Misplaced Pages

#102897

78-613: Blocking may also refer to denying access to a web server based on the IP address of the client machine. In certain websites, including social networks such as Facebook or editable databases like wikis , users can apply blocks (based in either IP number or account) on other users deemed undesirable to prevent them from performing certain actions. Blocks of this kind may occur for several reasons and produce different effects: in social networks, users can block other users without restriction, typically by preventing them from sending messages or viewing

156-638: A de facto standard in the industry. In May 2005, the IETF defined a formal standard for it. An IP address conflict occurs when two devices on the same local physical or wireless network claim to have the same IP address. A second assignment of an address generally stops the IP functionality of one or both of the devices. Many modern operating systems notify the administrator of IP address conflicts. When IP addresses are assigned by multiple people and systems with differing methods, any of them may be at fault. If one of

234-492: A residential gateway . In this scenario, the computers connected to the router have private IP addresses and the router has a public address on its external interface to communicate on the Internet. The internal computers appear to share one public IP address. Virtual private network Virtual private network ( VPN ) is a network architecture for virtually extending a private network (i.e. any computer network which

312-408: A static IP address . In contrast, when a computer's IP address is assigned each time it restarts, this is known as using a dynamic IP address . Dynamic IP addresses are assigned by network using Dynamic Host Configuration Protocol (DHCP). DHCP is the most frequently used technology for assigning addresses. It avoids the administrative burden of assigning specific static addresses to each device on

390-548: A web captive portal ). Remote-access VPNs, which are typically user-initiated, may use passwords , biometrics , two-factor authentication , or other cryptographic methods. People initiating this kind of VPN from unknown arbitrary network locations are also called "road-warriors". In such cases, it is not possible to use originating network properties (e.g. IP addresses) as secure authentication factors, and stronger methods are needed. Site-to-site VPNs often use passwords ( pre-shared keys ) or digital certificates . Depending on

468-454: A block, ban or other form of sanction imposed on the person's original account, whether temporary or permanent, on a website. Alternate accounts set up by people evading blocks or bans from websites are referred to as sock puppets . Ban evasion can be detected by tracing a user's IP address. If two accounts are using the same IP address, it could be a sign of ban evasion. Also, the use of a VPN , shown by rapid, drastic changes of IP address by

546-415: A consistent VPN protocol across their products but do not open up for customizations outside the use cases they intended to implement. This is often the case for appliances that rely on hardware acceleration of VPNs to provide higher throughput or support a larger amount of simultaneously connected users. Whenever a VPN is intended to virtually extend a private network over a third-party untrusted medium, it

624-401: A dynamically assigned IP address that seldom changes. IPv4 addresses, for example, are usually assigned with DHCP, and a DHCP service can use rules that maximize the chance of assigning the same address each time a client asks for an assignment. In IPv6, a prefix delegation can be handled similarly, to make changes as rare as feasible. In a typical home or small-office setup, a single router

702-523: A group of 8 bits (an octet ) of the address. In some cases of technical writing, IPv4 addresses may be presented in various hexadecimal , octal , or binary representations. In the early stages of development of the Internet Protocol, the network number was always the highest order octet (most significant eight bits). Because this method allowed for only 256 networks, it soon proved inadequate as additional networks developed that were independent of

780-456: A home network an unchanging address, it is more likely to be abused by customers who host websites from home, or by hackers who can try the same IP address over and over until they breach a network. Multiple client devices can appear to share an IP address, either because they are part of a shared web hosting service environment or because an IPv4 network address translator (NAT) or proxy server acts as an intermediary agent on behalf of

858-664: A large address space, there is no need to have complex address conservation methods as used in CIDR. All modern desktop and enterprise server operating systems include native support for IPv6 , but it is not yet widely deployed in other devices, such as residential networking routers, voice over IP (VoIP) and multimedia equipment, and some networking hardware . Just as IPv4 reserves addresses for private networks, blocks of addresses are set aside in IPv6. In IPv6, these are referred to as unique local addresses (ULAs). The routing prefix fc00:: / 7

