Dual Stack home network pros and cons

[Frank Monroe]

Tunnels, Native and Passthrough are different. I don't know if they produce the same results. Security approach is different for sure.

The point is to get IPv6 connectivity. So you put the tunnel on another router from the vendor of your choice. Then you connect the WAN port of your ASUS router to the tunnel router. Your ASUS router won't know the difference. This would setup a nice testing environment. I have personally used this setup in the past for such purposes. It worked quite nicely. This is the exact same technology the ASUS supports to provide IPv6 connectivity through some ISP's. Its a native feature of the router.

 

[Tech9]

The point is to get IPv6 connectivity.

Well, I have IPv6 connectivity right now. Cleanbrowsing DoT server answers from Japan. NordVPN site is in Chinese. Reading what's going on.

 

[Frank Monroe]

Well, I have IPv6 connectivity right now. Cleanbrowsing DoT server answers from Japan. NordVPN site is in Chinese. Reading what's going on.

Sounds like a routing issue. My guess is your DoT sever is using anycast routing, as it should. But the routing has sent you to one of its DNS servers somewhere else not in your region. I am having the exact same issue right now with another DNS service provider. Their IPv4 DNS servers are responding from the east coast of the US while their IPv6 servers are sending me to Los Angeles 3,000 miles way. Because of this, the IPs returned are not appropriate for my region.

 

[Tech9]

Sounds like a routing issue.

I don't see how to fix this for now. IPv6 documents are huge and I don't know what's used in my IPv6 connection. Need more time to investigate.

Parental Controls test is inconclusive, main sites are IPv4 with some ads coming through IPv6 only. It's working well enough in current state, I guess. Need to delete my browsing history, LOL.

 

[Frank Monroe]

I don't see how to fix this for now. IPv6 documents are huge and I don't know what's used in my IPv6 connection. Need more time to investigate.

If its what I am saying, its out of your control. It doesn't matter if its IPv4 or IPv6, its not something. you can fix on your end. If these are IPv6 servers and they are indeed anycast, you can see by doing a traceroute6 to the iP. There are ways to work around it. But, I doubt you will like any of the workarounds.

 

[Tech9]

It doesn't matter if its IPv4 or IPv6

From an end user stand point - it does matter big time.

IPv4 - local server in Toronto, 12ms
IPv6 - a remote server in Japan, 340ms

 

[Frank Monroe]

From an end user stand point - it does matter big time.

IPv4 - local server in Toronto, 12ms
IPv6 - a remote server in Japan, 340ms

Sorry, I got this confused with the other discussion. Let me correct my response:

I agree, to the end user it doesn't matter. My point is, its an anycast issue. Its not an issue specific to IPv6 or IPv4.

 

[L&LD]

As a mere 'end-user' of IPv6 since the 2015/2016 time frame, I haven't found any issues with having it enabled (vs. when I only had IPv4) in my own network.

If anything, being stuck on IPv4 is an issue today. Even if one doesn't know it.

With IPv6 enabled on an RMerlin powered router like the RT-AC86U, RT-AX68U, RT-AX88U, and RT-AX86U, the internet is more immediate, on almost any device I care to browse it with.

Security will always be a moving target. But the last half-decade has proven to me (and not just me) that IPv6 is not inherently unsafe.

The networks I feel safest on are FTTH direct connections. The networks I almost refuse to connect to are any 'cable' type ISPs (I do of course, but only with a VPN running back to my home router).

And for the record, I have 'Native' IPv6 from my provider.

IPv4 vs. IPv6 is still a good question today. For academic purposes.

Choosing to not use IPv6 isn't the correct choice, IMO, if security is the excuse to not enable it.

Some things don't need to be overly examined/analyzed: they just need to be experienced/enjoyed. And my results are that the positives outweigh any negatives (if the negatives can be proven 'unfixable', of course).

Ying/yang. I choose to see the positive, where I can.

 

[Tech9]

Noone is suggesting this to an end user.

I mean, I see performance issues and strange behavior on day one after enabling IPv6. Asus router, IPv6 enabled, IPv6 score of 19/20. My question is if there is a way to improve this. I don't mind transparent IPv4 + IPv6, but the Internet experience have changed to worse. OpenDNS sends me to correct local servers, but user categories are not supported with IPv6. NextDNS and Cleanbrowsing offer custom categories with IPv6, but with paid service.

they just need to be experienced/enjoyed

The only enjoyment or to say better satisfaction so far it the IPv6 assessment score of 19/20. Testing with different DNS servers now to see if the experience improves. OpenDNS and Google DNS are all local - a good thing. Cleanbrowsing is 10000km away, Quad9 is 2000km away. Both have local servers in Toronto, but not used with IPv6 enabled for some unknown reason. Trying to figure out what's wrong and it takes time. Teksavvy on Rogers Cable.

 

[Frank Monroe]

I mean, I see performance issues and strange behavior on day one after enabling IPv6. Asus router, IPv6 enabled, IPv6 score of 19/20. My question is if there is a way to improve this. I don't mind transparent IPv4 + IPv6, but the Internet experience have changed to worse. OpenDNS sends me to correct local servers, but user categories are not supported with IPv6. NextDNS and Cleanbrowsing offer custom categories with IPv6, but with paid service.

