Lightweight 4over6: An Extension to the Dual-Stack Lite Architecture

Security and Privacy Considerations for IPv6 Address Generation Mechanisms

“…Finally, still other mechanisms (e.g., [RFC7596], [RFC7597], [RFC7599]) are somewhere in between, using an IPv4 address and a port set ID (which for many NATs is not randomized). In general, such mechanisms are thus typically as easy to scan as in the Teredo example above without the 12-bit mitigation.…”

“…[RFC7136] clarifies that the IID should be treated as an opaque value, while [RFC7421] provides an analysis of the 64-bit boundary in IPv6 addressing (e.g., the implications of the IID length on security and privacy). Over the years, many IID generation techniques have been defined, both standardized and non-standardized: * Cryptographically generated [RFC3972] * Temporary (also known as "privacy addresses") [RFC4941] * Constant, semantically opaque (also known as "random") [Microsoft] * Stable, semantically opaque [RFC7217] o DHCPv6 based [RFC3315] o Specified by transition/co-existence technologies * Derived from an IPv4 address (e.g., [RFC5214], [RFC6052]) * Derived from an IPv4 address and port set ID (e.g., [RFC7596], [RFC7597], [RFC7599]) * Derived from an IPv4 address and port (e.g., [RFC4380])…”

Port Control Protocol (PCP) Extension for Port-Set Allocation

“…In the Lightweight 4over6 (lw4o6) [RFC7596] architecture, shared global addresses can be allocated to customers. This allows moving the Network Address Translation (NAT) function, otherwise accomplished by a Carrier-Grade NAT (CGN) [RFC6888], to the Customer Premises Equipment (CPE).…”

Dynamic Allocation of Shared IPv4 Addresses

“…As the IP address is no longer a unique identifier for a host, this solution is only suitable for specific architectures based on the Address plus Port model (A+P) [RFC6346]. Specifically, this document presents a solution that applies to [RFC7596] and certain configurations of [RFC7597] (e.g., Embedded Address bit (EA-bit) length set to 0).…”