RIPE our of IPv4

Sabri Berisha sabri at cluecentral.net
Tue Nov 26 23:58:01 UTC 2019


----- On Nov 26, 2019, at 7:59 AM, Willy Manga mangawilly at gmail.com wrote:

Hi,

> I would have said the very very minimum could be to invest in a
> dual-stack 'proxy' for public-facing services; internal or external
> solution, you have the choice.
> 
> And why even do that ? Because the other side is not only on IPv4.

Using a dual-stack proxy is not always an option. Source IP information may be needed on the app level for risk analysis, OFAC compliance, and copyright purposes. For example, Paypal will definitely use IP address information in its fraud risk analysis.

That said, there are of course ways to do that while using a proxy. However, that will now require some for of development. Dev time better used to properly implement v6.

Unfortunately, I've been part of way to many discussions where the only thing a beancounter wants to know is: what is the short term effect of not doing it?

Short term exec bonuses, short term decisions.

Thanks,

Sabri



More information about the NANOG mailing list