@AsusMy, I'd like to suggest you and your team behind AsusWRT to consider supporting IPv6-only networks using your product(s). One of the reasons is, with many ISP's in Malaysia implementing CGNAT on WAN, it clearly shows that IPv4 is already exhausted and ISP's need to reserve as many IPv4 IP address as they can. This makes IPv4 scarce and rare and expensive to customers unlike before.

Welcome to IPv6. No NAT no nonsense just direct end-to-end communication as intended.

On your product(s), the key components to make this work are:-

1. NAT64
2. DNS64
3. CLAT (X464LAT)

#1 -- This is similar to IPv4 NAT44 but translate an IPv4 to IPv6 address using the given well-known or GUA /96 prefix.

#2 -- This resolves an IPv4-only domain to have a synthetic IPv6 address by translating it using the configured /96 prefix.

#3 -- This takes care of IPv4 literals in applications that still use legacy AF_INET.

All 3 components work hand in hand together for an IPv6-only network to work properly. With this in place, you can run IPv4-only applications on IPv6-only LAN.

If your team decides to take on this project/challenge, bare in mind you have to consider customer networks that have dynamic IPv6 Prefix Delegation assigned to them by their ISP.


Some references:

https://github.com/toreanderson/clatd
https://github.com/vitlabuda/tundra-nat64
http://www.litech.org/tayga/
https://sites.google.com/site/tmoipv6/464xlat
https://datatracker.ietf.org/doc/html/rfc6877

Cheers.

[quote=ASUSmy,Jan 26 2023, 02:01 PM]
Hi rogue,

Thank you for your suggestion, will share it to our RD at HQ.

Hello @ASUSmy, any news or feedback from your team ?

Referring to https://forum.lowyat.net/topic/2651405/+14980#

This post has been edited by rogue: Mar 26 2023, 10:17 PM

@Asusmy

Hi, Feature request to Asus Malaysia..

1. Add DNS64 option in stock router
2. Add NAT64 option in stock router
3. Add DoT/DoH DNS option in stock router
4. Add Wireguard support in stock router

Cheers.

That's good news indeed.

The first 2 is so you can run an IPv6-only LAN and still be able to access IPv4 resources via domain name(github.com, twitter.com, etc).

Forgot to ask @asusmy to also add in the 464xlat module/package developed by OpenWRT into their products as well.
With this you can still use apps that still use legacy IP literals.

@Asusmy Please suggest to product tech team to add 464xlat feature into their router products. Thanks.

That's some good news. Hope it all goes well and can deploy it here soon.

ISP only need to provide IPv6 which most already do then use Google/Cloudflare's DNS64 servers.

If you use OpenWRT then you can already experiment with this as it has support for 464xlat.

This post has been edited by rogue: Jan 18 2024, 06:22 PM