in ,

Giving every IPv6 address a name, Hacker News








You can useIPv6address.has-a.nameas a domain name for any of your containers or VMs. The required format is– ******************************** – 9abc-def0 – 4009 – – 9abc- This is already a valid name and points to the IPv6 address: **************************: 9abc: def0: (********************************: 9abc: def0.


Imagine the following: you have a container or virtual machine running with IPv6 and you want to give somebody access to it.

IPv6 being IPv6, it is very easy to give someone access. However, you might also want to use HTTPS. First, because HTTP does not look good in browsers anymore. Secondly, because it is more secure. And thirdly, Because contributing to more encrypted traffic is a good thing for the Internet.

But you cannot get a certicate that you need for HTTPS without a name.

Developing a tool to map IPv6 addresses to names

At the lastHack4Glaruswe were brainstorming and testing solutions on how to solve this problem. How can we giveanyIPv6 address a name? At the Hackathon our Participants invited a coolstateful solutionthat is now even reachable atweneedaname.

After the hackathon our team was continuing to brainstorm on how to solve this problem, but in a stateless way.

Knot to the rescue

Eventually we rediscovered a software that we have been running for a while already:KnotDNS. We use it to synthesize reverse DNS records for all IPv6 addresses in our networks. That’s why you can do a reverse lookup of ANY IPv6 address in the 2a0a: e5c0 :: / network and you will get a reply that results for instance in the name2a0a-e5c3-cafe-cace – – 29 – 06 – 4009. loves.

Also the opposite works, so looking up above name, results in finding the IPv6 address2a0a: e5c3: cafe: cace ::.

With, we took it one step further: Instead of limiting the lookups to our own network, you can use this name foranyIPv6 address.

Let’s for instance take google’s IPv6 address 2a 200: (********************************: **************************::: e. If google did not yet point to it, googlecoulduse 2a 2a) – 4009 – – 1234 –

**************************************** – – as an alternative domain name. Obviously not that practical for google, but not everybody is google. is a service for anyone building IPv6 applications

The reason why we introduce thehas-a.nameservice is to allow anyone quick prototyping with IPv6. Anyone can have an IPv6 network. Either via a VPN (our claim is it works anywhere withIPv6VPN.chor on yourIPv6 only VM. With IPv6 you can quickly bootstrap your service and show it to anyone in the world.

With you can now also use SSL certificates on any IPv6 address.

If you want to discuss the service, we invite you to join theIPv6.Chat.

                     ******************         ****************Read More************************

What do you think?

Leave a Reply

Your email address will not be published.

GIPHY App Key not set. Please check settings

Feliĉan Zamenhofan Tagon, Hacker News

Why killer whales — and humans — evolved menopause, Ars Technica

Why killer whales — and humans — evolved menopause, Ars Technica