draft
This commit is contained in:
parent
64b169d7e9
commit
6279562ff1
@ -1,15 +0,0 @@
|
|||||||
---
|
|
||||||
layout: page
|
|
||||||
title: "How I set up NAT64"
|
|
||||||
description: "Going single-stack inside AS54041"
|
|
||||||
date: 2023-05-31
|
|
||||||
tags: networking
|
|
||||||
draft: true
|
|
||||||
extra:
|
|
||||||
auto_center_images: true
|
|
||||||
excerpt: "Information on how I set up NAT64 inside AS54041"
|
|
||||||
# discuss:
|
|
||||||
# reddit: https://www.reddit.com/r/ewpratten/comments/1356u1t/i_performed_a_button_swap_on_my_mouse/
|
|
||||||
# hacker_news: https://news.ycombinator.com/item?id=35781662
|
|
||||||
---
|
|
||||||
|
|
||||||
75
content/blog/2023-06-16-nat64.md
Normal file
75
content/blog/2023-06-16-nat64.md
Normal file
@ -0,0 +1,75 @@
|
|||||||
|
---
|
||||||
|
layout: page
|
||||||
|
title: "How I set up NAT64"
|
||||||
|
description: "Working towards single-stack inside AS54041"
|
||||||
|
date: 2023-06-16
|
||||||
|
tags: networking
|
||||||
|
draft: true
|
||||||
|
extra:
|
||||||
|
auto_center_images: true
|
||||||
|
excerpt: "Information on how I set up NAT64 inside AS54041"
|
||||||
|
# discuss:
|
||||||
|
# reddit: https://www.reddit.com/r/ewpratten/comments/1356u1t/i_performed_a_button_swap_on_my_mouse/
|
||||||
|
# hacker_news: https://news.ycombinator.com/item?id=35781662
|
||||||
|
uses: [mermaid]
|
||||||
|
---
|
||||||
|
|
||||||
|
Somewhere along the way of setting up AS54041 over the past few years I stumbled across a reference to [NAT64](https://en.wikipedia.org/wiki/NAT64).
|
||||||
|
|
||||||
|
As with most things IPv6 related, Google searches surface a bunch of hand-wave-y information about possible implementations, but not much in the way of useful tutorials for anyone wanting to try it out themselves (without expensive enterprise routers that is).
|
||||||
|
|
||||||
|
## A quick overview of NAT64
|
||||||
|
|
||||||
|
Firstly, traditional NAT (technically NAT44) refers to the process of mapping one IPv4 address range to another.
|
||||||
|
|
||||||
|
For example, residential networks generally NAT something like `192.168.1.0/24` to a single public IPv4 address. Every time an internal host wants to send a packet out to the other side of the NAT, a temporary port is allocated on the public address, the router keeps track of this mapping, and the packet is masqueraded from the public address.
|
||||||
|
|
||||||
|
<div class="mermaid">
|
||||||
|
graph RL
|
||||||
|
subgraph Private IPv4 Address Space
|
||||||
|
Host[Internal Host] --> Router
|
||||||
|
Router --> Host
|
||||||
|
end
|
||||||
|
subgraph Public IPv4 Address Space
|
||||||
|
Router --> Server[Remote Server]
|
||||||
|
Server --> Router
|
||||||
|
end
|
||||||
|
</div>
|
||||||
|
|
||||||
|
Now, if you are familiar with NAT44 (aka, NAT), NAT64 shouldn't be a crazy leap:
|
||||||
|
|
||||||
|
<div class="mermaid">
|
||||||
|
graph RL
|
||||||
|
subgraph Private IPv6 Address Space
|
||||||
|
Host[Internal Host] --> Router
|
||||||
|
Router --> Host
|
||||||
|
end
|
||||||
|
subgraph Public IPv4 Address Space
|
||||||
|
Router --> Server[Remote Server]
|
||||||
|
Server --> Router
|
||||||
|
end
|
||||||
|
</div>
|
||||||
|
|
||||||
|
Doesn't look like anything changed? Well, that's because the only difference is that the private network is IPv**6** instead of 4.
|
||||||
|
|
||||||
|
Building on this idea of cross-protocol NAT, the next logical progression (and only way I've ever seen this implemented in practice) is to NAT between the *whole IPv6 Internet* and the *whole IPv4 Internet*. Like this:
|
||||||
|
|
||||||
|
<div class="mermaid">
|
||||||
|
graph LR
|
||||||
|
Internet6((IPv6 Internet)) --> Router --> Internet4((IPv4 Internet))
|
||||||
|
Internet4 --> Router --> Internet6
|
||||||
|
</div>
|
||||||
|
|
||||||
|
I'm pretty sure NAT64 was originally intended to be used in an Anycast configuration, but I've yet to learn of anybody doing this in practice.
