From: mohamed.boucadair@orange.com
IronPort-Data: A9a23:EDGDtqvb18sNE70ijx7hLrUfL+fnVFheMUV32f8akzHdYApBsoF/q
 tZmKWuAOPnbMDT1ed5xPYvg805XvMODzNZnSgJorX03FiIR9ZOVVN+UEBz9bniYRiHhoOOLz
 Cm8hv3odp1coqr0/0/1WlTZhSAik/nOHPylUbSs1hlZHWdMUD0mhQ9oh9k3i4tphcnRKw6Ws
 LsemeWHULOe82AyaDp8B56r8ks14a2r4m9A5TTSWNgQ1LPgvyhMZH4gDfHpR5fIatE8NvK3Q
 e/F0Ia48gvxlz8xCsmom6rMaUYDRLjfJ2Cm0hK6jID733CuDgRrukoKHKJ0hXV/0l1lrPgoo
 Dl5jqFcfC9yVkH6dEbxZDEDe812FfUuFLYquhFTu+TLp6HNWyOEL/mDkCjaMKVAktubD12i+
 tQEJD4MVx6yiti9766FGvA838N4cNfCadZ3VnFIlVk1DN4eaM37GfuWzuIAhG52gd1SF/HDY
 cZfcSBocBnLfxxIPBEQFY46m+CrwHL4dlW0qnrJ/exmuC6MkkovuFTuGIK9ltiiQMJVl0OVq
 iTM+HnyCx0TNca3ziCM9H2hwOTImEsXXapLTOLkr6M03wz7Kmo7CEU1THv4o+aCimWcee5nK
 XM52wolov1nnKCsZoKmBUHnyJKehTYCBd1ICMU75R2DjK3O7G6k6nMsSzdAbJkorsYwTjEh2
 1mVhdrtDC5rqOTKESvFru/K6zSvJSISMGkOIzceShcI6MXip4d1iQ/TStFkE+i+idid9SzML
 y6isCQwhowdvMMx3IqnwwDe02ur/cTXZ1tgjunIZV5J+D+Vc6aLXeSVBbXz6P9BKMOXVFCHt
 3UPls6C9ukKBIOJjHXSGLxVROn3ofGYLDfbnFhjWYE78Cig8GKieoYW5yxiIEBuMYAPfjqBj
 K7vVeF5u8I70JiCNPUfj2eN5yICkfGI+TPNDaG8Uza2SsItHDJrBQk3DaJq44wSrKTcufpkY
 8vEGSpdJXMbAr5g1z24W68W1qUzrh0DKZfobcmjlXyPiOPGDFbMEOttGAXUMogRsvjeyC2Lq
 Ik3Cid/40kFOAEISnWNqdZLRb3LRFBnba3LRzt/KbLdc1U5Rj97YxITqJt4E7FYc21uvr+g1
 hmAtoVwkjITWVWvxd22V01e
IronPort-HdrOrdr: A9a23:oStLZa7qZkRqGqwlNwPXwUKBI+orL9Y04lQ7vn2ZFiY5TiXIra
 qTdaogviMc0AxhIU3I6urwQJVoJkmsvaKdgLNhdItKMzOW3VdAQLsN0WKm+UyHJ8SczJ8X6U
 4DSdkbNDSYNzET4anHCUuDYrEdKbK8kJxA8N2urUuFOjsaCJ2IgT0ZNi+rVmlNACVWD5swE5
 SRouBdoSC7RHgRZsOnQlEYQunqvbTw5d/bSC9DIyRixBiFjDuu5rK/OQOfxA0iXzRGxqpn2X
 TZkjb++r6ov5iAu1PhPi7onttrcenau5p+7f+3+4gow/LX+0WVjbFaKvO/VfYO0aOSARgR4Z
 zxSlwbTr9OAjvqDxuISF3WqkPdOX8VmgPfIVP0uwqfneXpAD09EMZPnoRfb1/Q7Fchpsh11O
 ZR03uerIc/N2K1oM3R3am7a/hRrDvAnVMy1eoIy3BPW4oXb7Fc6YQZ4UNOCZ8FWCb38pouHu
 ViBNzVoK8+SyLtU1nJ+m10hNC8VHU6GRmLBkAEp8yOyjBT2HR01VERysATlmoJsJg9V55H7e
 LZNbkArsA4cuYGKaZmQOsRS8q+DWLABRrKLWKJOFziULoKPnrcwqSHk4ndJNvaCKDg4KFC6a
 gpCmkoylLaU3ied/Gz4A==
To: "v6ops@ietf.org" <v6ops@ietf.org>
Thread-Topic: I-D Action: draft-ietf-v6ops-nat64-wkp-1918-00.txt
Thread-Index: AQHcXZ9WvL8NS39DG0arld+ci7C6OLUC/IcQ
Date: Tue, 25 Nov 2025 08:09:33 +0000
Message-ID: 
 <PR0P264MB2885530FF243B2263618C51E88D1A@PR0P264MB2885.FRAP264.PROD.OUTLOOK.COM>
References: 
 <176402912041.2287400.16118192869450373390@dt-datatracker-5bd94c585b-wk4l4>
In-Reply-To: 
 <176402912041.2287400.16118192869450373390@dt-datatracker-5bd94c585b-wk4l4>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
msip_labels: 
 MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=962b745f-c6cc-4ac3-8dfb-287289284352;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2025-11-25T08:08:38Z;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20;MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Tag=10,
 0, 1,
 1;MSIP_Label_f47c794b-e3ab-43f0-9e0f-29fc3e503192_ContentBits=0;MSIP_Label_f47c794b-e3ab-43f0-9e0f-29fc3e503192_Enabled=true;MSIP_Label_f47c794b-e3ab-43f0-9e0f-29fc3e503192_Method=Standard;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PR0P264MB2885:EE_|PASP264MB5380:EE_
x-ms-office365-filtering-correlation-id: 223cfa40-c8a1-4f82-a168-08de2bf9f7f5
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: 
 BCL:0;ARA:13230040|1800799024|376014|366016|4022899009|38070700021|13003099007;
x-microsoft-antispam-message-info: 
 =?iso-8859-1?Q?Lez5wel57A98zazKVCvruRgDY3/B14xg8+DtI8rHsi/vMIETtIsfEeBMc4?=
 =?iso-8859-1?Q?PvK2wImfs35duB5N6EtnHUCUSwEwQHsqgi572Sg/ItA2E9+wh62o4zzNGP?=
 =?iso-8859-1?Q?0c0uU48jhfUAVAUirTYsNcpy/TdJwFnLfaaAVZorB6KGCuszPPAWwdKPIK?=
 =?iso-8859-1?Q?ibxxT0ZkbyXDKmIBnPQ1vxDlZqB8OIEs6bh7RVPoL7Ajo/Hbb3JEUvCuPd?=
 =?iso-8859-1?Q?ELM+HBDXQZ+4saBHNZgRsrvgwA3IhbsL8U4oL38H0Le3sdINbDvWHrX0D6?=
 =?iso-8859-1?Q?cLz76bMJh1PsrP4rY6bPMC1KyysynumB0/aMRp5AF6KHPxx+uZmLmrpCH3?=
 =?iso-8859-1?Q?3Yu/8zDCwbSK8XqP/BvNCzBQsfCtB5011djwwY5IOg8Kapnv/S4ZiNyAek?=
 =?iso-8859-1?Q?DdxwQ4nD26cjDi1SqUyfqV4WgAqIPFsl2QkJQ7Ghy5RXLI9SY/hRhjX4C8?=
 =?iso-8859-1?Q?a4LvyOEU6EFmeBJUDrLAIXaBgQ7025l0RKnRWfdZalattBGotLN/Xz1qnl?=
 =?iso-8859-1?Q?EfoITh/byOGqje1y+EZzru+jeu7SD4iMWb5UdwO9kywlrdV/cAwGCfPRUY?=
 =?iso-8859-1?Q?lDIMrNdX14XL2BNS3QS72lAv+yBBUjF4Rv2tPVAwEOT+wtfJ7AhD1AxMVs?=
 =?iso-8859-1?Q?952cB1AcwejHFfmXXDWNA10cQhYeQoxBuj1aG1NhSCve5ZCdtwGOT3SUfg?=
 =?iso-8859-1?Q?ggBNdFI/mCSzn8s0gmYtjyiJ+q3LXiA0Td06cPUyZMgXEUndR/tfHTDrgW?=
 =?iso-8859-1?Q?5Ns1oB+ZihjzbEuBAdte3kyKhWGDpX4iWusXWKyr4kTIgZKnzwx7TPHWho?=
 =?iso-8859-1?Q?/OJXl9u76/XxpocF18QCu6lBXELXKvAO1ODw1Ha4W1/v/BVNP4ROhNQ/tB?=
 =?iso-8859-1?Q?kQ1ggrlbHHJbcTaNpMazs1OzjEL9j8QEFdfwLw7aXKqtKqNi5AwOl/Aw1Y?=
 =?iso-8859-1?Q?+QrVPUubh5rbetRqcTyeW+UmcUaQFUb+nYHFmeYFa4s1TkszIaDh1NXHfN?=
 =?iso-8859-1?Q?G6WIUypeTS2BAiI53LJY9P4IpZjbziAmAetC+R2X5H4gdk5wUx+h1P0mds?=
 =?iso-8859-1?Q?8c+3BbUCFpewUhYg2Qvy1hdaKFACINUVj2iiFN+NMEw/fFWsyi8CyRgs+3?=
 =?iso-8859-1?Q?FGun6mrh3GRx9pU5XPm301vE1mcDm4h0eSdbGdKi87ADrif13vFHGqxeDl?=
 =?iso-8859-1?Q?KxfVfzHTV9J85iB5i0LHIQw6aWNsylBJav2X8L/e/4AeOoWrAdZdM7qxI7?=
 =?iso-8859-1?Q?EX+N55a8Q6ao0FsZJy6hA6n0neSA2ZkayX++hJ3fytMJ224oilffY2RAon?=
