98% of sites on Cloudflare now use IPv6

https://blog.cloudflare.com/98-percent-ipv6/

by jgrahamc • 10 years ago

116 62 10 years ago

blog.cloudflare.com

QUFB• 10 years ago

Hopefully Amazon will add IPv6 support to AWS VPCs sometime in the next year.

jgrahamc• 10 years ago

We're happy to do IPv6 for you on the consumer side and connect to you backend over IPv4 if your backend provider can't deal with IPv6.

thedg• 10 years ago

+1 - We actually do that automatically for you when you signup for Cloudflare.

prohor2• 10 years ago

They have little incentive. Would you change provider just to get IPv6?

prohor2• 10 years ago

I was quite wrong - IPv6 was just announced by AWS :-)

dx0347• 10 years ago

Interesting that Google doesn't seem to use ipv6 for their crawlers. They seemed to be big supporters for ipv6, but they don't appear anywhere on the list. I'd expect them to cause much more traffic than Facebook.

Any clue why they only crawl via ipv4?

PudgePacket• 10 years ago

Does google use cloudflare? If not then their data probably wouldn't show up.

driusan• 10 years ago

They're in the chart. They're hovering near the bottom around 0%.

brianwawok• 10 years ago

Google is a partner of cloudflare. They have their own CDN though.

dx0347• 10 years ago

Not directly, but their crawler will use Cloudflare. same as with Facebook. They don't use Cloudflare but crawl websites that use it.

johansch5• 10 years ago

Because web sites won't be moving to ipv6 (only) any time soon, and the limiting factor here is residential connections, not Google?

Are you proposing that Google should crawl ipv6-only web sites? And then serve those results to whom, exactly? (I don't think there is any reliable way of knowing whether an HTTP client that's connecting to you via ipv4 is also capable of ipv6?)

dx0347• 10 years ago

Facebook seems to crawl ipv6 websites using an ipv6 connection. The Google crawler doesn't show up so it's probably working ipv4 only.

I'm just wondering why Google doesn't seem to use ipv6 where available.

Nullabillity• 10 years ago

I don't think there is any reliable way of knowing whether an HTTP client that's connecting to you via ipv4 is also capable of ipv6?

Send XHRs to a v4 subdomain and a v6 subdomain, check which requests succeed.

zerognowl• 10 years ago

Because their crawler is so monolithic that it would be expensive and annoying overhauling it for IPV6.

There is a great use-case for IPV6 for IOT where each device gets its own IPV6 address. IPV6 addresses are appearing more like MAC addresses at this rate as IPV6 is not exhausted yet.

drcross• 10 years ago

is not exhausted yet.

The world will be a completely unrecognizable place when this is even a slight concern.

tombrossman2• 10 years ago

There is a great use-case for IPV6 for IOT where each device gets its own IPV6 address.

Do you really want your IOT devices to be directly addressable on the internet? It's my understanding that having devices behind a router is safer. I go a step further and disable UPnP on my routers and everything still 'just works' including network printing.

p1mrx2• 10 years ago

The crawler supports IPv6-only servers, but IPv4 is preferred. For example:

https://www.google.com/search?q=site:ipv6.whatismyv6.com

"You are connecting with an IPv6 Address of: 2001:4860:4801:6::1f."

dx0347• 10 years ago

But why do they do that? That's what I don't understand. Google was one of the companies advertising ipv6 as the future, why don't they use it for their crawler?

noja• 10 years ago

Your move GitHub and Reddit.

vetinari• 10 years ago

And HN too.

fs111• 10 years ago

As soon as AWS gets serious about IPv6...

kalleboo• 10 years ago

Now that they got CloudFront fully supporting it, it seems like it's just a manner of time until VPC/EC2 is IPv6

daenney4• 10 years ago

And Google Cloud too.

All Compute Engine networks use the IPv4 protocol. Compute Engine currently does not support IPv6. However, Google is a major advocate of IPv6 and it is an important future direction.

doh• 10 years ago

Not anytime soon. Asked them about it just the other week. We would love to get the IPv6 support as Google is not very eager to allocate IPv4 to us in any larger quantities.

shmerl• 10 years ago

Now ISPs should also stop dragging their feet.

tscs37• 10 years ago

They want to rip off the customers first.

