IPv4 vs IPv6: What UK Businesses Need to Know

The Internet Protocol — the fundamental addressing system that makes network communication possible — is undergoing the most significant transition in its history. IPv4, the protocol that has underpinned the internet since 1983, is running out of addresses. Its successor, IPv6, offers a virtually unlimited address space and several technical improvements, but adoption has been gradual and uneven. For UK businesses, understanding the difference between these two protocols, and planning for the transition, is becoming increasingly important.

This is not merely an academic concern for network engineers. The exhaustion of IPv4 addresses is already affecting businesses in tangible ways — from rising costs for IPv4 address space to compatibility issues with modern cloud services that are increasingly IPv6-native. Whether you run a small consultancy in Bristol or a growing technology company in London, the IPv4-to-IPv6 transition will affect your network infrastructure, your cloud strategy, and potentially your ability to do business with certain partners and customers.

This guide explains the key differences between IPv4 and IPv6, the current state of adoption in the United Kingdom, and the practical steps your business should take to prepare for a dual-protocol future.

Understanding the Fundamentals

Every device connected to a network — whether it is a laptop, a server, a printer, or a smart thermostat — needs a unique IP address to communicate with other devices. IPv4 uses 32-bit addresses, written as four groups of numbers separated by dots (for example, 192.168.1.100). This format provides approximately 4.3 billion unique addresses. When IPv4 was designed in the early 1980s, 4.3 billion seemed like more than enough for any conceivable future use. Nobody anticipated that within a few decades, billions of people would carry internet-connected devices in their pockets, and that everything from refrigerators to light bulbs would need IP addresses.

How IP Addressing Works in Practice

To understand why the transition matters, it helps to grasp how IP addresses function in a business context. When your employees access a website, send an email, or connect to a cloud application, their devices use IP addresses at every step. Your office router has a public IP address visible to the internet, and each device on your internal network has a private IP address assigned by your DHCP server. This two-tier system — public addresses for external communication and private addresses for internal use — is fundamental to how modern business networks operate.

For UK businesses running even modest IT environments, the interplay between public and private addressing has practical implications. Public IPv4 addresses are what your customers, partners, and cloud services use to reach your systems. If you host a website, run a VPN for remote workers, or operate any internet-facing service, you need public IPv4 addresses — and these are the addresses that are becoming scarce and expensive. Private addresses, used internally, are not subject to the same scarcity because they are reused across millions of networks worldwide. Understanding this distinction is the first step towards appreciating why the transition to IPv6 matters for your organisation.

IPv6 uses 128-bit addresses, written as eight groups of four hexadecimal characters separated by colons (for example, 2001:0db8:85a3:0000:0000:8a2e:0370:7334). This provides an astronomically larger address space — enough to assign a unique address to every grain of sand on Earth and still have addresses left over. Beyond the larger address space, IPv6 also introduces several technical improvements over IPv4.

Why IPv4 Addresses Are Running Out

The Internet Assigned Numbers Authority (IANA) allocated its last blocks of IPv4 addresses to the Regional Internet Registries back in 2011. RIPE NCC, which manages IP address allocation for Europe and the UK, exhausted its final /8 block in November 2019. Since then, new IPv4 addresses have only been available through a waiting list for very small allocations (a single /24 block of 256 addresses) or through the secondary market, where organisations buy and sell existing address space.

This scarcity has created a thriving market for IPv4 addresses. Prices have risen steadily from a few dollars per address a decade ago to over £35 per address today. For a UK business that needs a /24 block (256 addresses), that represents a cost of approximately £9,000 — just for the addresses themselves, before any infrastructure costs. This makes IPv4 address space an increasingly expensive and finite resource.

The workaround that has sustained IPv4 for the past two decades is Network Address Translation (NAT), which allows multiple devices on a private network to share a single public IPv4 address. NAT has been remarkably effective, but it introduces complexity, breaks certain applications, and creates performance overhead. It is a sticking plaster, not a solution — and as the number of connected devices continues to grow exponentially, even NAT's ability to extend IPv4's useful life is reaching its limits.

