Date: Tue, 29 Jul 2014 09:54:26 -0700 From: Kevin Oberman <rkoberman@gmail.com> To: Mark Martinec <Mark.Martinec+freebsd@ijs.si> Cc: FreeBSD Current <freebsd-current@freebsd.org> Subject: Re: Future of pf / firewall in FreeBSD ? - does it have one ? Message-ID: <CAN6yY1uqCghJ1in5-Z8Ww6VOALuuqH3R9wFw=wEr5dd3iFbYOw@mail.gmail.com> In-Reply-To: <444fc5248aaa7d474cf9bde66f3d7f64@mailbox.ijs.si> References: <201407291320.s6TDK5ZS005328@slippy.cwsent.com> <444fc5248aaa7d474cf9bde66f3d7f64@mailbox.ijs.si>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 29, 2014 at 7:48 AM, Mark Martinec <Mark.Martinec+freebsd@ijs.si > wrote: > me wrote: > >> we are talking about NAT64 (IPv6-only datacenter's path to a legacy >> world), >> and NPT66 (prefix transalation). I doubt anyone had a traditional NAT in >> mind. >> > > Kevin Oberman wrote: > >> No, all of the messages in the thread are specific about NAT66, not NPT66. >> NPT66 may have real value. I hate it, but it may well be better than >> alternatives. [...] >> > > Cy Schubert wrote: > >> That I don't disagree with, IPv6 NAT makes no logical sense. Having said >> that I've received emails asking about NAT66 specifically. It is on >> people's minds. >> > > My impression is that often the term NAT66 is used indiscriminately, > even when NPT66 (static prefix translation) is meant. > > Mark > > I would hope that is not the case. While NAT66 is "well known" and has been a topic of discussion for years, NPT66 is relatively new. It does share many concepts with NAT66 (and, most likely implementations also share code), but does not require any state, making it vastly less complex and no longer breaks point to point networking. The names look similar, which may result in unfortunate confusion, but NPT66 may be the bast solution to a real problem and it does not create the issues of NAT66. -- R. Kevin Oberman, Network Engineer, Retired E-mail: rkoberman@gmail.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1uqCghJ1in5-Z8Ww6VOALuuqH3R9wFw=wEr5dd3iFbYOw>