Port Number Exhaustion of a 464XLAT Implementation in a Virtual Environment

There are several IPv6 translation technologies, and we chose one of them, 464XLAT. In this paper, we focused on how we can perform a successful DoS (Denial of Service) attack and exhaust the available port number range on one of its components, the provider-side translator (PLAT). To achieve this, we built a testbed using virtual machines. We implemented the client-side translator (CLAT) with Tayga software and used a combination of Tayga and the Netfilter framework for the provider-side translator (PLAT). We measured the limitations of our testbed and carried out successful tests using a DNS query generator program, dns64perf++, thus exhausting the port number range on the PLAT.