SECTION 10

#1732837257103

936-478: A link. This feature is used in the lower layers of IPv6 network administration, such as for the Neighbor Discovery Protocol . Private and link-local address prefixes may not be routed on the public Internet. IP addresses are assigned to a host either dynamically as they join the network, or persistently by configuration of the host hardware or software. Persistent configuration is also known as using

1014-493: A network in one transmission operation as an all-hosts broadcast . All receivers capture the network packet. The address 255.255.255.255 is used for network broadcast. In addition, a more limited directed broadcast uses the all-ones host address with the network prefix. For example, the destination address used for directed broadcast to devices on the network 192.0.2.0 / 24 is 192.0.2.255 . IPv6 does not implement broadcast addressing and replaces it with multicast to

1092-410: A network interface, are not to be considered VPN implementations but may achieve the same or similar end-user goal of exchanging private contents with a remote network. Virtual private networks configurations can be classified depending on the purpose of the virtual extension, which makes different tunneling strategies appropriate for different topologies: In the context of site-to-site configurations,

1170-410: A network, the network administrator assigns an IP address to each device. Such assignments may be on a static (fixed or permanent) or dynamic basis, depending on network practices and software features. Some jurisdictions consider IP addresses to be personal data . An IP address serves two principal functions: it identifies the host, or more specifically, its network interface , and it provides

1248-478: A network. It also allows devices to share the limited address space on a network if only some of them are online at a particular time. Typically, dynamic IP configuration is enabled by default in modern desktop operating systems. The address assigned with DHCP is associated with a lease and usually has an expiration period. If the lease is not renewed by the host before expiry, the address may be assigned to another device. Some DHCP implementations attempt to reassign

1326-542: A selection of VPN protocols which is subject to change over the years, as some have been proven to be unsecure with respect to modern requirements and expectations, and some others emerged. Desktop, smartphone and other end-user device operating systems do usually support configuring remote access VPN from their graphical or command-line tools. However, due to the variety of, often non standard, VPN protocols there exists many third-party applications that implement additional protocols not yet or no more natively supported by

1404-532: A significantly complex business network, may be combined to enable remote access to resources located at any given site, such as an ordering system that resides in a data center. Apart from the general topology configuration, a VPN may also be characterized by: A variety of VPN technics exist to adapt to the above characteristics, each providing different network tunneling capabilities and different security model coverage or interpretation. Operating systems vendors and developers do typically offer native support to

1482-509: A single sender or a single receiver, and can be used for both sending and receiving. Usually, a unicast address is associated with a single device or host, but a device or host may have more than one unicast address. Sending the same data to multiple unicast addresses requires the sender to send all the data many times over, once for each recipient. Broadcasting is an addressing technique available in IPv4 to address data to all possible destinations on

1560-417: A site's content, which is usually the case when censoring or filtering mechanisms are responsible for the block. Blocking is used by moderators and administrators of social media and forums to deny access to users that have broken their rules and will likely do so again, in order to ensure a peaceful and orderly discussion in place. Common reasons for blocking are spamming , trolling , and flaming , or, in

1638-491: A user they have unblocked for 48 hours after unblocking. IP address An Internet Protocol address ( IP address ) is a numerical label such as 192.0.2.1 that is assigned to a device connected to a computer network that uses the Internet Protocol for communication. IP addresses serve two main functions: network interface identification , and location addressing . Internet Protocol version 4 (IPv4)

SECTION 20

#1732837257103

1716-675: A variety of tactics to disguise the fact that the new account was created by a previously banned user, such as choosing usernames with no relation to defunct accounts, an alternate email address, VPNs or proxy servers to mask their IP address, changing their IP address (sometimes only needing to rely on a dynamic IP address to automatically change it after a time), or using the site from public Internet access locations such as schools and libraries, or resorting to usage of open proxies . Other possible measures include somewhat altering how they conduct themselves and exhibiting different behaviour in order to prevent moderators from determining that they are

