Feature Request: IPv6 NAT support

I searched in this forum (https://forum.mikrotik.com/search.php?keywords=IPv6+NAT) and wondered if nobody asked for IPv6 NAT support.

One goal of IPv6 was to reinstate the end-to-end principle of the internet - without NAT.
But in fact there are still reasonable reasons for IPv6 NAT support. Of course a small SOHO or home network will drive without NAT. But in advanced architectures there are some needs to NAT - even with IPv6: handling with dynamic prefixes, virtualization platforms, load balancers, complex network infrastructure and more.

So I’d like to request the feature to use NAT with IPv6 like the linux kernel and other platforms can already do.

For the votaries of academic principles of network: Nobody will force you to use it. But in the real world, there are some meaningful applications for it. So please exempt me from discussions about the sense of IPv6 NAT. This discussion comes from the same sphere as for example the short-sighted people who forced the unix timestamp to be an 32 bit integer so that we will drive into several problems in a few years. Reasonable from the academic point but useless in the reality.

+1

Nowadays, IPv6 perimeter firewalls at my customers’ networks run on Linux due to the lack of IPv6 NAT (especially prefix translation) support in ROS.

Ondrej

+1
I’ve requested this back in 2014.
http://forum.mikrotik.com/t/feature-request-ipv6-nat66-support/82264/1

And another interesting thread on the subject http://forum.mikrotik.com/t/ipv6-and-nat-how-i-changed-my-mind/100481/1

+1. very very need it, and routing mark

+1
multi homed system needs to be able to retain one physical IPv6 address and NAT to a backup system for clients

+1 for this

ipv6 fasttrack is also needed with route caches.

+1 (for my dual-homed setup)

Also IPv4 to IPv6 address-port-translation is needed (initiator of connection on v4-side). Many small devices (aka IoT) or legacy devices only have IPv4 stack, but carriers will only offer IPv6 addresses in the very near future.

Will MikroTik ever add prefix translation support?

+1 more

Please add NAT support for IPv6

IPv6 NAT will kill the whole point of IPv6.

https://blog.apnic.net/2018/02/02/nat66-good-bad-ugly/

Also for every NAT that happens in v6, 4 kitties are murdered!

Keep that in mind next time you people ask such outrageous features that other vendors support for years now!
The body(kitty) count is in the billions by now! A tragedy really…

ABSOLUTELY no need for NAT under ipv6 …

NAT has spoiled everyone … what is needed is far wider adoption of ipv6 and its PROPER implementation. Yes its been very slow but that is about to change since the US Government will be ipv6 depended by 2025 then no one will have any other choice but to CONFORM,

Of course! We wouldn’t want to be able to do what we need with our network. That would be outrageous!

Prefix translation is very usefull and available on linux kernel.

Not everyone can get an ASN to have fixed ipv6. My home provider changes my /64 ipv6 delegated prefix each week.

Using internal address and prefix translation make very easy to overcome this.

Yes! All your computers, printers, refrigerators and other home appliances must be directly accessible for everyone on the Internet. :slight_smile:

Now seriously. NAT is not a Firewall but nevertheless NAT is also a wall before direct access to internal devices in the local network. Firewall rules can be accidentally dropped and full access will be granted. In contrast, a problem with NAT will break the network and directly access will not be obtained.

b.t.w. RFC 4193 describes Unique Local IPv6 Unicast Addresses.

THERE IS one specific need for NAT under IPv6: NAT64 aka most successful transition mechanism at the moment to get rid of IPv4 that adds double work of dual stacking and let IPv6-only networks to consume IPv4-only network resources: http://forum.mikrotik.com/t/nat64-and-dns64/38531/1

I support to add this feature,
in some network enviroment(6in4 isatap etc.) only have one /64 ipv6 address,we need ipv6 nat(ip6tables),so please add this feature,thank you very much

+1 for IPv6 NAT support

+1 for NAT support