DNS64

The module forRFC 6147 DNS64 AAAA-from-A record synthesis, it is used to enable client-server communication between an IPv6-only client and an IPv4-only server. See the well writtenintroduction in the PowerDNS documentation.If no address is passed (i.e.nil), the well-known prefix64:ff9b:: is used.

Warning

The module currently won’t work well withpolicy.STUB.Also, the IPv6 passed in configuration is assumed to be/96, andPTR synthesis and “exclusion prefixes” aren’t implemented.

Tip

The A record sub-requests will be DNSSEC secured, but the synthetic AAAA records can’t be. Make sure the last mile between stub and resolver is secure to avoid spoofing.

Example configuration

-- Load the module with a NAT64 addressmodules={dns64='fe80::21b:77ff:0:0'}-- Reconfigure laterdns64.config('fe80::21b:aabb:0:0')