1794-426: Is a built-in feature of IPv6. In IPv4, anycast addressing is implemented with Border Gateway Protocol using the shortest-path metric to choose destinations. Anycast methods are useful for global load balancing and are commonly used in distributed DNS systems. A host may use geolocation to deduce the geographic position of its communicating peer. This is typically done by retrieving geolocation info about

1872-399: Is also used to refer to VPN services which sell access to their own private networks for internet access by connecting their customers using VPN tunneling protocols. The goal of a virtual private network is to allow network hosts to exchange network messages across another network to access private content, as if they were part of the same network. This is done in a way that makes crossing

1950-435: Is defined for the special use of link-local addressing for IPv4 networks. In IPv6, every interface, whether using static or dynamic addresses, also receives a link-local address automatically in the block fe80:: / 10 . These addresses are only valid on the link, such as a local network segment or point-to-point connection, to which a host is connected. These addresses are not routable and, like private addresses, cannot be

2028-475: Is desirable that the chosen protocols match the following security model: VPN are not intended to make connecting users neither anonymous nor unidentifiable from the untrusted medium network provider perspective. If the VPN makes use of protocols that do provide the above confidentiality features, their usage can increase user privacy by making the untrusted medium owner unable to access the private data exchanged across

2106-463: Is not the public Internet ) across one or multiple other networks which are either untrusted (as they are not controlled by the entity aiming to implement the VPN) or need to be isolated (thus making the lower network invisible or not directly usable). A VPN can extend access to a private network to users who do not have direct access to it, such as an office network allowing secure access from off-site over

2184-417: Is possible on some wikis for users to limit interactions from them like sending them emails or sending them notifications; with such blocks, users are not notified of them. Under a shadow ban , a user is given the false impression that their content is still being posted to the site, when in reality it is being hidden from all other users. Ban evasion (or block evasion) is the act of attempting to get around

2262-416: Is recognized as consisting of two parts: the network prefix in the high-order bits and the remaining bits called the rest field , host identifier , or interface identifier (IPv6), used for host numbering within a network. The subnet mask or CIDR notation determines how the IP address is divided into network and host parts. The term subnet mask is only used within IPv4. Both IP versions however use

2340-421: Is reserved for this block, which is divided into two / 8 blocks with different implied policies. The addresses include a 40-bit pseudorandom number that minimizes the risk of address collisions if sites merge or packets are misrouted. Early practices used a different block for this purpose ( fec0:: ), dubbed site-local addresses. However, the definition of what constituted a site remained unclear and

2418-659: Is the only device visible to an Internet service provider (ISP), and the ISP may try to provide a configuration that is as stable as feasible, i.e. sticky . On the local network of the home or business, a local DHCP server may be designed to provide sticky IPv4 configurations, and the ISP may provide a sticky IPv6 prefix delegation, giving clients the option to use sticky IPv6 addresses. Sticky should not be confused with static ; sticky configurations have no guarantee of stability, while static configurations are used indefinitely and only changed deliberately. Address block 169.254.0.0 / 16

Block (Internet) - Misplaced Pages Continue

2496-467: The Point-to-Point Protocol . Computers and equipment used for the network infrastructure, such as routers and mail servers, are typically configured with static addressing. In the absence or failure of static or dynamic address configurations, an operating system may assign a link-local address to a host using stateless address autoconfiguration. Sticky is an informal term used to describe

2574-415: The CIDR concept and notation. In this, the IP address is followed by a slash and the number (in decimal) of bits used for the network part, also called the routing prefix . For example, an IPv4 address and its subnet mask may be 192.0.2.1 and 255.255.255.0 , respectively. The CIDR notation for the same IP address and subnet is 192.0.2.1 / 24 , because the first 24 bits of the IP address indicate

2652-422: The IP address of the other node from a database. A public IP address is a globally routable unicast IP address, meaning that the address is not an address reserved for use in private networks , such as those reserved by RFC   1918 , or the various IPv6 address formats of local scope or site-local scope, for example for link-local addressing. Public IP addresses may be used for communication between hosts on

