Ipv4 Address Exhaustion Puns

Disclaimer: I did try to google this.

So in my effort to get into the field of IT, Im learning about networks and how they work. I, currently learning about IPv4 exhaustion. Im wondering why we can't extend it from a 32-bit number to a 64 bit number and call it a day? Im also trying to understand how IPv6 works exactly, but I'll spare that for another sub if I can't grasp it.

Edit: Okay so IPv6 pretty much is a larger bit number. How will this effect datagrams as we know them currently? What are Pros and cons of IPv6

I received my c-band 5G Home Internet kit an hour ago and have done a few tests. Sadly, it's capped to 300 down /20 up (https://www.speedtest.net/result/12642884533) when my Visible tests have been over 700 down and about 80-100 up. Oh well.

The part I'm excited about, though, is it gives you a real ipv4 - it's not CGNAT. I started a basic python http server on my testing laptop hooked up to the Verizon unit, set the laptop to be in the DMZ in the modem and was able to hit my server on my computer running on a Comcast connection.

I've got in interesting one I think. I have BPG routes being advertised to me from a 3rd party (AWS) to an ASR-1001X that has a number of VRFs present. AWS sends very large networks (as they should) so that I receive something like 11.12.0.0/12. I have the need to send a more specific route downstream to my firewall, something like 11.12.123.0/30. It looks like the exist-map/inject-map combo would be the perfect solution for me.

This article here sums it up pretty well: https://www.noction.com/blog/bgp-conditional-route-injection

Now, the trouble is that when I went to apply the config the feature was missing from my VRF address family. Turns out Cisco knows and doesn't seem to excited to fix the issue. As it stands now I can only set an inspect-map at the system level and not specifically to a VRF. https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf40744

So my question, has anyone run into a similar situation before and found a viable workaround?

I’ve used T-Mobile Home Internet in the past and they hand you a CGNAT ipv4 address, which is unreachable from outside the network. I’m having a hard time researching if Verizon 5G home internet hands you a real IP or if it’s also CGNAT.

There are only 4 billion ipv4 addresses, and in practice there are far fewer. If each home gets one ip address, how hasn't the address space been exhausted already?

As a side question, are there estimates of how exhausted the address space currently is?

EDIT: This solution is working for me!

Hi guys,

I was struggeling long time setting up XMRvsBeast Raffle. I realized that my ISP doesn't provide me an public IPv4. Then, I tested a service for 7 days where someone provided me an public IPv4 (in cooperation with my ISP) - then it worked well! I already won the raffle once. Since I don't want to spend 10€ per months (that's the price for the pub IPv4 service), I did some research on my own.

I've set up an VSP for 1€ per month. I want to use it to convert IPv4 requests on the machine and forward it to the respective port (IPv6) on my PC that is mining. So I've set firewall rules for these ports in the VPS provider settings, installed "6tunnel" (on Ubuntu) and used the following command:

>6tunnel [PORT] [IPV6ADRESS] [IPV6PORT]

This should have worked since no error was thrown. Additionally, I've set the respective port forwarding rules in my router (IPv4 + IPv6!). And of course I've added firewall rules to my mining PC (Win 10).

When I use this tool https://www.yougetsignal.com/tools/open-ports/ , it says that the respective port is open.

I just re-registered for the raffle and that worked as well (didn't work without the VPS before (just for the 7 day trial of the expensive service))!

So I am happy that these things worked at least already.

But one things were me curious:

• monerod.exe continues throwing "No incoming connections, check firewalls/routers allow port 18080"
• p2pool does not show incoming connections (besides I've enabled them by setting them to "2")
• XMRvsBeast raffle history showed "2022-01-07 19:23:01 ERROR: Unable to connect to your p2pool node" - but I am not 100% sure if this may have been the time where I reinstalled the Ubuntu image today (does this error occur when the port closes in general or only when I've won but it didn't work?)

Now I am pretty unsure if it worked anyhow. Do you have any idea how to test it by myself without waiting for the raffle to choose me one day?

I already checked if my ISP maybe gave me a new IPv6 prefix but negative!

I already thought about using a DynDNS but since my IPv6 prefix is the same as when I set up the 6tunnel on the VPS, this shouldn't be causing this issue, right?

I am very thankful for all of your hints or ideas!

Thanks in advance!!

I've had the same ipv4 address for about a week so I tried to do some direct port forwarding and some upnp forwarding. Both worked! Nat type shows open on xbox right now, and plex is finally reachable without ngrok.

