<story><title>98% of sites on Cloudflare now use IPv6</title><url>https://blog.cloudflare.com/98-percent-ipv6/</url></story><parent_chain></parent_chain><comment><author>Symbiote</author><text>Why are Cloudflare still sharing IPv6 addresses, when there should easily be enough for one per website? (And then with correct reverse DNS.)&lt;p&gt;The linked site [1] has a download of 134k hostnames.  Filtering for the Cloudflare prefix,  2400:cb00:2048, there are still plenty of sites sharing an IP.  For example, www.monolith.agency (a design agency) is on the same IP as www.bobshouseofporn.com (porn).&lt;p&gt;Maybe the same company hosts both websites, and it&amp;#x27;s not Cloudflare&amp;#x27;s issue, but that seems unlikely for a US porn site, Quebec design agency, Brazilian health site and Spanish programming site.&lt;p&gt;Google have 13,000 sites on the same IP, 2607:f8b0:4005:808::2013, looks like Blogger.&lt;p&gt;[1] &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;www.employees.org&amp;#x2F;~dwing&amp;#x2F;aaaa-stats&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.employees.org&amp;#x2F;~dwing&amp;#x2F;aaaa-stats&amp;#x2F;&lt;/a&gt;&lt;p&gt;Something like:&lt;p&gt;&lt;pre&gt;&lt;code&gt;    egrep --only-matching &amp;#x27;IPv6.+?  &amp;#x27; ips | sort | uniq -c | sort -n | grep 2400:cb00:2048&lt;/code&gt;&lt;/pre&gt;</text></comment>
<story><title>98% of sites on Cloudflare now use IPv6</title><url>https://blog.cloudflare.com/98-percent-ipv6/</url></story><parent_chain></parent_chain><comment><author>franciscop</author><text>Cloudflare, you have my login token cookie but you are still asking me to prove I&amp;#x27;m not a robot. Please make using a VPN not to be a punishment since all the sites that use your SSL show me the &amp;quot;I&amp;#x27;m not a robot&amp;quot;, no matter how often I verify it. I am most times under an insecure WIFI so no VPN is not an option for security. Possible steps:&lt;p&gt;1. Make me solve it only once every X minutes&amp;#x2F;hours.&lt;p&gt;2. Make the defaults to be one step down in security, probably most webmasters don&amp;#x27;t want to block legitimate people using VPN.&lt;p&gt;3. Make it dynamic, so only those under suspicion have to do it. And consider being using a VPN NOT to be enough suspicion for it.&lt;p&gt;Right now I have to choose either to:&lt;p&gt;- Compromise my security: don&amp;#x27;t like it now, cannot do it when I start working with the new company I&amp;#x27;m going to work&lt;p&gt;- Solve hundreds of &amp;quot;I&amp;#x27;m not a robot&amp;quot; per day</text></comment>