I have yet to experience a negative performance impact since I enabled IPv6 on my AC5300. If anything, performance has improved. I do on occasion have a similar issue with DNS, but like I said, its an anycast issue with my DNS provider that they have to fix. One day their IPv6 servers have the issue. The next day their iPv4 servers have the issue. Also, just because you have switched on IPv6 on your router does not mean you have to use an IPv6 DNS server. You can still use IPv4 DNS servers and they will still return IPv6 IP's for clients that request AAAA lookups. I use IPv6 DoT DNS servers. But, my needs may be different than yours.

 

[Frank Monroe]

I mean, I see performance issues and strange behavior on day one after enabling IPv6. Asus router, IPv6 enabled, IPv6 score of 19/20. My question is if there is a way to improve this. I don't mind transparent IPv4 + IPv6, but the Internet experience have changed to worse. OpenDNS sends me to correct local servers, but user categories are not supported with IPv6. NextDNS and

Just for grins, can you give me the DNS server you are using that's giving you the wrong IP and also give me the host that is being looked up and IP that it returns?

 

[Tech9]

NordVPn site become local after switching to Google DNS:

Never had this happening when running IPv4 only, using any DNS service provider. Here is a real use experience.

 

[Frank Monroe]

NordVPn site become local after switching to Google DNS:

View attachment 38114

Never had this happening when running IPv4 only, using any DNS service provider. Here is a real use experience.

I don't doubt you. Like I said, the other provider has an anycast routing problem with their IPv6 IP's. They will need to fix it or have their provider/carrier fix it.

 

[Tech9]

Just for grins, can you give me the DNS server you are using

It was set to:
IPv4 - 208.67.222.222, 208.67.220.220
IPv4 - 2620:119:35::35, 2620:119:53::53

Fixed now changing to Google DNS servers.
IPv6 experience so far is not exactly turn on and forget about it, but I'm getting there with some tradeoffs.

 

[Frank Monroe]

It was set to:
IPv4 - 208.67.222.222, 208.67.220.220
IPv4 - 2620:119:35::35, 2620:119:53::53

Fixed now changing to Google DNS servers.
IPv6 experience so far is not exactly turn on and forget about it, but I'm getting there with some tradeoffs.

You may also fix the issue by using their IPv4 DNS server instead of their IPv6 DNS server. The routing issue is probably not happening on both.

 

[Christos]

I mean, I see performance issues and strange behavior on day one after enabling IPv6. Asus router, IPv6 enabled, IPv6 score of 19/20. My question is if there is a way to improve this. I don't mind transparent IPv4 + IPv6, but the Internet experience have changed to worse. OpenDNS sends me to correct local servers, but user categories are not supported with IPv6. NextDNS and Cleanbrowsing offer custom categories with IPv6, but with paid service.



The only enjoyment or to say better satisfaction so far it the IPv6 assessment score of 19/20. Testing with different DNS servers now to see if the experience improves. OpenDNS and Google DNS are all local - a good thing. Cleanbrowsing is 10000km away, Quad9 is 2000km away. Both have local servers in Toronto, but not used with IPv6 enabled for some unknown reason. Trying to figure out what's wrong and it takes time. Teksavvy on Rogers Cable.

@Tech9 try DNS that do not use EDNS Client Subnet (ECS), like Cloudflare.

 

[Tech9]

Also, just because you have switched on IPv6 on your router does not mean you have to use an IPv6 DNS server.

Mmm... in Asuswrt IPv6 settings you have Manual or Automatic options. If I don't use Manual, it will use ISP's IPv6 DNS. No? DNSFilter won't stop IPv6 lookups, as far as I understand. I would like to test IPv6 everything, if possible.

@Tech9 try DNS that do not use EDNS Client Subnet (ECS), like Cloudflare.

Coming up. Another trade off though - 1.1.1.2 doesn't appear to support DoT at the moment, in case I would like to keep this functionality. I would like to have some Malware/Phishing protection similar to running IPv4 network only.

 

[Frank Monroe]

Coming up. Another trade off though - 1.1.1.2 doesn't appear to support DoT at the moment, in case I would like to keep this functionality. I would like to have some Malware/Phishing protection similar to running IPv4 network only.

I'm using DoT through IPv6 DNS servers without issues.

 

[sfx2000]

Interesting thread so far...

Keep in mind that IPv4 isn't going anywhere, it will be around for a very long time...

IPv6 adoption will be mostly driven by two forces - the carriers, and the content providers... and efforts there are increasing at an accelerating scale.

Most folks are on IPV6 and don't even notice it...

Interesting read here...

Why is IPv6 faster?

Why is IPv6 faster than IPv4? Lee Howard, founder of Retevia, explores this question and shares his findings following his recent presentation at NANOG 76. He also provides detailed instructions for how to enable IPv6 on your website based on your web host.

www.arin.net

ARIN.NET is about as an authoritative source as anyone, perhaps even more that IETF/IEEE...

 

[Tech9]

Interesting thread so far...

Since most of us can't read source code, all we can do is test what the code does, right?