Print Page - NAT64 Support via af-to

Title: NAT64 Support via af-to
Post by: excavator fidelity on July 23, 2026, 06:50:56 AM

OPNsense 26.7 is now on FreeBSD 15.1, which means pf now supports the af-to option (manpage (https://man.freebsd.org/cgi/man.cgi?query=pf.conf&apropos=0&sektion=5&manpath=FreeBSD+15.0-STABLE&arch=default&format=html)).
Currently the only way to perform NAT64 is to use Tayga, but that runs in userspace via TUN.

It would be great if OPNsense would add the ability to configure af-to rules in the OPNsense firewall > NAT page.
That would allow users to migrate off of Tayga and hopefully improve the speed of translation.

Possibly relevant prior discussion: https://forum.opnsense.org/index.php?topic=50096.msg256170#msg256170

Title: Re: NAT64 Support via af-to
Post by: Monviech (Cedrik) on July 23, 2026, 06:52:03 AM

https://github.com/opnsense/core/issues/10570

Title: Re: NAT64 Support via af-to
Post by: excavator fidelity on July 23, 2026, 07:16:16 AM

Quote from: Monviech (Cedrik) on Today at 06:52:03 AMhttps://github.com/opnsense/core/issues/10570

Thanks! I'll be sure to follow the technical discussion there

OPNsense Forum

English Forums => General Discussion => Topic started by: excavator fidelity on July 23, 2026, 06:50:56 AM