WrapSix is a NAT64. It’s implemented in userspace, currently only for Linux. There isn’t any dependency on external library (currently, may change later).

So far it’s the fastest available software implementation of NAT64 – faster than kernelspace Ecdysis, faster than userspace stateless Tayga.


Latest version: wrapsix-0.2.1.tar.bz2
SHA256 checksum: 8f2496dc68210a7f617c196b77ba6de548c5fc8bd0f90a66f6c9e0ec1451696e
SHA512 checksum: efac69a470e83cb585ad5649a782c6b42bb2d577e9a1ec5b9787a0eb19162c332d417a7d6767f8db8268dfc3e42a83c503dd4e656409f26a913b6619e25a6dd9

You can also download WrapSix from its git repository: git clone https://github.com/xHire/wrapsix.git.


So far I know about the following packages people made (thanks!):

(They are old, though.)

Installation and configuration

WrapSix doesn’t depend on any external library. These instructions are also included in the README file.


For installation use standard ./configure && make && make install commands.


The sample configuration file is well commented and should be self-explanatory. If you need more help, contact me—ideally over IRC.


NAT64 can be run by wrapsix command as root. Path to the configuration file can be specified as an argument, e.g., wrapsix /etc/wrapsix-test.conf.



WrapSix doesn’t include DNS64, therefore you need to run other software to provide it to the network, e.g. BIND provides good and working implementation of DNS64.

BIND can be configured in the following way—example of a minimalistic /etc/named.conf:

options {
	listen-on { none; };
	listen-on-v6 { any; };
	recursion yes;
	dns64 64:ff9b::/96 {};

unbound is similarly simple—these two options are needed in /etc/unbound/unbound.conf:

	module-config: "dns64 validator iterator"
	dns64-prefix: 64:ff9b::/96

Author and contact

Author is xHire <xhire -at- wrapsix.org>. You can also contant me on IRC channel #wrapsix on freenode.net. Remember: I love to hear your feedback! :c)


WrapSix is being developed under GNU GPLv3 licence.

What is NAT64?

Very simply said: NAT64 is a mechanism that makes it possible to communicate with IPv4-only servers from an IPv6-only network.