord 2026, GitHub does not support IPv6.

https://github.com/orgs/community/discussions/10539

reply
growse
5 hours ago
[-]
A non-trivial minority of the time, they don't support IPv4 either!
reply
sidewndr46
12 minutes ago
[-]
should we try going back to IPX ?
reply
MikeNotThePope
6 minutes ago
[-]
Only if we're bringing back Token Ring, too.
reply
hsbauauvhabzb
1 hour ago
[-]
What? One nine isn’t good enough for you?
reply
lambda
1 hour ago
[-]
Excuse me. Zero nines. Or two nines if you relax your definition of where they are in the number. https://infosec.exchange/@0xabad1dea/116334321751266751
reply
bdangubic
32 minutes ago
[-]
we shut down our production every day from 2pm till 5pm for a siesta :)
reply
fogllgldl
1 hour ago
[-]
You guys have nines?
reply
fkarg
58 minutes ago
[-]
You must be from Anthropic
reply
whh
41 minutes ago
[-]
the ghost of twitter's past
reply
wiredfool
35 minutes ago
[-]
Personally I’d look for the coveted 5 eights uptime.
reply
throw0101a
1 hour ago
[-]
> And still, in the year of our lord 2026, GitHub does not support IPv6.

Especially given that it is now owned by Microsoft, which has been working on IPv6-only (at least on their corporate network) for almost a decade:

* https://blog.apnic.net/2017/01/19/ipv6-only-at-microsoft/

* https://www.arin.net/blog/2019/04/03/microsoft-works-toward-...

reply
rekoil
1 hour ago
[-]
I mean Azure doesn't really support IPv6 well either for a lot of the big-ticket services.
reply
fogllgldl
1 hour ago
[-]
More importantly, it doesn’t support uptime well.
reply
sidewndr46
12 minutes ago
[-]
we could meet in the middle: Azure support IPv6 with 0% uptime
reply
Landing7610
4 hours ago
[-]
Our university has bad problems with ipv4. Every few days you'll notice some websites being unreachable, including github. Although with their uptime recently, you never know who's to blame...
reply
jeroenhd
4 hours ago
[-]
They supported IPv6 for a short time, but then stopped their experiment.

An excellent reason to move away from Github, I find.

reply
literalAardvark
1 hour ago
[-]
I've been there. Management was fine with the testing but it added too much overhead for nearly no benefit to us.

One more thing to troubleshoot at 3 am, one more thing to teach to a disinterested tier 1 support team, one more thing for Chrome to be weird about, hundreds more rules to manage in a hostile load balancer, logging tools that don't understand ipv6.

Turned it off. End customer asked why the site got a little slower (CGN) and when we can turn ipv6 back on. As far as I know it's still on the backlog.

reply
jeroenhd
59 minutes ago
[-]
One of the big challenges with IPv6 remains that many of the knows-just-enough-about-networking people, like support staff, often never received any IPv6 training (or, for that matter, even enough IPv4 training that they don't need to Google things that come up in real life). Another is that the weird, awful, everyone-hostile corporate "solutions" often break IPv6 in stupid ways (like load balancers and logging tools being unable to cope with minor changes and requiring a full configuration rework).

Things have definitely gotten better over time, though. The massive 90s style corporate networks will probably never transition, but smaller and more modern companies don't have that issue.

Apple mandating that apps are IPv6 compatible and various government legislation forcing companies to make their shitty middleware IPv6-compatible has improved things quite a bit so far. As uptake keeps rising, the need for technologies like STUN and TURN will slowly start decreasing, and as a result more and more people will end up in "untested" situations where not having IPv6 and falling back to legacy paths starts becoming a problem.

reply
throw0101a
1 hour ago
[-]
Facebook is (AIUI) 100% IPv6-only on their internal network, and has been for many years:

* https://engineering.fb.com/2017/01/17/production-engineering...

* https://www.internetsociety.org/blog/2014/09/facebook-launch...

IPv4 is actually the "leftover" stuff they have to deal with at the front end.

But they are an eye-balls heavy service, with a lot of mobile devices, which also tend to be IPv6-native.

reply
tialaramex
14 minutes ago
[-]
It also just takes actual policy will. Somebody has to actually say "No" when the supplier who promised an IPv6 product says afterwards actually they meant IPv6 "ready" and they should have put an asterisk because really only the next version will be "ready", and er, so the product they've delivered doesn't actually work with IPv6 but that's fine right?

"No". Not every human is psychologically prepared to do that. They want to acquiesce, to go along to get along, you need somebody to be firm. "No".

reply
m-s-y
7 minutes ago
[-]
I have found that it is incredibly satisfying to whip out the “no” card.

I have also found that an uncomfortable number of people do not consider it appropriate in any way shape or form. Even when it’s ultimately your call and no one else’s.

Folks don’t really like waves. They like looking at them from the shore, but freak out when it’s their turn to hang 10

reply
sschueller
4 hours ago
[-]
Just found this little site. https://isgithubipv6.web.app/

Maybe we shouldn't even measure percentage adoption and instead just if github has finally adopted..

reply
farfatched
3 hours ago
[-]
GitHub should absolutely support IPv6, but until then... transip.eu provide IPv6 addresses which transparently proxy to github.com: https://www.transip.eu/knowledgebase/5277-using-transip-gith...

You'll need to update your DNS server to include those as AAAA records.

Do providers like NextDNS or RethinkDNS allow these sorts of overrides?

reply
voltagex_
2 hours ago
[-]
>The Github IPv6 Proxy can only be used for traffic to Github using a VPS from TransIP which uses IPv6.
reply
globular-toast
5 hours ago
[-]
Do we know any technical reason for this? Or are we left to think this is somehow a political thing?
reply
michh
2 hours ago
[-]
Perhaps a little tin foil hatty and definitely not the only reason but Microsoft owns Github and also makes a boatload of money off of Azure. Incumbent cloud providers like Azure have a major advantage in terms of having plenty of IPv4 addressing available whereas a new entrant to that market would have to buy or lease that space at a premium. Thus, these companies have an incentive to keep IPv4 a necessity.
reply
IshKebab
2 hours ago
[-]
IPv4 is going to be a necessity for many many decades no matter what Microsoft do. Even when IPv6 is at 99%, people aren't going to want 1 in every 100 people to not be able to access their site at all. It'll need to be like 99.9% before we start seeing serious IPv6-only services.
reply
michh
17 minutes ago
[-]
I don't know what the percentage would be, but we do have some historical precedent that could give us a clue.

Best one I can think of is when bigger websites started actually dropping SSLv3 and TLSv1.0 (and later TLSv1.1) support, cutting off older browsers and operating systems. Google and Amazon still support TLSv1.0, but plenty of others (including Microsoft) have dropped 1.0 and 1.1. HN itself doesn't accept 1.1 anymore either.

Then there's browser support. Lots of websites - big and small - cut off support for Internet Explorer 6 when it was somewhere below 5% marketshare because the juice was no longer worth the squeeze. Of course, few of those actually fully cut off the ability to browse the (now broken) website fully but it's a datapoint suggesting trade-offs can and will be made for this sort of thing. Or to put it in the present: a significant amount of webapps don't support Firefox (3% market share) to the extent their product is completely unusable in it.

reply
jiggawatts
1 hour ago
[-]
Sure, but the implementation in the public clouds is totally backwards.

What they should have done is have their core network default to IPv6 with IPv4 an optional add-on for things like public IP addresses, CDN endpoints, edge routers, VPNs, etc...

Instead, their core networks are IPv4 only for the most part with IPv6 a distant afterthought.

reply
fogllgldl
1 hour ago
[-]
IPv6 is the protocol of the future. And will be so.
reply
alex_duf
4 hours ago
[-]
It's a possibly a managerial thing, which KPI are you improving when spending engineering time on adding IPv6 support?

That said, for their HTTP stack they use fastly (as far as I understand), which should make the shift moderately easier.

reply
denkmoon
4 hours ago
[-]
Outdated beliefs probably. When I talk about v6 support in our b2b saas, PM laughs and says nobody uses that shit. Big tech are massive laggards on this funnily enough.
reply
throw0101d
23 minutes ago
[-]
> Outdated beliefs probably. When I talk about v6 support in our b2b saas, PM laughs and says nobody uses that shit.

