getdns icon indicating copy to clipboard operation
getdns copied to clipboard

Published 20 hours ago • verified publisher icon getdnsapi

Implement DNS64 for IPv6-only nodes

Open shuque opened this issue 11 years ago • 0 comments

The getdns library should implement support for DNS64 AAAA record synthesis (RFC 6147) to support IPv6-only nodes operating in a NAT64 network, and validation of signed IPv4-only address records. A possible set of steps to do so:

  • Determine whether the running system is IPv6-only (or have a configuration switch to allow caller to explicitly specify that this is the case)
  • Discover the NAT64 prefix in operation. RFC 7050 provides one possible mechanism for doing this, e.g. by using the network provided DNS to query a well known IPv4-only address record "ipv4only.arpa." and extracting the IPv6 prefix from the synthesized AAAA record that is returned. There may be other environment-specific ways to do this also.
  • For all address lookups that are IPv4-only, validate the signatures first (if they are signed), then synthesize a AAAA record using the obtained NAT64 prefix and return the result to the caller.

shuque avatar Sep 23 '14 13:09 shuque