Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Oct 2019 08:15:38 +0200
From:      Baptiste Daroussin <bapt@FreeBSD.org>
To:        abi <abi@abinet.ru>
Cc:        freebsd-ports@freebsd.org
Subject:   Re: Is IPV6 option still necessary?
Message-ID:  <20191009061538.re66hcii2z73ry6p@ivaldir.net>
In-Reply-To: <9b8c9b1b-0d26-d9d7-018a-cafa8ec98c1e@abinet.ru>
References:  <20191007.151841.1094708479149685365.yasu@utahime.org> <9b8c9b1b-0d26-d9d7-018a-cafa8ec98c1e@abinet.ru>

next in thread | previous in thread | raw e-mail | index | archive | help

--25k3q7h7np4rfcbo
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Oct 08, 2019 at 10:16:08PM +0300, abi via freebsd-ports wrote:
> 07.10.2019 09:18, Yasuhiro KIMURA =D0=BF=D0=B8=D1=88=D0=B5=D1=82:
> > On October 10, 2012 IPV6 option of all ports was enabled by
> > default. Commit message said "We are in 2012, it is time to activate
> > IPV6 options by default everywhere".
> >=20
> > And now we are in 2019. IPv6 is more widely used than 2012. So I
> > wonder if IPV6 option is still necessary.
> >=20
> > If you use official packages then you always use IPv6-enabled
> > binaries. And even if you build packages by yourself you still use
> > IPv6-enabled ones unless you disable IPV6 option. So I think at most
> > only a few people uses IPv6-disabled packages.
> >=20
> > Are there anybody who still disables IPV6 option for some serious
> > reason such as working around IPv6-related problem? If there aren't
> > then I think it's time to remove IPV6 option from ports framework.
> >=20
> I'm writing from 2019 and I build kernel and ports without IPv6. For all
> this years I fail to understand why I need it.
>=20
> My home devices fit 10.0.0.0/16 nicely, I have faith in NAT and I
> encountered no IPv6-only sites.
>=20
> But I saw CVEs in IPv6 stack.

Plenty of FreeBSD things are ipv6 only in the FreeBSD cluster. In particula=
r if
you do look at the build machines in the cluster, no ipv6 will mean no acce=
ss to
the build log in case of failures.

I agree I don't see the reason why we should keep that ipv6 option. When off
this option does not bring much value to the users as the code for apps to
support ipv6 mostly reside in the libc. Actually that was my intent in 2012=
 to
first turn it on by default everywhere and then drop the option entirely.

Best regards,
Bapt

--25k3q7h7np4rfcbo
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=mGKZ
-----END PGP SIGNATURE-----

--25k3q7h7np4rfcbo--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20191009061538.re66hcii2z73ry6p>