IPv6 TCP
Kevin Oberman
oberman at es.net
Mon Dec 28 23:07:13 UTC 2009
> Date: Mon, 28 Dec 2009 13:31:50 -0800 (PST)
> From: Pamela Rock <prock111 at yahoo.com>
> Sender: bind-users-bounces+oberman=es.net at lists.isc.org
>
> --- On Mon, 12/28/09, Chuck Anderson <cra at WPI.EDU> wrote:
>
> > From: Chuck Anderson <cra at WPI.EDU>
> > Subject: Re: IPv6 TCP
> > To: bind-users at lists.isc.org
> > Date: Monday, December 28, 2009, 3:58 PM
> > On Mon, Dec 28, 2009 at 07:56:56AM
> > -0800, Pamela Rock wrote:
> > > I posted this query a while ago but have not yet been
> > able to resolve the issue...
> > >
> > > I have a DNS server and client that can ping each
> > other using ping6. The following query works:
> > >
> > > dig -6 test.com +notcp
> > >
> > > When I query TCP with IPv6 I get the following error:
> > >
> > > root at test:/home/janderson/bind-9.6.1-P1 dig -6
> > test.com @bind6 +tcp
> > > socket.c:4922: 22/Invalid argument
> > > dig: isc_socket_connect: unexpected error
> >
> > I get this with the stock CentOS 5.4 dig:
> >
> > # rpm -qf `which dig`
> > bind-utils-9.3.6-4.P1.el5_4.1
>
> I am running Red Hat 5 / 64 bit and I had to compile
> openssl-0.9.8k.tar to get a clean BIND 9.6.1-P1 configure.
>
> My build process looks like the following
> named[3921]: built with '--enable-threads' '--with-openssl=/usr/local/ssl/bin' '--enable-ipv6'
>
> What's wierd in that PING6 works and DIG IPv6 + UDP works as well.
> DIG IPv6 + TCP fails.
>
> If anyone has 9.6.1-P1 and can run an IPv6 / TCP based dig
> successfully, I'd be interested in knowing about your platform. What
> O/S, HW, etc did you use to build BIND?
Seems to work for me. FreeBSD 8.0, bind 9.6.1-P2 (P1 is obsolete),
OpenSSL 0.9.8k. I've had no problems at all. I can even get the
signatures, though we have not published any trust anchors, so you can't
really use them, yet.
I built the standard FreeBSD port with openssl, threads, SIGCHASE, and
IPv6. Nothing special.
> dig -6 www.es.net @ns1.es.net +tcp +dnssec
; <<>> DiG 9.6.1-P2 <<>> -6 www.es.net @ns1.es.net +tcp +dnssec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12531
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.es.net. IN A
;; ANSWER SECTION:
www.es.net. 600 IN CNAME www2.es.net.
www.es.net. 600 IN RRSIG CNAME 5 3 600 20100111110009 20091228100009 41782 es.net. odSa/PcvfYH1UM+GPxi+mahnTisgn6rL9apCpHm0y6SLIzmpHycP+Ph2 cA4aXNCA4736qWU7/MScHBul7cWsc94VJxE89wVw6GkDIu58I9/NiVBD Tl6nfTZCJ3PyIHWEx2sFHMZKhiw6nIi7SBWj9RwkDB0jU6K8J9C5ge2s 5r8=
www2.es.net. 86400 IN A 198.128.3.112
www2.es.net. 86400 IN RRSIG A 5 3 86400 20100111110009 20091228100009 41782 es.net. FGJKOxfkG7m3zKd0R0/s6hDCTSZP66oGxQxWXjeObtPOtKgAsFUACQbF CZ/FRGMS+ryu6fC2C0DIePKYqeXGT5QSpcUi9t5iCY72ccRHG34hPSGr nJHS+VrWENmrJ/I6X4aq/hdIXvpBz5ePgBl5w34toWDFoIyUJcpUkxUn 9+k=
;; AUTHORITY SECTION:
es.net. 600 IN NS ns1.es.net.
es.net. 600 IN NS ns-aoa.es.net.
es.net. 600 IN NS ns-lvk.es.net.