Ziply Fiber has 17 IPv4 address block allocations listed in ARIN. Is there anyway to tell from which ones of them Ziply Fiber DHCP assigns addresses in my service area (Forest Grove, OR)?

ZIPLY-FIBER-IPV4-1 to ZIPLY-FIBER-IPV4-17

I'm new to SIEMS and VMs, so if I'm missing something glaringly obvious, that's why. I've installed the Wazuh OVA onto my VMWare ESXI VM no problem (I hope). However, when I log into the Manager and check my IPv4 address to register my Wazuh Agent using "ip add", there isn't one listed. Under eth0 I have link/ether and my inet6 address, but no inet. The documentation I've seen says the default is the same IP as my host's IP, but that doesn't work and isn't listed under "ip add" in the manager console. Am I missing a step or something stupid obvious?

Friday I noticed my servers weren't accessible remotely over ipv6 anymore. When I got home and checked, ipv6 was gone and I now have a public ipv4. Do I reconfigure all my ddns for ipv4 now or is this going to keep switching back and forth?

How often is this implemented?

In rfc8305#section-7.2 it says,

>7.2. Hostnames with Broken AAAA Records
>
>At the time of writing, there exist a small but non-negligible number of hostnames that resolve to valid A records and broken AAAA records, which we define as AAAA records that contain seemingly valid IPv6 addresses but those addresses never reply when contacted on the usual ports. These can be, for example, caused by: o Mistyping of the IPv6 address in the DNS zone configuration o Routing black holes o Service outages While an algorithm complying with the other sections of this document would correctly handle such hostnames on a dual-stack network, they will not necessarily function correctly on IPv6-only networks with NAT64 and DNS64. Since DNS64 recursive resolvers rely on the authoritative name servers sending negative ("no error no answer") responses for AAAA records in order to synthesize, they will not synthesize records for these particular hostnames and will instead pass through the broken AAAA record. In order to support these scenarios, the client device needs to query the DNS for the A record and then perform local synthesis. Since these types of hostnames are rare and, in order to minimize load on DNS servers, this A query should only be performed when the client has given up on the AAAA records it initially received. This can be achieved by using a longer timeout, referred to as the "Last Resort Local Synthesis Delay"; the delay is recommended to be 2 seconds. The timer is started when the last connection attempt is fired. If no connection attempt has succeeded when this timer fires, the device queries the DNS for the IPv4 address and, on reception of a valid A record, treats it as if it were provided by the application (see Section 7.1).

It seems that wikipedia has a broken ipv6 address. if you dig aaaa wkipedia.org you can find a record of it but if you curl it via ipv6 (if you have ipv6 network)

curl -6 https://en.wikipedia.org/wiki/Main_Page

you can find that it can't be access via IPv6 network.

edit: I guess it's just my network. sorry

I have a MacOS that lives in a IPv6 only networ

Greetings,

I recently joined a mid-size company that has handful of public IPv4 addresses from two ISPs. I am thinking of getting us IPv4 addresses as we are planning to move to a new location and didn't want to get us tied to the ISPs. I wonder how to start the process and your suggestion on whether I should sweat to get us IPv4 addresses or not.

We have a hybrid network with presence in all three public cloud providers, and planning to go to SD-WAN soon.

Thanks,

Hello,

I have a Dedicated server at Hetzner running Proxmox, now I have a problem.

My VMs don't have access to the internet, and I want to also have access to the VMs from the internet.

My goal is that the Host system (Dedicated server) and all VMs share the same IPv4, as I only have one ATM.

I already tried multiple things I found trough google searches, but they don't seem to get me there (The best they were doing is to lock me out (unreachable SSH and Proxmox GUI) so that I had to boot into the rescue system, mount the ZFS Raid, change the interfaces file back to the last working configuration, unmount the ZFS and then use the KVM command and VNC to import the ZFS raid into the Proxmox install and reboot).

My /etc/network/interfaces file looks like this (Host system works fine, only VMs are inaccessible and also can't access the internet).

https://preview.redd.it/uzqo6w55id781.png?width=665&format=png&auto=webp&s=fa37fad20d5df81cc7d30b49c697564269d5c3d3

Thanks in advance.

And merry Christmas!

