[ILUG] [OT] private IPs in public dns zones

[Kevin Gannon]

> 
>> In fact I would ask questions of any ISP doing packet filtering
> 
> not packet filtering - route filtering...

This assumes they are running a default free network to
stop the traceroutes. Border filtering at OC48 speeds
is a problem for many vendors I know the Big Iron boxes
have no problem nor does a M20 however the biggest vendor
does have a problem even when running Turbo ACLs.

Anymay the Tier 1 attitude is everyone buys are bandwitdh
so if you are being DDoS you will have a huge bandwidth
bill next month ;-).

> 
>> But I degress RFC1918 address space is evil !.
> 
>so tell me, where do i get a class B? (or anything close to a class B,
>ie at least /20). roll on ipv6. i have a full 64 bits of 6BONE
> unicast address space all to myself: 3ffe:80c0:220:c/64
> 

IPv6 TLA assignment causes a lot more problems in terms of provider
independance and resiliance. You will be only allowed to announce
a TLA prefix within the global routing table. So you will be locked
into your provider or you will have to use some other method of providing
resilance outgoing is easy enough however if I am running 
www.bigecomercesite.com then its more of a problem and something like
a Distributed Director/Big IP solution is not the full story.

You maybe able to do address leaks within large providers however this
becomes harder to manage/understand in terms of troubleshooting in
that only some providers will see you prefix so some failure situations
will not be covered. It will become a world of private peering.

> both ping6'able from anywhere on the internet. (the ipv6 enabled net
> anyway).

I rember testing the Beta cisco code for IPv6 4 years ago it seems
like a distant memory.............

Regards,
Kevin