Dave Anderson danderson

Keybase proof

I hereby claim:

I am danderson on github.
I am dave_universetf (https://keybase.io/dave_universetf) on keybase.
I have a public key ASDD18cHJhm2zgQYbqAkCXAR_44usIKGXts2FqotdMwcRgo

To claim this, I am signing this object:

I'm writing this up as a gist, because I'm not sure I'll pursue any of it, but it seems worth writing down.

A basic problem with IPv6-only LANs at the moment is that you still need support for legacy protocol servers, which implies you doing some kind of DNS64 and NAT64 (IPv6-to-IPv4 stateful translation).

Currently, NAT64 only exists outside the kernel, as userspace software. This is not ideal because it limits available performance (since you have to keep bouncing between user space and kernel space),

	#!/bin/bash

	# Temporary directory for assembling the unified kernel image.
	WORKDIR=$(mktemp -d)
	trap "rm -rf ${WORKDIR}" EXIT

	# Two directories on the EFI partition: Arch for the bootloaders, and
	# Linux for the unified kernel images.
	#
	# We want a directory for the bootloaders because Redhat's shim binary

	apiVersion: kubeadm.k8s.io/v1alpha3
	kind: InitConfiguration
	bootstrapTokens:
	- token: "000000.0000000000000000"
	ttl: "24h"
	apiEndpoint:
	advertiseAddress: $(head -1 /host/ip)
	---
	apiVersion: kubeadm.k8s.io/v1alpha3
	kind: ClusterConfiguration

	apiVersion: kubeadm.k8s.io/v1alpha3
	kind: InitConfiguration
	bootstrapTokens:
	- token: "000000.0000000000000000"
	ttl: "24h"
	apiEndpoint:
	advertiseAddress: 1.2.3.4
	---
	apiVersion: kubeadm.k8s.io/v1alpha3
	kind: ClusterConfiguration

	$ ./natprobe
	NAT allocates a new ip:port for every unique 3-tuple (protocol, source ip, source port).
	This is best practice for NAT devices.
	This makes NAT traversal easier.
	Firewall requires outbound traffic to an ip:port before allowing inbound traffic from that ip:port.
	This is common practice for NAT gateways.
	This makes NAT traversal more difficult.
	NAT seems to try and make the public port number match the LAN port number.
	NAT seems to only use one public IP for this client.
	NAT seems to not block outbound UDP traffic.

	#!/bin/bash

	set -e

	# Temporary directory for assembling the unified kernel image.
	WORKDIR=$(mktemp -d)
	trap "rm -rf ${WORKDIR}" EXIT

	# Two directories on the EFI partition: Arch for the bootloaders, and
	# Linux for the unified kernel images.

	function go-switch() {
	eval `command go-switch $@`
	rehash
	}