IntersectMBO / ouroboros-network

Specifications of network protocols and implementations of components running these protocols which support a family of Ouroboros Consesus protocols; the diffusion layer of the Cardano Node.
https://ouroboros-network.cardano.intersectmbo.org
Apache License 2.0
276 stars 87 forks source link

Identify possible IPv4 in IPv6 approaches #3677

Open coot opened 2 years ago

coot commented 2 years ago
njd42 commented 2 years ago

One approach is the NAT64 approach - there is a public address range for this but there is also the ability to run a local service.| If this approach was the one chosen we would need something like a configuration flag (to enable) along with an option to set the IPv6 prefix (for local services - such as may be run by large corporates for security reasons)

coot commented 2 years ago

Nice, so this can be deployed together with DNS64, which allows to get AAAA records translated from A record.

njd42 commented 2 years ago

Yes, and that is what an IPv6 only ISP does (though it does have consequences for DNS authentication). However, this does not help with the case where IPv4 addresses are used - hence the potential need for emulating the IPv4 into IPv6 address embedding and the ability to configure that prefix (for non-public networks)

gufmar commented 2 years ago

I need to understand if such v4-6 translations are required, important or beneficial in certain cases, or if a certain good amount of nodes operating both a v4 and v6 interface are natural, decentralised and redundant interconnectors for nodes operating only one protocol version.

coot commented 2 years ago

@gufmar if there is an ipv6 only node, its pool of known peers will largely consists of unreachable peers (there are very few ipv6 nodes), for security reasons (eclipse attacks) ipv4-6 translation is mandatory.