Community discussions

 
daffster
just joined
Topic Author
Posts: 14
Joined: Sun Jul 27, 2008 9:18 pm
Contact:

NAT64 and DNS64

Thu Jun 17, 2010 1:44 pm

Hi,

Is the inclusion of NAT64 and DNS64 support in the Roadmap for RouterOS v5?
I think this would be a great help for ISPs wishing to do a rapid deployment of pure IPv6 without breaking access to IPv4 resources.
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: NAT64 and DNS64

Thu Jun 17, 2010 3:01 pm

dns in RouterOS supports IPv6 address resolving, if you set IPv6 addresses
IPv6 does not have NAT as it is in IPv4
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: NAT64 and DNS64

Thu Jun 17, 2010 3:15 pm

NAT64? you mean, kind of 4-to-6 tunnel, so that IPv4 users can access IPv6 resources?..

if yes - then joining the question, although I'm not familiar with ipv6 yet... =)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
ArcticKnyght
just joined
Posts: 8
Joined: Wed Aug 27, 2008 5:25 pm

Re: NAT64 and DNS64

Thu Jun 17, 2010 6:21 pm

NAT64 is for scenarioes where you do not allocate a v4 address to the customer, and instead use a gateway to fetch v4 resources on the internet that is then translated back into v6.

Opensource implementation

Cisco's description
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8308
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: NAT64 and DNS64

Thu Jun 17, 2010 6:50 pm

Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
fewi
Forum Guru
Forum Guru
Posts: 7734
Joined: Tue Aug 11, 2009 3:19 am

Re: NAT64 and DNS64

Thu Jun 17, 2010 7:00 pm

The two are different. 6to4 tunnels the original packet, NAT64 is AFT (address family translation).
 
daffster
just joined
Topic Author
Posts: 14
Joined: Sun Jul 27, 2008 9:18 pm
Contact:

Re: NAT64 and DNS64

Fri Jun 18, 2010 11:26 am

NAT64 is a method of giving IPv6 only clients access to IPv4 resources.
http://tools.ietf.org/html/draft-bagnul ... e-nat64-00

There are a few opensource implementations of this, and I've tested http://ecdysis.viagenie.ca/ on a linux gateway, and it works fine.

Its only really useful with DNS64, which is an A record to AAAA "translator" for DNS queries from IPv6 clients.
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: NAT64 and DNS64

Fri Jun 18, 2010 12:36 pm

well, there should be no problem with RouterOS resolving AAAA records.
 
daffster
just joined
Topic Author
Posts: 14
Joined: Sun Jul 27, 2008 9:18 pm
Contact:

Re: NAT64 and DNS64

Fri Jun 18, 2010 5:08 pm

Yes, I know that RouterOS works with IPv6 accessing IPv6 resources, and IPv4 accessing IPv4 resources, and dual-stack.

But DNS64 is a helper for NAT64.

NAT64 essentially takes IPv6 requests for IPv4 resources, and maps the IPv4 resources into IPv6 space. Then DNS64 assists in this process by taking A records, and coverting them to AAAA responses in the "mapped" IPv6 space.

This allows Pure IPv6 clients access to IPv4 resources.
 
Ivoshiee
Member
Member
Posts: 471
Joined: Sat May 06, 2006 4:11 pm

Re: NAT64 and DNS64

Wed Jun 23, 2010 2:30 am

well, there should be no problem with RouterOS resolving AAAA records.
Sorry to inform, but apparently there are issues with RouterOS resolving AAAA records:
http://forum.mikrotik.com/viewtopic.php ... 12#p211212
 
bintang
newbie
Posts: 32
Joined: Tue Jan 15, 2008 2:12 pm

Re: NAT64 and DNS64

Sat Aug 21, 2010 12:39 am

we are need it NAT64 ,
http://blog.go6.net/?p=210
 
bintang
newbie
Posts: 32
Joined: Tue Jan 15, 2008 2:12 pm

Re: NAT64 and DNS64

Sat Aug 21, 2010 4:31 am

waiting for NAT64 on Mikrotik
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Sat Aug 21, 2010 5:34 am

NAT64 and DNS64 is something thats going to be needed on a large scale when the last v4 ranges are handed out, Currently the only applications floating around are not production ready.

