After reading https://go6.si/wp-content/uploads/2020/10/RIPE554-bis-v_01.pdf I see VPNs as part of the Network Security Equipment. But in my opinium there is not enough definition to be a VPN quality criteria. VPN external Protocol Must support IPv6 clients to IPv6 servers (6-to-6) ( Ipv6 Only) VPN external Protocol Must support IPv4 clients to IPv4 servers (4-to-4) (Ipv4 only) Transport inside of VPN VPN inner Protocol Must support IPv6 clients to IPv6 servers (6-to-6) VPN inner Protocol Must support IPv4 clients to IPv4 servers (4-to-4) VPN inner Protocol should support Dual stack. VPN inner Protocol should support 4in6 6in4 (transition protocols) The Idea from wireguard is maybe also a should the external protocol switch from Ipv6 to Ipv4 or Ipv4 to Ipv6 then the inner protocol should stay connected. Protocols with DNS64/NAT64 support would also help. maybe it fist into this recommendation document. -- --- best regards Christian Bretterhofer Enterprise User:
Am 28.10.20 um 22:09 schrieb christian bretterhofer:
After reading https://go6.si/wp-content/uploads/2020/10/RIPE554-bis-v_01.pdf I see VPNs as part of the Network Security Equipment. But in my opinium there is not enough definition to be a VPN quality criteria.
Protocols with DNS64/NAT64 support would also help. maybe it fist into this recommendation document.
I think that is already covered by VPN external Protocol Must support IPv6 clients to IPv6 servers (6-to-6) ( Ipv6 Only) and VPN inner Protocol Must support IPv6 clients to IPv6 servers (6-to-6) Maybe it should be mentioned the every day problems called "... leaks" ... IPv6, DNS (also important, if DNS64 is in use) and IPv4 Regards, Thomas -- There’s no place like ::1 Thomas Schäfer (Systemverwaltung) Ludwig-Maximilians-Universität Centrum für Informations- und Sprachverarbeitung Oettingenstraße 67 Raum C109 80538 München ☎ +49/89/2180-9706 ℻ +49/89/2180-9701
On 29/10/20 05:55, Thomas Schäfer wrote:
Am 28.10.20 um 22:09 schrieb christian bretterhofer:
After reading https://go6.si/wp-content/uploads/2020/10/RIPE554-bis-v_01.pdf I see VPNs as part of the Network Security Equipment. But in my opinium there is not enough definition to be a VPN quality criteria.
Protocols with DNS64/NAT64 support would also help. maybe it fist into this recommendation document.
I think that is already covered by VPN external Protocol Must support IPv6 clients to IPv6 servers (6-to-6) ( Ipv6 Only) and VPN inner Protocol Must support IPv6 clients to IPv6 servers (6-to-6)
Maybe it should be mentioned the every day problems called
"... leaks"
FWIW, if you need a ref: RFC7359 Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
participants (3)
-
christian bretterhofer
-
Fernando Gont
-
Thomas Schäfer