[147024] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 NPT and NAT for Linux

daemon@ATHENA.MIT.EDU (Dale W. Carder)
Wed Nov 30 15:30:52 2011

Date: Wed, 30 Nov 2011 14:29:54 -0600
From: "Dale W. Carder" <dwcarder@wisc.edu>
In-reply-to: <CALFTrnNTpBk6A-dOsi2FH3DQ8-EeDSoPXvvNyj2XpHLTmC7srg@mail.gmail.com>
To: Ray Soucy <rps@maine.edu>
Cc: NANOG <nanog@nanog.org>, I2 IPv6 working group <wg-ipv6@internet2.edu>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org



On Nov 30, 2011, at 2:14 PM, Ray Soucy wrote:

> For those who missed it, Linux is adding NAT for IPv6 to netfilter:
> 
> http://www.spinics.net/lists/netfilter-devel/msg19979.html
> 
> Along with tradition SNAT, and DNAT targets most of us are familiar
> with, a new NETMAP target is included that implements NPT (network
> prefix translation).
> 
> I for one am happy to see this; despite not wanting to see people NAT
> IPv6 as the norm, having the NETMAP target will largely replace the
> use of SNAT and MASQUERADE for many deployments, while keeping those
> tools for the times when traditional NAT is desirable.


Regardless of what one thinks of v6 NAT, having a v6 REDIRECT target
in linux is long overdue.  (trying to do it with tproxy hackery is 
really a mess)

Dale


home help back first fref pref prev next nref lref last post