 =?iso-8859-1?Q?u/ePaAZRpQcWp+sBMp5xRAHMKgx5SDjG8hy+ZlZzmrXbZbbOs/gf4VbdXT?=
 =?iso-8859-1?Q?ISuhLhlWArQBdduB7KRjBs0X5JtgEG6lbKpgxn39fUlJODMQnncdzrbakQ?=
 =?iso-8859-1?Q?eE39SqFORTTLpg+yrYnXVAP9jfXM8h4PePGYCkER7mm5j7ax/wig1SaCQ9?=
 =?iso-8859-1?Q?b84ivTF52YBjuDhWyfCWw33GNrs4m+eTv5/DiLio3GggWip9G/Rum5x6vC?=
 =?iso-8859-1?Q?V+9q67IIxQnFXh/te9b/RKrP29/l?=
x-forefront-antispam-report: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PR0P264MB2885.FRAP264.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(4022899009)(38070700021)(13003099007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?iso-8859-1?Q?1TbkOGktKWOtAWD88Ol/2RgHOmlg+HqqcAhWbaKtO8W56l9t8HsGgsQiIi?=
 =?iso-8859-1?Q?yrj1nxY4oAvBVVEBPcCGxSaLELSA48K0Ap+YU5M31zLsbbVzqB8MDtQ6yT?=
 =?iso-8859-1?Q?i50m1fj48defJ77RUtPcju0H79VCSSovTKz6k8+FkM8h7x/VnYPB7TVLUk?=
 =?iso-8859-1?Q?YoIG4C4jCE03beWIoLDi2BQm3Uqb93+CGQbsuvHHpr7xKjljc8aWM5bx50?=
 =?iso-8859-1?Q?mH2BSpHVPKw6g5RL0ys7c1O7ddRVTLPQBKVogzXdg7khHZx0VEUNsYPlK6?=
 =?iso-8859-1?Q?W5HjGj1YYMeAavpCZvQl7TqPSylhUVsqqgwLNZAEzmXiblMkaYDvXapN5c?=
 =?iso-8859-1?Q?qRvPso8njGOdXxCLFmYx4bzyDjfwmI5gV96el/QS1ncqvx26DvqLSyv3A1?=
 =?iso-8859-1?Q?ctRUWzBdYjTM/WoQj6wIk1cbKrZ64OIpRB6VbsTZgtlkSJezfKg7mO3RIB?=
 =?iso-8859-1?Q?tmGlr44aC9P8B9lY/AqVGFJ6t7kkO/goYB3rlX9OmajrURSuk17NlrtevO?=
 =?iso-8859-1?Q?OKgqWHLvpHSGT0cXk7dcc9okeJo2rSf3qWT8AFavcsjMV/LkCJFuBjEwLG?=
 =?iso-8859-1?Q?Lr1eb3rHA9w1ID2R6Wg29xZSKDbyEk1e6LJv9tJ8KDjjtrXzUJ54GJv7f2?=
 =?iso-8859-1?Q?EoIZRTlVm4FU6pRhvnRytgN0qd43bMJYIBsnO9yjWFR3GzloUNYvWZmOkL?=
 =?iso-8859-1?Q?TvdZ1fV0Y8ArELNpiSu6TvRkR6UP5C3AOuzdEJf6fK6JuTYuq+IHsYtd1U?=
 =?iso-8859-1?Q?GkSqcPIz0MiCFJT4fXvkgJAIOzvvcAghh9AiMzrq7hkxVG29C/I5yAuu76?=
 =?iso-8859-1?Q?aPqGPJfoO1x5cSiSgA4lWyZ8mqpjRyiKN1cxC+giwjpt2m6HJjAJo4qsi3?=
 =?iso-8859-1?Q?46OaSCvfaNAvwCIzvwI1ar1v2WBL0AmL96BoJ4d235sGJPwE9M3bT9uXz0?=
 =?iso-8859-1?Q?kJla8AVcm/pUBNr9rGjDIHqDEmfLBTJQO/IpEEcb6cvmmelewtha+RPAKK?=
 =?iso-8859-1?Q?MFwfiSZdXv3oYMLlwz94B/xM3HGUkqc+v51oY/5q44OAalcfdkg5pVldof?=
 =?iso-8859-1?Q?/Esr5opZ1CG6KlJ5u/8/7OWtFEeb7lyK0NZ9wHONmxfsCWIUJMf5NqiZko?=
 =?iso-8859-1?Q?CudELtqfvl07AkYruD+Z8rmEdtECi4IcVIXKxba2t41I8f4bCHotMxn2xI?=
 =?iso-8859-1?Q?y8ast/MNUtsOkb2FSp6YysN7K4UiqudNaVCulEnRr93rgf4l5dsa6VEs47?=
 =?iso-8859-1?Q?SJtOtpnHZeu57w66fWrv98vj38cPC5AQcWryJnjz0Ms6yEKKgOZkqEIeYN?=
 =?iso-8859-1?Q?dxU31DesDuQhT8QMMQSdDbF02LO4L2rcozK2pgUv+2ZZp+gf7JuO7G+qpc?=
 =?iso-8859-1?Q?H5yee5sV57IW4j0Zr0AjcvggrYIjC6+og9HLmCsQlCN8MEHWxkDwjVbXQI?=
 =?iso-8859-1?Q?Y0k9Lo9qVRJjMR5TfGNAEUN0mWYCxmLvG60hN5EJpA28s2UbnChmOmhO2L?=
