In message <4CE5C820.5030205@mompl.net>, Jeroen van Aart writes:

What would be the best way to configure your dns once you've set up IPv6 6to4? Separate the IPv4 and IPV6 domains or let them be the same?

That is, use something like example.com for your existing IPv4 address and something like 6.example.com for IPv6 (and www.6.example.com etc.)?

Or is it safe to have both A and AAAA records for the same domain name?

Thanks, Jeroen

-- http://goldmark.org/jeff/stupid-disclaimers/ http://linuxmafia.com/~rick/faq/plural-of-virus.html

Firstly I would use a tunnel broker instead of 6to4. Easier to debug failures. To answer your question you need to do a risk analysis. Adding a IPv6 address next to a IPv4 address can make connections to the site appear to be slow when the client side tries IPv6 but doesn't have a working IPv6 path (this is a very small percentage). There are some applications that will not fallback to IPv4 if the IPv6 connection fails (this is also a small percentage again). ISC publishes both AAAA and A record at the same name. This is somewhat of a forcing function for broken sites to address their IPv6 issues. We have been publishing both address for many years now. Google on the other had decided to white-list sites that it knows have IPv6 connectivity and a responsive noc. 6to4 sites don't meet these requirments. Tunneled sites can. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org

Subject: IPv6 6to4 and dns Date: Thu, Nov 18, 2010 at 04:43:12PM -0800 Quoting Jeroen van Aart (jeroen@mompl.net):

What would be the best way to configure your dns once you've set up IPv6 6to4? Separate the IPv4 and IPV6 domains or let them be the same?

The same. Separation would be unnecessary influence from a lower layer.

That is, use something like example.com for your existing IPv4 address and something like 6.example.com for IPv6 (and www.6.example.com etc.)?

Useful for debugging. And no more.

Or is it safe to have both A and AAAA records for the same domain name?

Once a node is enough reachable (according to SLAen etc) to warrant inclusion in DNS, the Internet Protocol number is just an indication of which way to reach it. It is perfectly safe, and I do it all the time. When my Internets break, I suffer. Of course. But that has nothing to do with ipv4 vs ipv6. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I appoint you ambassador to Fantasy Island!!!