Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For an internal cluster (db server, web servers etc..), is it good idea to use IPv6, which is faster and more secure? And make use of IPv4 just for the internet connection.

Is it good idea? (sorry for the newbe'ish question).

share|improve this question

2 Answers 2

That depends - When people say "faster and more secure" to me, that sounds more like marketing blurb than a proper technical judgement, but if you can point to specific reasons why IPv6 will be "faster and more secure" for your specific scenario and you can be sure that these benefits will outweigh any cost of making the change then by all means do it. In other words, does IPv6 fix a problem you actually have right now?

I have to say that personally I wouldn't have part of my internal network using IPv4 and part using IPv6 so for me the question would actually be "Should my whole internal network be using IPv6". Any speed and security gains you might get from making part of the network IPv6 will be negated by the support costs of a mixed environment and IIRC the need for a IPv6 --> IPv4 gateway in a mixed network will tend to negate any technical benefits.

share|improve this answer
    
That what I meant. The all internal network will use IPv6, and the communication for the outside world will use IPv4. For now, I don't see any performance gains for my particular case, since it's a very small cluster (5 servers). But I want to know if it's a good idea in general, for a bigger internal networks. –  stacker Dec 1 '10 at 9:15
    
It's something I would probably consider for an internal network / LAN if I was starting to build one from scratch right now. I'd want to test the applications and devices I planned to use with IPv6 and right now I wouldn't be shocked to find some configurations that had problems on a big LAN with all kinds of odd legacy equipment on it. But for a small discrete cluster like you describe this testing process shouldn't be too painful. –  RobM Dec 1 '10 at 11:01

IPv6 is more secure but for internal use I don't see that extra security as particularly worth it as I have lots of other security measures in place that I think are stronger (hardware firewalls, IPSec/IPTables etc.). Personally I use v4 internally and currently dual-advertise (4 & 6) our external services.

Oh and this is a good question by the way :)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.