es.net. 600 IN RRSIG NS 5 2 600 20100111110009 20091228100009 41782 es.net. Y5StioMeHIdl74pI4ch+blK5q924ozUbDR5Fwz7Mfk+TOiIheRfPg2X4 wuigN+0MfC5aE7HRmG/86mki8FUDY0LyzcO5aJFc5rHVHYjDBgBLh9Q5 2STPPQN6jkNki9Ux7WDeV79Fi8fRFJKP4q6bMdGB5x56um+0zXMiuk3E za4=
;; ADDITIONAL SECTION:
ns1.es.net. 86400 IN A 198.128.2.10
ns1.es.net. 600 IN AAAA 2001:400:14:2::10
ns-aoa.es.net. 600 IN A 198.124.252.22
ns-aoa.es.net. 600 IN AAAA 2001:400:6000::22
ns-lvk.es.net. 600 IN A 198.129.252.34
ns-lvk.es.net. 600 IN AAAA 2001:400:910:1::2
ns1.es.net. 86400 IN RRSIG A 5 3 86400 20100111110009 20091228100009 41782 es.net. mdhO23R+FTzv7iLldu8o9EPQY3+TDat/uv50oNdygiSl+YwLE2DYpJJn rImx9+VxKaoV8/BzBYKVWy6FVrq3ug0O2zPpdX3zSH2ywtfkgLKQJ8e0 gqOhV7N2LzEHgGdt+gpPkIpC1hJGpAo3rXyLVxOjPwdxxD3ppfVCilsU 8WY=
ns1.es.net. 600 IN RRSIG AAAA 5 3 600 20100111110009 20091228100009 41782 es.net. Kiwtuv+j5pQw+hW86R+DrAQVVxr8U7Qq1QmX34M+ve6Bq7tXGIKGenBO eS2jxr2ABInFnlGUOQ2Y71eBvfTkOvl0D9bDTA2mNZ0ixUY7u9/anbOe adK1m1gyO+BfTek/VbZEE56iU8ltlrp1SDFpmHz+xryj30jDy2eTlvyU FjE=
ns-aoa.es.net. 600 IN RRSIG A 5 3 600 20100111110009 20091228100009 41782 es.net. dMLiS6evREtQFRtWclSlxrhUOZq0iTRyBvAuExJpBFB7IBHhcINNc9S+ iSZ8FEBq88z5ZS8kcoVoJqvbUJyJEIOmzOz2Tzo7hANMeIyK8PU4Jkny zwZj8c5+gggKeUsGAhARybw8w5DnutnLPQ9uFFlDcXkc46BgIAoRMA3h m54=
ns-aoa.es.net. 600 IN RRSIG AAAA 5 3 600 20100111110009 20091228100009 41782 es.net. h8PVol1KgVwU/RDVY4xO8snLIMPd6oYEM2JmSM/4yk/feuPaYr4vTlQB auFXloyJsfhQzD1dtnyYG/KXQdS3HSB5deu/OcCx4+amslNrDHnBrPsQ 5VrxdvZDuHeFue55tQgGoT3nLLNB3kgOWv7W6WObdqBhtZe+7nQgb78G B1M=
ns-lvk.es.net. 600 IN RRSIG A 5 3 600 20100111110009 20091228100009 41782 es.net. WlZHU9xsqJrk8r7TC6S0Zx8x2Y4kLVHMJPhVHRkfeYBQIcs9bXerTHGG aTUoFA6FZzIXN4v84HrHap1qQ4/bixbgPzqDNW1veFZBWzq82BN6Np1o VyiLWi6fYBCVIqnodvZT74sP8eCv6zjpwqnEb8HWwd0ZO2XtyCMIHMzb f5o=
ns-lvk.es.net. 600 IN RRSIG AAAA 5 3 600 20100111110009 20091228100009 41782 es.net. IQ4C5PTDtMaFdfFRtLH9NTDfwI54EVSjV8FdZxj2vp2xACdUaY/ei/Of XGmELPtPORE5ckLDT03M0enl+jYL6o0ub8JIKfVfj7D5sq7gsgecIKLL vDA5kB62xROI3BefXsK2OUDzKUQSB+QiywtGKPCrfqyPFCabr7Q2tYRf 5xQ=
;; Query time: 15 msec
;; SERVER: 2001:400:14:2::10#53(2001:400:14:2::10)
;; WHEN: Mon Dec 28 14:52:17 2009
;; MSG SIZE rcvd: 1760
Here is the exact compile command for named/unix/main.c:
cc -pthread -I/usr/ports/dns/bind96/work/bind-9.6.1-P2 -I./include -I./unix/include -I. -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/lwres/include -I../../lib/lwres/unix/include -I../../lib/lwres/include -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/dns/include -I../../lib/dns/include -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/bind9/include -I../../lib/bind9/include -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isccfg/include -I../../lib/isccfg/include -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isccc/include -I../../lib/isccc/include -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isc/include -I../../lib/isc -I../../lib/isc/include -I../../lib/isc/unix/include -I../../lib/isc/pthreads/include -I../../lib/isc/x86_32/include -D_REENTRANT -DDIG_SIGCHASE=1 -D_THREAD_SAFE -O2 -pipe -fno-strict-aliasing -I/usr/local/include/libxml2 -I/usr/local/include -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -fno-strict-ali
asing -DVERSION=\"9.6.1-P2\" -DCONFIGARGS="\"'--localstatedir=/var' '--disable-linux-caps' '--with-randomdev=/dev/random' '--with-openssl=/usr' '--with-libxml2=/usr/local' '--without-idn' 'STD_CDEFINES=-DDIG_SIGCHASE=1' '--enable-threads' '--sysconfdir=/etc/namedb' '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info/' '--build=i386-portbld-freebsd8.0' 'build_alias=i386-portbld-freebsd8.0' 'CC=cc' 'CFLAGS=-O2 -pipe -fno-strict-aliasing' 'LDFLAGS= -rpath=/usr/lib:/usr/local/lib' 'CXX=c++' 'CXXFLAGS=-O2 -pipe -fno-strict-aliasing'\"" -DNS_LOCALSTATEDIR=\"/var\" -DNS_SYSCONFDIR=\"/etc/namedb\" -c ./main.c
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman at es.net Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751
More information about the bind-users
mailing list