[DNSOP] Re: [v6ops] Re: Re: Re: Moving DNS64 (RFC6147) to Internet Standard

[Philip Homburg <[e-mail]>]

> I will like to see that long list of things that dont work with
> DNS64 in the real world.

I don't have a complete list, but here is a start. Let's assume a host
that relies on DNS64 to obtain IPv4 connectivity. What doesn't work in
that case:
1) An IPv4 literal
2) Any kind of local DNSSEC validation, either in the stub resolver or in
   a local DNS forwarder.
3) Any resolver configuration that by-passes the local (DNS64) resolver
   such as an (optionally DoH, DoT) connection to a public resolver.
4) Any kind of code that implement STUN for IPv4 but not for
   IPv6.
5) As far as I can tell, any kind of code that tries STUN on an IPv6 address
   that was mapped by the DNS64 resolver.

A few corners cases:
6) A DNS recursive resolver
7) DNS code that tries to disable EDNS Client Subnet

I think there are more protocols that somehow encode whether IPv4 or IPv6
is used, but this is just from the top of my head.