We do really need a way of running pure v6 inside our entire network and only touching v4 on the edge for net connection, RIR's are tightening up their policies on handing out v4 whilst handing out v6 space like its candy. Today if we had to deploy a pure v6 network we couldnt, Basic things like v6 PPPoE are only just coming into a BETA release that wont be stable for a while, We would have to use v4 space and 6to4 tunnels to provide v6 connections which ties up v4 space

NAT64 is in use via Cisco with T-Mobiles mobile v6 trials and is fast becoming the primary transition method, MT's going to have to polish it's v6 stack quite a bit and perhaps even backport some of the critical v6 features like v6 PPPoE and Dhcp6 back to 4.x
 
bintang
newbie
Posts: 32
Joined: Tue Jan 15, 2008 2:12 pm

Re: NAT64 and DNS64

Sun Aug 22, 2010 7:36 pm

mikrotik team , when your ROS support NAT64 ???
 
fewi
Forum Guru
Forum Guru
Posts: 7734
Joined: Tue Aug 11, 2009 3:19 am

Re: NAT64 and DNS64

Sun Aug 22, 2010 8:31 pm

Were you seriously expecting a road map in two days over a weekend? Shouting the same thing over and over isn't going to achieve anything.
 
bintang
newbie
Posts: 32
Joined: Tue Jan 15, 2008 2:12 pm

Re: NAT64 and DNS64

Sun Aug 22, 2010 8:37 pm

hha haa haa :lol:

i know that ...
 
hedele
Member
Member
Posts: 338
Joined: Tue Feb 24, 2009 11:23 pm

Re: NAT64 and DNS64

Mon Aug 23, 2010 8:54 am

Well, since I do think that eventually we will completely run out of IPv4 Resources and will have to go IPv6 only,
any means to let IPv6-only users access the rest of the internet would be very much appreciated :)

so yes, please implement NAT64 and DNS64 :)
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1818
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: NAT64 and DNS64

Mon Aug 23, 2010 12:47 pm

+1 for NAT64 support!
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
bintang
newbie
Posts: 32
Joined: Tue Jan 15, 2008 2:12 pm

Re: NAT64 and DNS64

Wed Aug 25, 2010 5:39 pm

go go go ... NAT64
 
Ozelo
Member
Member
Posts: 338
Joined: Fri Jun 02, 2006 3:56 am

Re: NAT64 and DNS64

Thu Aug 26, 2010 3:57 pm

NAT64 YES!!! A full native IPv6 network accessing IPv4 resources via NAT64 on Mikrotik ROS is all we need nowdays!!!
MTCRE - 1104RE006
MTCINE - 1104INE001
 
hci
Long time Member
Long time Member
Posts: 594
Joined: Fri May 28, 2004 5:10 pm

Re: NAT64 and DNS64

Thu Aug 26, 2010 5:16 pm

NAT64 YES!!! A full native IPv6 network accessing IPv4 resources via NAT64 on Mikrotik ROS is all we need nowdays!!!
+1

We must move forward with IPv6!!!

As of this date only 5 percent of IPv4 remains which equals 278 days tell exhaustion:

http://www.potaroo.net/tools/ipv4/
 
User avatar
Eising
Member Candidate
Member Candidate
Posts: 272
Joined: Mon Oct 27, 2008 10:21 am
Location: Copenhagen, Denmark

Re: NAT64 and DNS64

Sat Aug 28, 2010 6:54 pm

+1 from me too.
The road to hell is paved with good intentions.
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Mon Sep 13, 2010 12:21 pm

I don't vote for NAT64 for one simple reason.
We don't actually need it, at least not yet, I think there are higher priorities.
I would like to see Mikrotik complete the IPv6 stack for things such as Hotspot_v6, DHCPv6, Winbox, ssh etc.

NAT64 / DNS 64 allows clients to be setup in a single stack IPv6 only implementation.
I don't see any real reason why you would want to be so fast to switch form IPv4 to IPv6 overnight without running dual stack as an intermediate step.

I am in favour of IPv6 + NAT44 or IPv6 + NAT444 depending on then network size.

Clients can be allocated a Private IPv4 address (such as is done on corporate networks) + a public IPv6 address.
Servers would need to be allocated Public IPv4 + IPv6 native or IPv4 + 6to4 IPv6 addresses.
Since there is a lot more clients than servers the client problem needs to be addressed first.

