Gandi Bar - IPv6 for Gandi (coming soon!) - Comments

IPv6 for Gandi (coming soon!) - keitai

keitai — Mon, 18 Jan 2010 10:28:23 +0100

Any updates? Where can one sign up for the public beta?

IPv6 for Gandi (coming soon!) - Leland

Leland — Mon, 26 Oct 2009 17:12:12 +0100

@Martijn : That bit is programmed for the general IPv6 deployment which (for the moment) is scheduled for Q1 2010. Yes, they will be reachable over IPv6 when that happens. Need to finish rolling out the public beta for the hosting first

IPv6 for Gandi (coming soon!) - Martijn

Martijn — Tue, 20 Oct 2009 12:12:23 +0200

Sounds good Gandi!

When will a.dns.gandi.net, b.dns.gandi.net, c.dns.gandi.net get their own AAAA records, and will they be reachable over IPv6?

IPv6 for Gandi (coming soon!) - Leland

Leland — Mon, 28 Sep 2009 16:24:08 +0200

@ALL: As an update to this, for the most part this issue should be resolved. There are, however, some TLDs where the registry itself does not yet support IPv6 glue records, and as such you will receive an error message coming from the registry if you attempt to create one. (.NAME springs to mind, for example).

IPv6 for Gandi (coming soon!) - Leland

Leland — Fri, 25 Sep 2009 15:53:53 +0200

@Chris Hills

Thanks for pointing this out. This was due to some differences in some of the registry APIs. This has now been corrected and it should be available on the next update to our front-end website system (within the next 7 days).

Leland

IPv6 for Gandi (coming soon!) - Chris Hills

Chris Hills — Tue, 08 Sep 2009 11:04:16 +0200

I was able to add ipv6 glue for my domain chaz6.com, but I still cannot add glue for my .be domain. I have raised this with support and they are currently looking into it.

IPv6 for Gandi (coming soon!) - HHash

HHash — Wed, 02 Sep 2009 23:55:33 +0200

Adding an IPv6 Nameserver worked for me (.net), but there were some troubles getting there.

In the pre-payment configuration one cannot use an IPv6 nameserver (so I almost didn't get the domain!), however, once purchased it works, unless you click the "Indicate the IP addresses manually" link in Step 2, then it breaks again.

IPv6 for Gandi (coming soon!) - Chris hills

Chris hills — Wed, 02 Sep 2009 14:25:14 +0200

@Leland

Really? I still get this when I try to add an IPv6 nameserver for my .be domain:-

Errors:

* The field 'DNS 4' seems invalid
* The field 'IP address of DNS4' seems invalid

IPv6 for Gandi (coming soon!) - Leland

Leland — Thu, 13 Aug 2009 16:40:43 +0200

@ALL:

For information, the part of our system to register IPv6 glue records with the ccTLD/gTLD registry's primary servers has been corrected. You can now create an IPv6 glue record, associate it with the domain, and it will be properly installed.

HOWEVER, for the time being, the IPv6 glue record still must be a unique hostname. Therefore you cannot [yet] have an IPv4 AND and IPv6 address associated with the same hostname in the glue record. This functionality will be corrected in due course.

IPv6 for Gandi (coming soon!) - Leland

Leland — Mon, 03 Aug 2009 10:08:19 +0200

@Christophe: You won't be able to use ipv6 just yet as we've not opened the beta. Although the kernel currently has IPv6 support, the ip6_tables will not work with the current kernel version (contrack not implemented in the current kernel version). We will be making an updated kernel available to those participating in the beta.

IPv6 for Gandi (coming soon!) - Christophe Devine

Christophe Devine — Fri, 31 Jul 2009 13:06:36 +0200

Very cool, thanks for the update

By the way, in addition to IPv6 on the routers could you also update the kernel ? It seems the filter modules are missing:

# ip6tables -v -L -n
FATAL: Module ip6_tables not found.
ip6tables v1.4.2: can't initialize ip6tables table `filter': iptables who? (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

IPv6 for Gandi (coming soon!) - Leland

Leland — Mon, 27 Jul 2009 17:07:34 +0200

@Christophe Devine: It's progressing, and we should be in a position to propose the beta test (limited numbers, as already mentioned) sometime in mid September.

IPv6 for Gandi (coming soon!) - Christophe Devine

Christophe Devine — Mon, 13 Jul 2009 20:11:48 +0200

Hi,

An news on IPv6 deployment ? Of course with the summer holidays it's understandable it might get delayed a bit.

IPv6 for Gandi (coming soon!) - apn

apn — Fri, 10 Jul 2009 09:08:32 +0200

Inserting (glue) records directly into the root servers or through an API by Gandi is _exactly_ the same for me as an user. I won't see the difference.

