Jump to content

IPv6 transition mechanism

From Wikipedia, the free encyclopedia
(Redirected from DS-Lite)
IPv6 transition mechanisms
Standards Track
Experimental
Informational
Drafts
Deprecated

An IPv6 transition mechanism is a technology that facilitates the transitioning of the Internet from the Internet Protocol version 4 (IPv4) infrastructure in use since 1983 to the successor addressing and routing system of Internet Protocol Version 6 (IPv6). As IPv4 and IPv6 networks are not directly interoperable, transition technologies are designed to permit hosts on either network type to communicate with any other host.

To meet its technical criteria, IPv6 must have a straightforward transition plan from the current IPv4.[1] The Internet Engineering Task Force (IETF) conducts working groups and discussions through the IETF Internet Drafts and Request for Comments processes to develop these transition technologies towards that goal. Some basic IPv6 transition mechanisms are defined in RFC 4213.

Stateless IP/ICMP Translation

[edit]

Stateless IP/ICMP Translation (SIIT) translates between the packet header formats in IPv6 and IPv4.[2] The SIIT method defines a class of IPv6 addresses called IPv4-translated addresses.[3] They have the prefix ::ffff:0:0:0/96 and may be written as ::ffff:0:a.b.c.d, in which the IPv4 formatted address a.b.c.d refers to an IPv6-enabled node. The prefix was chosen to yield a zero-valued checksum to avoid changes to the transport protocol header checksum.[4] The algorithm can be used in a solution that allows IPv6 hosts that do not have a permanently assigned IPv4 address to communicate with IPv4-only hosts. Address assignment and routing details are not addressed by the specification. SIIT can be viewed as a special case of stateless network address translation.

The specification is a product of the NGTRANS IETF working group, and was initially drafted in February 2000 by E. Nordmark of Sun Microsystems.[5] It was revised in 2011,[6] and in 2016 its current revision was published.[4]

Tunnel broker

[edit]

A tunnel broker provides IPv6 connectivity by encapsulating IPv6 traffic in IPv4 Internet transit links, typically using 6in4. This establishes IPv6 tunnels within the IPv4 Internet. The tunnels may be managed with the Tunnel Setup Protocol (TSP)[7] or AYIYA.[8]

6rd

[edit]
Main article: IPv6 rapid deployment

6rd was developed by Rémi Després. It is a mechanism to facilitate rapid deployment of the IPv6 service across IPv4 infrastructures of Internet service providers (ISPs). It uses stateless address mappings between IPv4 and IPv6 addresses, and transmits IPv6 packets across automatic tunnels that follow the same optimized routes between customer nodes as IPv4 packets.

It was used for an early large deployment of an IPv6 service with native addresses during 2007 (RFC 5569[9]). The standard-track specification of the protocol is in RFC 5969.[10]

Transport Relay Translation

[edit]

RFC 3142 defines the Transport Relay Translation (TRT) method. TRT acts as an intermediate device between two hosts. The function of the translator is to convert IPV6 into IPV4 addresses and vice versa. TRT accomplishes this translation through IP address mapping and a custom IP address.[11]

The address, for example, if packets are to be transmitted from an IPv6 address (fec0:0:0:1::/64) to and IPV4 address (10.1.1.1) would read as fec0:0:0:1::10.1.1.1. The packets are routed towards the translator firstly through an IPv6/TCP protocol and then from the translator to the IPv4 host through an IPv4/TCP protocol.[12]

TRT employs a similar operation to DNS translation between AAAA and A records known as DNS-ALG as defined in RFC 2694.[13]

NAT64

[edit]
Main article: NAT64
NAT64 and DNS64

NAT64 is a mechanism to allow IPv6 hosts to communicate with IPv4 servers. The NAT64 server is the endpoint for at least one IPv4 address and an IPv6 network segment of 32-bits, e.g., 64:ff9b::/96.[3] The IPv6 client embeds the IPv4 address with which it wishes to communicate using these bits, and sends its packets to the resulting address. The NAT64 server then creates a NAT-mapping between the IPv6 and the IPv4 address, allowing them to communicate.[14]

DNS64

[edit]

DNS64 describes a DNS server that when asked for a domain's AAAA records, but only finds A records, synthesizes the AAAA records from the A records. The first part of the synthesized IPv6 address points to an IPv6/IPv4 translator and the second part embeds the IPv4 address from the A record. The translator in question is usually a NAT64 server. The standard-track specification of DNS64 is in RFC 6147.[15]