NAT64 / DNS64 is a way to get rid of the IPv4 stack on the client side; and it's not the only way of acheiving this.
DS Lite AP and NAT IVI are alternate methods and of the three I actual prefer the IVI method used for the last few years by CERTNET in China.

Also, I would like to see a stable implementation of NAT64 on Linux Netfilter that Mikrotik can base their work on.
Does anyone know if this is available or has tested this?
regards,
dave
use my lookup tools
 
vihai
just joined
Posts: 19
Joined: Fri Sep 24, 2010 5:03 am

Re: NAT64 and DNS64

Wed Sep 29, 2010 6:23 pm

I don't vote for NAT64 for one simple reason.
We don't actually need it, at least not yet, I think there are higher priorities.
I agree with you, NAT64/DSN64 will not be indispensable until the address space is exhausted, in the meantime it it more important to have full support for dual-stack features (DHCPv6, prefix delegation, prefix labels, services over IPv6, etc..).

However it has to be ready (and tested) by the time the address space is exhausted otherwise we are in deep s.... :)
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Wed Sep 29, 2010 11:45 pm

This is MT, If they start it in the next 3-4 months it'll only be stable by v4 exhaustion :lol:
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 12:01 am

Is there a working implementation of this on Linux or *BSD that we can play with?
Is there an RFC?
Or is this just a Cisco Proprietory thing?
regards,
dave
use my lookup tools
 
fewi
Forum Guru
Forum Guru
Posts: 7734
Joined: Tue Aug 11, 2009 3:19 am

Re: NAT64 and DNS64

Thu Sep 30, 2010 12:08 am

 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Thu Sep 30, 2010 1:04 am

Is there a working implementation of this on Linux or *BSD that we can play with?
Is there an RFC?
Or is this just a Cisco Proprietory thing?

Its an spec, Cisco in CGv6, MS is UAG Direct Access and linux is Ecdysis.

Linux is a PoC code, Only one DNS request at a time etc
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 3:05 am

However it has to be ready (and tested) by the time the address space is exhausted otherwise we are in deep s.... :)
Why can't you run Dual Stack?
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Thu Sep 30, 2010 3:36 am

Dual stacking only works when you have v4 space to dual stack with, If you dual stack with private v4 space you run into double nat issues, NAT64 is a way around this for some but not all applications
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 4:08 am

Dual stacking only works when you have v4 space to dual stack with, If you dual stack with private v4 space you run into double nat issues, NAT64 is a way around this for some but not all applications
What problems does it solve? I don't see how it's any better, and considering it's not well tested I expect it would in fact be worse!
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Thu Sep 30, 2010 5:24 am

Double-Natting in a dual stack private v4 setup. I'd hate to be an ISP running that and handling client requests for port forwards!
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 6:44 am

I don't see how it solves that problem. It's not like there is a NAT46 and DNS46 as well.


We are already an ISP doing Double NAT and we want to get an IPv6 Stack to allow customers to support incoming connections more easily. I don't see how NAT64 can help us. Currently customers have to use UPNP to get an incoming connection. Some applications support UDP hole punching (eg skype) and that seems to work just as well through double NAT as through single NAT.

Whether hole punching works or not has more to do with how many users there are than how many layers of NAT.
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 6:55 am

I see DNS64/NAT64 as a way of getting rid of Dual Stack.
It means that a client can have a single IPv6 Stack and connect to IPv6 directly and IPv4 through NAT.
Incoming connections must be made to IPv6 address. Outbound connections (to IPv4 anyway) must use the provided DNS.

If you have dual stack Public IPv6 and Private IPv4 you end up acheiving exactly the same result.
Difference is
1. That the NAT44 or NAT444 is tried and tested
2. That there are two stacks to contend with.

As I see it, the only real benefit is NAT64/DNS64 is the saving of having a single IP stack.
regards,
dave
use my lookup tools
 
vihai
just joined
Posts: 19
Joined: Fri Sep 24, 2010 5:03 am

Re: NAT64 and DNS64

Thu Sep 30, 2010 12:11 pm

Why can't you run Dual Stack?
When the address space is exhausted what IPv4 address would you use? There will not be any even if you want to NAT everything on a single one.

