Time to add IPv6 glue for your dual stack servers.

[Mark Andrews]

> On Feb 6 2008, Mark Andrews wrote:
> 
> >	With the addition of IPv6 to the root it is time to see if
> >	you have a IPv6 clear path to your zones.  A simple way to
> >	check is to run a recursive nameserver in IPv6 only mode
> >	and querying it.
> >
> >	dig +bufsize=1200 ns . @a.root-servers.net > root-hints
> >
> >	test.named.conf:
> >	options {
> >		listen-on-v6 { ::1; };
> >		allow-query { ::1; };
> >	};
> >
> 
> >	zone "." {
> >		type hint;
> >		file "root-hints";
> >	};
> >
> >	named -6 -c test.named.conf
> >
> >	dig @::1 soa <zone>
> 
> It would be useful if 
> 
>    dig -6 +trace <something in the zone>
> 
> could be made to give this information. As of 9.4.2, its choice of
> NS record at each level isn't influenced by whether it actually has 
> any AAAA records. So you may prove you do have IPv6 connectivity
> from the root this way, but you can also get false negatives.

	It also won't show that you can't resolve all the server
	addresses via ipv6 only.  It does a top down trace, it
	doesn't do the breath search that a nameserver does.

	Servers for ietf.org, org and . have IPv6 addresses but you
	can't do a IPv6 only lookup for "ietf.org mx" as a delegation
	from INFO was IPv4 only (in the process of being corrected).
 
	Mark
> -- 
> Chris Thompson
> Email: cet1 at cam.ac.uk
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org