Nobody except the 140M subscribers on T-Mobile US's network:

* https://www.youtube.com/watch?v=d6oBCYHzrTA

But sure, be IPv4-only and add latency by forcing traffic through an extra translation box.

reply
ViscountPenguin
4 hours ago
[-]
It's because big tech is USA based mostly, where there's still a glut of ipv4 available.
reply
10000truths
2 hours ago
[-]
Definitely not for the biggest ones. Google and Meta have so many machines in their data centers that IPv6 addressing becomes a technical necessity due to the risk of exhausting the RFC 1918 address space. Naturally, they were early adopters of IPv6.
reply
mmbleh
54 minutes ago
[-]
IPv6 is very difficult to implement and enforce reliable rate limits on anonymous traffic. This is something we've struggled a lot with - there is no consistent implementation or standard when it comes to assigning of IPv6 addresses. sometimes a machine gets a full /64, other times a whole data center uses a full /64. So then we need to try and build knowledge of what level to block based on which IP range and for some it's just not worth the hassle.
reply
Tuna-Fish
42 minutes ago
[-]
... But that's no different from IPv4. Sometimes you have one per user, sometimes there are ~1000 users per IP.

Most of the ipv4 world is now behind CGNAT, one user per ip is simply a wrong assumption.

reply
direwolf20
4 hours ago
[-]
It could be that they don't want to implement IP bans in IPv6.
reply
merpkz
1 hour ago
[-]
How does IP bans work in IPv6 case? One just blocks whole /64 or /56 address range?
reply
throw0101d
17 minutes ago
[-]
I have not had a deal with this, but if I was going to, I would start at the /64 and move up by nibble (4-bit) boundaries: /64, /60, /56, /52, /48.

/56 is often recommended as the minimum as for a (residential) customer. /48 is considered a "site" address prefix, and is the smallest allocation that can be advertised in BGP:

* https://blog.apnic.net/2020/06/01/why-is-a-48-the-recommende...

* https://www.infoblox.com/blog/ipv6-coe/a-48-for-every-site-a...

You get 65k subnets with it, which is what you get with 10/8.

reply
c0balt
3 hours ago
[-]
Or the most likely more expensive rate limiting (computational wise)
reply
michh
2 hours ago
[-]
I mean, given how the site performs on average I don't think they've optimized so much that the extra cpu cycles of ANDing with the fixed constant of 2^64-1 and then looking up or hashing a 16 byte integer - whatever they do - rather than a 4 byte one would increase the load significantly. Let's be pessimistic and say it's 20 extra cpu cycles, that's not gonna be much of a problem if their load balancers were made in the past 20 years.
reply
AtNightWeCode
2 hours ago
[-]
You probably need a hefty security reimplementation if you want to add IPv6 to Github.
reply
jiggawatts
1 hour ago
[-]
The irony of this is that pretty much all they'd have to do to enable IPv6 support is to use Azure Front Door as their CDN. Or... use any other CDN, they pretty much all default to providing IPv6!
reply
sandeepkd
5 hours ago
[-]
Came here to exactly check on this to see if there are any changes on Github side too
reply
missingdays
4 hours ago
[-]
Most websites still don't
reply
keybits
2 hours ago
[-]
Tailscale have a great FAQ about IPv4 vs IPv6: https://tailscale.com/docs/reference/faq/ipv6

If you're not an expert in this area it's worth a read - I certainly learned a few things!

reply
rmunn
2 hours ago
[-]
That was excellent, thanks for recommending it. I particularly liked how it's a pretty factual FAQ, not particularly cheerleading for IPv6 nor saying "IPv6 is a failure, give up on it".
reply
menotyou
2 hours ago
[-]
"IPv6 is the next generation of the Internet Protocol (IP), the successor to IPv4."

This is a misconception. It is not the successor to IPv4, it is an alternative. Maybe the alternative is so good it will eventually make the older extinct, but it does not look like that

reply
Galanwe
51 minutes ago
[-]
I agree with you. While I can see some benefits to v6 on the internet, I find v4 to be miles easier and cleaner to work with in a LAN setup. Unfortunately though v6 oversteps on LAN features and makes bridging v4 and v6 way uglier than it should.
reply
usui
5 hours ago
[-]
It has barely hit 50% and it's already plateauing. This adoption rate is ridiculous despite basically all network interfaces supporting it. I thought I would see IPv6 take over in my lifetime as the default for platforms to build on but I can see I was wrong. Enterprise and commercial companies are literally going to hold back internet progress around 60 to 75 years because it's in their best interest to ensure users can't host services without them. Maybe even 75 years might be too optimistic? They are literally going to do everything in their power to avoid the transition, either being dragged out kicking and screaming or throwing their hands up and saying they can't support IPv6 because it costs too much.

Try going IPv6-only by disabling IPv4 on your computer as a test and notice that almost nothing works except Google. End users shouldn't need to set up NAT64/6to4 tunneling. It should be ISPs doing that to prepare for the transition.

Also, notice how Android and iOS don't support turning off IPv4.

reply
keeperofdakeys
5 hours ago
[-]
Nearly all ISPs these days are deploying IPv6 for their mobile networks and core service networks, especially in less developed markets^1. The reason is simple, a cost justification. What doesn't exist is a cost justification for Enterprises to deploy IPv6, and for ISPs to deploy Residential / Corporate Internet IPv6.

IMO with the right market conditions, IPv6 could spread really fast within 6-24 months. For example, most cloud providers are now charging for IPv4 addresses when IPv6 is free. Small changes like that push in the right direction.

^1 https://www.theregister.com/2025/08/04/asia_in_brief/

reply
reddalo
4 hours ago
[-]
Hetzner makes you pay 1 € per IPv4, while IPv6 is free. I'd gladly get rid of all IPv4's given that I have many servers.
reply
MiscIdeaMaker99
11 minutes ago
[-]
Since when was there ever a plan to disable IPv4 on the Internet? Just because IPv6 is around doesn't mean that IPv4 is going to go away.
reply
dtech
4 hours ago
[-]
Apple/iOS is probably one of the biggest individual drivers of IPv6 adoption. They've been requiring that iOS apps work on IPv6-only networks for close to 10 years now
reply
throw0101d
15 minutes ago
[-]
> They've been requiring that iOS apps work on IPv6-only networks for close to 10 years now

This was at the behest of mobile network. E.g., T-Mobile US has 140M subscribers, and moved to IPv6-only many years ago:

* https://www.youtube.com/watch?v=d6oBCYHzrTA

reply
lxgr
40 minutes ago
[-]
The requirement is to support IPv6 only networks with IPv4 transition mechanisms. It does not preclude contacting v4-only servers.
reply
aniviacat
4 hours ago
[-]
If that's the case, how does the Github app work on iOS?
reply
dtech
4 hours ago
[-]
reply
eptcyka
4 hours ago
[-]
Differential enforcement.
reply
fogllgldl
1 hour ago
[-]
Apple’s App Store enforcement is very arbitrary. For example, if the app developer offends steve jobs, you’re banned for life.
reply
nothrabannosir
2 hours ago
[-]
I’m guessing the app works but their prod servers don’t? If they can point the app during review at a “self hosted” GitHub Enterprise server on a test domain with AAAA that would pass the requirement as stated by gp , without requiring GitHub.com actually support ipv6.
reply
Dagger2
1 hour ago
[-]
The prod servers work. The app does a DNS lookup, receives something like 64:ff9b::140.82.112.5 and 140.82.112.5 from the ISP's DNS servers, and then connects to 64:ff9b::140.82.112.5. Some part of the ISP network translates the connection into a v4 connection to 140.82.112.5.

The requirement is simply that the app does AAAA queries, and that it attempts to connect to them if they exist. It doesn't matter whether the server does v6 natively or if the ISP is covering for a v4-only server via backwards compatibility. (Native v6 will probably perform better, but any site that wants to give up that advantage is free to do so.)

reply
imoverclocked
5 hours ago
[-]
ISPs often fail to do this because there is always someone in the hierarchy who says, "nobody is demanding it."
reply
bluGill
1 hour ago
[-]
I with I knew how to get through that I want it. I'm supposed to be a tech guy - that means I need experience with the latest tech in my house
reply
FridgeSeal
3 hours ago
[-]
I worked at a place where they refused to run it _anywhere_ because a couple of people were insistent that it was “insecure”.
reply
Galanwe
44 minutes ago
[-]
... and they were right.

v6 adoption is often an all or nothing, because if you run both stacks, you have to ensure they are consistent. While you can reasonably do it on your home LAN, doing it across an entire infrastructure is the worst.

Now you have to make sure all your subnets, routing, VLANs, firewall rules, etc work exactly the same in two protocols that have very little in common.

It is the equivalent of shipping two programs in different languages and maintaining exact feature parity between both at all times.

reply
zokier
5 hours ago
[-]
> End users shouldn't need to set up 6to4 tunneling. It should be ISPs doing that to prepare for the transition.