Does the API(s) provided by TLD(s) do already support IPv6? If yes, then when do you expect your systems to be ready?

IPv6 for Gandi (coming soon!) - Leland

Leland — Tue, 07 Jul 2009 14:00:00 +0200

Stephane B is correct.. we don't insert directly into any root nameservers. Our systems insert the glue records into the TLD name servers using the registry's APIs. The problem is that for IPv6, our systems don't do this [yet].

Thanks Stephane for the clarification.

IPv6 for Gandi (coming soon!) - Stéphane Bortzmeyer

Stéphane Bortzmeyer — Fri, 03 Jul 2009 08:55:09 +0200

Many people, following Leland's post, talk incorrectly about the root name servers when they actually mean the TLD name servers (.NET, .COM, etc). That's an important difference. Gandi does not manage any TLD and cannot put anything in the root name servers.

IPv6 for Gandi (coming soon!) - apn

apn — Tue, 30 Jun 2009 12:23:26 +0200

Hey Leland,

If you can't insert IPv6 glue records at the root servers what's the point for us ?

My server (+webserver) is dual-stack since years. Even my primary zone (ns0.pnzone.net) has an AAAA entry since years. Now I added ns0v6 and ns1v6 (AAAA only) after your announce but it's useless...

What I expect from Gandi is that it can insert IPv6 glue at the TLD (.net) so that the TLD NS entries match my master zone NS entries:
http://www.intodns.com/pnzone.net

Do you already have a date when you think IPv6 glue at the TLD will be possible?

IPv6 for Gandi (coming soon!) - Anonymous

Anonymous — Tue, 30 Jun 2009 11:42:14 +0200

Yay! I look forward to trying IPv6 with my Gandi server.

IPv6 for Gandi (coming soon!) - Leland

Leland — Sat, 27 Jun 2009 12:51:09 +0200

@apn: if it's the domain I think it is, I can see all of you NS records, including the IPv6 records through recursion. It's showing in a zone check as a "stealth ns record" and flags a warning that because it's not listed in the root servers directly that you need to ensure that the servers are actually working or "you may have problems". This is "normal" at this stage because of the technical limitation for inserting the v6 nameservers into the roots (as mentioned above).

Having said that, I can browse your site in ipv6 with no problems, so it is resolving fine using recursion.

Leland

IPv6 for Gandi (coming soon!) - apn

apn — Fri, 26 Jun 2009 13:53:30 +0200

@Leland: Thanks for having me redirected here.

I have the same issue as the one Colin describes in the first post but I can't get further even after having added the two IPv6 NSes in my dual stack master zone about two hours ago (TTL of my zone = 1h).

Did I miss something?

IPv6 for Gandi (coming soon!) - Leland

Leland — Wed, 24 Jun 2009 13:11:29 +0200

Glad it helped. In the meantime, if you (or anyone else, for that matter) come up with observations or issues along these lines, then please don't hesitate to post them! I keep a deployment issues register anyway which serves as a checklist of things to resolve in order to arrive a general deployment.

IPv6 for Gandi (coming soon!) - Colin

Colin — Wed, 24 Jun 2009 09:07:45 +0200

Hi Leland,

Thanks for your explanations. The workaround you describe is what I use for the moment. Not perfect, but there's only the last step missing

IPv6 for Gandi (coming soon!) - Leland

Leland — Tue, 23 Jun 2009 16:56:58 +0200

@Colin: Thanks for hilighting this. This is a known problem and our technical team is working to correct it. The glue record is indeed registered at the registry for the gTLD, but you are correct in that it does not appear to be installed on the root name servers correctly. This is because as you point out you are unable to add the server to the list of authorative name servers via the modification of DNS page.

There is, however, a temporary (but crude) work-around, but it assumes that you actually manage the zone itself on your own servers.
If you create an additional NS record with the IPv6 nameserver, any queries to the zone via the root servers will be found by recursion initially over IPv4. Once the authoritative record is found, it will see the ipv6 NS entry which can then be queried by the resolver using this recursion.

It's crude, and not 100% native IPv6 at the moment (as there is an IPv4 recursion in the middle) but it works (provided you're in a dual-stack or proxied environment).

Hope that helps.

Leland

IPv6 for Gandi (coming soon!) - Colin

Colin — Tue, 23 Jun 2009 15:56:30 +0200

"What about glue records for IPv6?"

In reality it doesn't seem to work. I've been able to "create a glue record" on the dedicated page, but I can't add the record to the list of name servers on the "Modification of DNS" page.
Also, the root servers don't know of the ipv6 glue record I created.

Anything I'm doing wrong?