iwasgodonce

joined 1 year ago
 

Their new modem/router doesn't support opening ports in the ipv6 firewall, so if you want to open ports, they recommend disabling ipv6 entirely. For ipv4, they no longer support forwarding ports from only specific source addresses either, which is way less secure. You can only forward ports from all source addresses. You also have to use their crappy app to add port forward rules, it's no longer available in the web ui. You can completely disable the ipv6 firewall in the web ui, but that wouldn't be safe.

Old motorola modem/routers could do all of the above.

It says it can do bridge mode at least, but it seems silly to need 2 devices just to open ipv6 ports.

How are routers being made now in 2023 that don't have proper ipv6 support? It seems crazy to me.

 

I'm on att for my home internet and unless you go to the effort to bypass their router (it does 802.1x authentication so it's a bit of a pain to do so), they only give you /64s via dhcpv6 prefix delegation, nothing bigger. You can request up to 8 of them though.

It looks like mikrotik can't request multiple prefixes in a single request, based on their documentation.

Edge routers look like they can if configured from the cli.

I've been using a linux box with dhcpcd and that works. Would be nicer if systemd-networkd supported multiple prefixes directly so I didn't have to try to get dhcpcd and systemd-networkd to try to play nice with each other since I use systemd-networkd for the lan side interfaces, wireguard, etc.

What other routers and dhcpv6 clients support requesting multiple prefixes in a single request? I'm looking to see if there's a better option out there than what I'm doing now.