--- ip addr show --- 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 52:54:00:b2:24:03 brd ff:ff:ff:ff:ff:ff altname enp1s0 inet 172.31.255.2/24 brd 172.31.255.255 scope global noprefixroute eth0 valid_lft forever preferred_lft forever inet6 fe80::5054:ff:feb2:2403/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 52:54:00:13:7f:91 brd ff:ff:ff:ff:ff:ff altname enp2s0 inet6 2620:cf:cf:fc00::2/64 scope global noprefixroute valid_lft forever preferred_lft forever inet6 fe80::5054:ff:fe13:7f91/64 scope link noprefixroute valid_lft forever preferred_lft forever 4: nat64: mtu 1500 qdisc fq_codel state UP group default qlen 500 link/none inet 127.0.1.254/32 scope host noprefixroute nat64 valid_lft forever preferred_lft forever inet6 2620:cf:cf:fc00::3/128 scope global noprefixroute valid_lft forever preferred_lft forever inet6 fe80::a812:711e:e117:11f8/64 scope link noprefixroute valid_lft forever preferred_lft forever --- ip -4 route show --- default via 172.31.255.1 dev eth0 proto static metric 100 172.31.255.0/24 dev eth0 proto kernel scope link src 172.31.255.2 metric 100 192.168.255.0/24 dev nat64 proto static scope link metric 450 --- ip -6 route show --- ::1 dev lo proto kernel metric 256 pref medium 2620:cf:cf:fc00::3 dev nat64 proto kernel metric 450 pref medium 2620:cf:cf:fc00::/64 dev eth1 proto kernel metric 101 pref medium 2620:cf:cf:fcff::/96 dev nat64 proto static metric 450 pref medium fe80::/64 dev eth0 proto kernel metric 256 pref medium fe80::/64 dev eth1 proto kernel metric 1024 pref medium fe80::/64 dev nat64 proto kernel metric 1024 pref medium default via 2620:cf:cf:fc00::1 dev eth1 proto static metric 101 pref medium --- /etc/resolv.conf --- ; Created by cloud-init automatically, do not edit. ; nameserver 172.31.255.1 --- NetworkManager system-connections --- --- /etc/NetworkManager/system-connections/ens3.nmconnection --- [connection] id=ens3 uuid=c61882ed-4f3b-486f-b93c-46b376789cb7 type=ethernet interface-name=ens3 [ethernet] [ipv4] method=auto [ipv6] addr-gen-mode=eui64 method=auto [proxy] --- /etc/NetworkManager/system-connections/nat64.nmconnection --- [connection] id=nat64 type=tun autoconnect=true interface-name=nat64 [tun] pi=true [ipv4] address1=127.0.1.254/32 route1=192.168.255.0/24 method=manual [ipv6] addr-gen-mode=default address1=2620:cf:cf:fc00::3/128 route1=2620:cf:cf:fcff::/96 method=manual [proxy] --- systemctl status unbound.service --- ● unbound.service - Unbound recursive Domain Name Server Loaded: loaded (/usr/lib/systemd/system/unbound.service; enabled; preset: disabled) Active: active (running) since Tue 2025-10-07 17:31:24 EDT; 39s ago Process: 1232 ExecStartPre=/usr/sbin/unbound-checkconf (code=exited, status=0/SUCCESS) Process: 1233 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_UNBOUND_ANCHOR" == "yes" ] && [ ! -f /run/unbound/anchor-disable ]; then /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem -f /etc/resolv.conf -R; else echo "Updates of root keys with unbound-anchor is disabled"; fi (code=exited, status=0/SUCCESS) Main PID: 1235 (unbound) Tasks: 1 (limit: 9866) Memory: 18.3M (peak: 20.7M) CPU: 95ms CGroup: /system.slice/unbound.service └─1235 /usr/sbin/unbound -d Oct 07 17:31:24 nat64-appliance