5

Say I am operating a public service. Generally, people behave, but every once in a while someone does not, and it is usually good to know who you're receiving that blessing from.

Hence, assuming

  • that it's a good idea to keep track of recent IPs your users use,
  • that service providers generally give their customers a /64 block, and
  • software such as radvd or even isc-dhcp-server assume they get nothing less than a /64 block
  • that due to privacy extensions, at least Windows allocates multiple addresses in the /64 block that it rotates between (allocating more as it goes on)

would it be a good idea to just throw away the final 64 bit of an IPv6 address, and just keep track of the first 64 bit?

4
  • One small correction to your assumptions: ISPs will generally give their users more than a single /64. Expect /56 or /48 per customer. Exact sizes will vary per ISP. Aug 2 '16 at 23:55
  • 3
    Why throw the information away? You will probably need it later. You absolutely will need it for any sort of abuse reporting. Aug 3 '16 at 0:08
  • 1
    Good question - if the /64 is assigned by the ISP, and the other 64 bit are generated randomly by the customers' computers, then the other 64 bit appear to be only clutter. In normal operation, a Windows 10 PC with IPv6 will have half a dozen IPv6 addresses assigned to itself, but the /64 will be much more static.
    – Aaa
    Aug 3 '16 at 0:48
  • @SanderSteffann I think the point of his assumption is that they don't give customers anything smaller than a /64, so that's sufficient to identify the customer. Giving them more than a single /64 doesn't violate that assumption.
    – Barmar
    Aug 9 '16 at 18:57
12

Logging the /64 will get you to the netblock owner, but if/when you actually engage with the real person that is responsible for that network, they're going to want the full /128. With statically-assigned addresses or DHCPv6, they are going to have logs of which machines got which IP addresses, and without the full address, the information you provide loses much of its utility.

7
  • Wouldn't the /64 be enough to identify their customer already, though?
    – Aaa
    Aug 3 '16 at 0:46
  • 3
    @Stefan Suppose I have your /64. That's probably enough to identify your house, and I can send you a letter or whatever people do. But then how can you tell which of your kids it is so you know who to punish appropriately?
    – user253751
    Aug 3 '16 at 1:19
  • The /64 would have been enough to IP-ban your entire household, though.
    – user253751
    Aug 3 '16 at 1:20
  • 5
    @Stefan How would you identify the customer's customer? This all seems like a lot of thought to save a minuscule amount of disk space. Just save the entire address.
    – EEAA
    Aug 3 '16 at 1:21
  • 1
    Welcome! Have a great weekend.
    – EEAA
    Aug 5 '16 at 19:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.