Which is what ISP are doing with 464XLAT deployments. IPv6-mostly networking and IPv4-as-a-service are things that are happening in real world right now.

reply
kalleboo
3 hours ago
[-]
Yeah in Japan my ISP even lets me choose which IPv4 provider I want to use, as the fiber network is IPv6-native and IPv4 is "just another service" like IPTV.
reply
vr46
2 hours ago
[-]
My German ISP supports it now, which was the limiting factor for me, and a new VPS I just bought also does, so finally I was able to create my first personal AAAA record. I am hoping that we're seeing a tipping point. Again.
reply
drpixie
4 hours ago
[-]
>> It has barely hit 50% and it's already plateauing.

Well, the curve has got to level-out at 100%.

reply
cowsandmilk
4 hours ago
[-]
No, it can level out below that and is (as the parent was saying).
reply
lmm
4 hours ago
[-]
I think we'll hit a tipping point soon, just like with Python3 - for years and years it seemed almost stalled, then it became easier to start with python3 than python2 and suddenly everyone migrated.
reply
usui
3 hours ago
[-]
This seems like wishful thinking. Python3 vs. Python2 seems different than IPv6 vs. IPv4.
reply
yangm97
2 hours ago
[-]
“Gradually, then suddenly.”
reply
fogllgldl
1 hour ago
[-]
Worst migration plan ever.
reply
waynesonfire
4 hours ago
[-]
> It has barely hit 50% and it's already plateauing.

That makes sense. The majority of IPv6 deployment is mobile.

The next wave of adoption requires ISPs start offering residential IPv6. Once this happens, router manufacturers will innovate around the IPv6 offering as a differentiator, making it easy to deploy by end-users. IPv6 wifi APs will then become ubiqutious and so forth across other services. Has to start with ISPs.

reply
dtech
4 hours ago
[-]
ISPs in the US and Europe mostly have been offering IPv6 for a while now
reply
jabl
3 hours ago
[-]
Unfortunately my ISP here in Europe is not one of those offering IPv6.
reply
yxhuvud
3 hours ago
[-]
Mine does and it works so well that I actually have to turn it off when working from home as a bunch of the third party servers at work doesn't have any support for it.
reply
Hikikomori
4 hours ago
[-]
Other than France or Germany its far from mostly.
reply
preisschild
5 hours ago
[-]
> It should be ISPs doing that to prepare for the transition.

Yeah, I dont get why more ISPs don't offer carrier-grade NAT64 instead of the typical CGNAT

reply
lmm
4 hours ago
[-]
In parts of the world with fewer IP addresses they already are. My ISP _only_ offers MAP-E access to the IPv4 internet for anyone not grandfathered into an older plan.
reply
stackghost
4 hours ago
[-]
Is there a reason why adoption has been so abysmally slow? Like surely all the big players have updated their networking equipment by now, and surely every piece of enterprise-grade kit sold in the last 20 years has supported v6.

The only arguments I've ever heard against ipv6 that made any sense are that:

1: it's hard to remember addresses, which is mayyyyybe valid for homelab enthusiast types, but for medium scale and up you ought to have a service that hands out per-machine hostnames, so the v6 address becomes merely an implementation detail that you can more or less ignore unless you're grepping logs. I have this on my home network with a whopping 15 devices, and it's easy.

and 2: with v6 you can't rely on NAT as an ersatz firewall because suddenly your printer that used to be fat dumb and happy listening on 192.168.1.42 is now accidentally globally-routable and North Korean haxors are printing black and white Kim Il Sung propaganda in your home office and using up all your toner. And while this example was clearly in jest there's a nugget of truth that if your IOT devices don't have globally-routable addresses they're a bit harder to attack, even though NAT isn't a substitute for a proper firewall.

But both of these are really only valid for DIY homelab enthusiast types. I honestly have no idea why other people resist ipv6.

reply
noirscape
3 hours ago
[-]
The big reason is that domestic ISPs don't want to switch (not just in the US, but everywhere really.)

Data centers and most physical devices made the jump pretty early (I don't recall a time where the VPS providers I used didn't allow for IPv6 and every device I've used has allowed IPv6 in the last 2 decades besides some retro handhelds), but domestic ISPs have been lagging behind. Mobile networks are switching en masse because of them just running into internal limits of IPv4.

Domestic ISPs don't have that pressure; unlike mobile networks (where 1 connection needing an IP = 1 device), they have an extra layer in place (1 connection needing an IP = 1 router and intranet), which significantly reduces that pressure.

The lifespan of domestic ISP provided hardware is also completely unbound by anything resembling a security patch cycle, cost amortization or value depreciation. If an ISP supplies a device, unless it fundamentally breaks to a point where it quite literally doesn't work anymore (basically hardware failure), it's going to be in place forever. It took over 10 years to kill WEP in favor of WPA on consumer grade hardware. To support IPv6, domestic ISP providers need to do a mass product recall for all their ancient tech and they don't want to do that, because there's no real pressure to do it.

IPv6 exists concurrently with IPv4, so it's easier for ISPs to make anyone wanting to host things pay extra for an IPv4 address (externalizing an ever increasing cost on sysadmins as the IP space runs out of addresses) rather than upgrade the underlying tech. The internet default for user facing stuff is still IPv4, not IPv6.

If you want to force IPv6 adoption, major sites basically need to stop routing over IPv4. Let's say Google becomes inaccessible over IPv4 - I guarantee you that within a year, ISPs will suddenly see a much greater shift towards IPv6.

reply
ENGNR
2 hours ago
[-]
It's frustrating that even brand new Unifi devices that claim to support IPv6 are actually pretty broken when you try to use it. So 10 years from right now even, unless they can software patch it upwards.
reply
zokier
2 hours ago
[-]
Except that is completely wrong. Consumer/residential networks have significantly higher ipv6 adoption rates that corporate/enterprise networks. That is why you see such clear patterns (weekend vs weekday) in the adoption graphs.
reply
bluGill
57 minutes ago
[-]
There are still a lot that have not.
reply
alibarber
49 minutes ago
[-]
> 1: it's hard to remember addresses

fd::1 is perfectly valid internal IPv6 address (along with fd::2 ... fd::n)

reply
holowoodman
11 minutes ago
[-]
fd::1 is somewhere in the reserved ::/8 space where various stuff like old ipv4 mapped addresses and localhost reside. What you probably mean is something like fd00::1, but that is something you shouldn't use, because 'fd00::/8' is a probabilistically unique local address (ULA) block. You are supposed to create a /48 net by appending 40 random bits to fd00::/8. Of course, if your fair dice roll lands on all zeroes, and you are ok with probable collisions in case of a network merge, you are fine ;)
reply
Dagger2
1 hour ago
[-]
Has it been abysmally slow? What's the par time for migrating millions of independent networks, managed by as many independent uncoordinated administrators, to a new layer 3 protocol?

We've never done this before at this scale. Maybe this is just how long it takes?

reply
crote
3 hours ago
[-]
Sure, the data plane supports it - but what about the management plane?

I wouldn't be surprised if ISPs did all the management tasks through a 30-year-old homebrew pile of technical debt, with lots of things relying on basic assumptions like "every connection has exactly one ip address, which is 32 bits long".

Porting all of that to support ipv6 can easily be a multi-year project.

reply
Sesse__
3 hours ago
[-]
> Porting all of that to support ipv6 can easily be a multi-year project.

FWIW, as someone who has done exactly this in a megacorp (sloshing through homebrew technical debt with 32-bit assumptions baked in), the initial wave to get the most important systems working was measured in person-months. The long tail was a slog, of course, but it's not an all-or-nothing proposition.

reply
Hikikomori
2 hours ago
[-]
This is true, I worked for an old ISP/mobile carrier that started in the 80s about 10-15 years ago. They had basically any system you could think of still running, from decently modern vmware with windows and linux to hp-ux, openvms, sunos, AIX, etc. Could walk around and see hardware 30 years old still going, I think one console router had an uptime of 14 years or so. One time I opened a cabinet and found a pentium 1 desktop pc on the floor still running and connected, served some webpage. The old SMSC from the 80s on DEC hardware was still in its racks though not operational, they didn't need the space as the room couldn't provide enough power or cooling for more than a few modern racks. The planning program for fiber, transmission, racks, etc, required such an old java that new security bugs didn't apply to it, and looked and worked like an old mainframe program.

