[ipv6hackers] Scanning for IPv6 addresses embedding TCP/UDP service ports

Fernando Gont fgont at si6networks.com
Fri Feb 22 13:53:41 CET 2013


On 02/22/2013 09:35 AM, S.P.Zeidler wrote:
>> Yeah.. Additionally, this scheme will most likely be used for servers,
>> with the address indicating the "main" service provided by such server.
> 
> Not necessarily.
> 
> Consider:
> mail.netbsd.org has IPv6 address 2001:4f8:3:7::25
> ns.netbsd.org has IPv6 address 2001:4f8:3:7::53
> 
> mail.netbsd.org and ns.netbsd.org are on the same machine at present.

What I meant is that I'd expect addresses for services other than the
ones I listed in my original email to be unlikely. (e.g. "lightweight"
services would be hosted together with other services, and the address
would correspond to the more "heavy-weight" service) -- but yes.. this
is just me doing guesswork.


> I got seriously fed up with having to re-delegate domains because
> (silliest case) an ethernet interface needed to be replaced, so 
> I picked manually set service addresses.

draft-ietf-6man-stable-privacy-addresses would have taken care of that ;-)


> The service only uses its
> special address, but the server has a "chassis address" additionally
> too, so I could migrate one service from one server to the next without
> needing to touch other services (or the zone).

Understood. -- For curiosity sake: the "chassis address" is a "lowbyte"
address, IPv4-based address, SLAAC, or something else?

Thanks!

Best regards,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492







More information about the Ipv6hackers mailing list