The Real Cost to UK Businesses

The financial impact of IPv4 exhaustion extends well beyond the direct cost of purchasing addresses. UK businesses that rely on carrier-grade NAT (CGNAT) — where the ISP itself shares a single public address among multiple customers — face issues with geolocation accuracy, online reputation problems when sharing an IP address with poorly behaved neighbours, and difficulties with services that restrict access by IP address. Some financial services platforms, government portals, and compliance-sensitive systems may not function reliably behind CGNAT, creating operational headaches that are difficult to diagnose and expensive to work around.

For businesses in regulated sectors such as finance, healthcare, and legal services, the inability to obtain dedicated public IPv4 addresses can create genuine compliance challenges. Audit trails that require clear identification of network traffic become significantly more complex when multiple organisations share addresses. PCI DSS compliance, for instance, becomes harder to demonstrate when your internet traffic originates from a shared IP pool rather than a dedicated address uniquely associated with your business. Similar concerns apply to organisations handling sensitive personal data under GDPR, where the ability to attribute network activity to specific systems is important for incident response and forensic investigation.

Moreover, the rising cost of IPv4 addresses creates an increasingly uneven playing field. Larger enterprises that secured substantial IPv4 allocations years ago have a built-in advantage over newer or smaller businesses that must now purchase addresses at market rates. Some multinational corporations hold millions of unused IPv4 addresses that they acquired decades ago at no cost. This dynamic strongly reinforces the case for IPv6 adoption — it levels the playing field by providing abundant, free addressing to organisations of any size, ensuring that small businesses in Manchester or Edinburgh are not disadvantaged relative to established corporations in the City of London.

Technical Advantages of IPv6

Beyond the obvious benefit of a vastly larger address space, IPv6 offers several technical advantages that improve network performance, simplify administration, and enhance security.

End-to-end connectivity: Without the need for NAT, every device on an IPv6 network can have a globally unique address and communicate directly with any other device. This simplifies network architecture, improves application compatibility, and enables peer-to-peer communication that is difficult or impossible with NAT.

Simplified header format: The IPv6 packet header is actually simpler than IPv4's, despite the larger address size. IPv4 headers contain variable-length options that routers must process, while IPv6 uses a streamlined fixed-length header with optional extension headers. This allows routers to process IPv6 packets more efficiently, potentially improving throughput.

Built-in security: IPv6 was designed with IPsec as a mandatory component, providing native support for encryption and authentication at the network layer. While IPsec can also be used with IPv4, it is an optional add-on rather than an integral part of the protocol.

Stateless address auto-configuration (SLAAC): IPv6 devices can automatically configure their own addresses using information from the local router, without requiring a DHCP server. This simplifies network administration, particularly for large networks and IoT deployments.

Performance and Efficiency Gains

In real-world testing, IPv6 frequently delivers measurable performance improvements over IPv4. Because IPv6 eliminates the need for NAT traversal, packets take a more direct route between source and destination, reducing latency. Major content providers have reported that their services load 10 to 15 per cent faster over IPv6 than over IPv4, and similar improvements have been observed across the industry. For UK businesses that depend on cloud applications, video conferencing, and real-time collaboration tools, these latency improvements translate directly into a better user experience and higher productivity across the workforce.

The efficiency gains extend to network management as well. IPv6 stateless address auto-configuration substantially reduces the administrative burden of managing DHCP servers and IP address assignments. In organisations with hundreds or thousands of devices — particularly those deploying IoT sensors, building management systems, or industrial automation equipment — the ability for devices to self-configure their network addresses significantly simplifies deployment and reduces the chance of addressing conflicts that can cause costly network outages. For growing UK businesses adding new devices regularly, this self-configuration capability reduces the workload on internal IT teams and eliminates a common source of configuration errors.

Quality of Service improvements: IPv6 includes a Flow Label field in its header that enables more granular traffic management. Network equipment can use this field to prioritise specific traffic flows — such as voice or video — without the deep packet inspection that IPv4 QoS often requires. For UK businesses running unified communications platforms like Microsoft Teams or Zoom, this can improve call quality and video conferencing reliability, particularly on congested networks during peak business hours when bandwidth is at a premium.

Multicast efficiency: IPv6 replaces IPv4 broadcast with multicast, which is fundamentally more efficient for network operations. Rather than sending packets to every device on the network (as broadcast does), multicast delivers packets only to devices that have registered interest. This reduces unnecessary network traffic, improves overall network performance, and is particularly beneficial in larger office environments where broadcast storms can degrade network performance for all users.