And no, double NAT is neither acceptable nor legal here in Italy for ISPs.

Bye,
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 1:37 pm

double NAT is neither acceptable nor legal here in Italy for ISPs.
You can legislate all you like, but once there is no more IPv4 space to go around thats the end of the game.

I still don't see how NAT64 solves this problem especially if the ISP is not allowed to use NAT.
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Sep 30, 2010 2:32 pm

I think I like this one better.
http://tools.ietf.org/html/draft-xli-behave-ivi-07
Translates both ways not just IPv6 to IPv4.
Stateless, so no NAT timeouts.
Has been in production for some time at CERTNET in China.
Download Linux implementation http://linux.ivi2.org/impl/
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Fri Oct 01, 2010 2:04 am

double NAT is neither acceptable nor legal here in Italy for ISPs.
You can legislate all you like, but once there is no more IPv4 space to go around thats the end of the game.

I still don't see how NAT64 solves this problem especially if the ISP is not allowed to use NAT.
Because there is no port NAT only address NAT, Its not like what your used to, v6 address port 1000 maps to v4 address port 1000 but then the next connection on port 2000 can map to another v4 address, Its not port natting where you have a couple of hundred users behind a single v4 address and once someone takes port 1000 nobody else can use it, with NAT64 if another user wants to use port 1000 it will map to another v4 address
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 11:18 am

double NAT is neither acceptable nor legal here in Italy for ISPs.
You can legislate all you like, but once there is no more IPv4 space to go around thats the end of the game.

I still don't see how NAT64 solves this problem especially if the ISP is not allowed to use NAT.
Because there is no port NAT only address NAT, Its not like what your used to, v6 address port 1000 maps to v4 address port 1000 but then the next connection on port 2000 can map to another v4 address, Its not port natting where you have a couple of hundred users behind a single v4 address and once someone takes port 1000 nobody else can use it, with NAT64 if another user wants to use port 1000 it will map to another v4 address
What a load on nonsense. If NAT64 worked like that it would be a huge waste of IPv4 address space
and besides,
if you wanted NAT44 to work like that then it's pretty easy to do in iptables or ROS.
The IPv4 address pool is a set of IPv4 addresses, normally a prefix
assigned by the local administrator. Since IPv4 address space is a
scarce resource, the IPv4 address pool is small and typically not
sufficient to establish permanent one-to-one mappings with IPv6
addresses. So, except for the static/manually created ones, mappings
using the IPv4 address pool will be created and released dynamically.
Moreover, because of the IPv4 address scarcity, the usual practice
for NAT64 is likely to be the binding of IPv6 transport addresses
into IPv4 transport addresses, instead of IPv6 addresses into IPv4
addresses directly, enabling a higher utilization of the limited IPv4
address pool. This implies that NAT64 performs both address and port
translation.
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Fri Oct 01, 2010 11:45 am

What a load on nonsense. If NAT64 worked like that it would be a huge waste of IPv4 address space
and besides,
if you wanted NAT44 to work like that then it's pretty easy to do in iptables or ROS.
The IPv4 address pool is a set of IPv4 addresses, normally a prefix
assigned by the local administrator. Since IPv4 address space is a
scarce resource, the IPv4 address pool is small and typically not
sufficient to establish permanent one-to-one mappings with IPv6
addresses. So, except for the static/manually created ones, mappings
using the IPv4 address pool will be created and released dynamically.
Moreover, because of the IPv4 address scarcity, the usual practice
for NAT64 is likely to be the binding of IPv6 transport addresses
into IPv4 transport addresses, instead of IPv6 addresses into IPv4
addresses directly, enabling a higher utilization of the limited IPv4
address pool. This implies that NAT64 performs both address and port
translation.
I suggest you gain access to NAT64 devices a v6 client accessing v4 space will use the same port on v4 that the v6 address is attempting to use thus its normal mode is only to address translate and will port translate only when the v4 pool assigned to the NAT64 box is exhausted for the v6 side port
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:06 pm

I suggest you gain access to NAT64 devices a v6 client accessing v4 space will use the same port on v4 that the v6 address is attempting to use thus its normal mode is only to address translate and will port translate only when the v4 pool assigned to the NAT64 box is exhausted for the v6 side port
NAT44 will also keep the port the same if it can. However it will always change the port in preference to changing the address. The reason for this is to do with the RELATED state. Firewall hole punching requires the IP Addresses to match to work, If you start changing the address while keeping the port the same, then hole punching will cease to work and it will break heaps of applications.

