On the corporate side, it's annoying that Github, Twitter and OSUOSL (which hosts a lot of Free Software projects) still don't have IPv6 enabled (although I was told 2016-Q1 for OSUOSL).
The ISPs even refuse to offer IPv6 when it comes to "big" customers, like apartment cooperatives with hundreds of apartments... You have to turn to the small/local ISPs for (consumer) IPv6 here.
VPS? Datacenter?
For example only: Stop Forum Spam only recently began testing their work for IPv6: https://www.stopforumspam.com/forum/viewtopic.php?pid=44371
I re-wrote my comment spam solution (not specifically for the comment spam problem, was doing some other stuff) and have long since enabled IPv6, but it's worth bearing in mind that network is one thing, sometimes what holds someone back from flipping the switch are the tools we use.
I've been running IPv6 on Comcast for two years using one of their recommended Motorola (Arris) Surfboard modems and an Airport Extreme, and didn't have to configure anything at all.
Given a typical user that doesn't know what IPv6 even is, if they just plug everything in and have a Mac or recent Windows box it should all just work.
I'm looking at the "per country" graph, which highlights latency issues, but it looks like they wouldn't really be noticeable to the user. However, is there much point when IPv4 works fine?
(Perhaps 10% of our users are from the countries marked in pink/red on Google's map.)
Universal IPv4 would enable some cool stuff, like giving every device on the planet a unique IP (or even several to increase anonymity), as well as vastly simplifying many common networking problems. Here's one example: Have you ever tried to use a home internet connection to host a server, say for home automation, file sharing or gaming? It's a huge pain for anybody who isn't network-inclined. By giving everything a unique IP, routing setup for this sort of thing becomes much easier since every device has a unique, static IP address that it can always be found at.
Also, IPv6 has some security and encryption features that are not found in IPv4, which should basically end packet spoofing as an attack. It's also a bit faster too, because packet integrity isn't as rigorously checked and routing is simpler.
Even if we were short, would we necessarily want to enable IPv6 on the webserver? I'm interested to know if it makes any difference to users:
- Does it make things noticeably faster (or slower) for any?
- Does it totally break (or fix) access to the website for anyone?
Faster for many but slower for a few would be OK, but faster for some but broken for a few wouldn't be acceptable.
One major advantage of IPv6 for the web I run into regularly: debugging attacks/issues/traffic from folks behind carrier-grade NAT is extremely annoying.
Curiously Google's managed MySQL instances receive IPv6 addresses by default, but I believe that's the only component of their service that does.
This has happened with every Linux desktop I've ever used. If IPv6 is enabled, then half the time I try to visit a website, the connection doesn't go through. No error either; it just sits there forever and ever. It's particularly aggravating when AJAX is involved--you get to experience Google Maps stop working for about five minutes while you're using it.
I've observed it across multiple Linux distributions for several years now. I've learned to always add "ipv6.disable=1" to my sysctl.conf if I want a working network.
To diagnose a thing, what happens when you disable Router Advertisements on your router, then enable IPv6 on a machine, and run Teredo [0] on that machine? (After Teredo assigns an IPv6 address to the teredo virtual interface, start a 'ping6 google.com'. It will take a few minutes for the Teredo machinery to figure out how to make a connection, but it should eventually do so.)
Are you -perhaps- rejecting or dropping ICMP on your router? If you are, don't. ICMP is required to make IPv6 work.
[0] This is the Teredo implementation that people use on Linux systems http://www.remlab.net/miredo/
Thanks for the advice!
'options single-request' to the end of /etc/resolv.conf
Let me know if you try it and it works.
Also, remember with IPv6 has entirely different firewall rules. Remember to setup ip6tables. You might be totally protected on ipv4 and totally exposed on ipv6.
You can usually get away with it in IPv4, but with IPv6 it causes connections to stall as soon as you try to push any significant amount of data through a TCP connection.
* Some need a newer modem -- which might take a while before everyone switches.