[v6ops] New version of draft-hunek-v6ops-nat64-srv

[Martin Hunek <[e-mail]>]

Dear WG,

Yesterday, I've uploaded the new version of draft-hunek-v6ops-nat64-srv (https://datatracker.ietf.org/doc/draft-hunek-v6ops-nat64-srv/).

It replaces the draft that I've by mistake, uploaded as a WG item when in fact, it was not (https://datatracker.ietf.org/doc/html/draft-ietf-v6ops-nat64-srv).

The most significant changes are:
- Draft no longer suggests RA-DNSSL as a primary source of the local domain information. Instead, it prefers PTR records that can be verified by DNSSEC and can traverse through routers.
- Added chapters with reasons why it is necessary/useful to have yet another method.
- Added chapter on how the proposed method should interact with other methods.
- Priority of the method using NAT64 SRV record and DNS64 SRV record should be specified by a network operator.
- DNS64 SRV record should be able to override the recursive resolver used by a user for FQDNs without AAAA records.
- Mentioned how the method should interact with 464XLAT.
- Explicit statement that this method should work with ANY DNS transport protocol and ANY recursive resolver (not just DoH).
- The _ipv6 in the protocol field of SRV record is not new. It has existed since RFC5026 - the _nat64 and _dns64 are the only new services in SRV.
- Negative answer is now explicitly mentioned in the draft.
- New detection must be done before any DNS record used for detection expires (TTL).
- Possible multicast support like in RFC8115.
- Hopefully, better spelling, and grammar :-)

There is also proof of concept "code" in python at GitHub:
https://github.com/hunator/draft-v6ops-nat64-srv

However, I do not consider myself to be a programmer (much less in python), so the code is just a proof of concept, not production-ready implementation. Also, it does not do anything useful; it just shows detected prefixes and DNS64 resolvers on a console. But at least, it proves that NAT64 prefix information can be transported by SRV record to any non-privileged user-space application and without system-wide changes either on server or client. If anyone would like to try it, the domain "lbcfree.cz" and its subdomains have got SRV records published.

Any feedback would be highly appreciated.

Martin Hunek

PS: I'm sorry that it took me so long to update the initial draft.