See http://en.wikipedia.org/wiki/Hole_punching for more information.
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:20 pm

You dont need hole punching unless the application your attempting to use sends the IP contact info within the packet i.e SIP/RTP/FTP etc

NAT44 is not a solution that helps us, NAT64 does it and much more like allowing pure v6 CPE users to access the v4 world, But perhaps this is a tech that should be kept in the big boys league of Cisco/Juniper as those that will actually run into the NAT44 issues will have the money to buy them
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:28 pm

You dont need hole punching unless the application your attempting to use sends the IP contact info within the packet i.e SIP/RTP/FTP etc
I think you're confusing Hole Punching with ALG (Application Layer Gateway) kernel modules.
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:30 pm

allowing pure v6 CPE users to access the v4 world, But perhaps this is a tech that should be kept in the big boys league of Cisco/Juniper as those that will actually run into the NAT44 issues will have the money to buy them
Finally we actually agree on something. Although I was not aware that Juniper had a NAT64 offering!
Last edited by bevhost on Fri Oct 01, 2010 12:34 pm, edited 1 time in total.
regards,
dave
use my lookup tools
 
charliebrown
Member Candidate
Member Candidate
Posts: 130
Joined: Wed Dec 17, 2008 3:27 am

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:33 pm

You dont need hole punching unless the application your attempting to use sends the IP contact info within the packet i.e SIP/RTP/FTP etc
I think you're confusing Hole Punching with ALG (Application Layer Gateway) kernel modules.
Maybe I am :) Its late where I am
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:47 pm

Can anyone who has a NAT64/DNS64 setup try a couple of tests for me.

http://66.102.11.104/

And how well does skype work?
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 01, 2010 12:50 pm

And how well does skype work?
Or MSN ?
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Mon Oct 04, 2010 5:07 am

Has anyone had a look at this?

http://www.isc.org/software/aftr

AFTR (Address Family Transition Router) is the latest product in ISC's family of open source Internet infrastructure products. Developed in concert with Comcast, AFTR 1.0 is intended to ease the transition from IPv4 to IPv6 by allowing legacy IPv4 end sites such as home PCs to interact with IPv4 content providers and services over an IPv6 carrier infrastructure. As with ISC's other products, as the Dual Stack Lite protocol evolves, AFTR will strive to remain an up to date reference implementation as well as a robust enterprise grade router technology.
regards,
dave
use my lookup tools
 
daffster
just joined
Topic Author
Posts: 14
Joined: Sun Jul 27, 2008 9:18 pm
Contact:

Re: NAT64 and DNS64

Mon Oct 18, 2010 6:52 pm

I've added NAT64 and DNS64 to the unofficial Feature Request page.

http://wiki.mikrotik.com/wiki/RouterBOA ... re_Request

Feel free to add your votes and move it up the list
 
Ozelo
Member
Member
Posts: 338
Joined: Fri Jun 02, 2006 3:56 am

Re: NAT64 and DNS64

Mon Oct 18, 2010 9:43 pm

I've added NAT64 and DNS64 to the unofficial Feature Request page.

http://wiki.mikrotik.com/wiki/RouterBOA ... re_Request

Feel free to add your votes and move it up the list
Isn't that list just for "hardware"? Thought NAT64 was a "software" implementation... Although Ive seen other soft ones in there. *bump*
MTCRE - 1104RE006
MTCINE - 1104INE001
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: NAT64 and DNS64

Tue Oct 19, 2010 12:27 am

For software requests, here is the current wiki page:
http://wiki.mikrotik.com/wiki/MikroTik_ ... e_Requests
Doug
 
daffster
just joined
Topic Author
Posts: 14
Joined: Sun Jul 27, 2008 9:18 pm
Contact:

Re: NAT64 and DNS64

Tue Oct 19, 2010 1:00 pm

Good Point.

I see its on that page too. I've added my name to the list.
 
