Opened 4 months ago

Closed 4 months ago

#1193 closed defect (pending)

Using PIA causes drop of ietf-nat64

Reported by: john.lemon@… Owned by: panda@…
Priority: minor Milestone: ietf-100
Component: nat64 Keywords: VPN PIA
Cc: Clemens, Schrimpe, <csch@…> My Current Location: Canning
My MAC Address: 60:33:4b:21:db:5c My OS: macOS 10.12.6


If I am connected to BSSID ietf-nat64 and then bring up a VPN tunnel using Private Internet Access (PIA), I lose connection to ietf-net64 and can't get it back again. I have no problem using BSSID ietf.

Change history (3)

comment:1 Changed 4 months ago by llynch@…

Cc: Clemens Schrimpe <csch@…> added

Thanks for trying the NAT64 network (SSID ietf-nat64) and reporting
your experience. As far as we can tell, the issue you reported is
either an issue of the NAT64 implementation's handling of that
specific traffic or the given application vendor's implementation.
We're collecting all the issues that come up and will pass the
reports back to the vendor at the end of the week. Hopefully this
will lead to better implementations and greater functionality for
the next meeting. If you're curious about other known issues,
please see

If you have additional input on this issue please update the ticket,
if you see new issues please open additional tickets.

Also see:
for a list of known issues!

Thanks -

comment:2 Changed 4 months ago by john.lemon@…

I researched this a bit more and found that it is definitely an issue with my VPN. They purposely disable IPv6 when initiating a tunnel. They claim: "Unfortunately, most VPN software fails to direct IPv6 traffic through the VPN tunnel, so when you connect to an IPv6 enabled website, your browser will make an IPv6 DNS request outside the VPN, which is therefore handled by your ISP. Private Internet Access offers IPv6 Leak Protection by disabling IPv6 traffic while on the VPN. This ensures that no IPv6 traffic leaks out over your normal internet connection when you are connected to the VPN."

On the slight chance that you want to see their statement on why they block IPv6, see

comment:3 Changed 4 months ago by panda@…

Resolution: pending
Status: newclosed

Thank you for reporting additional information. I filed your issue in the list of the known issues of NAT64:, and I'm closing this ticket.

Thank you.

Note: See TracTickets for help on using tickets.