IPv6 Adoption in the United Kingdom

The UK has made significant progress in IPv6 adoption, though it remains uneven across different sectors and providers. According to recent data, approximately 45 per cent of UK internet traffic is now carried over IPv6, placing the UK ahead of many European countries but behind leaders such as India, Germany, and France.

The adoption picture varies considerably by sector. Consumer ISPs have led the way, driven by the need to serve growing numbers of broadband subscribers without acquiring expensive additional IPv4 addresses. BT, the UK's largest broadband provider, has deployed IPv6 to approximately 85 per cent of its broadband customers. Sky Broadband has also made substantial progress. However, business-focused ISPs and hosting providers have been slower to adopt IPv6, partly because their enterprise customers have been slower to request it.

UK government digital services have been gradually adopting IPv6, with GOV.UK and several other government websites accessible over IPv6. The National Cyber Security Centre has published guidance recommending that organisations include IPv6 in their network planning, though it stops short of mandating adoption. Major UK cloud providers and data centres generally offer IPv6 connectivity, and all three major hyperscale cloud providers — AWS, Azure, and Google Cloud — fully support IPv6 in their UK regions.

Sector-Specific Adoption Patterns

Within the UK business landscape, IPv6 adoption patterns vary significantly by industry. Financial services firms, driven by regulatory requirements and the need for robust, future-proof infrastructure, are among the more proactive adopters. Major UK banks have been running dual-stack networks internally for several years, and many have mandated IPv6 capability in their supplier requirements. If your business provides services to the financial sector, IPv6 readiness may soon become a contractual requirement rather than an optional enhancement.

The public sector presents a mixed picture. While central government digital services have made progress, many local councils and NHS trusts still operate predominantly IPv4 networks. The Government Digital Service has signalled that IPv6 support will become increasingly important for public-sector digital services, and businesses that bid for government contracts should anticipate IPv6 requirements appearing in procurement specifications over the coming years. Organisations that supply to the Ministry of Defence or intelligence agencies may find IPv6 capability is already a prerequisite for certain contract categories.

Retail and e-commerce businesses have a strong commercial incentive to adopt IPv6. As more consumers access the internet via IPv6-enabled mobile networks and broadband connections, websites that only support IPv4 may experience slightly slower load times for these users. Given that even small increases in page load time demonstrably reduce conversion rates, ensuring your online presence is accessible over both IPv4 and IPv6 is a sensible commercial decision for any UK retailer with an online presence. The difference may seem marginal, but in a competitive market where margins are tight, every millisecond of page load time can affect the bottom line.

The technology and creative sectors in UK cities such as London, Manchester, Edinburgh, and Bristol are generally ahead of the curve, with many startups and digital agencies building on cloud-native infrastructure that supports IPv6 by default. These businesses often adopt IPv6 as a natural consequence of their cloud-first architecture rather than through a deliberate migration project. For established businesses in more traditional sectors — manufacturing, professional services, construction — the transition requires more deliberate planning, but the principles remain the same: start with internet-facing services, build internal capability gradually, and ensure all new procurement is IPv6-ready.

What UK Businesses Should Do Now

The transition from IPv4 to IPv6 is not something that will happen overnight, and it is not something you can ignore indefinitely. The pragmatic approach for UK businesses is to adopt a dual-stack strategy — running both IPv4 and IPv6 simultaneously — that allows you to maintain compatibility with the IPv4 internet while progressively enabling IPv6 across your infrastructure.

Assess Your Current Readiness

Start by auditing your existing infrastructure for IPv6 compatibility. Most modern network equipment — routers, switches, firewalls, and wireless access points manufactured in the last five to seven years — supports IPv6. However, older equipment, particularly legacy firewalls and some managed switches, may not. Your audit should cover every network device, server operating system, and application in your environment, noting which support IPv6 natively, which require firmware updates, and which need replacing.

Check whether your internet service provider offers IPv6 connectivity on your business circuit. If they do not, request it — or factor IPv6 availability into your next ISP procurement decision. Similarly, verify that your web hosting provider, DNS provider, and email services support IPv6, and enable it where available.

