[nsd-users] NSD not reachable over IPv6 without ip-address option

[Stuart Henderson]

On 2023/01/07 15:03, Pim Kunis via nsd-users wrote:
> Hi Anand,
> 
> Thank you for your reply, I understand the problem better now. I used
> Wireshark and indeed the packets were being returned from the wrong
> address. For some reason, my server is getting a second globally routable
> /128 IPv6 address in the prefix that is advertised by my router. Would you
> happen to know what could be causing this?

If you're using SLAAC, this is most likely privacy addresses.

(Some software has a way to bind to 0.0.0.0 / :: and copy the
destination address from the request as the source address of the
response, e.g. interface-automatic in unbound, but NSD doesn't do
that).