Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  


Welcome to Hurricane Electric's forums!

Author Topic: Are there any public NAT64 nodes?  (Read 3256 times)


  • Newbie
  • *
  • Posts: 11
Are there any public NAT64 nodes?
« on: August 19, 2016, 05:32:06 PM »

In this new day do these exist or have they all been ended (from what I can assume is abuse).


  • Newbie
  • *
  • Posts: 18
Re: Are there any public NAT64 nodes?
« Reply #1 on: August 23, 2016, 03:34:34 AM »

a long time ago Andrews And Anorld Ltd had a dns64 gateway which was reacable from  (2001:8b0:6464::1 and 2001:8b0:6464::2). I haven't checked lately if it still still operating for current tunnels:


  • Jr. Member
  • **
  • Posts: 76
Re: Are there any public NAT64 nodes?
« Reply #2 on: April 13, 2019, 09:55:31 AM »

There's still running since 2013. Works fine, albeit not the fastest. But perfect for testing, I'd say. Since they're using a public prefix, just set their DNS64 in your IPv6-only network as your DNS-resolver and you're good to go!

Though remember: all unencrypted traffic will pass their node unencrypted!


  • Founder, Netiter ApS
  • Hero Member
  • *****
  • Posts: 953
Re: Are there any public NAT64 nodes?
« Reply #3 on: December 03, 2019, 03:00:30 PM »

I don't know if the A&A NAT64 was a public NAT64 at some point. But these days it's not. Even for their own customers the NAT64 was not particular reliable, which I find a bit odd for an otherwise excellent ISP.

Of still operational public NAT64s I knew of only and of which the TREX NAT64 was the most reliable even though it only had a single NAT64 prefix compared to the four which Go6lab has.

I eventually wrote a health checker that one can run along with a BIND DNS server to achieve redundancy across multiple NAT64 prefixes:

Finally I took this futher and implemented my own public DNS64+NAT64 service:

Unlike the others I have redundancy across four geographical locations and two hosting providers. Each of my DNS64 health checks the NAT64 prefixes to ensure it's handing out AAAA records for NAT64s that are operational.

Unlike other NAT64 mine does not let you completely hide your real IPv6 address. I hope that will help prevent abuse. I also have a few other tricks up my sleeve to deal with abuse.