From: Rick v. R. <ri...@op...> - 2013-12-30 13:48:48
|
Hi, > I want to setup a free ipv6 service to public, Excellent! You are aware of RFC 7059 I suppose? It compares tunnel mechanisms. (And sorry for advertising my own scribblings!) > and think the tunnel broker may be a suitable approach, so I researched some transition project, it seems that most of providers use gogoserver as transition infrestucture, That infrastructure has rather noticeable scaling issues, because *all* traffic flows through it. Also, depending on server implementation, it could be possible to hijack a connection from behind the same NAT. > but I have no monty to offer the software, the only free bunnel broker is CITC tunnel broker, they use a python tool as demon broker and a kernel modul ddtb as udp-ipv6 transition, but very awful that the system must create a tunnel interface and set 2 iptables policies and 1 routing for every connection, I wondered what the problem was until you said “for every connection” :-) > and due to bind a port, the maximum capacity 2^16 is also a gap, so I continuously search the possible approches and found your RFC proposal, it really a talented and perfect method to resolve NAT traversal, *bow* thank you! > whatever cone or symmetrical, it will bring to complexity and mistake to consider every technical details, your thinking is a perfect compromise for the transition, and in fact 2^6 ipv6 addresses is enough to many units . …and if not, you can always opt for another 6bed4 lease. > So next step, I'll extended the authentication based on your RFC, may be the combination of tb authentication method and your thinking is a very perfect solution to public ipv6 service, I think I will make it online soon . I suppose it is possible to add authentication… the think I had in mind for that is simply setting the IPv4 addresses you can use. You might use any protocol (“pop before 6bed4”, grinn) to authenticate. It would be rather disturbing to add it to 6bed4, so I left it out. I’d love to hear your progress in this matter, so please keep posting any updates you go through! Cheers, -Rick |