Building a Transition Roadmap

A structured transition roadmap prevents the IPv6 migration from becoming an overwhelming or disruptive project. Begin by categorising your infrastructure into three tiers: internet-facing services (websites, email, VPNs), internal core infrastructure (Active Directory, DNS, DHCP, file servers), and end-user devices and applications. Prioritise internet-facing services first, as these deliver the most immediate benefit and are typically the simplest to dual-stack without affecting internal operations.

For most UK SMEs, the practical starting point is enabling IPv6 on your public-facing web presence. This typically involves adding AAAA records to your DNS, ensuring your web hosting or CDN supports IPv6, and verifying that your website functions correctly when accessed over IPv6. This can often be accomplished in a matter of hours with no disruption to existing IPv4 services, making it an easy early win that builds confidence and internal expertise for the broader transition ahead.

The second phase — enabling IPv6 on your internal network — is more involved and should be planned carefully. This requires IPv6-capable routing and switching infrastructure, updates to your DHCP and DNS services, firewall rule changes, and potentially updates to internal applications that may have hardcoded IPv4 addresses. Plan for a dual-stack period of at least two to three years during which both protocols run simultaneously, allowing you to migrate services gradually while maintaining full backward compatibility with legacy systems that may take longer to update.

Throughout the transition, maintain detailed documentation of your IPv6 addressing scheme, subnet allocations, and firewall rules. Unlike IPv4, where most organisations use a small number of well-known private address ranges, IPv6 addressing plans require more forethought to ensure logical, hierarchical address allocation that simplifies future management. Your network team should establish naming conventions and documentation standards early in the process, before the complexity of a dual-stack environment makes retroactive documentation impractical.

Security Considerations

IPv6 introduces security considerations that many UK businesses overlook. If your network equipment supports IPv6 but you have not explicitly configured and secured it, you may have IPv6 traffic flowing on your network without any firewall rules or monitoring in place. This is a genuine security risk — attackers can potentially use IPv6 to bypass IPv4-only security controls.

Ensure your firewall policies cover both IPv4 and IPv6 traffic. If you are not ready to deploy IPv6, explicitly disable it on all network interfaces and block IPv6 at the firewall to prevent uncontrolled IPv6 traffic. When you do deploy IPv6, apply the same security principles you use for IPv4 — least privilege, defence in depth, and comprehensive logging.

IPv6 and Compliance Frameworks

UK businesses operating under regulatory frameworks such as GDPR, PCI DSS, ISO 27001, or Cyber Essentials need to consider how IPv6 affects their compliance posture. The good news is that the built-in security features of IPv6 — mandatory IPsec support and the elimination of NAT — can actually simplify certain compliance requirements. End-to-end encryption at the network layer becomes more straightforward, and the ability to assign unique addresses to every device improves audit trail clarity and simplifies incident investigation.

However, compliance teams should be aware that IPv6 introduces new considerations. The vast address space means that traditional IP-based access control lists become more complex to manage. Privacy extensions in IPv6, while beneficial for end users, can complicate network forensics if not properly configured. Organisations subject to data retention requirements need to ensure their logging infrastructure captures IPv6 traffic with the same fidelity as IPv4, and that log analysis tools are capable of parsing and correlating IPv6 addresses effectively.

For businesses pursuing or maintaining Cyber Essentials certification — increasingly a requirement for UK government contracts — the technical controls apply equally to IPv6 as to IPv4. Your boundary firewalls must filter IPv6 traffic, your access controls must cover IPv6 addressing, and your patch management must include IPv6-related firmware and software updates. Failing to secure IPv6 traffic, even if you do not believe you are actively using it on your network, can result in a failed assessment and jeopardise your eligibility for public-sector work.

Organisations pursuing ISO 27001 certification should incorporate IPv6 considerations into their risk assessment and treatment processes. The dual-stack transition period introduces additional complexity that should be documented in your information security management system. Network diagrams, asset inventories, and access control policies all need updating to reflect the dual-protocol environment. While this may seem burdensome, it also presents an opportunity to review and improve your overall network security posture as part of a planned, methodical transition rather than a rushed, reactive change.

The transition from IPv4 to IPv6 is a marathon, not a sprint. UK businesses that begin planning now will be well-positioned as IPv6 becomes increasingly essential for modern connectivity. Those that delay will face rising IPv4 costs, compatibility challenges with IPv6-native services, and a more expensive and disruptive transition when they are eventually forced to act.