2730-579: The Internet today. The original version of the Internet Protocol that was first deployed in 1983 in the ARPANET , the predecessor of the Internet, is Internet Protocol version 4 (IPv4). By the early 1990s, the rapid exhaustion of IPv4 address space available for assignment to Internet service providers and end-user organizations prompted the Internet Engineering Task Force (IETF) to explore new technologies to expand addressing capability on

2808-463: The Internet, but it lacked scalability in the face of the rapid expansion of networking in the 1990s. The class system of the address space was replaced with Classless Inter-Domain Routing (CIDR) in 1993. CIDR is based on variable-length subnet masking (VLSM) to allow allocation and routing based on arbitrary-length prefixes. Today, remnants of classful network concepts function only in a limited scope as

2886-500: The Internet, such as factory machines that communicate only with each other via TCP/IP , need not have globally unique IP addresses. Today, such private networks are widely used and typically connect to the Internet with network address translation (NAT), when needed. Three non-overlapping ranges of IPv4 addresses for private networks are reserved. These addresses are not routed on the Internet and thus their use need not be coordinated with an IP address registry. Any user may use any of

2964-500: The Internet. This is achieved by creating a link between computing devices and computer networks by the use of network tunneling protocols . It is possible to make a VPN secure to use on top of insecure communication medium (such as the public internet) by choosing a tunneling protocol that implements encryption . This kind of VPN implementation has the benefit of reduced costs and greater flexibility, with respect to dedicated communication lines, for remote workers . The term VPN

3042-440: The Internet. The result was a redesign of the Internet Protocol which became eventually known as Internet Protocol Version 6 (IPv6) in 1995. IPv6 technology was in various testing stages until the mid-2000s when commercial production deployment commenced. Today, these two versions of the Internet Protocol are in simultaneous use. Among other technical changes, each version defines the format of addresses differently. Because of

3120-519: The OS. For instance, Android lacked native IPsec IKEv2 support until version 11, and people needed to install third-party apps in order to connect that kind of VPNs, while Microsoft Windows , BlackBerry OS and others got it supported in the past. Conversely, Windows does not support plain IPsec IKEv1 remote access native VPN configuration (commonly used by Cisco and Fritz!Box VPN solutions) which makes

3198-562: The VPN is not fixed to a single IP address , but instead roams across various networks such as data networks from cellular carriers or between multiple Wi-Fi access points without dropping the secure VPN session or losing application sessions. Mobile VPNs are widely used in public safety where they give law-enforcement officers access to applications such as computer-assisted dispatch and criminal databases, and in other organizations with similar requirements such as field service management and healthcare. A limitation of traditional VPNs

Block (Internet) - Misplaced Pages Continue

3276-413: The VPN protocol, they may store the key to allow the VPN tunnel to establish automatically, without intervention from the administrator. A virtual private network is based on a tunneling protocol, and may be possibly combined with other network or application protocols providing extra capabilities and different security model coverage. Trusted VPNs do not use cryptographic tunneling; instead, they rely on

3354-522: The VPN. In order to prevent unauthorized users from accessing the VPN, most protocols can be implemented in ways that also enable authentication of connecting parties. This secures the joined remote network confidentiality, integrity and availability. Tunnel endpoints can be authenticated in various ways during the VPN access initiation. Authentication can happen immediately on VPN initiation (e.g. by simple whitelisting of endpoint IP address), or very lately after actual tunnels are already active (e.g. with

3432-741: The address are the prefix, with the remaining 8 bits used for host addressing. This is equivalent to the historically used subnet mask (in this case, 255.255.255.0 ). The IP address space is managed globally by the Internet Assigned Numbers Authority (IANA) and the five regional Internet registries (RIRs). IANA assigns blocks of IP addresses to the RIRs, which are responsible for distributing them to local Internet registries in their region such as internet service providers (ISPs) and large institutions. Some addresses are reserved for private networks and are not globally unique. Within

