[AusNOG] NAT64

[Nathanael Bettridge]

Sorry should have been more specific - NAT444 vs NAT64.  But yes, they all have tradeoffs :)

-Nathanael Bettridge


From: Mark Andrews [mailto:marka at isc.org]
Sent: Wednesday, 06 July 2016 17:11
To: Nathanael Bettridge
Cc: Alex Samad; ausnog at lists.ausnog.net
Subject: Re: [AusNOG] NAT64


In message <429C4C9BB681C54C828A0B8B353DCE551E403F44 at svr2012.pc.local><mailto:429C4C9BB681C54C828A0B8B353DCE551E403F44 at svr2012.pc.local%3e>, Nathanael Bettridge writes:
>
> Any translation system will break something. If you're weighing CGN vs
> NAT64, broken DNSSEC may be a perfectly fine tradeoff given the state of
> things.

NAT64 is a stateful CGN which also translates content between IPv4
and IPv6.

There are lots of different technologies for delivering IPv4 as a
service. They all have trade offs.

Mark

> -Nathanael Bettridge
>
>
> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Mark
> Andrews
> Sent: Wednesday, 06 July 2016 08:47
> To: Alex Samad
> Cc: ausnog at lists.ausnog.net<mailto:ausnog at lists.ausnog.net>
> Subject: Re: [AusNOG] NAT64
>
>
> In message
> <CAJ+Q1PV7ySLiceBSymGuVK7ofoHv4PU7aNZJX+4WavmMerRp6g at mail.gmail.com><mailto:CAJ+Q1PV7ySLiceBSymGuVK7ofoHv4PU7aNZJX+4WavmMerRp6g at mail.gmail.com%3e>,
> Alex Samad writes:
> > Hi
> >
> > during my weekly purusal of the ROS forums, found this discussion on
> > NAT64
> >
> > http://forum.mikrotik.com/viewtopic.php?f=1&t=42614
> >
> > Haven't really heard of people setting up for this.
> >
> > Is this something that is being planned for in Aus, any one heard of
> > companies, not ISP's setting up for this ?
>
> There are lots of alternatives for providing IPv4 as a service.
>
> NAT64 + DNS64 should be on the bottom of the list as DNS64 does not
> work with DNSSEC and does not work in practice with broken authoritative
> servers for the zones you are looking up.
>
> See also DS-Lite (two flavours), MAP (two flavours), 464XLAT (back
> to back NAT64 without the DNS64 issues).
>
> > Alex
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net><mailto:AusNOG at lists.ausnog.net><mailto:AusNOG at lists.ausnog.net%3e>
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: marka at isc.org<mailto:marka at isc.org>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
> ________________________________
> Total Control Panel
>
> Login<https://antispam.avgcloud.net/login?domain=prodigy.com.au><https://antispam.avgcloud.net/login?domain=prodigy.com.au%3e>
>
>
> To:
> nathanael at prodigy.com.au<mailto:nathanael at prodigy.com.au><https://antispam.avgcloud.net/address-properties?
> aID=1106235830&domain=prodigy.com.au>
>
> From:
> ausnog-bounces at lists.ausnog.net<mailto:ausnog-bounces at lists.ausnog.net><mailto:ausnog-bounces at lists.ausnog.net><mailto:ausnog-bounces at lists.ausnog.net%3e>
>
>
> Remove<https://antispam.avgcloud.net/FooterAction?ver=3&un-wl-sender-domai
> n=1&hID=1312211617&domain=prodigy.com.au> lists.ausnog.net from my allow
> list
>
>
>
> You received this message because the domain lists.ausnog.net is on your
> allow list.
>
>
>
>

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org<mailto:marka at isc.org>

________________________________
Total Control Panel

Login<https://antispam.avgcloud.net/login?domain=prodigy.com.au>


To: nathanael at prodigy.com.au<https://antispam.avgcloud.net/address-properties?aID=1106235830&domain=prodigy.com.au>

From: marka at isc.org<mailto:marka at isc.org>


Message Score: 1

High (60): Pass

My Spam Blocking Level: Medium

Medium (75): Pass


Low (90): Pass

Block<https://antispam.avgcloud.net/FooterAction?ver=3&bl-sender-address=1&hID=1312448191&domain=prodigy.com.au> this sender / Block<https://antispam.avgcloud.net/FooterAction?ver=3&ent=1&bl-sender-address=1&hID=1312448191&domain=prodigy.com.au> this sender enterprise-wide

Block<https://antispam.avgcloud.net/FooterAction?ver=3&bl-sender-domain=1&hID=1312448191&domain=prodigy.com.au> isc.org / Block<https://antispam.avgcloud.net/FooterAction?ver=3&ent=1&bl-sender-domain=1&hID=1312448191&domain=prodigy.com.au> isc.org enterprise-wide



This message was delivered because the content filter score did not exceed your filter level.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160706/21726675/attachment.html>