From owner-freebsd-current@freebsd.org Mon Nov 2 23:38:39 2015 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1F5C6A252C0 for ; Mon, 2 Nov 2015 23:38:39 +0000 (UTC) (envelope-from Mark.Martinec+freebsd@ijs.si) Received: from mail.ijs.si (mail.ijs.si [IPv6:2001:1470:ff80::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C742D112B for ; Mon, 2 Nov 2015 23:38:38 +0000 (UTC) (envelope-from Mark.Martinec+freebsd@ijs.si) Received: from amavis-ori.ijs.si (localhost [IPv6:::1]) by mail.ijs.si (Postfix) with ESMTP id 3nqW0B6SLTz1Fb for ; Tue, 3 Nov 2015 00:38:34 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ijs.si; h= user-agent:message-id:references:in-reply-to:organization :subject:subject:from:from:date:date:content-transfer-encoding :content-type:content-type:mime-version:received:received :received:received; s=jakla4; t=1446507511; x=1449099512; bh=+5G VzjEH52s6nA9c5YC/5KufEgPNmgCc/y8HIoc3GJk=; b=boBWa/IBrLnHgvCEFmg Tq5SYaOakOyWqvS0ocsUJdsYZRmDSMm3oxgzILKl/XKuxWi8qYNTE+wJmh1dJZ3m TiV+3ublCt/bnsCrUFu1nfw64DMOmgG4AajLg9MISrjBNgfQakG6Qg75MFzoSiki OReAGQ4MamN+dmX00wZ6e6U0= X-Virus-Scanned: amavisd-new at ijs.si Received: from mail.ijs.si ([IPv6:::1]) by amavis-ori.ijs.si (mail.ijs.si [IPv6:::1]) (amavisd-new, port 10026) with LMTP id yqjE1shih3y1 for ; Tue, 3 Nov 2015 00:38:31 +0100 (CET) Received: from mildred.ijs.si (mailbox.ijs.si [IPv6:2001:1470:ff80::143:1]) by mail.ijs.si (Postfix) with ESMTP id 3nqW074Xldz1FZ for ; Tue, 3 Nov 2015 00:38:31 +0100 (CET) Received: from nabiralnik.ijs.si (nabiralnik.ijs.si [IPv6:2001:1470:ff80::80:16]) by mildred.ijs.si (Postfix) with ESMTP id 3nqW072z9nzQH for ; Tue, 3 Nov 2015 00:38:31 +0100 (CET) Received: from sleepy.ijs.si (2001:1470:ff80:e001::1:1) by nabiralnik.ijs.si with HTTP (HTTP/1.1 POST); Tue, 03 Nov 2015 00:38:31 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Tue, 03 Nov 2015 00:38:31 +0100 From: Mark Martinec To: freebsd-current@freebsd.org Subject: Re: Tunnelling IPv4 over IPv6 for GitHub access? Organization: Jozef Stefan Institute In-Reply-To: <5637EA7A.5090307@fizk.net> References: <5637EA7A.5090307@fizk.net> Message-ID: <22a80c7ff85a8683ebeec47bedf62d0d@mailbox.ijs.si> X-Sender: Mark.Martinec+freebsd@ijs.si User-Agent: Roundcube Webmail/1.1.3 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 23:38:39 -0000 Craig Rodrigues wrote: > I have some machines which are on an IPv6 only network. > It works great and I can access most things on the IPv6 Internet > that I need like Google ( [2607:f8b0:4004:808::1014]) , Facebook > ([2a03:2880:1010:df05:face:b00c:0:2]), CNN ( [2620:100:e000::8001]), > etc. > > However, the one thing I cannot access is GitHub, which does not > support IPv6 (!!!!). > > Is there a way that I can tunnel IPv4 over an IPv6 network? > > I read this blog post: > http://www.aisecure.net/2013/02/03/tunneling-ipv4-over-ipv6-vpn/ > and wasn't sure if this was an approach that I could use. I don't see how a tunnel encapsulation would help here - you need to translate between protocol families, as your client side is IPv6-only. If all the traffic is HTTP then a web proxy like squid running on a dual-stacked host would suffice. Otherwise a NAT64 (with DNS64) is needed, like implemented in OpenBSD's pf (but not available in FreeBSD's pf). Mark