Project

General

Profile

Actions

The ungleich NAT64 infrastructure

Status

This document is WORK IN PROGRESS.

General

  • We started with tayga in 2017 and switched to jool some time in 2019
    • tayga was cpu bound
  • We run stateful NAT64 (1:n mappings)
    • openwrt: openwrt-add-jool-ipv4island.sh
  • We run stateless NAT64 (1:1 mappings, aka SIIT)
    • cdist: __dcl_jool_siit
    • openwrt: openwrt-add-jool.sh

Setting up a new IPv4-address-as-a-service (via IPv6 mapping)

  • Add mapping in __dcl_jool_siit/files/ipv4-as-a-service.conf
  • Reconfigure routers:
cdist config router{1..2}.place{5..6}.ungleich.ch
  • Be happy.

Configuring IPv4-as-a-service including a VPN

  • Configure a standard VPN
  • Use the net::42 IPv6 address as the destination address
  • Continue with the mapping as described in the previous section

Updated by Nico Schottelius 7 months ago · 4 revisions