nat64-relay - Tailscale-based Split DNS with NAT64 Relay
Route specific suffix domains through relay nodes while maintaining direct connections for normal domains
Tags
Updated: 2026-02-23Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Configure split DNS
- Create NAT64 translation
- Advertise routes
- Listen DNS queries
- Set up masquerade rules
Inputs
- Split domain suffix
- Tailscale edge node IP
- Upstream DNS server
- Target domain suffix
- NAT64 IPv6 prefix
- NAT64 IPv4 address pool
- Overlay interface name
- Advertised route prefix
Outputs
- DNS responses with AAAA records
- Route advertisements
- IPv6 to IPv4 translation
- Forwarded network traffic
Requirements
- Tailscale control plane access
- Unbound DNS server
- Tayga NAT64 software
- Nftables firewall
- Root/admin privileges
- IPv4/IPv6 forwarding enabled