User avatar
Paxy
just joined
Posts: 21
Joined: Mon May 26, 2008 8:28 pm

Re: NAT64 and DNS64

Thu Oct 28, 2010 12:05 pm

I am fully supporting idea of NAT64.
Until dual stack is active, administrator will keep forcing IPv4 due its simplicity and short form of ip address that is easy to remember.
Only way to accelerate improvement process by transferring completely to IPv6 is to transfer small networks and become prepared for WAN IPv6 transfer.

We would not be ready do deploy IPv6 until we give up IPv4. This is legacy rule !
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Thu Oct 28, 2010 10:46 pm

HI, Just returned from the IPv6 Forum Conference in Melbourne, Australia and the current advice is.

Dual Stack where you can.
Tunnel where you can't
Use NAT if you have a gun to your head.
regards,
dave
use my lookup tools
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Re: NAT64 and DNS64

Thu Oct 28, 2010 11:23 pm

What conference was that? Most SIG's are saying Translation like NAT64 is the best path since Dual-Stack only works when you have v4 space left to hand out, then its onto Dual-Stack with NAT444 on the v4 side which as you've pointed out - Would need a gun to your head
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 29, 2010 3:27 am

I would think that NAT444 + Dual Stack would work much better than NAT64/DNS64.
If you would need a gun to your head to do NAT444 then you'll need an even bigger gun to do NAT64.

If you think NAT64 will solve any of your problems think again.
Heaps of stuff doesn't work with NAT64.
About the only thing broken with NAT444 is UPnP, and that can be resolved with Manual Port Forwarding.
regards,
dave
use my lookup tools
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Re: NAT64 and DNS64

Fri Oct 29, 2010 3:37 am

Do you really think manual port forwarding at the ISP level is ever going to work?? I doubt we'll see NAT64 in ROS but the big players are deploying it, It will likely end up another transition step after large scale ISP's find that NAT444 is just not worth the hassle.

Have you actually used NAT64 before? Its quite nice, There is a liveCD floating around, Very fun turning off v4 on your computer and having everything keep working :)
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 29, 2010 4:08 am

Do you really think manual port forwarding at the ISP level is ever going to work?? I doubt we'll see NAT64 in ROS but the big players are deploying it, It will likely end up another transition step after large scale ISP's find that NAT444 is just not worth the hassle.

Have you actually used NAT64 before? Its quite nice, There is a liveCD floating around, Very fun turning off v4 on your computer and having everything keep working :)
Did you try it with Windows XP? Mac OS X?

When you say everything keeps working? What did you test? I'm sure outbound connections would work but what about P2P applications?
Skype?
What about http://66.102.11.104/
Or inbound connections can you remote desktop to an XP computer through NAT64?
How do inbound connections work from the IPv4 Internet?
regards,
dave
use my lookup tools
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 29, 2010 4:15 am

I can see some benefit of NAT64 for some of the Mobile phone providers in countries like India and China that are turning on new mobile devices at a staggering rate. Some newer mobile devices do support IPv6 quite well and they need access to legacy web servers on IPv4 and that is a good reason to use NAT64, so yes I agree the big players will role it out, but I doubt they will use RouterOS.
regards,
dave
use my lookup tools
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Re: NAT64 and DNS64

Fri Oct 29, 2010 5:19 am

Do you really think manual port forwarding at the ISP level is ever going to work?? I doubt we'll see NAT64 in ROS but the big players are deploying it, It will likely end up another transition step after large scale ISP's find that NAT444 is just not worth the hassle.

Have you actually used NAT64 before? Its quite nice, There is a liveCD floating around, Very fun turning off v4 on your computer and having everything keep working :)
Did you try it with Windows XP? Mac OS X?

When you say everything keeps working? What did you test? I'm sure outbound connections would work but what about P2P applications?
Skype?
What about http://66.102.11.104/
Or inbound connections can you remote desktop to an XP computer through NAT64?
How do inbound connections work from the IPv4 Internet?
Web browsing worked fine, never ran into an issue. Skype worked for voice but I didnt try video (Never had a need) Existing NAT-busting methods used in alot of software works fine but will run into issues in a NAT444 setup. SIP and FTP had issues due to IP info carried inside the application level data. Some form of ALG ala NAT-PT will help with this

