DNS and BIND on IPv6 (Cricket Liu)（Z-Library）

【One-Line Pitch】 A concise, hands-on guide to making DNS work in an IPv6 world: it shows how IPv6 addresses are represented in DNS, how to configure BIND name servers to serve and query over IPv6, and how to troubleshoot when forward and reverse mapping go wrong. Best for DNS/BIND administrators and network engineers who already know basic DNS and are now rolling out IPv6. 【Book Arc】 - **Opening (~0%–10%)**: Sets the stage — IPv4 exhaustion, the slow IPv4-to-IPv6 transition, and why DNS had to be extended. Introduces the book's scope and its assumption that you already know DNS and BIND basics. - **Early (~10%–32%)**: Covers IPv6 address structure and representation, including prefixes, subnet IDs, and interface IDs, plus the recommended /48 and /64 allocation scheme. Solves the "what am I actually looking at?" problem before touching configuration. - **Middle (~32%–48%)**: Moves into DNS records and zones — AAAA records in forward-mapping zones, PTR records under ip6.arpa, and how to build and delegate IPv6 reverse-mapping zones. This is the core mapping layer. - **Late (~48%–70%)**: Shifts to BIND operations: listening for and sending queries over IPv6, query port randomization, IPv6 masters/slaves, ACLs, registering and delegating to IPv6-speaking name servers, and handling "monolingual" servers and broken resolvers. - **Late (~70%–85%)**: Covers resolver configuration across Linux/Unix, Mac OS X, and Windows, including DHCPv6 and Router Advertisements, then introduces DNS64 as a transition technology for IPv6-only clients reaching IPv4 servers. - **Ending (~85%–100%)**: Troubleshooting with nslookup and dig — looking up IPv6 addresses, reverse-mapping them, and querying a name server's own IPv6 address. 【Key Takeaways】 - **DNS was extended, not replaced, for IPv6** (Early): New record types and a new reverse-mapping namespace let the existing DNS carry 128-bit addresses without breaking IPv4 coexistence. - **AAAA records live alongside A records** (Middle): Dual-stack hosts can publish both, but the book warns that broken resolvers may prefer AAAA and stall on unreachable IPv6, so separating names (e.g., a `-v6` label) is a practical workaround. - **ip6.arpa reverse mapping is nibble-based** (Middle): Each label represents four bits, least-significant first, always 32 hex digits — no leading-zero omission, unlike AAAA record syntax. - **Standard IPv6 subnetting simplifies reverse zones** (Middle): With /48 site prefixes and /64 subnets, you can run one large reverse-mapping zone and delegate /64 subdomains, avoiding the RFC 2317 pain common in IPv4. - **BIND needs explicit IPv6 configuration** (Late): Listening, sending, masters/slaves, ACLs, and server statements all have IPv6-specific syntax and considerations, including query port randomization. - **Transition realities matter** (Late): Link-local `fe80::` addresses should not be used in delegation or resolver config, and "monolingual" name servers and broken resolvers require deliberate handling. - **DNS64 bridges IPv6-only clients to IPv4 servers** (Late): It synthesizes AAAA records so clients without IPv4 connectivity can still reach IPv4-only resources. - **Troubleshooting is a first-class skill** (Ending): nslookup and dig are the primary tools for verifying forward lookups, reverse mapping, and a name server's own IPv6 address. 【Reading Tips】 - Skim the preface and background if you already know why IPv6 matters; slow down at the address-structure and subnetting sections, since everything later depends on them. - Deep-read the AAAA/ip6.arpa and BIND configuration chapters — these are the operational core and the parts you will return to during a rollout. - Pay special attention to the "special considerations" material on broken resolvers and monolingual servers; it addresses the real-world friction that trips up early IPv6 deployments. - Treat the DNS64 and troubleshooting chapters as reference: read them once for orientation, then keep them handy when debugging. - Keep a lab or test zone open while reading so you can try AAAA records, reverse zones, and dig queries as you go. 【Coverage Limits】 This guide is based on stratified excerpts covering the preface, table of contents, and early-to-middle chapters; the excerpts do not cover the full detail of the resolver configuration, DNS64, and troubleshooting chapters, so those sections are summarized at a higher level.