The core team supported ipv6 for a long time, but its rather easy to do that part. The hard part is the customer edge and CPE and the stack to manage it, it may have a lifetime of 2 decades.

reply
nubinetwork
4 hours ago
[-]
> Like surely all the big players have updated their networking equipment by now

My home isp can't even do symmetrical gigabit, let alone ipv6...

reply
esseph
3 hours ago
[-]
That's extremely common unless on "active" fiber (vs GPON, DOCSIS3, DSL, most fixed wireless, satellite, mobile, etc.)

Your wifi isn't symmetrical either.

reply
Hikikomori
2 hours ago
[-]
Those are designed to have static asymmetrical bandwidth though, *dm split gives ISP side more of possible shared bandwidth. Wifi bandwidth is shared and dynamic so client can use all of it.
reply
cyberax
2 hours ago
[-]
IPv6 is a recursive WTF. It might _look_ like a conservative expansion of IPv4, but it's really not. A lot of operational experience and practices from IPv4 don't apply to IPv6.

For example, in IPv4 each host has one local net address, and the gateway uses NAT to let it speak with the Internet. Simple and clean.

In IPv6 each host has multiple global addresses. But if your global connection goes down, these addresses are supposed to be withdrawn. So your hosts can end up with _no_ addresses. ULA was invented to solve this, but the source selection rules are STILL being debated: https://www.ietf.org/archive/id/draft-ietf-6man-rfc6724-upda...

Then there's DHCP. With IPv4 the almost-universal DHCP serves as an easy way to do network inspection. With IPv6 there's literally _nothing_ similar. Stateful DHCPv6 is not supported on Android (because its engineers are hell-bent on preventing IPv6). And even when it's supported, the protocol doesn't require clients to identify themselves with a human-readable hostname.

Then there's IP fragmentation and PMTU that are a burning trash fire. Or the IPv6 extension headers. Or....

In short, there are VERY good reasons why IPv6 has been floundering.

reply
dwattttt
1 hour ago
[-]
> For example, in IPv4 each host has one local net address, and the gateway uses NAT to let it speak with the Internet. Simple and clean.

I assume you mean "interface", not "host". Because it's absolutely not true that a host can only have one "local net address".

EDIT: a brief Google also confirms that a single interface isn't restricted to one address either: sudo ip address add <ip-address>/<prefix-length> dev <interface>

reply
philipallstar
2 hours ago
[-]
How do the working IPv6 deployments cope with these issues?
reply
yangm97
2 hours ago
[-]
The reason: Skill issue.
reply
direwolf20
4 hours ago
[-]
Ignore all the excuses like longer addresses and incompatible hardware. The actual reason is that everyone hates change.
reply
themafia
5 hours ago
[-]
Comcast, one of the largest residential ISPs in the USA, has almost full IPv6 deployment by default. The majority Verizon Wireless is IPv6 by default. Residential customers in the USA have great access if they just enable the stack.

There is nothing about IPv6 that prevents ISPs from filtering ports for all customers. They almost all actively filter at least port 25, 139 and 445 regardless of the actual transport. So I'm not sure "blocking service hosting" is the actual goal here.

The problem seems to be that all of the large and wealthy nations of the world have made the necessary huge investments into IPv6 while many of their smaller neighbors and outlying countries and islands have struggled to get any appreciable deployment.

It should be a UN and IMF priority to get IPv6 networks deployed in the rest of the world so we can finally start thinking about a global cutover.

reply
dtech
4 hours ago
[-]
In many developing countries IPv6 adoption is far and sometimes networks are IPv6-only, because IPv4 is expensive and they have relatively little addresses compared to users...

You can see southeast Asia is pretty green on the map of the post.

reply
kortilla
3 hours ago
[-]
A UN priority!? They have real issues they should be dealing with like the life and death of millions of people
reply
panny
4 hours ago
[-]
I don't want IPv6. Why would I? It's like a permanent global cookie. You're uniquely tagged and identifiable on every website you visit.

>it's in their best interest to ensure users can't host services without them.

They'll just keep blocking port 25. IPv6 won't change anything with regards to self hosting.

reply
farfatched
4 hours ago
[-]
My OS gives me IPv6 privacy addresses out-the-box which rotate every few hours.
reply
colmmacc
2 hours ago
[-]
If GitHub flipped a switch and enabled IPv6 it would instantly break many of their customers who have configured IP based access controls [1]. If the customer's network supports IPv6, the traffic would switch, and if they haven't added their IPv6 addresses to the policy ... boom everything breaks.

This is a tricky problem; providers don't have an easy way to correlate addresses or update policies pro-actively. And customers hate it when things suddenly break no matter how well you go about it.

[1] https://docs.github.com/en/enterprise-cloud@latest/organizat...

reply
alibarber
2 hours ago
[-]
Having been messing around personally with getting my own blocks of IP addresses and routing[1] - I've become terrified at the idea of implementing access control based on IP address.

Unless your own organisation in the RR has the IP addresses assigned to you as Provider Independent resources, there just seems to be so many places where 'your' IP address could, albeit most likely accidentally, become not yours any more. And even then, just like domain names, stop renewing the registration and someone else will get them - I was that someone else recently...

[1] AS202858

reply
yosamino
1 hour ago
[-]
Oh, cool! that's on my bucket list as well. I am still grappling with some concepts, though.

Do you have a writeup of your setup somewhere or can you recommend some learning materials ?

reply
alibarber
45 minutes ago
[-]
It's fun and has now become an addictive rabbit hole - trying to get packets from one location to the other in the fastest, most direct way (and at hobbyist budget level).

Initial writeup based on IPv6: https://abarber.com/Setting-Up-ASN-IPv6-Routing-BIRD-Teltoni...

Have been having fun recently with an IPv4 block and Asynchronous routing, working on writing that up right now :)

reply
progbits
2 hours ago
[-]
Anyone who relies on IP filtering for security deserves to have it broken. Change my mind.
reply
omh
1 hour ago
[-]
I'll take that bait ;-)

IP filtering is a valuable factor for security. I know which IPs belong to my organisation and these can be a useful factor in allowing access.

I've written rules which say that access should only be allowed when the client has both password and MFA and comes from a known IP address. Why shouldn't I do that?

And there are systems which only support single-factor (password) authentication so I've configured IP filtering as a second factor. I'd love them to have more options but pragmatically this works.

reply
apexalpha
1 hour ago
[-]
IP filtering + proper security is better than just having the security.

There's value in restricting access and reducing ones attack surface, if only to reduce noice in monitoring.

reply
sebiw
1 hour ago
[-]
Defense in depth is a thing but I agree that relying on it is not a good idea.
reply
TabTwo
58 minutes ago
[-]
Thanks to the trend to SASE like Palo Alto GlobalProtect or ZScsler this practice is not a good idea anymore. Speaking of ZScaler, they are still IPv4 only, right?
reply
bluGill
1 hour ago
[-]
If you can't handle sites switching to ipv6 in 2015 (ten years ago) your security plan is garbage.
reply
rmunn
2 hours ago
[-]
Zoom in on that graph using the controls at the bottom, and you'll see a repeating pattern of crests and troughs, weekly. There's about a 5% difference between the crests and the troughs: the crests are hitting the 50% line or just below it, and the troughs are down around 45%.

The real question is, why are the crests so predictable? They're always on Saturdays; Sunday dips down a little below the crest, then Monday-Friday is down in the 45% range before the next Saturday jumps up to 50% again. (Fridays usually have a small rise, up to the 46-47% area).

My theory: mobile access rises on weekends. People are more often accessing Google services from their work computers Monday-Friday, but on Saturdays and Sundays most (not all) people are away from the office. Many of them will end up using smartphones rather than laptops for Internet access, for various reasons such as being outdoors. And since smartphones are nearly all using IPv6 these days, that means an uptick in IPv6 usage over the weekends.

reply
kalleboo
2 hours ago
[-]
It's not just mobile networking but residential ISPs in general have better IPv6 support. In the US, Comcast was one of the first big IPv6 deployments, in Europe CGNAT+IPv6 is common in many places.

Meanwhile corporate IT for business and education networks have less incentive to upgrade and typically lag behind in adoption in general.

reply
pbw
3 minutes ago
[-]
This is only 33 years after I took a networking class and learned all about IPv6 and the IPv4 address space crisis.
reply
loevborg
4 hours ago
[-]
Sometimes TCP/IP is a leaky abstraction, and recently ipv6 peeked through in two separate instances:

- In a cafe wifi, I had partial connectivity. For some reason my wifi interface had an ipv6 address but no ipv4 address. As a result, some sites worked just fine but github.com (which is, incredibly, ipv4-only) didn't

- I created a ipv6-only hetzner server (because it's 2026) but ended up giving up and bought a ipv6 address because lack of ipv4 access caused too many headaches. Docker didn't work with default settings (I had to switch to host networking) and package managers fail or just hang when there's no route to the host. All of which is hard to debug and gets in your way

reply
pastage
4 hours ago
[-]
You can solve this issue if you have one server with ipv6/ipv4 you can run NAT with Jool and connect ipv6 only servers to that. Like Android does.

