Here’s an analysis of measurement of issues with IPv6 and DNS resolvers from a 
few years 
ago...https://www.potaroo.net/presentations/2017-09-29-xtn-hdrs-dns.pdf

I have not returned to this measurement for some years as there appeared to be 
little interest in the results right up until now!

If there is interest in this measurement work about the DNS, large responses 
and IPv6 failure rates from the working group I’m sure it can be revived!

Geoff

On 10 Nov 2023, at 11:35 am, Erik Nygren <erik+i...@nygren.org> wrote:

Thank you for writing this up!  I think this is long-overdue
and I'd be supportive of the dnsop working group adopting this.
(It seems to make more sense for me to do this in dnsop while keeping v6ops 
informed.)

We likely will want to cover the concerns that Geoff raises around 
fragmentation,
but it would be better to give guidance around addressing those issues.
There is already very substantial deployment of IPv6 among DNS authorities and 
it is widely
used by DNS recursive.  I don't have numbers handy at the moment, but it would 
not surprise
me if a significant portion of recursive-to-authoritative traffic is already 
IPv6.
Given that, we need to fix issues there.

Enabling IPv6-only networks to work is important and is starting to be 
practical in some scenarios.
DNS is one of the bigger blocking points, and excellent progress has already 
been made.

NIST has an IPv6 and DNSSEC deployment tracker: 
https://fedv6-deployment.antd.nist.gov/cgi-bin/generate-com


For the tracked "industry" domains (still US-centric), IPv6 has gone from 10% 
IPv6 for DNS authorities
to over 70% and is still growing. (DNSSEC-signed is still well below 10%).
At least some governments are also requiring IPv6 DNS authorities for 
everything in the resolution chain,
at least for some industries.

We're far enough into this transition already on the authoritative DNS side 
that this is long overdue and
in some ways may be defining existing best practices.

     Erik




_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to