IPv6 (Internet Protocol version 6) is the successor to IPv4, designed to solve the IPv4 address exhaustion problem. Per IETF RFC 8200, IPv6 uses 128-bit addresses providing 340 undecillion unique addresses, compared to IPv4's 4.3 billion. Per Google's IPv6 adoption statistics, over 45% of connections to Google services use IPv6 globally.
Key takeaways
- IPv6 uses 128-bit addresses (340 undecillion) vs IPv4's 32-bit (4.3 billion).
- Eliminates NAT: every device can have a globally unique address.
- SLAAC auto-configures addresses without DHCP.
- Per Google, global IPv6 adoption exceeds 45%.
- Deploy dual-stack and configure IPv6 firewall rules alongside IPv4.
Quick explanation
In simple terms
IPv6 is the newest version of the Internet Protocol that gives devices much longer addresses, solving the problem of running out of IPv4 addresses.
Technical definition
IPv6 is the network-layer protocol defined in RFC 8200 using 128-bit addresses, a fixed 40-byte base header, flow labels for QoS, extension headers for optional features, and NDP (Neighbor Discovery Protocol) replacing ARP.
Analogy
IPv4 is like a phone system with only 10-digit numbers (4.3 billion combinations). IPv6 is like switching to 39-digit numbers, enough to give every grain of sand on Earth its own number.
Definition
IPv6 is the latest version of the Internet Protocol, using 128-bit addresses to replace IPv4's exhausted 32-bit address space. Per RFC 8200, it eliminates NAT requirements, supports SLAAC for auto-configuration, and simplifies packet headers.
IPv6 (Internet Protocol version 6) is the most recent version of the Internet Protocol, defined in IETF RFC 8200. It was developed to address IPv4 address exhaustion: IPv4's 32-bit addresses provide approximately 4.3 billion unique addresses, which have been fully allocated.
IPv6 uses 128-bit addresses, providing 340 undecillion (3.4 x 10^38) unique addresses. Beyond the larger address space, IPv6 introduces SLAAC for stateless auto-configuration, NDP (Neighbor Discovery Protocol) replacing ARP, a simplified fixed-size header for faster routing, flow labels for QoS, and extension headers for modular optional features.
Why it matters
Core concepts
IPv6 address format
An IPv6 address is 128 bits, written as eight groups of four hexadecimal digits separated by colons.
IPv6 addresses use hexadecimal notation. Leading zeros can be omitted, and consecutive groups of zeros can be replaced with :: (once per address). Common address types: global unicast (2000::/3), link-local (fe80::/10), loopback (::1), and multicast (ff00::/8).
Example
2001:0db8:85a3:0000:0000:8a2e:0370:7334, shortened to 2001:db8:85a3::8a2e:370:7334.
SLAAC (Stateless Address Autoconfiguration)
A mechanism where devices automatically generate their own IPv6 address from the network prefix advertised by the router.
Per RFC 4862, SLAAC eliminates the need for a DHCPv6 server for basic connectivity. The router advertises the network prefix via Router Advertisements (RA). The device appends a 64-bit interface identifier to create its full 128-bit address.
Example
A laptop connects to a network, receives a /64 prefix via Router Advertisement, and generates its own global address using its MAC address (EUI-64) or a random interface identifier (privacy extensions).
How it works
Address assignment via SLAAC
Devices receive an IPv6 prefix from the local router via Router Advertisements (RA). Using SLAAC, the device generates its own global unicast address by combining the prefix with a self-generated interface identifier.
Router RA → SLAAC → Address
Neighbor discovery replaces ARP
IPv6 uses Neighbor Discovery Protocol (NDP, RFC 4861) instead of ARP to discover link-layer addresses, detect duplicate addresses, and find routers on the network.
NDP replaces ARP
Routing with simplified headers
Routers forward packets based on the destination address prefix. IPv6's simplified header (fixed 40-byte base header) and no checksum field speed up router processing.
Simplified header → Faster routing
Happy Eyeballs: protocol selection
In dual-stack networks, applications use the Happy Eyeballs algorithm (RFC 8305) to try IPv6 first and fall back to IPv4 if the IPv6 connection fails.
Try IPv6 → Fallback IPv4
Benefits
Virtually unlimited address space
IPv6 provides 2^128 addresses (340 undecillion), eliminating the address scarcity that forced IPv4 to rely on NAT. Every device can have a globally unique address.
Stateless Address Autoconfiguration (SLAAC)
IPv6 supports SLAAC (Stateless Address Autoconfiguration), allowing devices to generate their own addresses from the network prefix without a DHCP server.