I wish hosting providers would give you a local routed ipv4 on ipv6 servers with a default NAT server. It is not that expensive I move 10Gbps "easily" and they could charge for that traffic.

reply
zokier
4 hours ago
[-]
> I wish hosting providers would give you a local routed ipv4 on ipv6 servers with a default NAT server.

You mean like AWS NatGW https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gat...

reply
emj
3 hours ago
[-]
30 USD/month and 0.045 USD/GB for ingress it is ok if you are big. It is a cheap service to build yourself. I do feel the pain of it being hard to get IPv4 minimal connectivity on ipv6 only hosts, i.e. for me a 1 USD/GB would be fine.
reply
crote
3 hours ago
[-]
Those are still per-customer and require you to dedicate an entire IP address to it. That's overkill for a server which mostly talks over ipv6 but needs to connect to an ipv4-only service like Github once in a blue moon.
reply
loevborg
2 hours ago
[-]
Any services like this for Hetzner?
reply
zokier
5 hours ago
[-]
This google metric measures adoption in access networks, but at this point I feel more interesting metric is adoption in services.

One such stat is here:

> adoption ranging from 71% among the top 100 to 32% in the long tail

https://commoncrawl.org/blog/ipv6-adoption-across-the-top-10...

Getting full coverage on AWS (/GCP/Azure) and few other key services (GitHub...) would be significant here imho.

reply
shrubble
40 minutes ago
[-]
I am aware of at least 2 telecoms, one publicly traded, that have very little to no IPv6 in their core networks and only use IPv6 when they have to.

Personally I think the design of IPv6 offers very little benefit; supposedly the Dept of Defense/Dept of War holds some 175 million IPv4 addresses, with other companies also holding large allocations - that should have been addressed 25-30 years ago as an administrative matter.

reply
neitsab
2 hours ago
[-]
As a French national, I am surprised to discover we are topping the charts according to this analysis.

Does anybody know why that might be the case? What's the story of IPv6 deployment in France?

reply
timpera
2 hours ago
[-]
The regulatory body, ARCEP, has been very proactive since 2002 (!) on IPv6. The recent uptick is due to IPv6 obligations bundled in the 5G spectrum licences.

https://www.arcep.fr/la-regulation/grands-dossiers-internet-...

reply
garganzol
1 hour ago
[-]
Maybe my guess only, but France has its bit of a technological centralization. I mean, a lot of people use internet from operators like "Orange" / "Free", and in contrast to other countries, routers provided by the operators in France do not suck. The routers are OEM, but overall quality you get from them is on-par with Ubiquity/Mikrotik.

This gives operators a benefit of the vertical control for the whole ecosystem - from top to the bottom, including intricate parts of protocols and routing. And France, in contrast to other countries, does not suck here too - operators usually do a good job of meticulously maintaining their assets.

My personal impression is that this is the result of several cultural factors:

1. Ingrained respect of privacy, private property, and a peace of heart as they call it. As a practical result of that, you do not get spammy messages and ads from operators, banks, etc. You may get some, like 3 or 4 discounts/offers in a year. Compare that to other countries where you can easily get 10s/100s messages like that in a single day. In other countries, instead of upgrading the infrastructure, people are busy with spamming each other.

2. The harsh oceanic environment with hurricanes and storms fosters an appreciation for reliability and functionality. It also encourages a certain frugality: every cent matters. As a result, people tend to develop a strong sensitivity to situations where form is prioritized over function, and such approaches are quickly dismissed as impractical. This gives a certain internal freedom of being able to see through things to determine what they are in the long run and not what they appear to be on the surface.

3. French people don't like to overwork outside of working hours. So choosing something like IPv6 over IPv4 seems like a natural forward-looking investment for the future where you can have less maintenance burden and thus you can devote more time to enjoying other things in life.

Having all those things combined, it's not hard to see why France chose IPv6. It's a natural choice there and it's imposed by survival.

P.S. I've spent some time in France, but was born in another country.

reply
dwedge
2 hours ago
[-]
I worked with the internet society to mobitor ipv6 adoption for the top million sites ipv6matrix.org it's broken down by country so might answer some of your curiosity
reply
ankit_mishra
2 hours ago
[-]
I'm wondering the same thing for India. Not the top but looks surprisingly surprisingly high. Perhaps I'm reading the data wrong.
reply
ggm
1 hour ago
[-]
Reliance Jio deployed cheap native v6 and tool massive market share. They single-handedly moved the market.

It's been discussed on the apnic blog and at meetings heaps

reply
DANmode
2 hours ago
[-]
Technical literacy, hacker culture, and culture of well-considered infrastructure, have been French characteristics - at least, historically.

Has something changed for the worse?

reply
p4bl0
3 hours ago
[-]
It amuses me to see that according to the map, France is best in class or close to be, while just a few weeks ago, my ISP in France stopped providing me IPv6 connectivity…

The story is that at the beginning I had IPv6, and a shared dynamic IPv4 behind a CGNAT, I asked for a rollback to a full duplex static IPv4 and for three years I had both a static personal IPv4 and an IPv6. A few weeks ago my router went down and since it went back up, I no longer have an IPv6 address. I called my ISP and they explained that I could either have IPv6 or a static IPv4, but not both, and that it's abnormal that I had both for so long… welp, it's sad to see IPv6 but getting it back is not worth abandoning my static IPv4 and going back to a dynamic shared IPv4.

reply
harg
3 hours ago
[-]
Are you with SFR? I also seem to only have a static IPv4 (I don't pay for it, but it's never changed in the lifetime of the connection). I asked for an IPv6 but they said it was not possible/difficult.
reply
p4bl0
2 hours ago
[-]
Yep, with "RED by SFR" specifically.
reply
fossilwater
49 minutes ago
[-]
Among all the major French providers, SFR lags far behind its competition unfortunately
reply
TekMol
9 minutes ago
[-]
I still do not support IPv6 on my servers and I think I will skip it and wait for IPv8:

https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

Avoiding a dual-stack and making IPv4 a part of whatever superseeds it seems like the right choice to me.

IPv6 always seemed to me like throwing away all existing telephone numbers, just to support longer numbers.

reply
molf
5 hours ago
[-]
It's only a matter of time before laptops get 5G. Macbooks have been rumoured for a while to get cellular modems. [1]

This will probably help adoption. On the one hand it will generate more IPv6 traffic. On the other hand it will expose more developers to IPv6; which will expose them to any lack of support for IPv6 within their own products.

[1]: https://9to5mac.com/2025/08/14/apples-first-mac-with-5g-cell...

reply
venzaspa
4 hours ago
[-]
Dell, HP and Lenovo have had laptops with cellular modems for maybe 15 years at this point.
reply
gempir
50 minutes ago
[-]
*A few select models got celluar modems.

I have owned several Dell, HP and Lenovo Laptops in the past 15 years and I have never had a cellular modem.

When Apple makes a change like that it impacts a lot of customers because they have way fewer skews.

reply
theandrewbailey
2 hours ago
[-]
I can confirm this. I work at an e-waste recycling company, and the vast majority of my inventory is corporate IT decommissioned gear. About 1 out of 10 laptops I tear down has a cellular modem, going back to about Intel Core 5th gen.
reply
Glemllksdf
4 hours ago
[-]
Thats quite surprising thing to me and weirdly obvious.

If you are single, have a phone contract, you would need some extra contract for a landline internet and wifi router because thats what a lot of people just do and now they can just add an esim and pay a little bit more.

Interesting that this sounds/feels a lot more right or useful than it did 5 years ago.

reply
panny
4 hours ago
[-]
I can't imagine a worse privacy nightmare. Always on backdoored baseband in 5G with a unique permanent IPv6 address assigned to the machine. Okay, maybe it could be worse if each user account is assigned its own unique IPv6 perma-cookie.
reply
Dagger2
1 hour ago
[-]
You're thinking of MAC addresses. Machines don't have permanently-assigned v6 addresses, rather the IP is assigned by whatever network they're currently attached to and will change based on that network's whims, just like it does in v4.
reply
merpkz
1 hour ago
[-]
As if people doesn't already carry always online machine in their pockets
reply
ffaser5gxlsll
2 hours ago
[-]
Meanwhile: one of the major mobile network in my country announced cisco collab/ipv6 ~5 years ago, but still doesn't provide v6, just v4 CGNAT.

