| 24 Jun 2025 |
 hexa | meh | 12:48:38 |
 emily | https://github.com/vitlabuda/tundra-nat64 seems more promising for things that already work. | 12:52:26 |
| emily | and the BPF things seem more promising as bases for future things. | 12:52:34 |
| emily | and apparently someone is working on an in-kernel SIIT. | 12:52:49 |
| emily | I'm not sure TAYGA had a public repo, tbf | 12:53:33 |
| emily | it's been unmaintained for like 15 years | 12:53:44 |
| hexa | oh, that is surprising | 12:53:54 |
| emily | oh, this guy wrote one of them :) | 12:54:08 |
| emily | so maybe I'm being too cynical | 12:54:17 |
| hexa | clients will likely use a bpf program for 464xlat | 12:54:36 |
| hexa | translators? I tend to use jool | 12:54:58 |
| emily | AIUI the Android BPF program still needs a helper daemon to handle checksum-neutral address assignment and translation of "weird" packets | 12:57:06 |
| emily | the latter could probably be solved by extending the BPF program? | 12:57:14 |
| emily | I like Tundra's thing where it does stateless NAT64 by relying on the kernel NAT66 to service multiple hosts | 12:57:52 |
| emily | I think you could ideally do BPF + kernel NAT66 for that | 12:58:12 |
| emily | https://github.com/systemd/systemd/issues/23674#issuecomment-2625544068 is my source for in-kernel CLAT being worked on | 12:59:27 |
| emily | as of half a year ago | 12:59:29 |
| emily | but it looks like it's been taking a while :) | 12:59:46 |
| emily | https://gist.github.com/danderson/664bf95f372acf106982bcc29ff56b53 outlines a very simple in-kernel design that would plug into NAT66 to do the whole thing | 13:00:22 |
| emily | I think something like that would be ideal if the kernel is willing to take it, since it would simplify things greatly | 13:00:39 |
| emily | I'm hoping to play around with the options here soon since I would like to make my home network v6-only | 13:01:27 |
| hexa | my wifi has been ipv6-mostly (https://www.ietf.org/archive/id/draft-link-v6ops-6mops-00.html) and internet connectivity regularly breaks for my android | 13:02:36 |
| hexa | I once debugged this down to it dropping out of the neighbor discovery group during sleep | 13:02:56 |
| emily | (on the NAT64 translator end mostly, since I do not yet have Linux clients connecting directly to the network and macOS and Android both do it OOTB, but if I play around with the BPF stuff or Tundra it should generalize) | 13:03:36 |
| hexa | and we reported this back when I was on a Pixel 3a … during early covid maybe? | 13:03:44 |
| hexa | * and we reported this to the Android team back when I was on a Pixel 3a … during early covid maybe? | 13:03:54 |
| emily | I was on a Pixel 3 last year… 🤪 | 13:04:13 |
| emily | that's annoying though | 13:04:29 |
| emily | I thought Android was pretty good at v6 at this point | 13:04:40 |
| emily | is it specifically that it forgets it's v6-only? | 13:04:49 |
