draft
This commit is contained in:
parent
64b169d7e9
commit
6279562ff1
@ -1,15 +0,0 @@
|
||||
---
|
||||
layout: page
|
||||
title: "How I set up NAT64"
|
||||
description: "Going single-stack inside AS54041"
|
||||
date: 2023-05-31
|
||||
tags: networking
|
||||
draft: true
|
||||
extra:
|
||||
auto_center_images: true
|
||||
excerpt: "Information on how I set up NAT64 inside AS54041"
|
||||
# discuss:
|
||||
# reddit: https://www.reddit.com/r/ewpratten/comments/1356u1t/i_performed_a_button_swap_on_my_mouse/
|
||||
# hacker_news: https://news.ycombinator.com/item?id=35781662
|
||||
---
|
||||
|
||||
75
content/blog/2023-06-16-nat64.md
Normal file
75
content/blog/2023-06-16-nat64.md
Normal file
@ -0,0 +1,75 @@
|
||||
---
|
||||
layout: page
|
||||
title: "How I set up NAT64"
|
||||
description: "Working towards single-stack inside AS54041"
|
||||
date: 2023-06-16
|
||||
tags: networking
|
||||
draft: true
|
||||
extra:
|
||||
auto_center_images: true
|
||||
excerpt: "Information on how I set up NAT64 inside AS54041"
|
||||
# discuss:
|
||||
# reddit: https://www.reddit.com/r/ewpratten/comments/1356u1t/i_performed_a_button_swap_on_my_mouse/
|
||||
# hacker_news: https://news.ycombinator.com/item?id=35781662
|
||||
uses: [mermaid]
|
||||
---
|
||||
|
||||
Somewhere along the way of setting up AS54041 over the past few years I stumbled across a reference to [NAT64](https://en.wikipedia.org/wiki/NAT64).
|
||||
|
||||
As with most things IPv6 related, Google searches surface a bunch of hand-wave-y information about possible implementations, but not much in the way of useful tutorials for anyone wanting to try it out themselves (without expensive enterprise routers that is).
|
||||
|
||||
## A quick overview of NAT64
|
||||
|
||||
Firstly, traditional NAT (technically NAT44) refers to the process of mapping one IPv4 address range to another.
|
||||
|
||||
For example, residential networks generally NAT something like `192.168.1.0/24` to a single public IPv4 address. Every time an internal host wants to send a packet out to the other side of the NAT, a temporary port is allocated on the public address, the router keeps track of this mapping, and the packet is masqueraded from the public address.
|
||||
|
||||
<div class="mermaid">
|
||||
graph RL
|
||||
subgraph Private IPv4 Address Space
|
||||
Host[Internal Host] --> Router
|
||||
Router --> Host
|
||||
end
|
||||
subgraph Public IPv4 Address Space
|
||||
Router --> Server[Remote Server]
|
||||
Server --> Router
|
||||
end
|
||||
</div>
|
||||
|
||||
Now, if you are familiar with NAT44 (aka, NAT), NAT64 shouldn't be a crazy leap:
|
||||
|
||||
<div class="mermaid">
|
||||
graph RL
|
||||
subgraph Private IPv6 Address Space
|
||||
Host[Internal Host] --> Router
|
||||
Router --> Host
|
||||
end
|
||||
subgraph Public IPv4 Address Space
|
||||
Router --> Server[Remote Server]
|
||||
Server --> Router
|
||||
end
|
||||
</div>
|
||||
|
||||
Doesn't look like anything changed? Well, that's because the only difference is that the private network is IPv**6** instead of 4.
|
||||
|
||||
Building on this idea of cross-protocol NAT, the next logical progression (and only way I've ever seen this implemented in practice) is to NAT between the *whole IPv6 Internet* and the *whole IPv4 Internet*. Like this:
|
||||
|
||||
<div class="mermaid">
|
||||
graph LR
|
||||
Internet6((IPv6 Internet)) --> Router --> Internet4((IPv4 Internet))
|
||||
Internet4 --> Router --> Internet6
|
||||
</div>
|
||||
|
||||
I'm pretty sure NAT64 was originally intended to be used in an Anycast configuration, but I've yet to learn of anybody doing this in practice.
