Re: [DNSOP] AD sponsoring draft-cheshire-sudn-ipv4only-dot-arpa

I agree that users changing DNS is a problem, but as said in my previous email the alternative is forcing DHCPv6 (and an option for that) as a MUST for any IPv6 implementation, or forcing a MUST for PCP support, so then RFC7225 can be used.

I see both of those two options as a utopia right now.

Operators should try to avoid impact on DNS changed by users, and the best way to sort that problem (in a bigger % of cases) is making sure that if DNS64 is not used, it still works, which means supporting CLAT.

I think I've described the case for that in draft-ietf-v6ops-nat64-deployment.

Another possible alternative is also to tell the host implementations that if they can't find a NAT64 prefix using RFC7050, they should try with the WKP 64:ff9b::/96.

May be is something to consider in draft-ietf-6man-rfc6434-bis ?

Regards,

Jordi

-----Mensaje original-----

De: DNSOP <dnsop-bounces@ietf.org> en nombre de Philip Homburg <pch-dnsop-3@u-1.phicoh.com>

Fecha: viernes, 6 de julio de 2018, 11:00

Para: <dnsop@ietf.org>

Asunto: Re: [DNSOP] AD sponsoring draft-cheshire-sudn-ipv4only-dot-arpa

    In your letter dated Fri, 6 Jul 2018 18:50:44 +1000 you wrote:

    >All it does is ensure that the DNS queries get to the DNS64 server. 

    The way RFC 7050 works that you send queries to your local recursive

    resolver. The problem there is that if the user manually configured

    a public recursive resolver then you don't learn the translation prefix.

    In this context I don't see how serving ipv4only.arpa from dedicated addresses

    would help. 

    We can define a new prefix discovery protocol where the node that needs to

    discover the prefix directly queries the authoritative servers for

    ipv4only.arpa. That would solved the issue with manually configured 

    resolvers. But it would also add yet another way off discovering the prefix

    that needs to be supported.

    _______________________________________________

    DNSOP mailing list

    DNSOP@ietf.org

    https://www.ietf.org/mailman/listinfo/dnsop

**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.consulintel.es
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.