There are two noticeable issues with this transition mechanism:

  • It only works for cases where DNS is used to find the remote host address, if IPv4 literals are used the DNS64 server will never be involved.
  • Because the DNS64 server needs to return records not specified by the domain owner, DNSSEC validation against the root will fail in cases where the DNS server doing the translation is not the domain owner's server.
# DNS resolver 2606:4700:4700:64 synthesizes AAAA records for
# ipv6test.google.com to a NAT64 address: 64:ff9b::<original-ipv4>
$ nslookup ipv6test.google.com 2606:4700:4700::64

Non-authoritative answer:
ipv6test.google.com	canonical name = ipv6test.l.google.com.
Name:	ipv6test.l.google.com
Address: 64:ff9b::8efa:c3e4
Implementations

ISATAP

[edit]
Main article: ISATAP

ISATAP (Intra-Site Automatic Tunnel Addressing Protocol) is an IPv6 transition mechanism meant to transmit IPv6 packets between dual-stack nodes on top of an IPv4 network.

Unlike 6over4 (an older similar protocol using IPv4 multicast), ISATAP uses IPv4 as a virtual nonbroadcast multiple-access network (NBMA) data link layer, so that it does not require the underlying IPv4 network infrastructure to support multicast.

464XLAT

[edit]

464XLAT (RFC 6877) allows clients on IPv6-only networks to access IPv4-only Internet services, such as Skype.[17][18]

The client uses a SIIT translator to convert packets from IPv4 to IPv6. These are then sent to a NAT64 translator which translates them from IPv6 back into IPv4 and on to an IPv4-only server. The client translator may be implemented on the client itself or on an intermediate device and is known as the CLAT (Customer-side transLATor). The NAT64 translator, or PLAT (Provider-side transLATor), must be able to reach both the server and the client (through the CLAT). The use of NAT64 limits connections to a client-server model using UDP, TCP, and ICMP.

Implementations
  • T-Mobile US became IPv6-only using 464XLAT.[19]
  • Orange Polska began IPv6-only (CLAT/NAT64/DNS) service in September 2013, migrating all ADSL, VDSL, and FTTH gateways by January 2015.[20]
  • Telstra became IPv6-only for mobile services using 464XLAT in February 2020.[21]
  • Android includes a native implementation of CLAT since Jelly Bean 4.3, released in 2013.[22]
  • Windows 10 has a native WWAN-only implementation of 464XLAT for desktop and mobile since the 2017 Creators Update.[23]
  • Windows 11 (23H2) has the same implementation as Windows 10. A future version will extend CLAT support to other network devices (currently limited to WWAN). The implementation will use RFC 7050 (ipv4only.arpa DNS query), RFC 8781 (PREF64, and RFC 8925 (DHCP Option 108) standard [24]
  • macOS starts to have native CLAT support in Ventura, released in 2022.[25]
  • iOS has a native CLAT implementation since version 12.0, released in 2018.[26] Additionally, Apple requires all apps submitted to the App Store to work on IPv6 networks.[27]
  • clatd is a CLAT implementation for Linux.[28]
  • OpenWRT linux OS for routers has optional support for clat via the 464xlat package [29]
  • FreeBSD has implemented NAT64 CLAT since Release 12.1.[30]

Dual-Stack Lite (DS-Lite)

[edit]
"DS-Lite" redirects here. For the 2006 video game system, see Nintendo DS Lite.
DS-Lite

Dual-Stack Lite technology does not involve allocating an IPv4 address to customer-premises equipment (CPE) for providing Internet access.[31] The CPE distributes private IPv4 addresses for the LAN clients, according to the networking requirement in the local area network. The CPE encapsulates IPv4 packets within IPv6 packets. The CPE uses its global IPv6 connection to deliver the packet to the ISP's carrier-grade NAT (CGN), which has a global IPv4 address. The original IPv4 packet is recovered and NAT is performed upon the IPv4 packet and is routed to the public IPv4 Internet. The CGN uniquely identifies traffic flows by recording the CPE public IPv6 address, the private IPv4 address, and TCP or UDP port number as a session.

