[147024] in North American Network Operators' Group
Re: IPv6 NPT and NAT for Linux
daemon@ATHENA.MIT.EDU (Dale W. Carder)
Wed Nov 30 15:30:52 2011
Date: Wed, 30 Nov 2011 14:29:54 -0600
From: "Dale W. Carder" <dwcarder@wisc.edu>
In-reply-to: <CALFTrnNTpBk6A-dOsi2FH3DQ8-EeDSoPXvvNyj2XpHLTmC7srg@mail.gmail.com>
To: Ray Soucy <rps@maine.edu>
Cc: NANOG <nanog@nanog.org>, I2 IPv6 working group <wg-ipv6@internet2.edu>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Nov 30, 2011, at 2:14 PM, Ray Soucy wrote:
> For those who missed it, Linux is adding NAT for IPv6 to netfilter:
>
> http://www.spinics.net/lists/netfilter-devel/msg19979.html
>
> Along with tradition SNAT, and DNAT targets most of us are familiar
> with, a new NETMAP target is included that implements NPT (network
> prefix translation).
>
> I for one am happy to see this; despite not wanting to see people NAT
> IPv6 as the norm, having the NETMAP target will largely replace the
> use of SNAT and MASQUERADE for many deployments, while keeping those
> tools for the times when traditional NAT is desirable.
Regardless of what one thinks of v6 NAT, having a v6 REDIRECT target
in linux is long overdue. (trying to do it with tproxy hackery is
really a mess)
Dale