 =?iso-8859-1?Q?kjh/WYAbHH2BPl89YeOWQrwdwK3YrysMvh8IUkhdT/7qV3rsCSTIfs5suB?=
 =?iso-8859-1?Q?rPdZRCSWimqmXnpeJXTzOzbDt2Rx+llDc66yqlhS71O7q1+OLPUqPqpCfe?=
 =?iso-8859-1?Q?IzXLdEYVu48qPc+2TqwixFRg3S4icnMmG17e7cpC/M86ki7Q0Fsg7t5Q?=
 =?iso-8859-1?Q?=3D=3D?=
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
X-OriginatorOrg: orange.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PR0P264MB2885.FRAP264.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 223cfa40-c8a1-4f82-a168-08de2bf9f7f5
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Nov 2025 08:09:33.9769
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 90c7a20a-f34b-40bf-bc48-b9253b6f5d20
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 S9SIvsdJRtJVNfP0M/pP5EcN8I/gaU5BS/D1tmQuK8k4CLrSI2bRWYM899PYBv+ATEAyqDmuTGoZBpcJPKp8s1JRiUHQYcZvPPqUOk9m2ok=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PASP264MB5380
X-TM-AS-ERS: 10.218.35.127-127.5.254.253
X-TM-AS-SMTP: 1.0 c210cC1vdXQzNjUub3JhbmdlLmNvbQ== bW9oYW1lZC5ib3VjYWRhaXJAb
	3JhbmdlLmNvbQ==
X-TMASE-Version: DDEI-5.1-9.1.1004-29596.006
X-TMASE-Result: 10--36.208300-10.000000
X-TMASE-MatchedRID: u6ojmU07PKxjDV//SvkH3hqkhv3OdF4D1KDIlODIu+WbF6Cm2W6HcMPR
	dA5qc+XmhLCsz1venlJ1TtuvDQlC4kcqeUW++ct1Shw8vFddGdzYHmD3SW1IVqFIbih0s/42SCD
	KnwjRqQ7wgbNhrSwusLFqxZsubR0F8u0gop0C0VRH4a2iJdV4MQC0f97LzNGnemFtlEOlo/KD21
	xQYSxsWN4IkkgKkG682C3pEk/b+PwpnMg4QKKf2a5bb5QEYSkdJ4cwIYL6KufWVWrVA+8+Cd4ZY
	Zx9K0RF5jmTk07qyg0xio9hGLQilY/ic5fkE2hmdPuue3cRiRhpkBMYDn8FeMfASe7knCttqofG
	BlKqVGLRNn7c9rR+Oqloc6WqrZaZ/0dTUjHNqgkF7cpFXK76TT7BhvpELLyoSRIyY6RIQp/mZF6
	r3C1VDdaU7SyjFtvp+H3jVLHvYoEuGaDI5be0fvHkpkyUphL9wlaQxkFc/sPzKrH8v0dco1Uuse
	gvV0lIRsK3orktv3yNG6B2sxsg0u407XMquNtmBO00Q/2PQs/4qCLIu0mtIAnnZ4xTn7Kc3ofDF
	oBSX5/irSfB6ij0IH9zra8MQqOL1PRfm/Dv1Xy4V0/u9pqUzUl3rVD3hKjho5GtRdCjYefeEhc6
	QaUTi+LzNWBegCW2fyYDewMOrQB3M7/JzxffcRYTCmH3/plL+gtHj7OwNO2FR9Hau8GO7qfDnZd
	VcKQklExlQIQeRG0=
X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:0-0
X-TMASE-INERTIA: 0-0;;;;
X-TMASE-XGENCLOUD: NULL-NULL-7-0-1
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: FLZQX7QGXQUABIWAHH735H5RDHQXDLU7
X-Message-ID-Hash: FLZQX7QGXQUABIWAHH735H5RDHQXDLU7
X-MailFrom: mohamed.boucadair@orange.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5Bv6ops=5D_Re=3A_I-D_Action=3A_draft-ietf-v6ops-nat64-wkp-1918-00?=
	=?utf-8?q?=2Etxt?=
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/v6ops/d84K55aaCcWSNsBmPT6zYqB1Y8c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

