Recent submissions

Comment · 2 months ago
this works nicely in IPV6, where true seperation of layer 2 and layer 3 exist. This does not exist in practice in ethernet, because ARP is required as a mechanism to learn MAC IP bindings and is dependant on IP AND Ethernet.

IPv6 solves this by doing neighbour discovery on link local addresses and multicast addresses.

Comment · 2 months ago
CGNAT is also not cheap and very complex from a architectural point of view.

Vendors have been pushing it though, because implementing IPV6 only somehow is still a very, very scary thing for large ISP's to pull off.

what should happen is it should be very easy to deploy ipv6/4 translation mechanisms in ipv4 only networks, this would allow easy interopability and make it easier for the large networks to push IPV6.

Comment · 2 months ago
while i agree with your sentiment, i personally think that the foundational design pattern of the internet as a network is highly decentralized. once you get public IP space and the infrastructure required to talk BGP, making decentralized designs is actually quite easy.

The issue that ipv4 exhausting and "solutions" around it like NAT are making it very hard for actual users (bussiness, people etc) to get access to public IP space without strings attached.

IPv6 solves a lot of this, especially because IP space is so massive LIR's don't need to be so spare with giving out address space.

The far larger issue we have is that applications are ingrained in a client server mindset, in which big incumbents want to have this architecture because it forces control from the server towards to client. And control usually also means having the data itself, which is where the real value lies.

Comment · 2 months ago
Comment · 2 months ago
then it becomes a political issue between the EU and the US?

mind you, prior to this administration the EU was more then happy to help the US DOJ in such cases.

considering the stuff that happened in the past year or so, i doubt that would happen again. Actually calling bluff on the US is the only way to play this properly, because it gives the EU a mandate to strike back geopolitically if the US wants to retaliate for non-compliance by fastmail.

Comment · 2 months ago
the alternative being hetzner giving away EU based information to the US? which would absolutely destroy their reputation in the EU. (which is a far larger market for them).

The only way to spin this as hetzner is to go public with this and make it a political point for geopolitics between the EU and the US, and take the loss /call the bluff on the US threat.

Comment · 4 months ago
Comment · 5 months ago
also, in my experience high grades are rare in the netherlands at all education levels. I did both mbo and hbo levels, and on both levels getting a "A" (10/10 or 9/10) was a very uncommon thing.
Comment · 6 months ago
also, DAF was large in a very specific time in a very specific place. Let's not forget that the dutch car industry has always being dependant on german car industry.
Comment · 6 months ago
this is still kind of possible, by doing neighbour discovery and querying the host for its hostname with mdns.

In my opinion, this automatic mapping of DNS names to addresess is not part of the IP protocol, and shouldn't be.

Comment · 6 months ago
SLAAC is probably one of the better improvements of IPV6. DHCP breaks down at scale. Managing many DHCP prefixes becomes a massibe pain, SLAAC is far more scalable, far more easy to make redundant if you have redundant gateway's and protocol wise is really simple.
Comment · 6 months ago
arp simply breaks down in very large networks aswell.

Think about things like the following: you are a datacenter and are providing connectivity to the internet for your customers. Each customer get a vlan with a specific ip prefix attached to it. You prove the gateway for each customers subnet.

ARP crosses the L2 vs L3 boundary to do succesful address resolution. The problem this creates in large (mainly datacenter) networks is that a router needs to do arp resolution for for a LOT of networks. (i am talking about 100's of networks in past, many thousands with something like an EVPN vxlan).

Why is this a problem? Layer 2 lookups are usually done in the forwarding plane, and ARP resolution is usually a routing engine task. Doing it this way is very expensive compared to the IPV6 way of doing things. (multicast based address resolution).

The router only needs to send out one multicast packet per vlan, instead of doing arp resolution for each specific host in the vlan.

In modern datacenters this is "fixed" by doing arp suppression, which is a whole other level of hackary added on top of it.

Comment · 7 months ago
also, the knowledge about how a nuclear bomb works wasn't a secret. The way to produce one was the hard part to figure out. Without the espionage, a industrialised country like the USSR would have figured out how to produce an atomic bomb eventually.
Comment · 8 months ago
is it though?

for everything inside the EU, i highly doubt it is. For extraterritioral trade. The EU is large enough to trade with other countries in euros instead of dollars.

Comment · 8 months ago
> can't decide how to tackle illegal mass migration

the mass migration caused by american wars in the middle east you mean? Also, frontex seems to be working fine so far.

>on a single direction on defeating Russia

unlike the US, which has stopped all military aid to ukraine in 2025, and seems to be favouring russia more and more.

Lets not forget, europe is increasing its military en masse mainly because on one hand you have the russian flattening ukraine, and on other hand you have the US demanding greenland.

Who needs further enemies with friends like this?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton