From 7552187f6b53b667072dc0997fcc813f59975c79 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Mon, 16 Dec 2019 13:00:50 +0100 Subject: [PATCH] ++blog --- .../contents.lr | 77 +++++++++++++++++++ 1 file changed, 77 insertions(+) create mode 100644 content/u/blog/your-corporate-vpn-does-not-work-anymore/contents.lr diff --git a/content/u/blog/your-corporate-vpn-does-not-work-anymore/contents.lr b/content/u/blog/your-corporate-vpn-does-not-work-anymore/contents.lr new file mode 100644 index 0000000..8b21e3b --- /dev/null +++ b/content/u/blog/your-corporate-vpn-does-not-work-anymore/contents.lr @@ -0,0 +1,77 @@ +title: Your corporate VPN does not work anymore +--- +pub_date: 2019-12-16 +--- +author: ungleich network team +--- +twitter_handle: ungleich +--- +_hidden: no +--- +_discoverable: yes +--- +abstract: +It's a hard truth, but that's how it is. You need to act now.! +--- +body: + +Your company has given you a VPN to securely connect to your company +network. Now you can access resources of your company network +securely. Great, isn't it? + +Besides it doesn't work anymore. Traditional corporate VPNs are +dead. Literally. + +## Dead? Why? + +There is a single problem with corporate VPNs: they try to use IPv4. +And if you are in an IPv6 only network, your corporate VPN stops to +work. + +## IPv6 only networks - who has that? + +Turns out that +[RIPE ran out of IPv4 +space](https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc-has-run-out-of-ipv4-addresses). +a couple of weeks ago. This practically means that companies cannot +get new IPv4 addresses anymore. Modern companies have already switched +to IPv6 only networks and mobile networks are converted to IPv6 only +everywhere in the world. + +Basically, everyone is moving towards IPv6 only networks. +Running dual stack networks is significantly more complexity, so the +tendency is to skip this step and go IPv6 only directly. + +So in short: + +* IPv4 ran out +* Networks are already switching to IPv6 +* Dual stack networks (both IPv4 and IPv6) is too complex +* IPv6 only is the new default +* Your corporate VPN does not work in IPv6 only enviroments + +## Can't things just stay as they are? + +Unfortunately not. The main problem is that your VPN is intended to be +used while you are out of the office. The cost for acquiring or +running IPv4 networks is growing on a daily basis. So while your +company might be able to buy expensive IPv4 addresses, the network +that you travel to, might not be able to afford IPv4 space anymore. + + +## ... but I need the corporate VPN + +There are two easy ways to get the corporate VPN back working: + +* update the corporate VPN to support IPv6 +* switch to an Open Source alternative that fully supports IPv6 + +## Help! + +If your local network group does not know how adopt either of the two +technologies, feel free to send a mail to **support -at- +ungleich.ch**, we can support you in finding a solution. + +Or if you want to talk to like minded people, we invite you to join +the [IPv6.Chat](https://IPv6.chat), where many people are successfully +migrated to IPv6.