The ungleich NAT64 infrastructure¶

Status¶

This document is WORK IN PROGRESS.

General¶

• We started with tayga in 2017 and switched to jool some time in 2019
  • tayga was cpu bound
• We run stateful NAT64 (1:n mappings)
  • openwrt: openwrt-add-jool-ipv4island.sh
• We run stateless NAT64 (1:1 mappings, aka SIIT)
  • cdist: __dcl_jool_siit
  • openwrt: openwrt-add-jool.sh

Setting up a new IPv4-address-as-a-service (via IPv6 mapping)¶

• Add mapping in __dcl_jool_siit/files/ipv4-as-a-service.conf
• Reconfigure routers:

cdist config router{1..2}.place{5..6}.ungleich.ch

• Be happy.

Configuring IPv4-as-a-service including a VPN¶

• Configure a standard VPN
• Use the net::42 IPv6 address as the destination address
• Continue with the mapping as described in the previous section