DDNS IPv6 Cloudflare

JKnott

Like I said, my friends IPv6 changes all the time after each reboot of his router... Haven't watched mine.

I thought we were talking about your pfSense firewall. Does it do that? What is your friend's router? PfSense can be configured to change the prefix too. Maybe that friend has something configured wrong.

Bob.Dig

@JKnott said in DDNS IPv6 Cloudflare:

@Bob-Dig said in DDNS IPv6 Cloudflare:

Like I said, my friends IPv6 changes all the time after each reboot of his router... Haven't watched mine.

I thought we were talking about your pfSense firewall. Does it do that? What is your friend's router? PfSense can be configured to change the prefix too. Maybe that friend has something configured wrong.

No, like I said before, he has a router called fritzbox. And what changes is not the temporary IP @johnpoz ! Even something in the first 4 parts changes (sorry my lag of knowledge and English). Anyway, I will look for a client that is working just to make sure IPv6 will work, even if I don't use it.

johnpoz

@JKnott said in DDNS IPv6 Cloudflare:

Suppose someone puts up a server there that's only on IPv6. How will you reach

I have IPv6 - if I wanted to contact it... Which highly unlikely anyway...

If it was some service that was to actually do something - then they would get IPv4... If not its not worth me needing to talk to..

We have gone over this and over this... Until at some point some major player(s) goes only IPv6 the migration isn't going to gain any speed..

You have a HUGE market were it would make sense and grab a whole lot of attention - and they can not even do that right... The biggest draw to get users to bitch to their isp about ipv6 is games... We have had IPv6 for how many years. It was going to be savior to head to head gaming.... Name 1 freaking game that gets IPv6 done correctly where I can play head to head agains you via just IPv6?

JKnott

@johnpoz said in DDNS IPv6 Cloudflare:

I have IPv6 - if I wanted to contact it... Which highly unlikely anyway...

I know you do, but I was speaking in the general sense. There is a major phone company in Canada that's still IPv4 only. What if that supplier in Europe cannot get an IPv4 address? At the moment, he has to wait until someone has some surplus addresses to sell. We now have a world splitting in two, part IPv4 and part IPv6. On the other hand, the company I'm with provides IPv6 on both the cable and cell networks and with LTE, IPv6 only. My phone uses 464XLAT to access IPv4 sites. Other Canadian companies, both carrier and reseller, are managing to move to IPv6. Why not that phone company?

As for games, I have no idea, as I don't play online games. However, I expect those issues are due to the mix of IPv4 and IPv6. There is nothing inherent in IPv6 that would prevent playing games over it. Also, didn't the XBox require IPv6 and used Teredo when it wasn't available?

World IPv6 Lauch Day was June 6, 2012. That's over 7 years ago. My ISP was providing IPv6 back then, though not native. It used 6to4 and 6rd tunnels. but they were at least offering it. At that time, I was using a 6in4 tunnel, from another provider, and it worked fine.

Like I said, head in sand stupid. Those who insist on sticking with IPv4 are holding up the rest of the world.

Bob.Dig

@JKnott I talk to you in this thread because it is already cluttered up. I hadn't set that option, because I didn't knew, if I needed it in the firs place. Now I set it, thanks, and I have to watch this in the future.

Something different, in the Service DHCPv6 Server & RA I set up the DUID togehter with an hostname but no ip. There it says, if no IP is given, one will be dynamically allocated from the pool.
But the end result always is, that there is no connection between an ip and the hostname (in DNS).

So I guess I have to input an link-local ipv6 in the DNS (Unbound) to always have a functional DNS Setup for my LAN.

JKnott

@Bob-Dig

That's why I said to ensure it's set. Prior to that setting being available, all it took for my prefix to change is just disconnect/reconnect the WAN Ethernet cable.

What setting are you referring to re DUID? I have never had to set anything like that.

Bob.Dig

@JKnott I was talking about
ServicesDHCPv6 Server & RALANDHCPv6 Server

Finally got it working, I had to use those IPv6s, which the PCs made up by themselves and not the ones from the DHCPv6 Server.

Now the hostnames defined in the DHCP & DHCPv6 Server are automatically in DNS (unbound) and I can have the same Firewall-alias for IPv4 & v6.
This also means, next time (?) the prefix changes, there is nothing to do in pfSense anymore, I only have to update my DNS-Provider.

For that, I still don't have a solution, but I made up a "Dynamic DNS Client" with Cloudflare (v6) in pfSense for the LAN interface, then disabled this client. But those disabled Clients will still be checked by pfSense it seems, so I will see something red in the pfSense Dashboard, next time the prefix changes.

Bob.Dig

That was to quick, it is not possible to have the same Firewall alias (FQDN or hostname) for IPv4 & v6, is this a bug?

JKnott

@Bob-Dig

Where are you referring to? It is certainly possible to have the same hostname for both A & AAAA records. It is not possible to have the same name for an AAAA record and an IPv4 alias with my public DNS server. It is possible to configure that, but the IPv6 AAAA record will never be used.

Bob.Dig

@JKnott
@johnpoz

It seems to be a bug in pfSense.
In the screenshot you can see that I should be able to input a host or FQDN for IPv4 and v6, but pfSense is always puting a /32 behind it, so it is not possible for IPv6 right now. It will only allow /128 with a real IPv6 address.

I am getting nuts, please someone answer.

johnpoz

Can you not read??? Right above where you trying to put in what your putting in???

What does it say about host names and the /32

Bob.Dig

@johnpoz I can read and it says I can input a hostname or FQDN for IPv6, but it doens't do it, always getting back to /32...
It is also not working under Alias/host but here (Alias/networks) the problem is more visible.

johnpoz

What do you think is going to get put in there if you put in a fqdn??? What fqdn are you going to put in??

Bob.Dig

@johnpoz I tried hostnames from the dhcp servers, tried with DNS, tried host with parent domain...

I want a Firewall-Alias which comes from the dns-resolver, or something I can work with, is this possible?

e.g.

johnpoz

Dude how hard is it show what you want? hostU2 is not going to freaking resolve to anything - how and the F do you think that could work?

Bob.Dig

@johnpoz It is working for IPv4! Why not for v6.

johnpoz

What is in your alias???????? hostu2 is not a FQDN..

Bob.Dig

@johnpoz For IPv4 e.g.

and works, tried it right now with a friend.

johnpoz

And what does pfsense resolve that too??? It would be using its own search suffix?

What is in the table? Go to hostname and resolve u2.. What does it come back with..

Bob.Dig

@johnpoz Where should I look exactly? The firewall tab can't show it.