Post AWkYey6WpUTmvk6P6O by jonatan@social.jsteuernagel.de
(DIR) More posts by jonatan@social.jsteuernagel.de
(DIR) Post #AWkD7olmPt37NykTei by jonatan@social.jsteuernagel.de
2023-06-16T08:38:43Z
0 likes, 2 repeats
I've successfully installed a #NAT64 server and a #DNS64 Bind9 server in my homelab.I set the DHCP Option 108 and observed my #iOS and #Android devices immediatly going #IPv6-only and enabling its #CLAT engine.The most surprising part though was that #macOS did the same.I've read online multiple times, that it also requires an option in the Router Advertisement, which I currently can't set. But no, it didn't need it and also started CLAT.Now if only #Windows would do the same...
(DIR) Post #AWkD7rEvEVY52wOmMC by jonatan@social.jsteuernagel.de
2023-06-16T08:40:32Z
0 likes, 1 repeats
With #CLAT it works so well, it's actually insane. Everything just works.Github? No problem.My Companies IPv4-only VPN? No problem!Gonna keep testing this setup for a while and see if I find any issues.#IPv6
(DIR) Post #AWkSzcSHuqDI8wkBdo by Bluedepth@mastodon.social
2023-06-16T09:56:46Z
0 likes, 0 repeats
@jonatan @stanford It’s this sort of observational learning / vicarious experiencing that I treasure. How did it work in real life? Plus now, I know what CLAT is (looked it up) and thank you for all of this. 🙏 I keep on asking my upstream providers about ipv6 and I get glad-handed a lot. For me, ipv6 is more of a mirage than a protocol, at least right now.
(DIR) Post #AWkSzd4ZcUq23gelJg by jonatan@social.jsteuernagel.de
2023-06-16T10:34:24Z
0 likes, 0 repeats
@Bluedepth @stanford I‘m glad my post was of value to you. I knew I would never actually learn the ins and outs of IPv6, without going all in.There is still a lot I have to figure out, but I am very happy with the progress so far and I‘ll definetly keep this setup and improve upon it. (Currently the NAT64 is in a VM, but I want it either on my Router or in Kubernetes)
(DIR) Post #AWkSzdcFbHmDk8PeoC by stanford@social.arclight.pro
2023-06-16T12:10:49Z
0 likes, 0 repeats
@jonatan Maybe some positive feedback would be helpful ;)https://roadmap.vyos.io/c/28-nat64-support
(DIR) Post #AWkWL2U2dcnqoQTAn2 by jonatan@social.jsteuernagel.de
2023-06-16T12:46:53Z
0 likes, 0 repeats
@stanford Done :)I already saw that they have 2 Draft PRs, for Tayga and Jool, but neither look very complete or active anymore.
(DIR) Post #AWkYUi4Paat0J0DjVI by tschaefer@ipv6.social
2023-06-16T13:13:10Z
0 likes, 0 repeats
@jonatan Which software for NAT64 do you use?
(DIR) Post #AWkYeevC9P7lR5eaIa by Chaft@meow.social
2023-06-16T08:53:42Z
0 likes, 0 repeats
@jonatan my brain hurts. are you doing this because you have to deal with ipv6 only traffic and your apps only ipv4? Assume I know very little
(DIR) Post #AWkYemTU4JiArSkZDU by jonatan@social.jsteuernagel.de
2023-06-16T09:38:56Z
0 likes, 1 repeats
@Chaft Haha, understandable, I was throwing a lot of terms around there :DI am learning about IPv6, by forcing myself to try to go IPv6-only at home (or at least going as far towards it as is possible).To do that I setup NAT64 and DNS64. DNS64 can create IPv6 addresses for DNS entries that don't have any (example: Github). Those then go to NAT64, which translates them to IPv4.
(DIR) Post #AWkYeup321iKkettwG by jonatan@social.jsteuernagel.de
2023-06-16T09:40:47Z
0 likes, 1 repeats
@Chaft This doesn't work for applications that use hard-coded IPv4 addresses (e.g. Steam), because they don't use DNS and thus never arrive at DNS64.That's where something called 464XLAT comes in, which has a CLAT component on the Client device, which create an IPv4 internet interface, which accepts the IPv4 traffic and then routes it to NAT64.To the application it doesn't feel different from native IPv4.iOS, Android and macOS support this natively.Windows only does for WWAN interfaces...
(DIR) Post #AWkYey6WpUTmvk6P6O by jonatan@social.jsteuernagel.de
2023-06-16T09:41:27Z
0 likes, 0 repeats
@Chaft So in summary: I cause myself a lot of network suffering, to learn, and so far it's working better than I would have expected :D