systemd[1]: Starting Unbound recursive Domain Name Server... Oct 07 17:31:24 nat64-appliance unbound-checkconf[1232]: unbound-checkconf: no errors in /etc/unbound/unbound.conf Oct 07 17:31:24 nat64-appliance unbound[1235]: [1759872684] unbound[1235:0] warning: Systemd mandatory ENV variable is not defined: LISTEN_PID Oct 07 17:31:24 nat64-appliance unbound[1235]: [1759872684] unbound[1235:0] warning: Systemd mandatory ENV variable is not defined: LISTEN_PID Oct 07 17:31:24 nat64-appliance unbound[1235]: [1235:0] notice: init module 0: dns64 Oct 07 17:31:24 nat64-appliance unbound[1235]: [1235:0] notice: init module 1: validator Oct 07 17:31:24 nat64-appliance unbound[1235]: [1235:0] notice: init module 2: iterator Oct 07 17:31:24 nat64-appliance systemd[1]: Started Unbound recursive Domain Name Server. Oct 07 17:31:24 nat64-appliance unbound[1235]: [1235:0] info: start of service (unbound 1.16.2). --- systemctl status nat64-v4-dnsmasq.service --- ● nat64-v4-dnsmasq.service - DHCP and DNS for IPv6 NAT64 lab (IPv4 service) Loaded: loaded (/usr/lib/systemd/system/nat64-v4-dnsmasq.service; enabled; preset: disabled) Active: active (running) since Tue 2025-10-07 17:31:23 EDT; 40s ago Docs: man:dnsmasq(8) Main PID: 1175 (dnsmasq) Tasks: 1 (limit: 9866) Memory: 1.5M (peak: 2.0M) CPU: 8ms CGroup: /system.slice/nat64-v4-dnsmasq.service └─1175 /usr/local/sbin/dnsmasq --keep-in-foreground --conf-file=/etc/nat64/v4-dnsmasq/dnsmasq.conf --pid-file=/run/nat64-v4-dnsmasq.pid Oct 07 17:31:23 nat64-appliance systemd[1]: Started DHCP and DNS for IPv6 NAT64 lab (IPv4 service). Oct 07 17:31:23 nat64-appliance dnsmasq[1175]: started, version 2.89 cachesize 1000 Oct 07 17:31:23 nat64-appliance dnsmasq[1175]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-nftset auth no-cryptohash no-DNSSEC loop-detect inotify dumpfile Oct 07 17:31:23 nat64-appliance dnsmasq[1175]: reading /etc/resolv.conf Oct 07 17:31:23 nat64-appliance dnsmasq[1175]: using nameserver 172.31.255.1#53 Oct 07 17:31:23 nat64-appliance dnsmasq[1175]: cleared cache Oct 07 17:31:25 nat64-appliance dnsmasq[1175]: failed to create listening socket for 127.0.2.254: Address already in use --- systemctl status nat64-v6-dnsmasq.service --- ● nat64-v6-dnsmasq.service - DHCP and DNS for IPv6 NAT64 lab (IPv6 service) Loaded: loaded (/usr/lib/systemd/system/nat64-v6-dnsmasq.service; enabled; preset: disabled) Active: active (running) since Tue 2025-10-07 17:31:23 EDT; 40s ago Docs: man:dnsmasq(8) Main PID: 1183 (dnsmasq) Tasks: 1 (limit: 9866) Memory: 1.1M (peak: 1.6M) CPU: 9ms CGroup: /system.slice/nat64-v6-dnsmasq.service └─1183 /usr/local/sbin/dnsmasq --keep-in-foreground --conf-file=/etc/nat64/v6-dnsmasq/dnsmasq.conf --pid-file=/run/nat64-v6-dnsmasq.pid Oct 07 17:31:23 nat64-appliance systemd[1]: Started DHCP and DNS for IPv6 NAT64 lab (IPv6 service). Oct 07 17:31:23 nat64-appliance dnsmasq[1183]: started, version 2.89 cachesize 1000 Oct 07 17:31:23 nat64-appliance dnsmasq[1183]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-nftset auth no-cryptohash no-DNSSEC loop-detect inotify dumpfile Oct 07 17:31:23 nat64-appliance dnsmasq[1183]: using nameserver ::1#53 Oct 07 17:31:23 nat64-appliance dnsmasq[1183]: cleared cache