Over-utilisation of v6 neighbour slots

[Phil Mayers]

On 22/10/13 10:18, Sam Wilson wrote:
>
> On 22 Oct 2013, at 06:03, Eric Vyncke (evyncke) wrote:
>
>> But, the rapid rate of new RFC 4941 addresses for iOS has another
>> impact because network devices cannot anymore limit the number of
>> IPv6 addresses per MAC address in order to prevent a local DoS.
>>
>> So, either you disable SLAAC and rely on stateful DHCPv6 (but then
>> Android is not happy) or use aggressive time to clean the ND
>> cache...
>
> ... with the attendant difficulty in tracing systems that might be
> doing Bad Things.
>
> We have a mixture of Sup2Ts and Sup720s and we don't (yet) have v6
> enabled on most of them.  It's stuff like this that makes me think
> it's *still* not time to offer a general v6 service.

I disagree - and since I'm the one who posted about the problem, I call 
dibs on getting to decide how serious it is ;o)

We offer a general IPv6 service, and we've had very few real problems. 
It is NOT as hard as people make out, and if you wait until every last 
problem is solved, you'll be waiting forever.

You'll also be missing out on the opportunity to learn about issues 
early and influence your vendors and your own future purchases in 
appropriate ways.

"Hold off on IPv6" is something I would recommend to my competitors...