NAT444 is already in place by a lot of MT users, I believe our resident forum troll here doesnt supply his clients with a public v4 so ROS demand for it will be low. The skill needed to put in place and debug something as complex as NAT64 will rule out most ROS users. I really dont think it will be worth MT's time to put something like this in place, NAT64 is a small bridge for those of us who will deploy v6 before the crunch, NAT444 will be clung onto by users who dont know how or who wont deploy v6
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 29, 2010 5:39 am

Web browsing worked fine, never ran into an issue. Skype worked for voice but I didnt try video (Never had a need) Existing NAT-busting methods used in alot of software works fine but will run into issues in a NAT444 setup. SIP and FTP had issues due to IP info carried inside the application level data. Some form of ALG ala NAT-PT will help with this
Sorry to keep on about this, but what OS did you try this on?
regards,
dave
use my lookup tools
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Re: NAT64 and DNS64

Fri Oct 29, 2010 5:49 am

XP SP3
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1721
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: NAT64 and DNS64

Fri Oct 29, 2010 8:54 am

If i may jump into conversation.
From what i notices MikroTik really loves when feature description is set in stone - so there are actual "Internet Standard".

From what i was able to find on this topic is:

a) http://tools.ietf.org/id/draft-bagnulo- ... t64-03.txt
"This Internet-Draft will expire on September 8, 2009"

b) http://tools.ietf.org/html/draft-ietf-b ... tateful-00
"This Internet-Draft will expire on January 5, 2010"

So, it is not even "Proposed Standard" not talking about "Draft Standard" and "Internet Standard"...

IF i'm missing something, please, provide me proper links :)
With great knowledge comes great responsibility, because of ability to recognize id... incompetent people much faster.
 
User avatar
bevhost
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Mon Sep 13, 2010 6:33 am
Location: Brisbane, Queensland, Australia
Contact:

Re: NAT64 and DNS64

Fri Oct 29, 2010 2:09 pm

There is a liveCD floating around
Ok, so I found the CD, downloaded it, had a play. Read the specs.,

It's really only designed to allow IP6 only clients to access IPv4 legacy servers.
It's not meant for Ipv4 to Ipv6 connections and not designed to do P2P applications.

It might allow for Hole Punching in the way that firewalls allow reverse connections in RELATED state, but that's all.

So once they get the ALG's written, it will catch up to where NAT44 is now and you'll be able to move on from Dual Stack to IPv6 Only Stack.
regards,
dave
use my lookup tools
 
Beccara
Long time Member
Long time Member
Posts: 606
Joined: Fri Apr 08, 2005 3:13 am

Re: NAT64 and DNS64

Sun Oct 31, 2010 9:51 pm

Its PoC code, Meant as a simple demo. I'm not even sure the linux code is being actively worked on. Anyway this topic is pointless as MT will never put something like NAT64 into ROS and alot of people around here already do NAT444.
 
eduardomazolini
newbie
Posts: 31
Joined: Thu Jul 16, 2015 9:14 pm

Re: NAT64 and DNS64

Mon Jul 04, 2016 8:29 pm

If i may jump into conversation.
From what i notices MikroTik really loves when feature description is set in stone - so there are actual "Internet Standard".

From what i was able to find on this topic is:

a) http://tools.ietf.org/id/draft-bagnulo- ... t64-03.txt
"This Internet-Draft will expire on September 8, 2009"

b) http://tools.ietf.org/html/draft-ietf-b ... tateful-00

"This Internet-Draft will expire on January 5, 2010"

So, it is not even "Proposed Standard" not talking about "Draft Standard" and "Internet Standard"...

IF i'm missing something, please, provide me proper links :)
http://tools.ietf.org/html/rfc6146
 
Zorro
Long time Member
Long time Member
Posts: 676
Joined: Wed Apr 16, 2014 2:43 pm

Re: NAT64 and DNS64

Wed Jul 06, 2016 1:09 am

aside NAT64 relevant things - 6877 https://tools.ietf.org/html/rfc6877 was apprently common as say wiukd 6rd, DS, DS-lite or other things from that list https://en.wikipedia.org/wiki/IPv6_tran ... mechanisms
(in which - ANY thing make sense and important).
from proprietary stuff among it perhaps MAP by CISCO was imprtant(rest, including ommited from article - not so much, perhaps. or even known at all).
fron "unemplemented yet" not finalised things i personally would care about IPv6 to IPv6 NAT(some would say "it make no sense", but sadly it is. already :(
 
andersonlich
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Thu Feb 26, 2009 1:05 pm

Re: NAT64 and DNS64

Wed Jul 13, 2016 2:52 am

v6 should be end to end connection. But if mikrotik released this feature that should be +10.
 
mohmultihouse
just joined
Posts: 8
Joined: Wed Dec 28, 2016 11:43 am

Re: NAT64 and DNS64

Tue Jan 03, 2017 9:29 am

i second this, need NAT64 support.
 
