Netskope Publisher - CoreDNS Documentation

Welcome to the documentation for the Netskope NPA Publisher with CoreDNS integration. This site covers deployment, configuration, and troubleshooting for publishers using CoreDNS as the DNS backend.

Sections

IPv6 (NAT46/DNS46)

Deploy and configure IPv6 support for NPA publishers using DNS46 technology. This enables publishers to provide access to IPv6-only private applications for IPv4 clients through transparent DNS-based address translation.

• Installation - Bootstrap a publisher with IPv6 support on Ubuntu 22.04
• Wizard Configuration - Configure NAT46 through the interactive wizard
• Validation - Verify your deployment is working correctly
• Technology Guide - Understand how DNS46 and NAT46 work under the hood
• Troubleshooting - Diagnose and fix common issues

Architecture

The NPA Publisher uses CoreDNS as its sole DNS backend, built from source with the nat46 plugin for IPv4/IPv6 address translation. The publisher runs inside a Docker container with privileged access for TUN interface and iptables management.

Client -> Stitcher -> Publisher (tun0) -> CoreDNS (nat46) -> Private Application