Re: IPv6 only host NAT64 requirements?

[Ole Troan <[e-mail]>]

Mark,

> Is there any reason to run DNS64 at all these days?  ipv4only.arpa can be a preconfigured
> zone which allows CLAT to get its mapping.  All the phones have CLAT support.  Can we just
> make DNS64 historic and let the phones run all IPv4 connections through CLAT rather than
> having to stuff up DNSSEC and have IPv6 connections terminate in IPv4 servers without
> the application knowing?

For the last point, that's no different than today's IP4 network where addresses change underneath you.

The scenario this thread is about, albeit the efforts in derailing it, is about an IPv6 only host (and application), connecting to something like the Internet. The premise of the experiment was "single stack".

There is therefore no CLAT in this scenario.

If you go back and look at my proposed host requirements, you'll see I added a requirement that hosts must be able to do the DNS64 function themselves, exactly for the reason of solving the DNSSEC problem with NAT64.
Now people here tell me that local validation of DNSSEC isn't done for IP4 either and in practice it's not deployable. I'd hope that's untrue, but regardless you don't appear to be in a worse position with DNS64 than you are without. Either you trust a distance recursive resolver to do the validation for you, or you do validation yourself (and also the synthesizing of IP6 addresses).

Cheers,
Ole