Hi all, =


Please find below some comments, as contributor:

# We may remember that the restriction was part of the deployment guideline=
s, not main normative part to the algo

=3D=3DRFC 6052:
3.  Deployment Guidelines   <=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

3.1.  Restrictions on the Use of the Well-Known Prefix
=3D=3D=3D=3D=3D=3D=3D=3D

# Simplify the problem statement

I think that the problem statement can be simplified to basically ask for t=
he ability of an operator to control whether a given NAT64 instance can ser=
ve internal services reachable with private IPv4 addresses. Whether the sam=
e or distinct NAT64 instance is used is definitely deployment-specific.

I'm afraid the current text in the draft over-justify the need with some we=
ak arguments IMO. See examples below.

(1) Mention of CLAT is not justified here as source address (with private I=
Pv4) synthesis is done with the local prefix, not NAT64 one

CURRENT:
   However, this requirement introduces significant
   operational challenges for systems that do not rely on DNS64 and
   instead use local synthesis such as CLAT (Customer-side Translator,
   [RFC6877]), or similar approaches.

(2) Private IPv4 addresses and Public DNS64

CURRENT:
   Enterprise and other closed networks often require IPv6-only nodes to
   communicate with both internal (e.g., using RFC1918 addresses) and
   external (Internet) IPv4-only destinations.  The restriction in
   Section 3.1 of RFC6052 prevents such networks from utilizing the WKP
   and, consequently, from relying on public DNS64 servers which utilize
   the WKP in order to maximize compatibility.

I don't quite understand the deployment model here: this is mixing reaching=
 internal services (not to be leaked outside) and the use of a public infra=
structure. =


(3) Seems like an incomplete analysis:

CURRENT:
   According to Section 3 of [RFC7050], a node must use all learned
   prefixes when performing local IPv6 address synthesis.  Consequently,
   if a node discovers both the WKP and the NSP, it will use both
   prefixes to represent global IPv4 addresses.  This duplication
   significantly complicates security policies, troubleshooting, and
   other operational aspects of the network.

I think the more relevant section in rfc7050#section-5.1, which =


                      NAT64 "A" ----- IPv4-only servers in a data center
                     /
   IPv6-only node---<
                     \
                      NAT64 "B" ----- IPv4 Internet

                 Figure 2: NAT64s with IPv4 Address Ranges

                      NAT64 "A" ----- IPv4-only servers in a data center
                     /
   IPv6-only host---router
                     \
                       NAT64 "B" ----- IPv4 Internet

                  Figure 3: NAT64s with Assisting Router

Which requires some hack because of the 7050 approach. =


Things would be straightforward of the destination-based prefix was support=
ed.