3510-582: The administrators see their behavior as acceptable. Such blockers are also common in public settings, such as institutional, workplace, or library servers. These blockers are usually used to prevent government or company liability for users accessing obscene or illegal content. On Facebook, it is possible for users with privileges to block users from doing things like posting or contacting other people. On wiki sites like Misplaced Pages and Wikimedia Commons , administrators (volunteers with special privileges on their accounts) can block other users from contributing to

3588-729: The blocker's information or profile. Administrators , moderators , or other privileged users can apply blocks that affect the access of the undesirable users to the entire website. Some countries, notably China and Singapore , block access to certain news information. In the United States , the Children's Internet Protection Act requires schools receiving federal funded discount rates for Internet access to install filter software that blocks obscene content, pornography , and, where applicable, content " harmful to minors ". Blocked or banned users may be completely unable to access all or part of

3666-407: The case of wiki sites like Misplaced Pages , vandalism and other types of disruptive editing. Some criticize cases of the use of bans by administrators of large websites, such as Twitter , saying that these bans may be politically or financially motivated. However, websites have a legal right to decide who is allowed to post, and users often respond by "voting with their feet" and going to a place where

3744-401: The class derived, the network identification was based on octet boundary segments of the entire address. Each class used successively additional octets in the network identifier, thus reducing the possible number of hosts in the higher order classes ( B and C ). The following table gives an overview of this now-obsolete system. Classful network design served its purpose in the startup stage of

3822-506: The client, in which case the real originating IP address is masked from the server receiving a request. A common practice is to have a NAT mask many devices in a private network. Only the public interface(s) of the NAT needs to have an Internet-routable address. The NAT device maps different IP addresses on the private network to different TCP or UDP port numbers on the public network. In residential networks, NAT functions are usually implemented in

3900-505: The default configuration parameters of some network software and hardware components (e.g. netmask), and in the technical jargon used in network administrators' discussions. Early network design, when global end-to-end connectivity was envisioned for communications with all Internet hosts, intended that IP addresses be globally unique. However, it was found that this was not always necessary as private networks developed and public address space needed to be conserved. Computers not connected to

3978-449: The devices involved in the conflict is the default gateway access beyond the LAN for all devices on the LAN, all devices may be impaired. IP addresses are classified into several classes of operational characteristics: unicast, multicast, anycast and broadcast addressing. The most common concept of an IP address is in unicast addressing, available in both IPv4 and IPv6. It normally refers to

SECTION 50

#1732837257103

4056-498: The entire site such as uploading images or editing, creating, or moving pages but this generally doesn't affect their ability to read pages on the site. Such blocks can normally only be placed with good reason such as the user vandalizing pages or uploading non-free copyrighted content after multiple warnings, and that reason is generally seen when they attempt to edit and this reason is generally made public. Administrators who block users inappropriately may have their adminship revoked. It

4134-502: The existing networks already designated by a network number. In 1981, the addressing specification was revised with the introduction of classful network architecture. Classful network design allowed for a larger number of individual network assignments and fine-grained subnetwork design. The first three bits of the most significant octet of an IP address were defined as the class of the address. Three classes ( A , B , and C ) were defined for universal unicast addressing. Depending on

4212-544: The foreseeable future. The intent of the new design was not to provide just a sufficient quantity of addresses, but also redesign routing in the Internet by allowing more efficient aggregation of subnetwork routing prefixes. This resulted in slower growth of routing tables in routers. The smallest possible individual allocation is a subnet for 2 hosts, which is the square of the size of the entire IPv4 Internet. At these levels, actual address utilization ratios will be small on any IPv6 network segment. The new design also provides

4290-449: The global Internet. In a home situation, a public IP address is the IP address assigned to the home's network by the ISP . In this case, it is also locally visible by logging into the router configuration. Most public IP addresses change, and relatively often. Any type of IP address that changes is called a dynamic IP address. In home networks, the ISP usually assigns a dynamic IP. If an ISP gave

