fun idea: intelligent VPN service that aims to give people inbound v6 + outbound v6 exclusively to destinations found to be (via scanning + a transparent proxy) activitypub or matrix servers respectively, to increase ipv6 adoption in the fedi and matrix worlds

@9pfs how would you tell whether a given IP address is an activitypub or matrix server? also this wouldn't allow for client connections or media to be served over v6

@noisytoot you would tell by connecting to it prior to letting the actual connection through, interrogating it for matrix- and activitypub-specific endpoints, and either closing the connection or allowing it through on the proxy + caching the result

@noisytoot why wouldn't client connections over v6 work? the proxy would only apply to flows from the VPN tunnel to the service provider's WAN

@9pfs you can't really do that because you don't necessarily know the hostname being connected to. ...unless you're suggesting decrypting TLS on the proxy (which would be required for caching), in which case I think this is a bad idea

@noisytoot probably should've mentioned that i was imagining that SNI checks would be involved aa

@9pfs ECH breaks that

@noisytoot sure
could always force clients that MUST do ECH to use a (dnssec-preserving for accountability) service involving a pihole-style patched or otherwise modified dnsmasq and dnsmasq's nftables set updating feature though