Personal web server running dual stack since early 2010s currently sees 18-20% v6 traffic. When split by type, counting only mobile users it reaches 30% at peak.

Bot/crawler traffic is ironically 100% v4.

Meanwhile: enabled h3 in september last year for the fun of it, instantly at >40% traffic by request count, passing 50% since the beginning of the year, h2 accounting almost all the remaining traffic and plain ssl/http requests <1% being just bots.

reply
e-topy
2 hours ago
[-]
Maybe the best anti-scraper/LLM protection is going IPv6 only. I'd do that on my website, but I'm afraid some clients might not connect.
reply
KronisLV
19 minutes ago
[-]
Random test site for the consumer side: https://test-ipv6.com/

0/10 in Latvia with a local ISP, fun times.

reply
imoverclocked
5 hours ago
[-]
The question is, "what will the graph look like in the next 10 years?"

I get the whole s-curve trend but if I squint at 2017, there is an inflection to slow the s-curve down.

Annoyingly, when setting up service with a fiber company in the last couple months, I explicitly asked about IPv6 connectivity and they said, "yes." Turns out "yes, but not in my region."

reply
snvzz
5 hours ago
[-]
>I explicitly asked about IPv6 connectivity and they said, "yes."

ABC, Always Be Closing.

reply
Animats
5 hours ago
[-]
It's been amazingly linear since 2014.

amazon.com needs to get with the program. Still IPv4 only.

reply
pjf
2 hours ago
[-]
NB: this is not "IPv6 traffic crosses the 50% mark" but "availability of IPv6 connectivity among Google users", which is a very important difference. This means roughly half of Google users have IPv6 capability, which does not 1:1 correspond how much traffic is actually transferred over IPv6, which is what this submission says in the title.
reply
usui
1 hour ago
[-]
Yeah and this distinction explains the fact that because China's Great Firewall blocks Google, this website shows 4.66% adoption as a reflection of that. I think China's IPv6 support rate is actually much higher than that, maybe a little over 50% because of its central initiative to increase IPv6 adoption?

EDIT: Apparently it's 77% https://pulse.internetsociety.org/en/news/2026/01/china-hits...

reply
kalleboo
2 hours ago
[-]
It also means you're excluding China, who has has it as a long-term priority to deploy IPv6 and have made huge strides.
reply
taf2
1 hour ago
[-]
reply
ButlerianJihad
3 hours ago
[-]
One of the foremost obstacles to wide adoption is that IPv4 still works great and it's ubiquitous. There is no advantage or up-side to deprecating or abandoning IPv4 support at all. The only result of disabling IPv4 is a denial of service to a certain sector of customers or clients.

The only way this will change is by increasing pressure on the resource of IPv4 networks. It was a few years ago that AWS broke the news to me that I'd be paying for IPv4 addresses but IPv6 would remain free. If enough services are forced, financially, to abandon an IPv4 presence, then their clients would be likewise forced to adopt IPv6 in order to retain connectivity.

But with the ubiquity of CGNAT and other technologies, it seems unrealistic that IPv4 will become so rare that it becomes prohibitively expensive, or must be widely abandoned. So that availability of the legacy protocol will inhibit widespread adoption and transitions to IPv6.

reply
kalleboo
1 hour ago
[-]
Yeah the reality is that the Internet is centralized now. There is no reason for two computers on the internet to connect to each other anymore, as long as you can reach Google/Microsoft/Amazon/CloudFlare, that's all anyone needs.

Just log onto AOL and type in keyword "WALMART" and save! It's friendly and safe.

reply
ifwinterco
2 hours ago
[-]
In theory you can save quite a bit on AWS costs by having instances that can only use v6.

But in reality at the moment there will probably always be at least one thing that only works with v4 a lot of the time.

Incentives are misaligned as well - it saves you money as the EC2 instance user, but the owner of the website you're trying to access has to support v4 anyway so they don't have a big incentive to change anything

reply
netheril96
2 hours ago
[-]
Maybe it's time to tax IPv4 usages or holders.
reply
hosh
1 hour ago
[-]
I am in the middle of building infrastructure in GCP. The workload is your typical stateless web + db workload.

As of now, there is no way to have a 100% internal ipv6. Many of the services, including CloudSQL or the connection between external and internal load balancers do not support ipv6, even when the external load balancer support ipv6 forwarding rules at the front end.

This means that careful internal ipv4 allocations still matter.

reply
dijit
1 hour ago
[-]
I think its incredibly ironic actually. The place where IPs are burned through rapidly (internal) is forced to use v4. (and, potentially even a subset of it, RFC1918; likely conflicting with some large company or service if they decide to plumb it together later- or you burn publicly accessible IPs in the limited address space)

But the one interface that touches the internet can use v6: the one with a functionally infinite address space.

reply
kalleboo
1 hour ago
[-]
I had the same issue a few months ago on AWS. All I want is a server (that pulls a container), a database, and a load balancer. It's all going behind CloudFront so there should be no need to pay for an IPv4 address for any internal machine. Couldn't do it. Since then I saw that there was some movement on IPv6 for RDS but IIRC there was still some other blocker.
reply
anonymfus
4 hours ago
[-]
Current submission title:

> IPv6 traffic crosses the 50% mark

Graph description:

> The graph shows the percentage of users that access Google over IPv6

There are reasons to expect both much more and much less traffic per user on IPv6 compared to IPv4...

reply
jcalvinowens
1 hour ago
[-]
I consistently get 100x as many captchas from google over V6 as over V4, on many different networks: it is obnoxious and obviously broken on their end.
reply
pzo
2 hours ago
[-]
I wish EU make it mandatory at least for all ISP to make mandatory support for IPv6 by end of this decade. I think that would push the needle even globally.
reply
sschueller
5 hours ago
[-]
My next project, IPv6 in my homelab. It will be a challenge but it is time. My ISP gives me a static /48, I should use it.
reply
jeroenhd
3 hours ago
[-]
I recommend going through Hurricane Electric's multiple-choice tests. It's not exactly a how-to guide or course, but it'll mention all of the terms and technologies you need to look up to get things right. They'll even send you a free T-shirt if you make it through all of them.

The most difficult parts for a homelab in my experience is getting Docker to play nicely. All of the other stuff sort of just works these days. Even things like using DHCPv6 prefix delegation to obtain a routable subnet is almost trivial with how well-supported the protocol is with modern networking software.

reply
sschueller
3 hours ago
[-]
Where do I find that? https://www.ipv6.he.net/ has an invalid certificate and is the first result on Google.
reply
jeroenhd
2 hours ago
[-]
Their www sub-subdomain is broken it seems.

https://ipv6.he.net/certification/ has instructions on how to get started.

reply
elevendroids
3 hours ago
[-]
You need to omit the "www" subdomain: https://ipv6.he.net
reply
menotyou
2 hours ago
[-]
Currently my IPS provides IPv6, but I set up my firewall in the access router of my home LAN to block all IPv6 in both directions.

- I don't want to have a permanent global unchanged ipv6 as in id of my traffic.

- IPv6 privacy extensions would change that but then I can not reach my two devices I do want to reach from outside anymore as my access router only supports DynDNS for its own address and no NAT in IPv6

reply
fleetfox
2 hours ago
[-]
And how exactly is your NATed ipv4 address better? This seems backwards.
reply
menotyou
2 hours ago
[-]
Router has a DynDNS function. I am using a reverse proxy for multiple services, but this only sets up router IP and IPv4 NAT port forwarding to the reverse proxy.

So what would be the correct setup with IPv6 when using privacy extensions?

I don't see any benefit in allowing IPv6 traffic or using IPv6, but a couple of new problems coming up with it.

reply
Dagger2
1 hour ago
[-]
Privacy extensions are additional addresses that are used by default for outbound connections. You still have the non-privacy address, which doesn't change; put that one into DNS.

