Industry executives and experts share their predictions for 2026. Read them in this 18th annual VMblog.com series exclusive.
By Conner Lines, CTO, SixMap
Pundits have been predicting that the transition from IPv4 to IPv6 is “right around the corner” for well over a decade. When IANA sold off its final blocks of IPv4 addresses in May 2014, many assumed the shift to IPv6 would follow almost immediately. Instead, the industry has witnessed a slow but steady evolution. Over the last 12 years, IPv6 traffic has climbed consistently, and today more than half of all Internet traffic globally runs over IPv6. Adoption has not been uniform, but the curve is unmistakably bending upward-and it is approaching a tipping point.
The exhaustion of IPv4 address space, combined with mounting policy pressure, is driving a long-anticipated operational pivot that will gain real momentum in 2026. In the United States, the public sector faces particularly strong regulatory headwinds. OMB Memorandum M-21-07 requires federal agencies to ensure that at least 80 percent of IP-enabled assets operate in IPv6-only environments by the end of fiscal year 2025 (September 30, 2025). In practice, however, progress has lagged. As of October 2025, independent assessments indicate that no federal agency has publicly claimed full 80 percent compliance. This shortfall signals not only the complexity of IPv6 migration but also the likelihood of intensified modernization initiatives across the federal government throughout 2026.
Global traffic patterns reinforce that the transition is underway-just not evenly distributed. Cisco reports that IPv6 traffic is now roughly at parity with IPv4 “by all measures,” a milestone that underscores how far the broader Internet ecosystem has already moved. Yet when we compare adoption country by country, disparities are stark. Nations such as France, Germany, and India see roughly 70-80 percent of user traffic to Google served over IPv6. The United States, by contrast, hovers in the low-50 percent range: above the global midpoint but well below its peers in Europe and Asia.
One of the most pressing challenges is that IPv6 adoption is accelerating faster than the visibility, monitoring, and risk detection tooling required to secure it. Most organizations still operate dual-stack environments, which effectively double their external attack surface. The IPv6 address space, at roughly 3.4�1038 possible addresses, is 29 orders of magnitude larger than IPv4-so large that brute-force discovery is not merely impractical but meaningless. In this vast landscape, traditional IPv4-centric scanners, asset inventories, and monitoring approaches fail to map the majority of externally reachable IPv6 assets. As a result, IT and security teams inherit large pockets of unmapped, unintentionally exposed infrastructure: services enabled for modernization, cost efficiency, or compliance, but never integrated into external attack-surface management workflows.
These blind spots will become increasingly consequential. SixMap predicts that in 2026, some of the most severe breaches will originate not from legacy IPv4 systems, but from assets that exist in the IPv6 dimension of enterprise environments. Because attackers already use native IPv6 scanning and reconnaissance techniques-many of which exploit heuristics, DNS metadata, and predictable addressing schemes-organizations that lack dual-stack visibility will be operating at a significant disadvantage. Periodic scans and partial inventory processes simply cannot keep pace with the real-time nature of IPv6 exposure.
To close this gap, defenders will need continuous, machine-speed mapping across all ports, protocols, and address families. IPv6 must be treated as a first-class exposure domain, not a sidecar to IPv4. Organizations that modernize their visibility stack now will not only reduce security risk but also streamline compliance, cloud modernization, and future networking initiatives.
The long-predicted IPv6 transition is no longer theoretical; it is unfolding in real time, and 2026 will mark an inflection point. With regulatory deadlines looming, global traffic shifting, and attackers increasingly active in the IPv6 space, organizations that delay full dual-stack visibility will find themselves operating blind. The winners in this next phase of Internet modernization will be the teams that recognize IPv6 not as a niche protocol, but as the Internet’s new default.
##
ABOUT THE AUTHOR
Conner Lines has over a decade of experience in software engineering and technology leadership roles across public and private sector organizations, including General Dynamics Advanced Information Systems, the Center For Advanced Public Safety, and General Dynamics Mission Systems. Currently, Conner serves as the Chief Technology Officer at SixMap, Inc., and has been in this role since January 2021. Conner holds a Bachelor’s degree in Computer Science from The University of Alabama and a Master’s degree in Computer Science from THe Georgia Institute of Technology.
