[Dnsmasq-discuss] Suggested configuration best practices for home net with dynamic ipv6 prefix?

[Dave Taht]

On Mon, Sep 22, 2014 at 5:49 AM, Stephen Riehm <dnsmasq at opensauce.de> wrote:
> Hi,
>
> I'm wondering if there are some 'typical' or 'best practice'
> configuration norms for configuring dnsmasq to provide A and AAAA
> DNS lookups for unqualified and qualified hostnames in an ipv6 home
> network without a static ipv6 prefix?
>
> Some things which are causing me headaches are:
>
> My ISP gives me a new ipv4 address and ipv6 prefix whenever my router re-connects (daily).
> (6to4 dual stack, ipv6 prefix = 2002:<ipv4>/56)
>
> My router (fritzbox) provides DHCPv6 however it insists on using the domain name
> fritz.box. and the name resolution seems to be very flakey. I'm hoping to replace
> the router's DNS & DHCP services with dnsmasq on a separate server (freebsd).

OpenWrt tackled a lot of these problems with barrier breaker.

So has the homenet working group of the ietf.

> I would like to access some of my servers via ipv6 from the internet, but not others.
> (idea: add an NS record to my ISP's configuration, specifying my dnsmasq server as
> the authoritative server for my sub-domain - arguments pro / contra?
> I can access my network via dyndns & ipv4 just fine)
>
> There seems to be a plethora of components required to get all this right,
> any insights would be greatly appreciated! (I've read through the man pages and
> they all seem to overlap - I'm a programmer but not a network expert, there's
> lots of networking terms & acronyms in the man pages that I don't fully understand)
>
> For example, assuming dnsmasq is running on a host in my local network:
>
> Router configuration (fritzbox provides the following options):
>         Define a Unique Local Address? (fd00::... - currently off)
>         Should the DHCPv6 in the router be on?
>                 with IA_PD? (prefix delegation? That's a good thing for me, right?)
>                 with IA_PD and IA_NA?
>         or DHCPv6 turned off in the router and:
>                 O-Flag?
>                 O- and M-Flags?
>
> On the dnsmasq server:
>         should rtsold be running?
>         and rtadvd?
>         and radvd?
>         does 'enable-ra' cover these?
>
>         can dnsmasq detect a (new) host's autoconfigured ipv6 address and add the name to its DNS tables? if so, how?
>         I tried using all combinations of ra-names, ra-stateless, slaac with dhcp-range=::,constructor:em0
>         but none worked.
>         I figure this could have something to do with the following from the dnsmasq manpage:
>
>                 "Note that just any address on eth0 will not do: it must not
>                 be an autoconfigured or privacy address, or be deprecated."
>
>         However, my global address *is* autoconfigured - what else could I try?
>         Is there a way to substitute "today's ipv6 prefix" into the dhcp-range somehow?
>
>         I have domain=example.com., local=/example.com./ and auth-zone=example.com.,em0
>         Do I need all three?
>
> My hope was to continue using auto-configuration on all of the hosts (mac,linux,bsd,mobile devices),
> but having them all reference a single DNS server for their fully qualified domain name and
> NS lookups.
>
> Or am I missing something obvious?
>
> Thanks in advance,
>
> Steve
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss



-- 
Dave Täht

https://www.bufferbloat.net/projects/make-wifi-fast