Subject: [DNSOP] Question for someone with a V6 capable recursive resolver...

From: Nicholas Weaver <[email-masked]>
Date: Thu, 29 Jul 2010 12:09:20 -0700

Could someone with a IPv6 connected recursive resolver do a favor for me?

	Validate that

	ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu

	resolves to

	67.202.37.63

	(this is a new test name being integrated into Netalyzr, where the only authority record is an IPv6-only field)

---

From: Tore Anderson <[email-masked]>
Date: Thu, 29 Jul 2010 21:27:34 +0200

* Nicholas Weaver

> 	ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu

Hi Nicholas.

It doesn't work, the delegation chain stops at roland.icir.org
which is v4-only from what I can tell:

tore@lust:~$ dig -6 +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu A

; <<>> DiG 9.7.0-P2-RedHat-9.7.0-10.P2.fc13 <<>> -6 +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu A
;; global options: +cmd
.			99252	IN	NS	c.root-servers.net.
.			99252	IN	NS	b.root-servers.net.
.			99252	IN	NS	l.root-servers.net.
.			99252	IN	NS	k.root-servers.net.
.			99252	IN	NS	d.root-servers.net.
.			99252	IN	NS	i.root-servers.net.
.			99252	IN	NS	j.root-servers.net.
.			99252	IN	NS	h.root-servers.net.
.			99252	IN	NS	f.root-servers.net.
.			99252	IN	NS	m.root-servers.net.
.			99252	IN	NS	a.root-servers.net.
.			99252	IN	NS	g.root-servers.net.
.			99252	IN	NS	e.root-servers.net.
;; Received 368 bytes from ::1#53(::1) in 2 ms

edu.			172800	IN	NS	a.edu-servers.net.
edu.			172800	IN	NS	c.edu-servers.net.
edu.			172800	IN	NS	d.edu-servers.net.
edu.			172800	IN	NS	f.edu-servers.net.
edu.			172800	IN	NS	g.edu-servers.net.
edu.			172800	IN	NS	l.edu-servers.net.
;; Received 299 bytes from 2001:7fd::1#53(k.root-servers.net) in 29 ms

berkeley.edu.		172800	IN	NS	phloem.uoregon.edu.
berkeley.edu.		172800	IN	NS	adns1.berkeley.edu.
berkeley.edu.		172800	IN	NS	adns2.berkeley.edu.
berkeley.edu.		172800	IN	NS	ns.v6.berkeley.edu.
berkeley.edu.		172800	IN	NS	sns-pb.isc.org.
berkeley.edu.		172800	IN	NS	aodns1.berkeley.edu.
;; Received 363 bytes from 2001:503:cc2c::2:36#53(g.edu-servers.net) in 119 ms

netalyzr.icsi.berkeley.edu. 3600 IN	NS	roland.icir.org.
;; Received 106 bytes from 2607:f140:ffff:fffe::3#53(adns1.berkeley.edu) in 190 ms

;; connection timed out; no servers could be reached

tore@lust:~$ dig roland.icir.org. AAAA

; <<>> DiG 9.7.0-P2-RedHat-9.7.0-10.P2.fc13 <<>> roland.icir.org. AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;roland.icir.org.		IN	AAAA

;; AUTHORITY SECTION:
icir.org.		745	IN	SOA	ns.icsi.berkeley.edu. hostmaster.icsi.berkeley.edu. 1000047 7200 3600 604800 900

;; Query time: 1 msec
;; SERVER: ::1#53(::1)
;; WHEN: Thu Jul 29 21:26:15 2010
;; MSG SIZE  rcvd: 100

Best regards,
-- 
Tore Anderson
Redpill Linpro AS - http://www.redpill-linpro.com/
Tel: +47 21 54 41 27

---

From: Nicholas Weaver <[email-masked]>
Date: Thu, 29 Jul 2010 12:34:47 -0700

Actually, thats not unexpected: roland is V4 only, but the AAAA after is V6, so dig -6 is wrong (just dig on a v6 machine works, the name can't resolve if you are V6 only as our primary DNS server is V4 only):

 dig +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu

; <<>> DiG 9.7.1-P2-RedHat-9.7.1-2.P2.fc13 <<>> +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu
;; global options: +cmd
.                       73422   IN      NS      e.root-servers.net.
.                       73422   IN      NS      i.root-servers.net.
.                       73422   IN      NS      k.root-servers.net.
.                       73422   IN      NS      h.root-servers.net.
.                       73422   IN      NS      m.root-servers.net.
.                       73422   IN      NS      g.root-servers.net.
.                       73422   IN      NS      d.root-servers.net.
.                       73422   IN      NS      j.root-servers.net.
.                       73422   IN      NS      f.root-servers.net.
.                       73422   IN      NS      a.root-servers.net.
.                       73422   IN      NS      l.root-servers.net.
.                       73422   IN      NS      b.root-servers.net.
.                       73422   IN      NS      c.root-servers.net.
;; Received 228 bytes from 8.8.8.8#53(8.8.8.8) in 6 ms

