3

I want my IPv4 only Clients to my IPv6 only Site. I have a dualstack Server which I could use as a gateway.

There is a Question somewhat related here:

IPv6-only client to IPv6/IPv4 dual stack server tunnel?

but was asked about 4 years ago.

Is this setup possible:

< Hosts >  --- IPv4 --- < DS GatewayServer > --- IPv6 --- < Site >

Do I have to set up a host to site VPN to the GatewayServer and a Site to Site VPN to the Site? Can this be done? And how would I route beween the two VPNs?

Community
  • 1
Maximilian Kindshofer
  • 166
  • 1
  • 1
  • 10
  • Which application layer protocols do you need to use? I have implemented [a name based proxy](http://v4-frontend.netiter.com/), which can handle http, https, and smtp (also ssh if you are willing to patch the client). – kasperd Aug 24 '15 at 10:01
  • I thought of site like in factory not like in website. So I need some kind of VPN proxy. But your proxy might come in handy for other problems - thx – Maximilian Kindshofer Aug 24 '15 at 10:06

2 Answers2

1

Sounds like what you need is a 6in4 tunnel. If you have a routed prefix on your dual stack server, then you can set up your own tunnel server. Otherwise you can use one of the many free tunnel providers.

Based on my overall experience with various providers, I recommend Hurricane Electric.

You could replace the 6in4 tunnel with a site-to-site VPN. The difference between 6in4 and VPN is that the VPN provides integrity and encryption on the path between IPv4 site and tunnel server, but this may not add a lot of value for you, as the path between tunnel server and IPv6 site remains unencrypted.

A site-to-site VPN between IPv4 site and IPv6 site might be possible, but this would obviously add another layer of complexity since the VPN would have to run on top of a tunnel, proxy, or NAT.

kasperd
  • 30,455
  • 17
  • 76
  • 124
0

You'll need to run a reverse proxy on your dual stack host that acts like a server to the IPv4 clients and as a client to the IPv6 server. Which tools to use depends on the protocol you need to handle. I have used haproxy with good results for TCP based protocols, and it has extra features for HTTP and HTTPS.

Sander Steffann
  • 7,712
  • 19
  • 29