906
you are viewing a single comment's thread
view the rest of the comments
[-] IrateAnteater@sh.itjust.works -4 points 2 days ago

We use NAT all the time in industrial settings. Makes it so you can have select devices communicate with the plant level network, while keeping everything else common so that downtime is reduced when equipment inevitably fails.

[-] frezik@lemmy.blahaj.zone 28 points 2 days ago

That's nothing that can't be done with a good set of firewalls on IPv6.

[-] socsa@piefed.social 11 points 2 days ago

The one thing you can't do with IPv6 is yell the address across the room to the technician plugged into the switch trying to ping the node.

[-] pupbiru@aussie.zone 3 points 23 hours ago* (last edited 23 hours ago)

no instead you yell the IP address and they spend 30min trying to find the packet trace and then you realise you gave them the public IP you saw in the server logs and they were looking up the private IP behind the NAT

you can if you make it mostly zero

[-] IrateAnteater@sh.itjust.works 3 points 2 days ago

This is equipment that uses all statically addressed devices. And ignoring the fact that IPv6 is simply unsupported on most of them, there are duplicate machines that share programs. Regardless of IP version you need NAT anyway if you want to be able to reach each of the duplicates from the plant network.

[-] pupbiru@aussie.zone 1 points 23 hours ago

there are duplicate machines that share programs

yes.. that’s why every machine has its own IP address… so that they can both use the same port and you don’t have to connect to crazy bullshit like https://myhomerouter.example.com:8443/

[-] Hotzilla@sopuli.xyz 1 points 2 days ago* (last edited 2 days ago)

Good luck trying to find industrial stuff that supports IPv6, hell most of it is still serial.

I have legit heard that serial is security mechanism because it cannot communicate long distance like ethernet.

Of course you can do IPv6 magic that hides IPv6 from the end device, but nobody understands how that magic works.

[-] pupbiru@aussie.zone 3 points 23 hours ago

Of course you can do IPv6 magic that hides IPv6 from the end device, but nobody understands how that magic works.

it’s not magic… it’s a firewall, and it works pretty much exactly the same as a NAT: a whitelist of IP and port combinations

this post was submitted on 01 Aug 2025
906 points (96.8% liked)

Programmer Humor

25448 readers
1002 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS