Server hosted on IPv6 only - how to access from internet IPv4 only enabled 'clients'

Soldato
Joined
19 Oct 2002
Posts
2,727
Location
Auckland, New Zealand
Hi

My network topology is this:

Dual Stack ISP (1 static IPv4 & /56 Static IPv6) > Fritzbox 7390 > LAN (192.168.x.x IPv4 and IPv6 assigned from router).

I have my static IPv4 assigned to my load balancers as they currently do not support IPv6 and these serve my mail servers.

I have an owncloud server which is sitting on a 192.168.x.x IPv4 but also a publicly available IPv6 address which is port forwarded through the router.

The question I have is, if a person that wants to connect to the owncloud server is only using an IPv4 connection (i.e. my work is like this, no IPv6 infrastructure yet), is there anyway taht they can connect to my IPv6 address assigned to the owncloud server?

I presume that IPv4 cannot access IPv6 natively and must be translated somehow? Are there any services out there that I can use that allow me to effectively 'proxy' an IPv4 address to an IPv6 so that they can access it or do it at my router level so that it resolves to an encapsulated IPv4 that goes to my router and then it spread out after that?
 
You ideally need something which can do NAT64 or NAT46. We have an ASA at work which is doing just this, converting our IPv4 to an IPv6. It was put there as a trial but its has found its way to being an integral part or that system.
 
Last edited:
You want to connect to a public IPv6 address over IPv4? Tunnel broker - Hurricane Electric(among others)?

Basically I have a full /56 static IPv6 through my ISP but only one IPv4 address. Most of the network operators in NZ do not offer IPv6 so what I need to do is allow IPv4 access to my IPv6 only servers that will not break my IPv4 only Loadbalancers.
 
Is something like this workable?

https://www.sixxs.net/tools/gateway/

Hi Caged, yes this is my fall back position. Its not ideal as it doesn't do port 443 and so SSL certs fail but is something we could live with; I could probably not have to use HTTPS as its only for family but I'd prefer to.

Is there anyway to do something like this?

IPv4 only client > Hostname (IPv6) @ godaddy > encapsulate as IPv4 > through router as IPv4 > pass IPv6 to servers internally?

I've tried to get more than one static IPv4 from my ISP but they won't, and as most of the infrastructure my family in the UK uses is not IPv6 enabled yet I'm struggling to make it all work.
 
You'd have to build a reverse proxy yourself and host it in an environment that has both IPv6 and IPv4 network connectivity, I'm not aware of anyone who offers that ^ sort of service at a commercial level with the flexibility that you desire.

A Gandi VPS might be a good start.

A client on IPv4 wouldn't be able to resolve a AAAA record so you'd need to add an IPv4 A record pointing at your reverse proxy. You can keep the hostname the same though.
 
You'd have to build a reverse proxy yourself and host it in an environment that has both IPv6 and IPv4 network connectivity, I'm not aware of anyone who offers that ^ sort of service at a commercial level with the flexibility that you desire.

A Gandi VPS might be a good start.

A client on IPv4 wouldn't be able to resolve a AAAA record so you'd need to add an IPv4 A record pointing at your reverse proxy. You can keep the hostname the same though.

I'd kinda thought about this and hoped it wouldn't be the only way, I'll probably end up using the Sixxs gateway until IPv6 becomes more mainstream.
 
Back
Top Bottom