Objective

To set up the inner IPv6-only network that can transparently communicate with the global IPv4 net like there was IPv6 everywhere.

Utilities

• GNU/Debian-like Linux — gateway (in a wide sense, not only router)
• TAYGA — NAT64 tunnel (NAT-PT implementation)
• Totd — DNS64 to generate fake AAAA records for internet hosts
• BIND9 — DNS server to filter out IPv6 replies for Totd
• iproute2 — network configuration utilities
• netfilter/iptables — traffic mangling utilities

Features

My linux box obtains a private IP-address through DHCP without any gurantee that this IP-address will be the same every and all the time. Therefore the IPv6-network will be masqueraded in addition to IPv4 translating.

Overview

TAYGA maps whole your IPv6 network to a range of IPv4-addresses of the same size.

By default TAYGA uses 192.168.255.0/24 — not a bad choice, lets use it below.

Besides NAT-PT and proper routing the masqueraded IPv6 network needs a DNS service that will generate IPv6-addresses for any host. Totd does it quite well. It has a common IPv6 prefix for translating, let it be 2001:db8:1:ffff::