Dave Nimai
asked on
Should IPv6 be disabled for domain controllers, other servers, and esxi in general?
Should IPv6 be disabled for domain controllers, other servers, and esxi in general?
NO. No need to do that. I have IPv6 running on all client servers everywhere. Systems are designed to include IPv6 and work correctly.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
1) IPV6 is required for "Homegroups" on WIN7 and newer...
2) IPV6 is TERRIBLE for privacy! IPv6 addresses by default incorporate hardware MAC addresses, and that's a very bad thing for privacy in two ways. Few if any VPN services route IPv6, and so IPv6 traffic on your physical NIC may leak information about your online activity. And even if VPNs route IPv6, it's leaking your hardware MAC address.
3) SO... If concerned about privacy, using VPN, and NOT using Windows Homegroup, you may disable without impact!
2) IPV6 is TERRIBLE for privacy! IPv6 addresses by default incorporate hardware MAC addresses, and that's a very bad thing for privacy in two ways. Few if any VPN services route IPv6, and so IPv6 traffic on your physical NIC may leak information about your online activity. And even if VPNs route IPv6, it's leaking your hardware MAC address.
3) SO... If concerned about privacy, using VPN, and NOT using Windows Homegroup, you may disable without impact!
PV6 is TERRIBLE for privacy! IPv6 addresses by default incorporate hardware MAC addressesIf that concerns you, just run
NETSH INTER IPV6 SET PRIVACY STATE=ENABLED
also note the accepted answer inhttps://www.experts-exchange.com/questions/28998188/2016-Domain-Controller-and-IPv6.html
I would go to http://unique-local-ipv6.com/ and get a unique range to use on all my servers, for example fd84:5890:61e1::/48.
Pick address in this range and assign it to server
-OR-
Add range to DHCP IP v6
ASKER
Thank you!