This proof of concept uses ipvlan
feature of Linux to split up main
network interface into two in order to use one in a separate namespace
with jool-siit
performing CLAT translation.
This way, enabling CLAT is least intrusive to the default network namespace - no need to enable forwarding or touch firewall rules.