Nat

Mon Dec 21 03:11:53 UTC 2015

> 	I agree that a /48 or /56 being reserved for business
> customers/sites is reasonable.  But for residential use, I'm having a hard
> time believing multi-subnet home networks are even remotely common outside
> of networking folk such as the NANOG members.  A lot of recent IPv4
> devices
> such as smart TVs have the ability to auto-discover things they can talk
> to
> on the network.  If we start segmenting our home networks to keep toasters
> from talking to thermostats, doesn't this end up meaning your average home
> user will need to be proficient in writing FW rules?  Bridging an entire
> house network isn't that bad.

I have (currently) 6 network segments.  One for my "trusted" clients, one for my "trusted" servers, one for the "entertainment" systems, one for "dirty & untrustworthy" computers (such as those from $dayjob), one for "clean" WiFi, and one for dirty WiFi.  If there were any additional classes of devices, they would live in their own subnets as well.

I cannot habituation between classes of devices on the same network segment.  Untrustworthy devices are relegated to their own segments where they cannot talk to anything that they ought not be talking to.  Of course, your definition of "untrustworthy" may not be the same as mine.  Any device over which I do not have supreme complete authority is untrustworthy -- which by definition includes most entertainment and other "Internet-of-Crap" devices.