This approach prevents outbound connections from leaking the address needed to connect to your servers. On v4, it's likely that any outbound connection from your network gives the server the IP they need to do that.

reply
menotyou
1 hour ago
[-]
My ISP changes the prefix on a regular base (and on request)
reply
icedchai
1 hour ago
[-]
How often does your IPv4 address actually change?
reply
menotyou
1 hour ago
[-]
Never checked. But it does change once in a while. The router has a dyndns function which updates a DNS entry, but only for the router itself. But this is sufficient for the NAT port forwarding.
reply
davidkuennen
5 hours ago
[-]
Setting up my own server (migrating off GCP LB) taught me so much about networking. I was especially surprised that providing IPv6 is such a performance boost for low bandwidth phones since they mostly only operate on IPv6 by now and IPv4 needs some sort of special roundtrip.
reply
emj
3 hours ago
[-]
Cool! Could you give some concrete examples of apps or traffic patterns where you think IPv6 may noticeably improve performance on phones? Are you mainly referring to NAT traversal during connection setup, or to something that also affects traffic after the connection is established?
reply
Galanwe
3 hours ago
[-]
Every year I just wish someone will come up with IPv4-with-more-bytes and we can switch to it before IPv6 gets another percent usage share.
reply
AndrewDucker
3 hours ago
[-]
IPv4-with-more-bytes is not backwards compatible with IPv4. So you'd have to replace/upgrade every existing network stack, both hardware and software. To get, basically, the same effect as moving to IPv6.
reply
Galanwe
2 hours ago
[-]
> IPv4-with-more-bytes is not backwards compatible with IPv4

Neither is IPv6

> To get, basically, the same effect as moving to IPv6

The only thing that IPv6 solves which is of interest to 99.99% of the users is having more adressable space. The rest of IPv6 features are either things that nobody asked for, or things which are genuinely worst compared to IPv4.

I consider the mere fact of enabling IPv6 an unacceptable security risk, as I would now have to make sure my IPv4 and IPv6 firewall stack are perfectly mirroring each other. That would be trivial with IPv4-with-more-bytes, it's a nightmare with IPv6.

reply
mrsssnake
23 minutes ago
[-]
Do NAT64 and just worry about IPv6 if not wanting dual stack.

All of IPv6 features are just direct effects of having more space and not. Basically IPv6 "features" is just getting rid of IPv4 workarounds.

reply
mprovost
1 hour ago
[-]
There were backwards-compatible protocols proposed, such as EIP, but the committee chose a backwards-incompatible protocol for v6. Their assumption was that v4 would run out of space in a single-digit number of years and everyone would be forced to migrate. The past 30 years have shown that not to be the case.

https://datatracker.ietf.org/doc/html/rfc1385

reply
blueflow
2 hours ago
[-]
IPv6 is IPv4 with 12 more bytes, right?
reply
zeristor
3 hours ago
[-]
My interest was piqued 20 years ago, then there was talk about Internet2 with all these amazing optimisations.

Things have developed so much, a Internet2 is still going on I take it, however is more focussed on university research.

As ever a killer strength is something that draws people to a new technology, I imagine there's various demographics that benefit from use of ipv6.

Further I imagine that there are some levels of criticality which when reached are more self sustaining (dare I say it the network effect?).

I've been posting this graph over the years, and it really has slowed down hugely close to this 50%. This is a global ipv6 support, so some countries are racing ahead, others weirdly like Denmark have a stash of ipv4 addresses and seems content.

France and Germany are at about 80%, but there's the rest of the world of course.

reply
equinox6380
1 hour ago
[-]
The failure wasn't in the technical design of v6, but in the economic assumption. When the cost of migration exceeds the cost of 'hacks' like NAT, people will stick to the hacks for as long as humanly possible.
reply
spockz
47 minutes ago
[-]
And in the mean time, Odido on the Netherlands still don’t support ipv6 on their fiber network…
reply
BartjeD
3 hours ago
[-]
In before the dinosaurs arrive to complain about the challenges of moving to IPv6 and why NAT and IPv4 are better. ;)
reply
benbristow
33 minutes ago
[-]
And Virgin Media in the UK still doesn't support IPv6
reply
Schlagbohrer
2 hours ago
[-]
Can someone reconcile for me the constant chatter about how IPv6 isn't getting impemented, versus this result that more than half of all traffic (as measured by google) is now IPv6?

It sounds to me like its a tool which is available to be used when needed and when no better workarounds exist, and it is slowly but surely being adopted as needed.

reply
zokier
1 hour ago
[-]
Most of the chatter comes from the peanut gallery who have no real insight on what ISPs and other large networks are actually doing.
reply
jl6
3 hours ago
[-]
Everyone's saying progress is slow, but maybe this is just how long it takes to do massive decentralized global migrations affecting billions of people. What are we comparing against? Maybe the ICE-to-EV transition?
reply
nlitened
10 minutes ago
[-]
For example, compared to migration from 3G to 4G networks. As I understand, from the launch of 4G to complete shutdown of 3G it took around 12—14 years.
reply
jabl
4 hours ago
[-]
Are any ISP's or corp intranets doing IPv6-mostly style networks yet: https://www.ietf.org/archive/id/draft-link-v6ops-6mops-00.ht...

That seems to be a promising approach.

reply
ninkendo
52 minutes ago
[-]
T-Mobile does: https://www.internetsociety.org/deploy360/2014/case-study-t-...

They use 464XLAT, basically NAT64/DNS64 with some extra cooperation on the OS’s part for backwards compatibility with apps that hard-code IPv4. You get only a v6 address, and your OS basically synthesizes an v4 network on your device in cooperation with their NAT64 router. But all the bytes going from your device through to their towers are ipv6. Talking to a v4-only website uses carrier-grade NAT64 when leaving the t-mobile network.

reply
farfatched
3 hours ago
[-]
According to https://www.ipv6.org.uk/wp-content/uploads/2023/11/13_IPv6-M... , Google is.

The author of the RFC is the author of the slides.

reply
Mashimo
4 hours ago
[-]
I wonder why Germany has a relative high adoption rate with 77%? They are normally behind when it comes to new technology.

Is it because they have more carrier NAT?

In Denmark I can get cheap 1 / 1 Gbit/s fiber, but still no ipv6 :(

reply
FeelingGood
2 hours ago
[-]
We have enough IPv4 addresses (combined with CGNAT) in Denmark so the providers have no business incentive to spend money on supporting IPv6 :/
reply
ahartmetz
3 hours ago
[-]
Carrier-grade NAT for home connections is pretty rare in Germany. I only know of Deutsche Glasfaser - a fairly new ISP that isn't doing too well.
reply
Dagger2
1 hour ago
[-]
It's very common. German ISPs collectively went with DS-Lite, so most of that 77% with v6 have CGNATed v4.
reply
interloxia
2 hours ago
[-]
Vodafone cable's cgnat struggles. I went v6 for home so that at least the v6 sites and my own connections avoid the congestion.
reply
ruuda
4 hours ago
[-]
reply
ghoshbishakh
3 hours ago
[-]
Countries like India have higher adoption (>70%) because of 4G/5G abundance. Legacy broadband providers hold back IPv6 usage.
reply
torcete
3 hours ago
[-]
They have released the draft for IPv8 two days ago: https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

Does it mean we better put our chips on IPv8?

reply
Dagger2
1 hour ago
[-]
reply
badgersnake
1 hour ago
[-]
Guess you didn’t read it.
reply
zeristor
3 hours ago
[-]
This is the global curve, it looks to be flattening I had thought it would be more asymptotic to 100%.

My company is ipv4 still, and some customers are having issues with ipv6 only connections.

Also we log the ip addresses, and that's only in ipv4.

reply
harg
3 hours ago
[-]
Interesting to see Spain having such low IPv6 adoption. Perhaps that's exacerbated the issues caused there by blocking IPs during football matches that we've seen mentioned in recent HN posts.
reply
zokier
1 hour ago
[-]
Spain has one of the highest FTTx rollouts in Europe though. My theory is that they just prioritized building fiber and there was no money left for ipv6 transition.
reply
Ekaros
1 hour ago
[-]
There really should have been proper government pressure and fines long ago.

Say if you have 10% of market share or x million monthly users you must support IPv6 in say 5 years. If not you are fined say 2% revenue per year until you do...

reply
bluGill
50 minutes ago
[-]
I'd make it required that ipv6 for all customers has a higher service guarentee than anyone ipv4. If you don't support ipv6 you can't guarentee anything. give two years to to implement it.
reply
jwilliams
2 hours ago
[-]
I'm surprised it's reporting is listed <5% - I thought it was pretty much ipv6 first?
reply
pheggs
5 hours ago
[-]
while it looks like its slowing down, I am pretty sure it will speed up once IPv4 get even more expensive, sites start to be hosted on IPv6 only and become inaccessible to some users that dont have IPv4. Thats surely going to put pressure on ISPs
reply
usui
5 hours ago
[-]
Outside of hobbyist niche uses, sites won't start being hosted IPv6-only. The financialization of IPv4 addresses will simply get worse and be even more pay-to-play than it is now. Amazon raises the price of IPv4 and everyone goes along as a cost of doing business.
reply
zokier
4 hours ago
[-]
My prediction is that sites will be half-IPv6 only; backends will be IPv6 and IPv4 traffic will get proxied to IPv6 by CDNs / edge LBs. I think CloudFront for example supports that scenario, avoiding IPv4 costs (in theory).
reply
elsjaako
4 hours ago
[-]
If you have a big site and want as broad an access as possible I agree.

