Telstra need to be at least intercepting queries for ipv4only.arpa/AAAA to allow CLATs to discover the NAT64 prefix.
Note that doesn’t work if you are using DoH, DoT, TSIG or any other cryptographic mechanism to protect your DNS queries. It also doesn’t work if you are using DNSSEC to verify the answers as IANA decided to sign ipv4only.arpa. Mark > On 6 Feb 2020, at 16:03, Peter Tonoli <[email protected]> wrote: > > Hi Russell, > > This is great news. > > On 6/2/20 3:27 pm, Russell Langton wrote: >> Hi AusNOGgers, >> >> Following our dual-stack enablement in Aug 2016, Telstra is proud the >> announce the second step in our transition to IPv6 - IPv6 Single-Stack >> deployment on Telstra wireless. >> This means shortly when you attach your mobile to Telstra.WAP APN it will >> only get an Ipv6 address NO Ipv4 address. >> >> >> * Basic flow * >> - If Alice is connecting to a website with a Ipv6 AAAA DNS record, It will >> be a pure Ipv6 connection. >> - If Alice is connecting to a website with only a A DNS record, our DNS will >> spoof the website address with a Well Known Prefix (WKP) so it routes to the >> NAT64 gateway to Ipv4 internet. >> - If Alice is connecting to a Ipv4 address literal(x.x.x.x), It may fail. > > I hope this is not a naive question: > > Is there a higher chance of brokenness when users choose to use other DNS > services (i.e. Cloudflare / DoH), apart from Telstra, due to the lack of WKP > in the response from those providers? > > Cheers, > Peter. > > > > -- > Peter Tonoli > Vice Chair, Electronic Frontiers Australia <https://efa.org.au> - Director, > Internet Australia <https://internet.org.au> > T: @peter_tonoli <https://twitter.com/peter_tonoli> W: peter.tono.li > <https://peter.tono.li> E: [email protected] > L: au.linkedin.com/in/petertonoli M: +61413982000 > _______________________________________________ > AusNOG mailing list > [email protected] > http://lists.ausnog.net/mailman/listinfo/ausnog -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ AusNOG mailing list [email protected] http://lists.ausnog.net/mailman/listinfo/ausnog
