On 2025-11-03 13:29:35 +0100 (+0100), Stephan Seitz wrote: [...]
From a security point of view I find it very wrong that the kernel configures the interface with IPv6 if the administrator doesn’t have configured anything IPv6 related for the interface. After all you won’t get any working IPv4 address without a configuration either.
[...]A primary design goal for IPv6 was plug'n'play zeroconf-type automated setup of networks: connect computers and routers into switches and have them figure out for themselves how to route traffic by default without need of user/administrator intervention. Basically, it was an identified failing of IPv4 that too much configuration was required, and that the successor should "just work" out of the box in simple environments with basic needs.
This is why essentially all operating systems have IPv6 on by default, with SLAAC or similar address coordination, neighbor discovery, route advertisements, and so on. The Linux kernel is no different in this regard.
-- Jeremy Stanley
Attachment:
signature.asc
Description: PGP signature