Lightweight 4over6 extends DS-Lite by moving the NAT functionality from the ISP side to the CPE, eliminating the need to implement carrier-grade NAT.[32] This is accomplished by allocating a port range for a shared IPv4 address to each CPE. Moving the NAT functionality to the CPE allows the ISP to reduce the amount of state tracked for each subscriber, which improves the scalability of the translation infrastructure.

V4-via-v6 routing

[edit]

V4-via-v6 routing is a technique where IPv4 addresses are assigned to end hosts only while intermediate routers are only assigned IPv6 addresses. IPv4 routes are propagated as usual, and no packet translation or encapsulation is employed, but use an IPv6 next hop. V4-via-v6 reduces the amount of management required, since the core network only needs to be assigned IPv6 addresses, but still requires that the core network be able to forward IPv4 packets.

V4-via-v6 is defined for the Border Gateway Protocol (BGP)[33] and the Babel routing protocol.[34] It has been implemented the Bird Internet routing daemon[35] and in babeld.[36]

MAP

[edit]

Mapping of Address and Port (MAP) is a Cisco IPv6 transition proposal which combines A+P port address translation with tunneling of the IPv4 packets over an ISP provider's internal IPv6 network.[37] MAP-T[38] and MAP-E[39] entered standards track in July 2015, and Sky Italia has deployed MAP-T in its internet services as early as year 2021.[40]

Draft proposals

[edit]

The following mechanisms are still being discussed or have been abandoned by the IETF:

4rd

[edit]

IPv4 Residual Deployment (4rd) is an experimental mechanism[41] to facilitate residual deployment of the IPv4 service across IPv6 networks. Like 6rd, it uses stateless address mappings between IPv6 and IPv4. It supports an extension of IPv4 addressing based on transport-layer ports. This is a stateless variant of the A+P model.

Deprecated mechanisms

[edit]

These mechanisms have been deprecated by the IETF:

NAT-PT

[edit]

Network Address Translation/Protocol Translation (NAT-PT) is defined in RFC 2766, but due to numerous problems, it has been obsoleted by RFC 4966 and deprecated to historic status. It is typically used in conjunction with a DNS application-level gateway (DNS-ALG) implementation.

NAPT-PT

[edit]

While almost identical to NAT-PT, Network Address Port Translation + Protocol Translation, which is also described in RFC 2766, adds translation of the ports as well as the address. This is done primarily to avoid two hosts on one side of the mechanism from using the same exposed port on the other side of the mechanism, which could cause application instability and security flaws. This mechanism has been deprecated by RFC 4966.

Implementations

[edit]
  • stone (software), port translator for Windows & Unix-based systems.
  • faithd, BSD-based static TRT implementation by the KAME project
  • CLATD, a CLAT / SIIT-DC Edge Relay implementation for Linux
  • WrapSix, a NAT64 implementation for Linux
  • TAYGA, a stateless NAT64 implementation for Linux
  • Jool, a SIIT and stateful NAT64 implementation for Linux
  • naptd, user-level NAT-PT
  • Ecdysis, a NAT64 gateway, includes DNS64
  • Address Family Transition Router (AFTR), a DS-Lite implementation
  • niit Linux Kernel device that allow transmission of IPv4 unicast traffic through an IPv6 network
  • IVI IPv4/IPv6 packet translation implementation as a Linux kernel(2.6 only) patch
  • Microsoft Forefront Unified Access Gateway, a reverse proxy and VPN solution that implements DNS64 and NAT64
  • BIND, Berkeley Internet Name Domain DNS server, implements DNS64 since version 9.8
  • PF (firewall), the OpenBSD packet filter supports IP version translation since version 5.1, includes NAT64

See also

[edit]

