Maintained by: NLnet Labs

[Unbound-users] Filter AAAA records in unbound

W.C.A. Wijngaards
Mon May 7 10:45:23 CEST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Kostas,

On 05/04/2012 03:49 PM, Kostas Zorbadelos wrote:
> 
> Greetings to all,
> 
> I am a newcomer to unbound. We will evaluate unbound as an
> alternative to BIND for a new anycasted caching resolver setup. One
> thing we will need in practice (and many others might need as
> well) is the possibility to remove all AAAA records in replies for
> various IPv6 brokeness cases in our networks. BIND provides the
> feature filter-aaaa-on-v4 in recent versions (post 9.7) if
> compiled accordingly. I can understand that this should not be
> considered a permanent solution to the brokeness issues, just a
> quick workaround (hopefully with a short life-span).
> 
> In the bug case
> 
> https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?format=multiple&id=356
>
>  which seems close but not quite the filter-aaaa-on-v4 BIND 
> functionality, the STATUS is marked RESOLVED LATER. What do the
> developers think about introducing a filter-aaaa feature, similar
> to BIND's, especially with the v6 launch day approaching?

The IPv6 launch day has goals to enable IPv6 connectivity.  With
working IPv6, this option is not needed.

If the option is necessary, given IPv6 adoption and its surrounding
issues, then we could consider implementing the option.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=cOnP
-----END PGP SIGNATURE-----