|
||||||
|
|
||||||
|
<div class="mermaid">
|
||||||
|
graph LR
|
||||||
|
Internet6((IPv6 Internet)) <--> R1[Router 1] <--> Internet4((IPv4 Internet))
|
||||||
|
Internet6 <--> R2[Router 2] <--> Internet4
|
||||||
|
Internet6 <--> R3[Router 3] <--> Internet4
|
||||||
|
</div>
|
||||||
|
|
||||||
|
## How I set up NAT64 on a Debian-based router
|
||||||
|
|
||||||
|
## Final Remarks
|
||||||
|
|
||||||
@ -54,6 +54,11 @@
|
|||||||
}
|
}
|
||||||
|
|
||||||
.mermaid {
|
.mermaid {
|
||||||
width: fit-content;
|
width: 100%;
|
||||||
margin: auto;
|
text-align: center;
|
||||||
|
|
||||||
|
& > svg {
|
||||||
|
width: 90%;
|
||||||
|
max-width: unset !important;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -46,7 +46,7 @@
|
|||||||
{% endblock component_styles %}
|
{% endblock component_styles %}
|
||||||
|
|
||||||
{# Enable features #}
|
{# Enable features #}
|
||||||
{% include "components/metadata/page-features.html" %}
|
{% include "components/metadata/page-features-css.html" %}
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
<body>
|
<body>
|
||||||
@ -104,7 +104,12 @@
|
|||||||
{# Brid.gy h-card #}
|
{# Brid.gy h-card #}
|
||||||
<a href="https://ewpratten.com" class="h-card" rel="me" hidden>Evan Pratten</a>
|
<a href="https://ewpratten.com" class="h-card" rel="me" hidden>Evan Pratten</a>
|
||||||
|
|
||||||
|
|
||||||
|
{# Enable features #}
|
||||||
|
{% include "components/metadata/page-features-js.html" %}
|
||||||
|
|
||||||
{% include "components/metadata/analytics.html" %}
|
{% include "components/metadata/analytics.html" %}
|
||||||
|
|
||||||
</body>
|
</body>
|
||||||
|
|
||||||
</html>
|
</html>
|
||||||
@ -1,13 +1,5 @@
|
|||||||
{% for feature in feature_flags %}
|
{% for feature in feature_flags %}
|
||||||
|
|
||||||
{# KATEX #}
|
|
||||||
{% if feature == "katex" %}
|
|
||||||
<script src='https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/latest.js?config=TeX-MML-AM_CHTML' async></script>
|
|
||||||
<script type="text/x-mathjax-config">
|
|
||||||
MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\(','\\)']], displayMath: [ ['$$','$$'], ['\[','\]'] ]}});
|
|
||||||
</script>
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
{# Flags #}
|
{# Flags #}
|
||||||
{% if feature == "flags" %}
|
{% if feature == "flags" %}
|
||||||
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.4.3/css/flag-icons.min.css"
|
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.4.3/css/flag-icons.min.css"
|
||||||
@ -15,16 +7,6 @@
|
|||||||
crossorigin="anonymous" referrerpolicy="no-referrer" />
|
crossorigin="anonymous" referrerpolicy="no-referrer" />
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
{# Twitter embed #}
|
|
||||||
{% if feature == "twitter" %}
|
|
||||||
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
{# Mermaid #}
|
|
||||||
{% if feature == "mermaid" or feature == "graphviz" %}
|
|
||||||
<script src="https://cdn.jsdelivr.net/npm/mermaid/dist/mermaid.min.js"></script>
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
{# Font Awesome #}
|
{# Font Awesome #}
|
||||||
{% if feature == "fontawesome" %}
|
{% if feature == "fontawesome" %}
|
||||||
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css"
|
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css"
|
||||||
22
templates/components/metadata/page-features-js.html
Normal file
22
templates/components/metadata/page-features-js.html
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
{% for feature in feature_flags %}
|
||||||
|
|
||||||
|
{# KATEX #}
|
||||||
|
{% if feature == "katex" %}
|
||||||
|
<script src='https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/latest.js?config=TeX-MML-AM_CHTML' async></script>
|
||||||
|
<script type="text/x-mathjax-config">
|
||||||
|
MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\(','\\)']], displayMath: [ ['$$','$$'], ['\[','\]'] ]}});
|
||||||
|
</script>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{# Twitter embed #}
|
||||||
|
{% if feature == "twitter" %}
|
||||||
|
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{# Mermaid #}
|
||||||
|
{% if feature == "mermaid" or feature == "graphviz" %}
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/mermaid/dist/mermaid.min.js"></script>
|
||||||
|
<script>mermaid.initialize({startOnLoad:true});</script>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% endfor %}
|
||||||
Loading…
x
Reference in New Issue
Block a user