References

[edit]
  1. ^ Partridge, C.; Kastenholz, F. (December 1994). Technical Criteria for Choosing IP The Next Generation (IPng). doi:10.17487/RFC1726. RFC 1726.
  2. ^ F. Baker; X. Li; C. Bao; K. Yin (April 2011). Framework for IPv4/IPv6 Translation. Internet Engineering Task Force (IETF). doi:10.17487/RFC6144. ISSN 2070-1721. RFC 6144. Informational.
  3. ^ a b C. Bao; C. Huitema; M. Bagnulo; M. Boucadair; X. Li (October 2010). IPv6 Addressing of IPv4/IPv6 Translators. Internet Engineering Task Force (IETF). doi:10.17487/RFC6052. ISSN 2070-1721. RFC 6052. Proposed Standard. Updates RFC 4291.
  4. ^ a b C. Bao; X. Li; F. Baker; T. Anderson; F. Gont (June 2016). Stateless IP/ICMP Translation Algorithm. doi:10.17487/RFC7915. RFC 7915.
  5. ^ E. Nordmark (February 2000). Stateless IP/ICMP Translation Algorithm (SIIT). Network Working Group. doi:10.17487/RFC2765. RFC 2765. Obsolete. Obsoleted by RFC 6145.
  6. ^ X. Li; C. Bao; F. Baker (April 2011). IP/ICMP Translation Algorithm. Internet Engineering Task Force (IETF). doi:10.17487/RFC6145. ISSN 2070-1721. RFC 6145. Obsolete. Obsoleted by RFC 7915. Updated by RFC 6791 and 7757.
  7. ^ M. Blanchet; F. Parent (February 2010). IPv6 Tunnel Broker with the Tunnel Setup Protocol (TSP). doi:10.17487/RFC5572. ISSN 2070-1721. RFC 5572. Experimental.
  8. ^ A. Durand; P. Fasano; I. Guardini; D. Lento (January 2001). IPv6 Tunnel Broker. Network Working Group. doi:10.17487/RFC3053. RFC 3053. Informational.
  9. ^ Despres, R. (January 2010). IPv6 Rapid Deployment on IPv4 Infrastructures (6rd). doi:10.17487/RFC5569. RFC 5569.
  10. ^ Troan, O. (August 2010). IPv6 Rapid Deployment on IPv4 Infrastructures (6rd) – Protocol Specification. doi:10.17487/RFC5969. RFC 5969.
  11. ^ Hagino, J.; Yamamoto, K. (June 2001). "An IPv6-to-IPv4 Transport Relay Translator". rfc-editor.org. Request for Comments Editor. Retrieved 28 June 2024.
  12. ^ Shanmugaraja, P. "Design and Implementation of Transport Relay Translator and its security Mitigations". researchgate.net. Research Gate. Retrieved 28 June 2024.
  13. ^ Heffernan, Andy; Tsirtsis, George; Srisuresh, Pyda; Akkiraju, Praveen (September 1999). "DNS extensions to Network Address Translators (DNS_ALG)". rfc-editor.org. Retrieved 28 June 2024.
  14. ^ M. Bagnulo; P. Matthews; I. van Beijnum (April 2011). Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers. Internet Engineering Task Force (IETF). doi:10.17487/RFC6146. ISSN 2070-1721. RFC 6146. Proposed Standard.
  15. ^ Bagnulo, M.; Sullivan, A.; Matthews, P.; van Beijnum, I. (April 2011). DNS64: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers. doi:10.17487/RFC6147. RFC 6147.
  16. ^ "README.DNS64". GitHub. Archived from the original on 2024-04-07. Retrieved 2024-04-07.
  17. ^ Žorž, Jan (3 April 2013). "Video: 464XLAT Live Demo at World IPv6 Congress in Paris". Internet Society. Archived from the original on 13 September 2017. Retrieved 5 August 2013.
  18. ^ "464XLAT – A Solution for Providing IPv4 Services Over and IPv6-only Network". T-Mobile USA. Archived from the original on 12 November 2020. Retrieved 5 August 2013.
  19. ^ "Case Study: T-Mobile US Goes IPv6-only Using 464XLAT". Internet Society. June 13, 2014. Archived from the original on February 4, 2024. Retrieved January 15, 2023.
  20. ^ Twardowska, Marta (January 6, 2015). "Orange Polska Has Launched a World's First Innovative IPv6 Solution with SoftAtHome". Business Wire. Archived from the original on 2023-01-15. Retrieved 2023-01-15.
  21. ^ "Telstra IPv6 Wireless Enablement – IPv6 Single Stack". February 6, 2020. Archived from the original on June 12, 2023. Retrieved June 12, 2023.