4368-469: The historical prevalence of IPv4, the generic term IP address typically still refers to the addresses defined by IPv4. The gap in version sequence between IPv4 and IPv6 resulted from the assignment of version 5 to the experimental Internet Stream Protocol in 1979, which however was never referred to as IPv5. Other versions v1 to v9 were defined, but only v4 and v6 ever gained widespread use. v1 and v2 were names for TCP protocols in 1974 and 1977, as there

4446-425: The intermediate network transparent to network applications. Users of a network connectivity service may consider such an intermediate network to be untrusted, since it is controlled by a third-party, and might prefer a VPN implemented via protocols that protect the privacy of their communication. In the case of a Provider-provisioned VPN , the goal is not to protect against untrusted networks, but to isolate parts of

4524-424: The location of the host in the network, and thus, the capability of establishing a path to that host. Its role has been characterized as follows: "A name indicates what we seek. An address indicates where it is. A route indicates how to get there." The header of each IP packet contains the IP address of the sending host and that of the destination host. Two versions of the Internet Protocol are in common use on

4602-401: The mid-2000s, both IPv4 and IPv6 are still used side-by-side as of 2024. IPv4 addresses are usually displayed in a human-readable notation, but systems may use them in various different computer number formats . CIDR notation can also be used to designate how much of the address should be treated as a routing prefix. For example, 192.0.2.1 / 24 indicates that 24 significant bits of

4680-411: The multicast group address and the intermediary routers take care of making copies and sending them to all interested receivers (those that have joined the corresponding multicast group). Like broadcast and multicast, anycast is a one-to-many routing topology. However, the data stream is not transmitted to all receivers, just the one which the router decides is closest in the network. Anycast addressing

4758-509: The network and subnet. An IPv4 address has a size of 32 bits, which limits the address space to 4 294 967 296 (2 ) addresses. Of this number, some addresses are reserved for special purposes such as private networks (≈18 million addresses) and multicast addressing (≈270 million addresses). IPv4 addresses are usually represented in dot-decimal notation , consisting of four decimal numbers, each ranging from 0 to 255, separated by dots, e.g., 192.0.2.1 . Each part represents

SECTION 60

#1732837257103

4836-436: The network messages from one side to the other. The goal is to take network messages from applications on one side of the tunnel and replay them on the other side. Applications do not need to be modified to let their messages pass through the VPN, because the virtual network or link is made available to the OS. Applications that do implement tunneling or proxying features for themselves without making such features available as

4914-424: The open source code of the OS itself. For instance, pfSense does not support remote access VPN configurations through its user interface where the OS runs on the remote host, while provides comprehensive support for configuring it as the central VPN gateway of such remote-access configuration scenario. Otherwise, commercial appliances with VPN features based on proprietary hardware/software platforms, usually support

4992-461: The open source operating systems devoted to firewalls and network devices (like OpenWrt , IPFire , PfSense or OPNsense ) it is possible to add support for additional VPN protocols by installing missing software components or third-party apps. Similarly, it is possible to get additional VPN configurations working, even if the OS does not facilitate the setup of that particular configuration, by manually editing internal configurations of by modifying

5070-593: The opportunity to separate the addressing infrastructure of a network segment, i.e. the local administration of the segment's available space, from the addressing prefix used to route traffic to and from external networks. IPv6 has facilities that automatically change the routing prefix of entire networks, should the global connectivity or the routing policy change, without requiring internal redesign or manual renumbering. The large number of IPv6 addresses allows large blocks to be assigned for specific purposes and, where appropriate, to be aggregated for efficient routing. With

5148-446: The poorly defined addressing policy created ambiguities for routing. This address type was abandoned and must not be used in new systems. Addresses starting with fe80:: , called link-local addresses , are assigned to interfaces for communication on the attached link. The addresses are automatically generated by the operating system for each network interface. This provides instant and automatic communication between all IPv6 hosts on

5226-458: The provider's own network infrastructure in virtual segments, in ways that make the contents of each segment private with respect to the others. This situation makes many other tunneling protocols suitable for building PPVPNs, even with weak or no security features (like in VLAN ). How a VPN works depends on which technologies and protocols the VPN is built upon. A tunneling protocol is used to transfer

