How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Shadow Hawkins on Sunday, 16 August 2009 04:20:22
Hello,
I'm having a setup here with an IPv6 intranet only. My goal is to do exactly the same as sixxs is doing with their setup: There is one gateway machine in the intranet which also has an IPv4 internet connection. With modified domain lookups, the intranet clients will be redirected to .test-gateway.test for instance. I've tried to get this working with squid's reverse proxy feature but couldn't set it up yet. So I'm wondering, which software is the sixxs-staff using for their gateways? Does anyone have an idea how such a gateway could be set up and which software might be suitable? So far I mostly tried settings like this:
---
http_port 80 accel defaultsite=localhost vhost
cache_peer wikipedia.org parent 80 0 no-query originserver name=wikipedia_accel
cache_peer_domain wikipedia_accel wikipedia.org.metameute.3m www.wikipedia.org.metameute.3m
acl wikipedia_acl dstdomain wikipedia.org.metameute.3m
http_access allow wikipedia_acl
cache_peer_access wikipedia_accel allow wikipedia_acl
---
And on the client I made an entry for www.wikipedia.org.metameute.3m and wikipedia.org.metameute.3m pointing to the squid-server's ipv6-address.
Any help appreciated.
Cheers, Linus
How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Jeroen Massar on Monday, 17 August 2009 23:29:51
Wrong approach. Just setup Squid on a box with IPv4 and IPv6 connectivity and configure the IPv6-only clients with the IPv6 squid as the proxy. Presto done.
As for the software behind IPv6Gate, just like everything else: fully custom.
How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Shadow Hawkins on Tuesday, 18 August 2009 09:56:30
is it possible to setup IPv6-to-IPv4 Gateway with NAT-PT on cisco router ?
/kr
How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Jeroen Massar on Tuesday, 18 August 2009 10:54:47
NAT-PT is deprecated. There are other mechanisms like IVI which do work better, for quantities of better.
See:
behave-5.pdf
ivi @ APAN
or google(ivi ipv6) for others.
Note that I am personally actually wondering why one would bother with that.
Most very likely the users will only be accessing HTTP, and maybe SMTP/IMAP/POP3. It is trivial to make gateways/proxies for those protocols.
Next to that one can always use the good old SOCKS method for doing a very well-scaling setup which can be easily load-balanced etc.
How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Shadow Hawkins on Friday, 28 August 2009 13:00:24
Thanks for the quick response. Well, the thing is, in this setup I don't have access to every single IPv6-client in our network. But I am able to configure the dhcp/radvd/dns-server, so the idea was, to just redirect every client for some websites to the 6-to-4-gateway. The redirecting already works pretty well with dnsmasq and no client has to configure anything. Now I'm just trying make the gateway fetching data for those few websites and presenting them to the client as if they were its own. But I'm still a little stuck with squid and I'm starting to wonder if the reverse-proxy feature of squid is capable of doing something like this at all...
Cheers, Linus
How do I set up an IPv6-to-IPv4 Website Gateway for myself?
Jeroen Massar on Friday, 28 August 2009 13:21:53 The redirecting already works pretty well with dnsmasq and no client has to configure anything.
You mean, that for all DNS "A" requests you just answer with 192.0.2.80 which is the IP address of your HTTP Proxy?
You do realize that the Internet is more than that eh?
Better thing is to try and redirect packets destined to port 80 to your proxy.
This could work if you had the 'nat' table and with REDIRECT. Other platforms maybe supply different things.
Maybe you should look into 'totd' or IVI?
But I'm still a little stuck with squid and I'm starting to wonder if the reverse-proxy feature of squid is capable of doing something like this at all...
You need a very bog-standard forward proxy.
Posting is only allowed when you are logged in. |