  22. ^ Drown, Dan. "What is Android CLAT?". Dan's Notes. Archived from the original on December 17, 2022. Retrieved January 15, 2023.
  23. ^ Havey, Daniel; Balasubramanian, Praveen (February 14, 2019). "Core Network Stack Features in the Creators Update for Windows 10". Microsoft Networking Blog. Archived from the original on February 1, 2023. Retrieved January 15, 2023.
  24. ^ "Windows 11 Plans to Expand CLAT Support". Microsoft Networking Blog. Archived from the original on March 8, 2024. Retrieved March 7, 2024.
  25. ^ "Twitter". Retrieved 27 June 2022.
  26. ^ "[v6ops] iOS12 IPv6-only". Retrieved 5 November 2018.
  27. ^ van Beijnum, Iljitsch (2015-06-16). "Apple to iOS devs: IPv6-only cell service is coming soon, get your apps ready". Ars Technica. Archived from the original on 2016-06-28. Retrieved 2 July 2016.
  28. ^ Anderson, Tore (May 20, 2019). "clatd". GitHub. Archived from the original on December 17, 2022. Retrieved January 15, 2023.
  29. ^ "OpenWrt Wiki package: 464xlat". OpenWrt. Retrieved 1 April 2024.
  30. ^ Baoi, Danilo G. (June 19, 2021). "FreeBSD 12.1-RELEASE Release Notes". FreeBSD. Archived from the original on January 15, 2023. Retrieved January 15, 2023.
  31. ^ A. Durand; R. Droms; J. Woodyatt; Y. Lee (August 2011). Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion. Internet Engineering Task Force (IETF). doi:10.17487/RFC6333. ISSN 2070-1721. RFC 6333. Proposed Standard.
  32. ^ Y. Cui; Q. Sun; M. Boucadair; T. Tsou; Y. Lee; I. Farrer (July 2015). Lightweight 4over6: An Extension to the Dual-Stack Lite Architecture. Internet Engineering Task Force. doi:10.17487/RFC7596. ISSN 2070-1721. RFC 7596. Proposed Standard.
  33. ^ Le Faucheur, François; Rosen, Eric (May 2009). Advertising IPv4 Network Layer Reachability Information with an IPv6 Next Hop. doi:10.17487/RFC5549. RFC 5549.
  34. ^ Chroboczek, Juliusz (May 2022). Pv4 Routes with an IPv6 Next Hop in the Babel Routing Protocol. doi:10.17487/RFC9229. RFC 9229.
  35. ^ Rammhold, Andreas (December 15, 2020). "[RFC] Babel: Add v4viav6 Support". BIRD Internet Routing Daemon. Archived from the original on 2022-12-29. Retrieved 2023-01-15.
  36. ^ Chroboczek, Juliusz (May 5, 2022). "[Babel-users] ANNOUNCE: babeld-1.12". Debian Alioth Lists. Archived from the original on 2022-12-29. Retrieved 2023-01-15.
  37. ^ Mark Townsley (September 24, 2012). "Mapping Address + Port" (PDF). Cisco. Archived (PDF) from the original on 2022-12-29. Retrieved 2012-09-25.
  38. ^ X. Li; C. Bao; O. Troan; S. Matsushima; T. Murakami (July 2015). W. Dec (ed.). Mapping of Address and Port using Translation (MAP-T). Internet Engineering Task Force (IETF). doi:10.17487/RFC7599. ISSN 2070-1721. RFC 7599. Proposed Standard.
  39. ^ W. Dec; X. Li; C. Bao; S. Matsushima; T. Murakami (July 2015). O. Troan; T. Taylor (eds.). Mapping of Address and Port with Encapsulation (MAP-E). Internet Engineering Task Force (IETF). doi:10.17487/RFC7597. ISSN 2070-1721. RFC 7597. Proposed Standard.
  40. ^ Patterson, Richard (May 2021). "IPv6-Only with MAP-T". RIPE NCC Open House. Archived from the original on 21 February 2023. Retrieved 1 August 2023.
  41. ^ R. Despres; R. Penno; Y. Lee; G. Chen; M. Chen (July 2015). S. Jiang (ed.). IPv4 Residual Deployment via IPv6 - A Stateless Solution (4rd). Internet Engineering Task Force (IETF). doi:10.17487/RFC7600. ISSN 2070-1721. RFC 7600. Experimental.
[edit]
Retrieved from "https://wiki.riteme.site/w/index.php?title=IPv6_transition_mechanism&oldid=1250779603#Dual-Stack_Lite_(DS-Lite)"