StavrosK2• 10 years ago

Interesting to see that Greece is the third (possibly second?) largest IPv6 deployment per-capita in the world. One of the ~3 large providers here still hasn't added IPv6 (although I might just have an old router).

I'm still trying to figure out how to set up static IPv6 so I can access my computers at home without a NAT, but it's very convenient otherwise!

daenney4• 10 years ago

Which one? I get IPv6 from (Cosm)OTE.

StavrosK2• 10 years ago

Do you? I have Cosmote as well but I'm on IPv4, I guess the router is old. I don't think Cyta has IPv6 yet either (they didn't when I switched away to Forthnet last year, exactly for this reason).

piotrjurkiewicz• 10 years ago

IPv6 is faster for two reasons. The first is that many major operating systems and browsers like iOS, MacOS, Chrome and Firefox impose anywhere from a 25ms to 300ms artificial delay on connections made over IPv4.

He forgot to add that this only applies to dual-stack hosts...

phicoh• 10 years ago

And, unless something is serious broken in all of those systems, only if the target is also dual stack.

So an IPv4-only website should not incur any delay.

TorKlingberg2• 10 years ago

It is great to see IPv6 finally taking off. I remember being exited about IPv6 back in 2003. I was fortunate to be on a university network with great admins and made sure to enable IPv6 on my Linux computer. Then nothing much happened for years and years and years. Not until around 2011 did the numbers start ticking up much above 0%, and now we are in the early part of the steep slope.

frozenport• 10 years ago

I believe most personal routers, such as the ones used to move internet from a cable-box/fibreoptic to your personal computer now use IPv6.

franciscop2• 10 years ago

Cloudflare, you have my login token cookie but you are still asking me to prove I'm not a robot. Please make using a VPN not to be a punishment since all the sites that use your SSL show me the "I'm not a robot", no matter how often I verify it. I am most times under an insecure WIFI so no VPN is not an option for security. Possible steps:

1. Make me solve it only once every X minutes/hours.

2. Make the defaults to be one step down in security, probably most webmasters don't want to block legitimate people using VPN.

3. Make it dynamic, so only those under suspicion have to do it. And consider being using a VPN NOT to be enough suspicion for it.

Right now I have to choose either to:

- Compromise my security: don't like it now, cannot do it when I start working with the new company I'm going to work

- Solve hundreds of "I'm not a robot" per day

the8472• 10 years ago

I am most times under an insecure WIFI so no VPN is not an option for security.

Maybe apply some netfilter or proxy magic to push traffic to port 443 over the wifi and everything else through the vpn?

true_religion• 10 years ago

These settings are available but it is currently up to each given site to enable it.

franciscop2• 10 years ago

That was exactly my point 2: Make the defaults to be one step down in security, probably most webmasters don't want to block legitimate people using VPN.

Symbiote2• 10 years ago

Why are Cloudflare still sharing IPv6 addresses, when there should easily be enough for one per website? (And then with correct reverse DNS.)

The linked site [1] has a download of 134k hostnames. Filtering for the Cloudflare prefix, 2400:cb00:2048, there are still plenty of sites sharing an IP. For example, www.monolith.agency (a design agency) is on the same IP as www.bobshouseofporn.com (porn).

Maybe the same company hosts both websites, and it's not Cloudflare's issue, but that seems unlikely for a US porn site, Quebec design agency, Brazilian health site and Spanish programming site.

Google have 13,000 sites on the same IP, 2607:f8b0:4005:808::2013, looks like Blogger.

[1] http://www.employees.org/~dwing/aaaa-stats/

Something like:

    egrep --only-matching 'IPv6.+?  ' ips | sort | uniq -c | sort -n | grep 2400:cb00:2048

fowl2• 10 years ago

Why not? Seems like a nice easy privacy win.

Symbiote2• 10 years ago

The design agency website might get blocked as collateral by a poor filter, which knows of the porn site.

p1mrx2• 10 years ago

    monolith.agency has address 104.28.8.19
    monolith.agency has IPv6 address 2400:cb00:2048:1::681c:813

Notice that the IPv4 address is embedded in the last 32 bits of the IPv6 address. I would assume that this allows both addresses to be generated from the same configuration, rather than trying to keep two copies in sync.

detaro• 10 years ago

As far as I know having very large numbers of IPs on a system can cause trouble with normal network stacks. Why do you want an individual IP address?

98% of sites on Cloudflare now use IPv6

Related Stories