North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: IPv6 routing /48s

  • From: Michael Sinatra
  • Date: Tue Nov 18 17:24:44 2008
On 11/18/08 9:59 AM, Jeroen Massar wrote:
Michael Sinatra wrote:
On 11/18/08 9:26 AM, Christopher Morrow wrote:
On Mon, Nov 17, 2008 at 9:02 PM, Nathan Ward <[email protected]> wrote: 
    I wish them good luck in reaching the DNS root servers.
  They are in "critical infrastructure" space, which is a single /32
with

traceroute6 to the ISC's v6 allocation(s) for f-root ... (from inside
701) oh, not working...
traceroute6 to ipv6.google.com from inside 701, oh... not working either.

vzb's v6 table is far from complete :( which is pretty painful. 
And it just reinforces the fear that people have against putting AAAA
records in DNS for their publicly-accessible resources, especially www.


Having no route is not a problem, you should get a destination
unreachable directly and all is fine because IPv4 should be used as a
fallback.

Not all routers send dest unreachable (yes they should). Not all firewalls pass it. And, worst of all, we have even seen OSes that don't pay any attention to dest unreachables and just wait for timeouts. :(

Fortunately those latter edge cases seem to be getting fixed, but YMMV.

michael