Zorro
Long time Member
Long time Member
Posts: 676
Joined: Wed Apr 16, 2014 2:43 pm

Re: NAT64 and DNS64

Mon Feb 27, 2017 8:17 am

v6 should be end to end connection. But if mikrotik released this feature that should be +10.
not really. it "should" not.
and for that reasons both 4-to-6, 4-to-6 and even 6-to-6 NAT exist, just like 4-to-4 before. but implementation yet sporadic and incomplete, yet(to use "straight away/now").
 
mohmultihouse
just joined
Posts: 8
Joined: Wed Dec 28, 2016 11:43 am

Re: NAT64 and DNS64

Thu Mar 09, 2017 11:15 am

Google just made a public DNS64 server, NAT64 gateway is more relevant then ever.
https://developers.google.com/speed/pub ... docs/dns64
 
User avatar
Splash
Member Candidate
Member Candidate
Posts: 149
Joined: Fri Oct 16, 2015 10:09 am
Location: Johannesburg, South Africa

Re: NAT64 and DNS64

Sat Apr 29, 2017 4:02 pm

Here's to hoping IPv6 on Mikrotik will take a leap forward and become a more complete solution. With the IPv6 certification now available from Mikrotik, I'm crossing fingers they will press forward with an IPv6 implementation that is more usable.
MTCNA, MTCRE, MTCINE, MTCTCE, MTCIPv6E, MTCUME
 
Milan
just joined
Posts: 16
Joined: Tue Mar 05, 2013 3:34 am

Re: NAT64 and DNS64

Tue Jul 11, 2017 12:03 am

Google just made a public DNS64 server, NAT64 gateway is more relevant then ever.
https://developers.google.com/speed/pub ... docs/dns64
We really need NAT64. And also IPv6 NAT (not IPv6 masqureade, just NAT).
 
User avatar
zervan
Member
Member
Posts: 324
Joined: Fri Aug 20, 2010 10:43 pm
Location: Slovakia
Contact:

Re: NAT64 and DNS64

Wed Jul 26, 2017 10:18 pm

Is anything new about NAT64? Maybe some new RouterOS version?

If not, maybe this could be useful (at least for testing): http://www.internetsociety.org/deploy36 ... in-go6lab/
Dusan Zervan from Slovakia
MTCNA, MTCRE
 
eliasbats
just joined
Posts: 6
Joined: Thu May 11, 2017 6:22 pm

Re: NAT64 and DNS64

Sat Sep 16, 2017 11:03 pm

Dear MT, Please consider NAT64!
 
wtm
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Tue May 24, 2011 5:27 am

Re: NAT64 and DNS64

Thu Jul 05, 2018 5:01 am

Bump ........
Is there anything new on this? As IPV4 addresses get in shorter demand?
 
enzain
just joined
Posts: 20
Joined: Wed Jan 17, 2018 9:15 pm

Re: NAT64 and DNS64

Wed Jan 30, 2019 10:44 am

Hi,

Any progress with nat64 and dns64?

Now in russia is actual, our internet regulator starting blocking sitews by IPv6 ...
 
mutinsa
just joined
Posts: 21
Joined: Tue Feb 06, 2018 4:55 am
Location: Moscow, Russia
Contact:

Re: NAT64 and DNS64

Sat Feb 09, 2019 4:36 pm

+1.
Sergey Mutin
Certified Mikrotik Consultant
MikroTik: MTCNA, MTCRE, MTCIPv6E, MTCTCE, MTCUME, MTCINE, MTCWE | Cisco: CCNA R&S | Juniper: JNCIA-Junos | Zabbix: ZCU | Asterisk: dCAA | IPv6 Forum Certified Network Engineer (Silver) | HE.net IPv6: Sage

Who is online

Users browsing this forum: MSN [Bot] and 84 guests