;; Received 296 bytes from 192.33.4.12#53(c.root-servers.net) in 16 ms

;; Received 363 bytes from 192.26.92.36#53(c.edu-servers.net) in 79 ms

icsi.berkeley.edu.      3600    IN      NS      adns2.berkeley.edu.
icsi.berkeley.edu.      3600    IN      NS      ns.icsi.berkeley.edu.
icsi.berkeley.edu.      3600    IN      NS      adns1.berkeley.edu.
icsi.berkeley.edu.      3600    IN      NS      ns.IDIAP.ch.
;; Received 247 bytes from 2001:500:2e::1#53(sns-pb.isc.org) in 140 ms

netalyzr.icsi.berkeley.edu. 3600 IN     NS      roland.icir.org.
;; Received 106 bytes from 2607:f140:ffff:fffe::3#53(adns1.berkeley.edu) in 23 ms

eaoe.n1.netalyzr.icsi.berkeley.edu. 100 IN NS   ipv6_node.netalyzr.icsi.berkeley.edu.
;; Received 113 bytes from 192.150.187.31#53(roland.icir.org) in 6 ms

ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu. 1 IN A 67.202.37.63
eaoe.n1.netalyzr.icsi.berkeley.edu. 100 IN NS   ipv6_node.netalyzr.icsi.berkeley.edu.
;; Received 129 bytes from 2607:f740:0:3f:216:3eff:fe27:bba5#53(ipv6_node.netalyzr.icsi.berkeley.edu) in 0 ms

nweaver@v6node:~/devel/trouble/projects/isp_probe_devel/scripts>

---

From: Tore Anderson <[email-masked]>
Date: Thu, 29 Jul 2010 22:01:34 +0200

* Nicholas Weaver

> Actually, thats not unexpected: roland is V4 only, but the AAAA after
> is V6, so dig -6 is wrong

Well, you did ask for a v6-connected recursive resolver so I checked it
from a single-stack one.  (It fails without the "-6" as well.)

But I suppose the answer you're after is instead this, then?  This is
from a dual-stack host:

tore@envy:~$ dig +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu. A

; <<>> DiG 9.6.0-P1-RedHat-9.6.0.P1.20100226-1.fc12 <<>> +trace ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu. A
;; global options: +cmd
.			97387	IN	NS	a.root-servers.net.
.			97387	IN	NS	h.root-servers.net.
.			97387	IN	NS	l.root-servers.net.
.			97387	IN	NS	m.root-servers.net.
.			97387	IN	NS	e.root-servers.net.
.			97387	IN	NS	f.root-servers.net.
.			97387	IN	NS	b.root-servers.net.
.			97387	IN	NS	k.root-servers.net.
.			97387	IN	NS	c.root-servers.net.
.			97387	IN	NS	d.root-servers.net.
.			97387	IN	NS	j.root-servers.net.
.			97387	IN	NS	g.root-servers.net.
.			97387	IN	NS	i.root-servers.net.
;; Received 428 bytes from 10.0.0.2#53(10.0.0.2) in 2 ms

;; Received 299 bytes from 2001:500:3::42#53(l.root-servers.net) in 57 ms

;; Received 363 bytes from 192.5.6.36#53(a.edu-servers.net) in 162 ms

netalyzr.icsi.berkeley.edu. 3600 IN	NS	roland.icir.org.
;; Received 106 bytes from 2607:f010:3f8:8000:214:4fff:fe45:e6a2#53(aodns1.berkeley.edu) in 177 ms

eaoe.n1.netalyzr.icsi.berkeley.edu. 100	IN NS	ipv6_node.netalyzr.icsi.berkeley.edu.
;; Received 113 bytes from 192.150.187.31#53(roland.icir.org) in 202 ms

ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu. 1 IN A 67.202.37.63
eaoe.n1.netalyzr.icsi.berkeley.edu. 100	IN NS	ipv6_node.netalyzr.icsi.berkeley.edu.
;; Received 129 bytes from 2607:f740:0:3f:216:3eff:fe27:bba5#53(ipv6_node.netalyzr.icsi.berkeley.edu) in 183 ms

Best regards,

---

From: Doug Barton <[email-masked]>
Date: Thu, 29 Jul 2010 14:19:59 -0700 (PDT)

> 	ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu

host ipv6_dns.eaoe.n1.netalyzr.icsi.berkeley.edu
host: convert UTF-8 textname to IDN encoding: prohibited character found

-- 

 	Improve the effectiveness of your Internet presence with
 	a domain name makeover!    http://SupersetSolutions.com/

 	Computers are useless. They can only give you answers.
 			-- Pablo Picasso