Skip to Content

Seamlessly Connecting IPv6-Only Workloads to IPv4 in Google Cloud

Enabling IPv6-Only Networks with DNS64 and NAT64

As the shift to scalable cloud architectures accelerates, organizations are grappling with the challenge of supporting both IPv4 and IPv6 environments. While new deployments often use IPv6 to future-proof their networks, many essential applications remain tied to IPv4 infrastructure. This creates a critical connectivity gap: how can IPv6-only systems access vital IPv4 resources without complex overhauls?

Enabling IPv6-Only Networks with DNS64 and NAT64

Google Cloud addresses this challenge with DNS64 and NAT64 as part of its Cross-Cloud Network solution. These services allow businesses to implement IPv6-only environments while maintaining uninterrupted connectivity to legacy IPv4 applications. This approach streamlines the transition and removes the urgency for immediate, large-scale migrations.

  • DNS64 dynamically generates IPv6 addresses from IPv4 DNS records, letting IPv6-only workloads attempt direct connections over IPv6 first.

  • NAT64 bridges the protocol divide by translating traffic between IPv6-only clients and IPv4 destinations, ensuring smooth interoperability.

  • This strategy enables organizations to operate single-stack IPv6 networks while gradually migrating off IPv4, minimizing disruption.

  • It also helps relieve pressure from IPv4 address shortages and supports incremental, manageable IPv6 adoption.

How DNS64 and NAT64 Work in Tandem

The collaborative process begins when an IPv6-only workload initiates a DNS query. If an IPv6 (AAAA) record exists, direct communication occurs. If not, DNS64 retrieves the IPv4 (A) record and synthesizes an IPv6 address using the standardized 64:ff9b::/96 prefix. The NAT64 gateway recognizes this prefix, extracts the embedded IPv4 address, and routes traffic to the correct destination. Replies are translated back, ensuring fast, bidirectional communication.

This mechanism is essential for:

  • Deploying IPv6-only networks without sacrificing access to IPv4 content and services

  • Supporting phased migration plans where legacy systems remain on IPv4 during transition

  • Maintaining business operations throughout the industry’s gradual move to IPv6

Quick Start: Implementing DNS64 and NAT64 on Google Cloud

Setting up these services is straightforward. The process consists of three main steps:

  1. Provision network resources: Create a VPC, define IPv6-only subnets, deploy virtual machines, and set up appropriate firewall rules.

  2. Activate DNS64: Configure a DNS64 server policy in your network to synthesize IPv6 addresses as necessary during DNS lookups.

  3. Deploy a NAT64 gateway: Utilize Google Cloud’s Cloud Router to set up a NAT64 gateway, facilitating traffic translation between IPv6 and IPv4 endpoints.

With these components in place, IPv6-only workloads in Google Cloud can seamlessly access both IPv6 and IPv4 applications, requiring no changes to existing apps.

Confidently Navigating the IPv6 Transition

By introducing DNS64 and NAT64, Google Cloud enables organizations to bridge the IPv6-IPv4 divide efficiently. This solution allows for incremental migration, addresses IPv4 exhaustion, and ensures continuous access to critical services. Ultimately, businesses can future-proof their networks and maintain operational continuity as the internet ecosystem evolves. For in-depth setup instructions and best practices, review the official Google Cloud documentation.

Source: Google Cloud Blog – Connecting IPv6-only workloads to IPv4 using DNS64 and NAT64

Seamlessly Connecting IPv6-Only Workloads to IPv4 in Google Cloud
Joshua Berkowitz September 21, 2025
Views 77
Share this post