Problem with rfc7706 config

Tuomo Soini tis at foobar.fi
Mon Apr 8 12:25:56 UTC 2019


On Mon, 8 Apr 2019 14:14:26 +0300
Tuomo Soini via Unbound-users <unbound-users at nlnetlabs.nl> wrote:

> I have a system which has IPv4 connectivity only.
> 
> # This is rfc7706 config
> # https://www.dns.icann.org/services/axfr/
> auth-zone:
>         name: "."
>         for-downstream: no
>         for-upstream: yes
>         fallback-enabled: yes
>         zonefile: /var/lib/unbound/root.zone
>         master: lax.xfr.dns.icann.org.
>         master: iad.xfr.dns.icann.org.
> 
> Problem is there will not be zonexfer of zone. My guess is unbound
> only tries ipv6 addresses of masters. When dns name is used,
> I'd expect unbound to use both IPv4 and IPv6 addresses for axfr when
> server name has both addresses.
> 

Config works just fine on systems with IPv6 connectivity. In fact I
guess unbound shouldn't even try to use ipv6 for zonexfer when host
doesn't have global ipv6 address.

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>



More information about the Unbound-users mailing list