Built-in security framework
IPv6 was designed with IPsec as a fundamental component. While IPsec is optional in practice, the protocol's design supports end-to-end encryption without NAT interference.
Limitations
Dual-stack complexity during transition
MediumMost networks must run both IPv4 and IPv6 simultaneously (dual-stack), increasing complexity in network configuration, firewall rules, and monitoring.
Workaround — Automate dual-stack configuration. Use IPv6-capable firewalls that can apply unified policies across both protocols.
Legacy application and device compatibility
MediumSome legacy applications, firewalls, and network equipment don't fully support IPv6, creating interoperability challenges.
Workaround — Audit applications for IPv6 support. Use DNS64/NAT64 for IPv6-only clients accessing IPv4-only services.
Examples
Dual-stack enterprise deployment
An enterprise deploys dual-stack networking, assigning both IPv4 and IPv6 addresses to all devices.
In dual-stack, every device has both an IPv4 and IPv6 address. Applications prefer IPv6 when available (Happy Eyeballs algorithm, RFC 8305). This allows gradual transition without breaking IPv4 connectivity.
Comparisons
IPv6 vs. IPv4
Myths, corrected
Myth
My network doesn't use IPv6 so I don't need to worry about it
Correction
IPv6 is enabled by default on most modern operating systems (Windows, macOS, Linux, iOS, Android). If your firewall doesn't inspect IPv6 traffic, it creates a security blind spot. Per NIST, configure IPv6 firewall rules or explicitly disable IPv6 if not needed.
Why it happens: IT admins who haven't explicitly configured IPv6 assume it's not present on their network.
Myth
IPv6 is inherently more secure than IPv4
Correction
IPv6 was designed with IPsec as a component, but IPsec is optional in practice. IPv6 introduces new attack surfaces: NDP spoofing (analogous to ARP spoofing), rogue Router Advertisements, and IPv6 tunnel exploits. Security depends on configuration, not protocol version.
Why it happens: The IPsec-is-built-in narrative from early IPv6 advocacy created a lasting perception of inherent security.
Practical implications
For admins
Deploy dual-stack. Configure IPv6 firewall rules. Create AAAA DNS records. Monitor IPv6 traffic for anomalies. Disable IPv6 only if you can't secure it.
For business
IPv6 readiness is increasingly required for government contracts and cloud service compatibility.
For security
Audit for unmonitored IPv6 traffic. Configure NDP inspection (RA Guard). Block rogue Router Advertisements. Include IPv6 in penetration testing scope.
Related terms
IPv4
The predecessor protocol using 32-bit addresses, now exhausted.
SLAAC
Stateless Address Autoconfiguration, allowing devices to self-assign IPv6 addresses.
Dual-stack
Running IPv4 and IPv6 simultaneously on the same network.
Frequently asked questions
What is the difference between IPv4 and IPv6?
IPv6 uses 128-bit addresses (340 undecillion unique addresses) compared to IPv4's 32-bit addresses (4.3 billion). IPv6 eliminates NAT, uses SLAAC for auto-configuration, and has a simplified header.
How do I transition from IPv4 to IPv6?
Dual-stack is the recommended approach: run both IPv4 and IPv6 simultaneously. Devices and applications use whichever protocol is available for each connection.
How widely is IPv6 adopted?
Per Google's IPv6 statistics, global adoption exceeds 45% as of 2026. Major ISPs, cloud providers, and mobile networks support IPv6. Enterprise adoption lags behind consumer adoption.
Do I need to worry about IPv6 on my network?
Yes. IPv6 may be enabled by default on your network devices and endpoints. If your firewall doesn't inspect IPv6 traffic, it creates a security blind spot. Always configure IPv6 firewall rules alongside IPv4.
How does DNS work with IPv6?
IPv6 uses AAAA (quad-A) DNS records instead of IPv4's A records. Your DNS server must support AAAA records, and you should create both A and AAAA records for dual-stack services.
Conclusion
IPv6 is the next-generation Internet Protocol using 128-bit addresses. Per RFC 8200, it eliminates NAT requirements, simplifies routing with a streamlined header, and supports SLAAC for automatic address configuration.
Per Google's IPv6 statistics, global adoption exceeds 45%. IT admins should deploy dual-stack (IPv4 + IPv6) and ensure firewalls, DNS (AAAA records), and applications are IPv6-ready. Ignoring IPv6 creates security blind spots because IPv6 traffic may flow on your network even without explicit configuration.
Main takeaway
Explore DHCPv6, IPv6 firewall rules, and DNS64/NAT64 for IPv6-only network deployments.
