Project

General

Profile

Feature #2358

NAT64 Support

Added by Seth Mos over 5 years ago. Updated 3 months ago.

Status:
New
Priority:
Normal
Assignee:
Category:
Rules/NAT
Target version:
Start date:
04/08/2012
Due date:
% Done:

0%


Description

History

#1 Updated by Mathieu Mourez about 4 years ago

UPVOTE. It would be really nice to have these capabilities built into pfSense. The Viagenie implementation is nice and stateful and apparently already works on pf under OpenBSD 4.6.

#2 Updated by Andreas Peetz almost 4 years ago

UPVOTE. I really like to be able to run my network with IPv6 only and make legacy IPv4 site available through NAT64.

#3 Updated by Chris Buechler over 3 years ago

  • Subject changed from NAT64 gateway Support to NAT64 Support
  • Category changed from Interfaces to Rules/NAT
  • Priority changed from Low to Normal
  • Target version deleted (2.2)
  • Affected Version changed from 2.2 to 2.1-IPv6

#4 Updated by Rodrigo Ferraz over 2 years ago

UPVOTE. Since most ISPs are already turning IPv6 into reality on many homes and work places around the world, this feature has become a must for pfSense. I would like to kindly ask for the priority of this feature to be raised.

#5 Updated by Acacio Cruz over 2 years ago

UPVOTE
UPC Cablecom in Switzerland just became a "IPv6 only" ISP last month. (IPv6 Dual Stack Lite)
https://support-en.upc-cablecom.ch/app/answers/detail/a_id/1251/~/information-on-ipv6-ds-lite

#6 Updated by Alexander Kolesnik over 1 year ago

UPVOTE

#7 Updated by Tom . over 1 year ago

UPVOTE. I'd love to be able to set up an IPv6-only network and just use NAT64 to redirect old requests.

#8 Updated by Nicolas Vollmar about 1 year ago

UPVOTE
My new ISP provides native IPv6 and I would prefere not to have configuring my hole network with IPv4 if I could just setup my pf sense to do the NAT64 instead.

#9 Updated by Martin Hansen about 1 year ago

UPVOTE, word up on this. It should be prioritized significantly.

#10 Updated by Greg M about 1 year ago

UPVOTE

#11 Updated by Luiz Souza about 1 year ago

  • Assignee set to Luiz Souza
  • Target version set to Future

#12 Updated by Luiz Souza about 1 year ago

Too late for 2.4.0...

#13 Updated by DB Tsai 12 months ago

UPVOTE!

First of all, thank you for the great open source firewall product. As Apple starts to require all the new apps have to work under NAT64, pfSense will be a good experimenting platform if pfSense supports it natively. As far as I know, NAT64 feature was merged into the FreeBSD upstream, so it's possible that pfSense can support it without too much effort. I wonder if there is any plan that pfSense can support DNS64/NAT64 in the nearly future?

This will be a very important feature for many frustrated ios app developers who can not easily reproduce NAT64 environment in house. Thanks.

#14 Updated by Joel Whitehouse 10 months ago

Would like to see support for NAT64/DNS64 in pfsense. Deployment of DNS64 outside of the gateway is somewhat convoluted, requiring additional hardware, and adds latency to DDNS lookups (since the DNS requests would have to go through a separate host before going to pfsense.) It would be ideal for pfsense to integrate these services.

#15 Updated by Arthur Wiebe 9 months ago

Google offers a public DNS64 resolver https://developers.google.com/speed/public-dns/docs/dns64 so if we could get NAT64 working in pfSense that would already be a workable start.

#16 Updated by Scott Rosenberg 9 months ago

Joel Whitehouse wrote:

Would like to see support for NAT64/DNS64 in pfsense. Deployment of DNS64 outside of the gateway is somewhat convoluted, requiring additional hardware, and adds latency to DDNS lookups (since the DNS requests would have to go through a separate host before going to pfsense.) It would be ideal for pfsense to integrate these services.

I'd also like to voice my support for this integration

#17 Updated by Scott Rosenberg 9 months ago

UPVOTE!
I'd also like to voice my support for this integration

#18 Updated by EDUARDO CERQUEIRA DA SILVA 9 months ago

I would like to see this important functionality

#19 Updated by Dmitri Toubelis 9 months ago

UPVOTE!!!
We are switching several of our subnets from dual-stack to pure IPv6 and NAT64/DNS64 is not optional for us any longer. Having this feature on the gateway would hep us immensely.

#20 Updated by Landon Wubbels 8 months ago

Upvote

#21 Updated by Arthur Wiebe 8 months ago

For those who'd like to do something now, I've finished testing a setup using TAYGA on a separate virtual machine with pfSense on the gateway. Detailed instructions are available here https://blog.artooro.com/2017/05/02/nat64-how-to-with-pfsense-and-tayga/ it seems to be working very well in my environment.

#22 Updated by Brandon Jackson 7 months ago

Upvote. Even if just NAT64, as other have said Google has DNS64 and also BIND can be installed and it is pretty simple to setup DNS64 on it too.

#23 Updated by Brandon Jackson 3 months ago

Also available in: Atom PDF