In IPv6, does NAT go away?
In IPv6, with its 128-bit addressing, there should be enough IP addresses available to assign to every single device in the world, without resorting to private IP addresses. Does that mean NAT no longer exists in IPv6? NAT did provide a sort of natural firewall under IPv4, so if NAT no longer exists, I wonder if that would make devices less secure in some way?
- adavielLv 75 years agoFavorite Answer
NAT is no longer necessary. I think it might be possible, but why bother.
Yes, devices might be less secure. But the larger address space makes scanning less practical so you win some, you lose some. You would probably still want a firewall or at least access controls - there are still protocols in use that were never intended to be exposed to a public network, and we are building things (IoT - cameras, fridges etc.) that we can't even control because they don't have an administrator interface. The security issue is not so much that IPv6 itself is less secure than IPv4, it's that it's different and people will make mistakes. If they relied on NAT for security, that's a problem. It's a problem now - most of our campus devices are directly on the IPv4 internet, and we've had the odd problem where some vendor hasn't bothered with security or used Windows with updates disabled to make it "stable".
- AdrianLv 75 years ago
You still have to do NAT with IPV6 if there is any router between the service and your home network.
All home devices should be behind a router anyway, it protects them from any probe from the Internet (hackers)
- GTBLv 75 years ago