News for hackers. Stuff that matters.
Re:Stateless Kubernetes overlay networks with IPv6 by shred45 on Saturday February 20, 2021 @09:48AM (#26204454)
This is really great, I remember the original post and had made a note to look into it myself but never got the chance.

In the third paragraph of the first section you mention the "Toledo" protocol out of the blue. Is this a result of autocorrect?

Thanks for writing this up!

Re:Stateless Kubernetes overlay networks with IPv6 by Dagger2 on Saturday February 20, 2021 @10:44AM (#26204935)
Terado, Toredo, Terredo, Tedero, Toledo, Tereo, Taredo... it gets misspelt a lot for some reason. (Yes, I've seen all of those in the wild.)

Not that there's any Teredo going on in the article...

Re:Stateless Kubernetes overlay networks with IPv6 by jmillikin on Saturday February 20, 2021 @04:42PM (#26208243)

  > Not that there's any Teredo going on in the article...
I'm not sure exactly what you mean, but note that using 6to4 with FOU produces packets that are exactly the Teredo protocol. This is why some packet analysis tools (for example Wireshark) are able to recognize the UDP-encapsulated packet as IPv6-in-UDP.
Re:Stateless Kubernetes overlay networks with IPv6 by Dagger2 on Monday February 22, 2021 @02:33AM (#26221799)
Teredo involves 2001:0::/32, Teredo servers and Teredo relays; connections over Teredo involve doing things like NAT traversal and asking the Teredo server to send a ping on your behalf to the target IP first. Teredo might use IPv6-in-UDP packets but that doesn't mean that every instance of IPv6-in-UDP is Teredo.

Since you're not using 2002::/16 it's not 6to4 either. It's 6rd, except tunnelling 6rd's 6in4 packets over UDP makes it incompatible with that. I was going to suggest "6rd-UDP" but https://tools.ietf.org/html/draft-lee-softwire-6rd-udp-02 exists/existed and it's different, so maybe something else.

Re:Stateless Kubernetes overlay networks with IPv6 by sidpatil on Saturday February 20, 2021 @01:31PM (#26206521)
Toledo is a large city in the midwestern region of the US, so it's likely that more people have heard of it than they have Teredo.
Re:Stateless Kubernetes overlay networks with IPv6 by jmillikin on Saturday February 20, 2021 @04:40PM (#26208234)
Not autocorrect, just neurons misfiring -- fixed.