|
||||
|
||||
<div class="mermaid">
|
||||
graph LR
|
||||
Internet6((IPv6 Internet)) <--> R1[Router 1] <--> Internet4((IPv4 Internet))
|
||||
Internet6 <--> R2[Router 2] <--> Internet4
|
||||
Internet6 <--> R3[Router 3] <--> Internet4
|
||||
</div>
|
||||
|
||||
## How I set up NAT64 on a Debian-based router
|
||||
|
||||
## Final Remarks
|
||||
|
||||
@ -54,6 +54,11 @@
|
||||
}
|
||||
|
||||
.mermaid {
|
||||
width: fit-content;
|
||||
margin: auto;
|
||||
width: 100%;
|
||||
text-align: center;
|
||||
|
||||
& > svg {
|
||||
width: 90%;
|
||||
max-width: unset !important;
|
||||
}
|
||||
}
|
||||
|
||||
@ -46,7 +46,7 @@
|
||||
{% endblock component_styles %}
|
||||
|
||||
{# Enable features #}
|
||||
{% include "components/metadata/page-features.html" %}
|
||||
{% include "components/metadata/page-features-css.html" %}
|
||||
</head>
|
||||
|
||||
<body>
|
||||
@ -104,7 +104,12 @@
|
||||
{# Brid.gy h-card #}
|
||||
<a href="https://ewpratten.com" class="h-card" rel="me" hidden>Evan Pratten</a>
|
||||
|
||||
|
||||
{# Enable features #}
|
||||
{% include "components/metadata/page-features-js.html" %}
|
||||
|
||||
{% include "components/metadata/analytics.html" %}
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
||||
@ -1,13 +1,5 @@
|
||||
{% for feature in feature_flags %}
|
||||
|
||||
{# KATEX #}
|
||||
{% if feature == "katex" %}
|
||||
<script src='https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/latest.js?config=TeX-MML-AM_CHTML' async></script>
|
||||
<script type="text/x-mathjax-config">
|
||||
MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\(','\\)']], displayMath: [ ['$$','$$'], ['\[','\]'] ]}});
|
||||
</script>
|
||||
{% endif %}
|
||||
|
||||
{# Flags #}
|
||||
{% if feature == "flags" %}
|
||||
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.4.3/css/flag-icons.min.css"
|
||||
@ -15,16 +7,6 @@
|
||||
crossorigin="anonymous" referrerpolicy="no-referrer" />
|
||||
{% endif %}
|
||||
|
||||
{# Twitter embed #}
|
||||
{% if feature == "twitter" %}
|
||||
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
|
||||
{% endif %}
|
||||
|
||||
{# Mermaid #}
|
||||
{% if feature == "mermaid" or feature == "graphviz" %}
|
||||
<script src="https://cdn.jsdelivr.net/npm/mermaid/dist/mermaid.min.js"></script>
|
||||
{% endif %}
|
||||
|
||||
{# Font Awesome #}
|
||||
{% if feature == "fontawesome" %}
|
||||
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css"
|
||||
22
templates/components/metadata/page-features-js.html
Normal file
22
templates/components/metadata/page-features-js.html
Normal file
@ -0,0 +1,22 @@
|
||||
{% for feature in feature_flags %}
|
||||
|
||||
{# KATEX #}
|
||||
{% if feature == "katex" %}
|
||||
<script src='https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/latest.js?config=TeX-MML-AM_CHTML' async></script>
|
||||
<script type="text/x-mathjax-config">
|
||||
MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\(','\\)']], displayMath: [ ['$$','$$'], ['\[','\]'] ]}});
|
||||
</script>
|
||||
{% endif %}
|
||||
|
||||
{# Twitter embed #}
|
||||
{% if feature == "twitter" %}
|
||||
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
|
||||
{% endif %}
|
||||
|
||||
{# Mermaid #}
|
||||
{% if feature == "mermaid" or feature == "graphviz" %}
|
||||
<script src="https://cdn.jsdelivr.net/npm/mermaid/dist/mermaid.min.js"></script>
|
||||
<script>mermaid.initialize({startOnLoad:true});</script>
|
||||
{% endif %}
|
||||
|
||||
{% endfor %}
|
||||
Loading…
x
Reference in New Issue
Block a user