5304-409: The reserved blocks. Typically, a network administrator will divide a block into subnets; for example, many home routers automatically use a default address range of 192.168.0.0 through 192.168.0.255 ( 192.168.0.0 / 24 ). In IPv6, the address size was increased from 32 bits in IPv4 to 128 bits, thus providing up to 2 (approximately 3.403 × 10 ) addresses. This is deemed sufficient for

5382-405: The same IP address to a host, based on its MAC address , each time it joins the network. A network administrator may configure DHCP by allocating specific IP addresses based on MAC address. DHCP is not the only technology used to assign IP addresses dynamically. Bootstrap Protocol is a similar protocol and predecessor to DHCP. Dialup and some broadband networks use dynamic address features of

5460-411: The same person. On social networking sites like Facebook , users may be able to block users which prevents the user they have blocked from seeing things on their profile or contacting them. Such blocking is often reciprocal, meaning the blocking user is also blocked from them as well. Users are usually not notified they have been blocked and such blocks may be private. On Facebook, users can't re-block

5538-497: The same user in a short period of time, can also be a sign that the user was trying to get around a ban. Ban evasion can also be spotted if posts or other contributions from two accounts look the same or similar, or on sites where the same email can be associated with multiple accounts, identical or similar emails can be a sign of ban evasion. On some sites, users who have been permanently banned for ban evasion may be unable to appeal their ban. When creating sock puppets, ban evaders use

5616-467: The security of a single provider's network to protect the traffic. From a security standpoint, a VPN must either trust the underlying delivery network or enforce security with a mechanism in the VPN itself. Unless the trusted delivery network runs among physically secure sites only, both trusted and secure models need an authentication mechanism for users to gain access to the VPN. Mobile virtual private networks are used in settings where an endpoint of

5694-452: The source or destination of packets traversing the Internet. When the link-local IPv4 address block was reserved, no standards existed for mechanisms of address autoconfiguration. Filling the void, Microsoft developed a protocol called Automatic Private IP Addressing (APIPA), whose first public implementation appeared in Windows 98 . APIPA has been deployed on millions of machines and became

5772-420: The specially defined all-nodes multicast address. A multicast address is associated with a group of interested receivers. In IPv4, addresses 224.0.0.0 through 239.255.255.255 (the former Class D addresses) are designated as multicast addresses. IPv6 uses the address block with the prefix ff00:: / 8 for multicast. In either case, the sender sends a single datagram from its unicast address to

5850-563: The terms intranet and extranet are used to describe two different use cases. An intranet site-to-site VPN describes a configuration where the sites connected by the VPN belong to the same organization, whereas an extranet site-to-site VPN joins sites belonging to multiple organizations. Typically, individuals interact with remote access VPNs, whereas businesses tend to make use of site-to-site connections for business-to-business , cloud computing, and branch office scenarios. However, these technologies are not mutually exclusive and, in

5928-451: The use of third-party applications mandatory for people and companies relying on such VPN protocol. Network appliances, such as firewalls, do often include VPN gateway functionality for either remote access or site-to-site configurations. Their administration interfaces do often facilitate setting up virtual private networks with a selection of supported protocols which have been integrated for an easy out-of-box setup. In some cases, like in

6006-436: Was no separate IP specification at the time. v3 was defined in 1978, and v3.1 is the first version where TCP is separated from IP. v6 is a synthesis of several suggested versions, v6 Simple Internet Protocol , v7 TP/IX: The Next Internet , v8 PIP — The P Internet Protocol , and v9 TUBA — Tcp & Udp with Big Addresses . IP networks may be divided into subnetworks in both IPv4 and IPv6 . For this purpose, an IP address

6084-423: Was the first standalone specification for the IP address, and has been in use since 1983. IPv4 addresses are defined as a 32-bit number, which became too small to provide enough addresses as the internet grew, leading to IPv4 address exhaustion over the 2010s. Its designated successor, IPv6 , uses 128 bits for the IP address, giving it a larger address space . Although IPv6 deployment has been ongoing since

#102897