Thomas SchäferMay 16, 2023

https://nitter.net/noIPv6/status/1610640330700820486#m

#IPv6only

A-records should be filtered!

👻 spooky ipv6-only networking 👻 (@noIPv6)

yea good point 🤦🏻 i was testing the java client & java server i got ipv6-only server working (w/ nat64/dns64) - needed to add “-Djava.net.preferIPv6Addresses=true” to the command line (duh, i knew this but it’s been way too long)

Nitter
Show threadChris 🏃 🐧May 16, 2023
@tschaefer I remember deploying tweaked resolvers that remove any A record…
Show threadMiyuru SankalpaMay 16, 2023
@cr @tschaefer I go one step further and add AAAA forcefully on CDN domains that don't have it.
Show threadThomas SchäferMay 16, 2023

@miyuru @cr

I use DNS64 and filter a records.

Using unofficial AAAA records of CDN doesn't work for me.(like the reddit problem or similar, I would need to maintain a list )

Show threadMiyuru SankalpaMay 16, 2023

@tschaefer No need a list, I wrote a DNS proxy that does it automatically.

https://gitlab.com/miyurusankalpa/IPv6-dns-server

Miyuru / IPv6-dns-server · GitLab

Adds AAAA records to DNS where CDN support IPv6.

GitLab
Show threadThomas SchäferMay 19, 2023

@miyuru

It is crazy.
It works also for the new Desinfec't 2023 by @ct_Magazin

hosted here cdncf.heise.de (cloudfront)

Why don't YOU add the AAAA-records, Dear @ct_Magazin ?

#ipv6now #ipv6

Show threadThomas Schäfer

@miyuru
Maybe I should chain my resolvers. Adding your cdn AAAA-records, then DNS64 and then removing A-records.

#IPv6 #noipv4

May 19, 2023 at 10:57pmWeb
Show threadThomas SchäferMay 20, 2023
@miyuru
I see, you included dns64 (configurable) and other features, so probably I don't need the chain.