Re: [v6ops] DNS64/Thread RE: WG call for adoption: draft-momoka-v6ops-ipv6-only-resolver-01
Gert Doering <[email protected]>
| Newsgroups | gmane.ietf.dnsop,gmane.ietf.v6ops |
|---|---|
| Message-ID | <ZK0E7f/[email protected]> |
Hi,
On Tue, Jul 11, 2023 at 10:04:38AM +1000, Mark Andrews wrote:
> I think the issue is that NAT64 is being used to reach internal IPv4 addresses
> (e.g. RFC 1918) so the traffic needs to go through a NAT64 that can reach those
> addresses.
If you do that (which is a nice way to leverage IPv6 to work around
duplicate use of private network segments, by having a NAT64 gateway
for each), then you really do not want to use "arbitrary DNS64" resolvers,
but maybe have the NAT64 address right in the internal DNS, for
v6-enabled clients...
But yes, just setting up random NAT64 and DNS64 boxes and hoping for
magic to do the right thing might not work out very well.
Gert Doering
-- NetMaster
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEruB5jRHVM+CjiYD131bAZeTOf8UFAmStBOoACgkQ31bAZeTO f8V0Hw/9FvZ5O0CxSfg0D55nHH4oPBK2CsszyxKf4CmEYd8lCTJsmANPn3Q2i2aW OTJVcICVeTIeyhJEwA5OI/G6FFTqecfdCX0hEyO+QuTZ/EmNEgpaEBznZ1YFGlKk LmjNeaehbGhVqdMaw3IVNT1HfYgxEnm6/ot3TOSSpcdiYmPQb0k24KIht/s4WNef qlBfToshIzeQVuPNdN8FuhPlnmMMvZJ5ay+fKSM43N1WDuXs+ZVBcwgCtwElR7IU n1bTLBn+cpCD8TWRfw1R71WcpkZGJkMkXNINRjuF14YWTKkp3acjbgvGckvUQOjT 5HLs/SZY22npVivPaZul+qmui+Ky24keOCSCohfDmkDALIuiMEdmAXHPi5I3FpO+ RQzxvP3P6RxVFV5VPZtWSCgpEJs7eDbeb4CuPBfGPMbzjrKSQv3e31yijz/cvqg+ IYsXcBqxKliiiU09TDRItnwe6wKWxGkpzKpx7QHGIdawqUHzwSyvPxbAy2jIsFLt m9vmA1aflERd/WaeLVQGKpzFr9Fs/qk64SodS6ZOMMc4guVHkxlpFyZuOKrDvJYz 6Kx25/zwtYCQP1yIjS8MamBwXB1+5FTRieQlGuEvaze7e17OcZtO/luRBx6D3LgV O5eQfp0Y9Uw9SjNkUCUlf8l7Qnrv/oTG+nNtjUENBSSHFqCQBbg= =Ndc/ -----END PGP SIGNATURE-----