EDIT:

I got it working, if anybody has the same problem this will probably be your solution:

auto lo
iface lo inet loopback

iface enp2s0 inet manual

auto vmbr0
iface vmbr0 inet static
	address 95.xxx.xx.xxx/26
	gateway 95.xxx.xx.65
	bridge-ports enp2s0
	bridge-stp off
	bridge-fd 0

auto vmbr1
iface vmbr1 inet static
	address 10.0.0.1/24
	netmask 255.255.255.0
	bridge_ports none
	bridge_stp off
	bridge_fd 0
	post-up echo 1 > /proc/sys/net/ipv4/ip_forward
	post-up echo 1 > /proc/sys/net/ipv4/conf/vmbr0/proxy_arp
	
	post-up iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o vmbr0 -j MASQUERADE
	post-down iptables -t nat -D POSTROUTING -s 10.0.0.0/24 -o vmbr0 -j MASQUERADE
	
	post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 80 -j DNAT --to 10.0.0.101:80
	post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 80 -j DNAT --to 10.0.0.101:80
	post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 443 -j DNAT --to 10.0.0.101:443
	post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 443 -j DNAT --to 10.0.0.101:443

Enp2s0 is your physical interface.

95.xxx.xx.xxx/26 is your public IP.

95.xxx.xx.65 is the gateway provided by your host (in my case, Hetzner).

And the PREROUTING rules are kinda port forwarding the first p

Hi,

Is there a possibility to get IPV4 DNS Address for Additional Profiles? . I have a TV that I want to have on a separate profile than my router, and the only option is to use IPV4 DNS address (instead of IPV6, DNS Over TLS, DNS Over HTTPS).

Thank You!

Client emails our help system and states that her business is running out of IP addresses. My first thought is "No tf it's not". But oh yes, tf it was.

So the network is a 24 bit network. Which means the last octet controls the client ip address. The first three octets are the network. So for the sake of an example, I'll give you a class C IP address of 192.168.1.0/24 -- that's the network.

This particular network has a DHCP with a scope starting at 192.168.1.30 and ending on 192.168.1.200. For those keeping score at home, that's a possibility of 170 IP addresses to assign to clients. This small business does absolutely NOT have 170 users or devices. Even if you consider the cell phones and personal devices they may bring from home. They have less than 10 people working there. At the absolute most they'll use 30 IP addresses, maybe.

So I get on the server remotely and do the command arp -a and discover that all 170 IP addresses are assigned to hardware addresses. This immediately prompted me to open the DHCP feature and look at the actual DHCP entries.

A solid list of iPads scrolling down the screen. Over 100 of them. So I called the user and asked her why there are over 100 iPads on her network, last contacted today. And she said she had no idea why that would be there. So I did what any self-righteous network engineer would do. I dropped all the leases on every iPad I saw on the list. And sure enough, they popped right back on one by one. They were not only connected to the network, they were live.

So I asked if I could escalate to on-site and come by to do a survey (And find the tons of iPads hidden in a closet on a mass charger or some stupid shit like that) and she agreed. So I arrived at the site and noticed that the office is in an office building with several other offices and clinics on the same floor. I got on the server and decided to ping a random address. Response was a 0% lost. So my hunt began. Looking all around for iPads and found absolutely nothing. I sat there on my laptop connected to the network trying to figure out what the hell was going on and it was then that the client's daughter came up to me to show me a drawing she did.. ON A FREAKING IPAD. It was around 3:30pm and school let out and she had her daughter at her office with her.

Come to find out, the daughter goes to school next door at this weirdly elite private church/school thing, where ever

EDIT: Reboot fixed it. I am not amused by this apparent bug.

New to OPNsense and muddling through configuration. I'll be running a bunch of VLAN's that I've configured already as virtual interfaces on the physical LAN port. I believe the subnetting is all set correctly (no overlaps, correct masks, etc.). I'm getting errors as such when I attempt to start the DHCPv4 service in the dashboard, and the service will never actually start all the way:

/status_services.php: Warning! dhcpd_dhcp4_configure() found no suitable IPv4 address on opt3

I have a message like that for each of the VLAN's that I've enabled DHCP for.

Any ideas why this might be? Happy to post configuration or other log messages if they'd help.

I was under the impression that we were out of IPv4 addresses? Is that not the case?

And azure definitely isn't just giving me a shared address because I can open a port and run an API on it and access it from anywhere in the world which wouldn't be possible of the IP was shared.

So how come Azure is just handing out unique static IPs to VMs?

