My two cents about two-faced DNS: In the v4 setups I have done, a
one-faced DNS is enough if the DNS server is inside the NAT box, because
the router that does NAT (at least the ones I have been using, Cisco)
will decapsulate the DNS reply and replace the IP address with the
public one. In a rather common Microsoft / Cisco / IPv4 / RFC1918 setup,
the DNS servers often being domain controllers in the Active Directory
and having RFC1918 addresses can indeed serve as SOAs and provide DNS
services to the outside without any magic.

All this to say that, as not-globally-routable, a DNS system that works
both for the private and the public addresses is something that we
already have for IPv4. If we want IPv6 to be adopted, we need to provide
the same thing or better, which is valid for multihoming, DNS, and a
bunch of other things.

Michel.


--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to