# A proposal to relax the constraint to accommodate specific deployments wh=
ile keeping backward compatibility:

CURRENT:
   The Well-Known Prefix MAY be used to represent non-global IPv4
   addresses, such as those defined in [RFC1918] or listed in Section 3
   of [RFC5735].  By default, address translators MUST translate packets
   in which an address is composed of the Well-Known Prefix and a non-
   global IPv4 address; they MUST NOT drop these packets unless
   configured to do so.

NEW:
   By default, the Well-Known Prefix MUST NOT be used to represent non-glob=
al IPv4
   addresses, such as those defined in [RFC1918] or listed in Section 3
   of [RFC5735]. In such case, address translators MUST NOT translate packe=
ts in
   which an address is composed of the Well-Known Prefix and a non-
   global IPv4 address; they MUST drop these packets. Translators SHOULD
   provide a configuration parameter to enable representing non-global IPv4
   addresses using WKP.

# Need to call out operational implications of relaxing the restriction

There are cautions that we need to call out, such as:

* risk of leak of internal information outside a domain,
* risk of forwarding errors with overlapping ranges
* Need for policies when the same instance is used for both internal and ex=
ternal realms

Hope this helps.

Cheers,
Med (no AD fez)

> -----Message d'origine-----
> De=A0: internet-drafts@ietf.org <internet-drafts@ietf.org>
> Envoy=E9=A0: mardi 25 novembre 2025 01:05
> =C0=A0: i-d-announce@ietf.org
> Cc=A0: v6ops@ietf.org
> Objet=A0: I-D Action: draft-ietf-v6ops-nat64-wkp-1918-00.txt
> =

> =

> Internet-Draft draft-ietf-v6ops-nat64-wkp-1918-00.txt is now
> available. It is a work item of the IPv6 Operations (V6OPS) WG of
> the IETF.
> =

>    Title:   NAT64 WKP
>    Authors: Warren Kumari
>             Jen Linkova
>    Name:    draft-ietf-v6ops-nat64-wkp-1918-00.txt
>    Pages:   7
>    Dates:   2025-11-24
> =

> Abstract:
> =

>    This document removes the requirement introduced in Section 3.1
> of
>    RFC6052 that the NAT64 Well-Known Prefix 64:FF9B::/96 MUST NOT
> be
>    used to represent non-global IPv4 addresses, such as those
> defined in
>    [RFC1918] or listed in Section 3 of [RFC5735].
> =

> The IETF datatracker status page for this Internet-Draft is:
> https://fra01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2F
> datatracker.ietf.org%2Fdoc%2Fdraft-ietf-v6ops-nat64-wkp-
> 1918%2F&data=3D05%7C02%7Cmohamed.boucadair%40orange.com%7C6e5bfc6df7
> 22489f1c3008de2bb677c3%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%
> 7C638996259852248150%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRyd
> WUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%
> 3D%3D%7C0%7C%7C%7C&sdata=3DPDUVs3RVt0G8ZCJ5t1mMoyr7AoPaGk005F0GB%2Be
> LzOw%3D&reserved=3D0
> =

> There is also an HTML version available at:
> https://fra01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2F
> www.ietf.org%2Farchive%2Fid%2Fdraft-ietf-v6ops-nat64-wkp-1918-
> 00.html&data=3D05%7C02%7Cmohamed.boucadair%40orange.com%7C6e5bfc6df7
> 22489f1c3008de2bb677c3%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%
> 7C638996259852278079%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRyd
> WUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%
> 3D%3D%7C0%7C%7C%7C&sdata=3DGrW%2BM4uLXqpzm8GZhkPKtMREmFvrY3GsFofbttJ
> Bz6g%3D&reserved=3D0
> =

> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> =

> =

> _______________________________________________
> I-D-Announce mailing list -- i-d-announce@ietf.org To unsubscribe
> send an email to i-d-announce-leave@ietf.org
___________________________________________________________________________=
_________________________________
Ce message et ses pieces jointes peuvent contenir des informations confiden=
tielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu=
 ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el=
ectroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou =
falsifie. Merci.

This message and its attachments may contain confidential or privileged inf=
ormation that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and dele=
te this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been =
modified, changed or falsified.
Thank you.