Hello all, received my Franklin t9 and Calyx SIM recently and have been noticing something rather odd. I have my device band locked to pick up the best signal from a nearby tower on Band 25 which after a lot of testing is giving me my highest DL and UL speeds (about 25+ down and 2-5 up), I know not great but infinitely more useable than my sub 1mbit CenturyLink DSL line).

Anyway, everything seems to be chugging along with gigs of data transferred without issue when for no reason the T9 suddenly looses its IPv4 address and only has an IPv6 address as shown in the attached image.

On my Windows 10 machine it's not really an issue, but my Roku media players, some media apps and other devices don't work with just IPv6 addresses and need that IPv4 address to function properly.

Any idea on why this may be happening and a way to resolve it? I have noticed this same thing occurring on other bands including 26, 12 and 71 so it's not specific to this one Sprint tower either as those bands are coming from two different towers, one Sprint (broadcasting Bands 25,26) and one T-Mobile (12,71).

I should mention that eventually the IPv4 IP address to the hotspot does come back but it can take several hours, usually by the next day.

No IPv4 IP

Sorry for being naive i just started out on computer science

Edit: thank you for everyone's explanations, i understood it now! Have a nice day!

My ISP has a voice calling app, which allows you to make free calls when connected to that ISP router.
When I change the DNS server in ISP router, the ISP provided voice-calling-app doesn't work.
I saw a comment in a forum which said, I can use nextdns rewrite rules to return the local router ip address, for the app to work.
But that setting didn't work for me, I think I will have to return both ipv4 and ipv6 address for it to work.
How can I write rewrite rules such that nextdns dns server returns both ipv4 and ipv6 address for a dns query for a single domain.

nslookup from my ISP dns.

PS C:\Users\nan> nslookup jiofiber.local.html
Server: reliance.reliance
Address: 2405:201:e002:8b59::c0a8:1d01

Name: jiofiber.local.html
Addresses: 2405:201:e002:8b59::c0a8:1d01
192.168.29.1

nslookup result from nextdns when I create a rewrite rule to return ipv4 address.

PS C:\Users\nan> nslookup jiofiber.local.html
Server: UnKnown
Address: 2a07:a8c0::63:1e14

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Non-authoritative answer:
Name: jiofiber.local.html
Address: 192.168.29.1

I don't know why there was a dns request timeout.

I have on-premise docker swarm cluster and on which I have a node running openvpn server. Then on remote oracle cloud I have a node that is connected to this openvpn server as a client.

That node running openvpn server is also a swarm manager so I was able to generate token for worker then ran that token command on oracle cloud node which became part of the on premise swarm cluster. Now the problem is on that node on oracle cloud containers get created but not starting. And I am seeing this error on every container I am trying to start on the orcale cloud node.

starting  container failed: error creating external connectivity network: could  not find an available, non-overlapping IPv4 address pool among the  defaults to assign to the network

I came across this thread on SO: https://stackoverflow.com/questions/43720339/docker-error-could-not-find-an-available-non-overlapping-ipv4-address-pool-am but in that they are discussing getting rid of openvpn to start the containers but I want to keep the openvpn connection. what should i do ?

Whenever I go to a website such as this website reddit itself, when I want the option of wanting a new circuit for this website, even when my new exit relay shows an IPv4 address, the website shows me that I am viewing it not from my new IPv4 exit relay IP but instead some IPv6 address. Here is what happens

Before the new circuit

Guard relay - a.b.c.d

Middle relay - e.f.g.h

Exit relay - i.j.k.l

You are viewing this website from - i.j.k.l

After new circuit for this website

Guard relay - a.b.c.d

Middle relay - m.n.o.p

Exit relay - q.r.s.t

You are viewing this website from - abcd:1234:ab12:cd12::1. It gives me some IPv6 address like this. It does not show my exit relay IP which is q.r.s.t.

Why do I get this? Is this something that is completely ordinary?

When opening a command prompt and typing in ipconfig, my default gateway is different than on any device, and im unable to connect to it in a browser on said device but i'm able to on any other one in the house. I know everything is accessed via the myxfi site now however that's not my issue. Been trying to play games wirelessly on my pc with my oculus quest but been unable to connect and i'm assuming it is because of the miss matching gateways and ipv4's. Is there any way to reset these back to 10.0.0.1?

Who all is getting a routable public ipv4 address on their Wan interface? I've heard some people are and some aren't. Is it just on certain firmwares that people are getting them? I'm on 3155b85a-29b0-4de0-8c5e-c23c321bf245.uterm.release. I'm still only getting a private cgnat ipv4.