But I wouldn't be surpised if we start seeing self-hosted minecraft or factorio servers with ipv6 only.

reply
pheggs
4 hours ago
[-]
that may be true, but not being able to access hobbyist sites still feels like "being locked out" of something. My ISP provides /48 IPv6 addresses for free, and I already run a couple sites only on IPv6 - because an IPv4 would cost 20 bucks a month - it's not important enough to me personally to pay that.
reply
snvzz
5 hours ago
[-]
Maybe "think of the children."

There might be a child behind the NAT, thus IPv6 requirement.

reply
jeroenhd
3 hours ago
[-]
With IPv6 privacy extensions it's impossible to tell which device you're talking to inside of a /64. You'd need to do something silly like DHCPv6 to get that kind of remote device-level tracking.
reply
ButlerianJihad
4 hours ago
[-]
At home, I use an Android 16 Pixel phone, and a Chromebook, and I would suspect (but cannot prove) that 100% of my LAN outages can be blamed on the dual-stacking nature of IPv6 plus IPv4.

Chris Siebenmann has written extensively on IPv6: https://utcc.utoronto.ca/~cks/space/?search=ipv6

Google has some weird way of asserting connectivity, and I suspect that when connectivity on one protocol is lost, it is impossible to maintain or establish connectivity through the other one (IPv6) even if it is available upstream.

I am rather infuriated with the status quo at this point, because it is impossible to disable IPv6 on my devices and it is also impossible for my ISP to disable IPv6 on my LAN or on the CPE router which they own and control.

Due to chronic WiFi issues I was eventually forced to place my ISP router into Bridge mode permanently, and I use a 3rd party Netgear which I own, and does not have the same WiFi issues, and where IPv6 is optional (and often fails, because its implementation is buggy and glitchy for no reason.)

reply
direwolf20
4 hours ago
[-]
I am rather infuriated that it's impossible to disable IPv4 on my devices, so does that make us even?
reply
ButlerianJihad
3 hours ago
[-]
Yes I believe so!

I recently purchased a brand-new LaserJet printer, and since it needs nothing to do with the Internet or a WAN outside my home, I thought it'd be great to simply disable IPv4 and stop doing the DHCP dance.

Well it immediately fell off the net completely. I couldn't figure out how to expose its IPv6 address or contact its management interface.

Hypothetically, Bonjour and mDNS should make this a no-brainer. Hypothetically, disabling IPv4 shouldn't even prevent it from connecting to the Internet. But I was ultimately forced to factory-reset it.

IPv6-only LAN makes a lot of sense for most people, and perhaps reduces attack surface a little. If you have the means, I highly recommend setting it up!

reply
miyuru
5 hours ago
[-]
crossed 50% on Mar 28, 2026, 3 weekends back.

google published the latest data only yesterday, hence the delay.

reply
randompartytime
5 hours ago
[-]
we did it, boys!

despite the smoothbrain naysayers:

https://circleid.com/posts/20190529_digging_into_ipv6_traffi...

finally, the end of the dark tunnel of NAT is in sight, and the internet will be free once more

reply
cubefox
5 hours ago
[-]
Nice. But note that the average is still significantly below 50%. It's also a bit concerning that the growth rate seems to be levelling off. It currently looks like a sigmoid curve with a maximum far below 100%.
reply
gspr
5 hours ago
[-]
I wouldn't be so worried about it. It's really hard for something as big as this to really hit 100%. If we hit 80% or thereabouts, we can at least plausibly argue to backwards ISPs that IPv6 is the default and the standard that everyone should reasonably be offering.

Generally: I'm really surprised that Norway is just at 27%. I think I've been with 3 different residential ISPs the last 15 years, and all of them have done IPv6 perfectly well (two nits: I think one required a trivial opt-in, and my current ISP is just giving me /60 which isn't perfect).

Edit: Oops, sorry to my current ISP for shaming them. Some googling told me that one can get a /56 using DHCPv6-PD. I'll try that!

reply
gauravkundu
3 hours ago
[-]
Waiting for github to support
reply
spl757
2 hours ago
[-]
Sounds like it's time to abandon it for something new and more stupid
reply
moralestapia
3 hours ago
[-]
Any idea why it oscillates?
reply
kalleboo
3 hours ago
[-]
Corporate IT networks have less IPv6 and residential/mobile networks have more IPv6, so on weekdays when people are using Internet at work = more IPv4, weekends when people are using Internet at home = more IPv6. Christmas also has a big bump for the same reason.
reply
moralestapia
30 minutes ago
[-]
Awesome, thanks.

No change in trend during COVID years, interesting.

reply
spl757
2 hours ago
[-]
90% spam/hack?
reply
cubefox
2 hours ago
[-]
Spain: 9.9%

What's going on in Spain?

reply
ggm
1 hour ago
[-]
Bizarrely, Telefonica doesn't see a need. But, their subsidiaries in LatAM do heaps! And, they do central purchasing.
reply
UltraSane
5 hours ago
[-]
Every company I have ever worked for in the US didn't use IPv6 and actually blocked it at the FW
reply
lmm
4 hours ago
[-]
The US has something like 80% of the world's IPv4 addresses, so they feel a lot less pressure to migrate.
reply
icedchai
1 hour ago
[-]
I’ve worked for a company that was barely using its /16. I know several individuals, including myself, with personal /24s.
reply
Dagger2
1 hour ago
[-]
None of which are any help when connecting to someone who doesn't have those.
reply
zokier
4 hours ago
[-]
US is significantly above average in terms of adoption
reply
UltraSane
3 hours ago
[-]
I worked for a state government agency that had a public /16
reply
SuperMouse
4 hours ago
[-]
Our freaky network admins rolled it out in our global corpo.

Was fun seeing IPv6 running for a few days without problems.

reply
zsoltkacsandi
1 hour ago
[-]
Great, then another 20 years and we can retire IPv4.
reply
ymolodtsov
4 hours ago
[-]
But I still have to pay Hetzner separately to rent out an IPv4.
reply
everdrive
3 hours ago
[-]
I am waiting for the flood of evangelist to explain:

- IPv6 proponents are the only ones who know that NAT is not a firewall, and

- Everyone in the world would love IPv6 if they just didn't hate learning new things

reply
purerandomness
4 hours ago
[-]
IPv6 will never make it. Maybe IPv8 [0], which IPv6 should have actually looked like:

> 1.1.1.1.1.1.1.1

[0] https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

reply
josh3736
3 hours ago
[-]
For observers, this draft was posted to HN earlier but quickly flagged and removed because the linked "IPv8" draft is absolute bunk.

See the removed thread for details: https://news.ycombinator.com/item?id=47788857

reply
po1nt
3 hours ago
[-]
Nice idea. Always wondered why IPv6 went so ambitious with the addressing
reply
ButlerianJihad
37 minutes ago
[-]
One of the craziest aspects of IPv6 implementation is the reverse DNS lookups.

IPv6 uses ip6.arpa and segments each little nybble into a subdomain!

https://en.wikipedia.org/wiki/Reverse_DNS_lookup#IPv6_revers...

This means there are always 32 octets to a reverse-IPv6 address, and there are no shortcuts or macros to overcome this! That means if you wish to assign a singular name that maps from a legitimate /64 Network ID, you must populate 64 bits worth of octets in a zone with this data. It is an absurd non-solution. This never should've been allowed to happen, but it will basically mean that ISPs abandon reverse DNS entirely when they migrate to IPv6 implementations.

reply
Ekaros
2 hours ago
[-]
Might as well go big. 24 extra bytes per packet is not that big deal. And having that much extra space means you can screw up design multiple times and still be able to reuse lot of infra. Also getting rid of idea that you are even trying to manually manage the address space eases many things.
reply
po1nt
55 minutes ago
[-]
But it's not human readable anymore, nor backwards compatible. The expectation was that the industry is reasonable, but it proved to be as hard as it would be to push breaking email v2 implementation.
reply
direwolf20
4 hours ago
[-]
Why do people keep proposing alternatives to IPv6 that are no easier than IPv6 but still require the whole world to start the deployment over from 0%?
reply
c0l0
3 hours ago
[-]
I'd say it's either because they're just having fun, or because they're dumb.
reply