Add Support for Per-Device DNS Assignment in IPv6 Router Advertisements (RA)
-
Currently, pfSense allows global DNS settings for IPv6 clients via RA (Router Advertisements). However, it lacks the ability to assign different DNS servers per device like it does in DHCPv4. This enhancement request proposes adding functionality to define per-device DNS assignments within RA to provide better control over IPv6 DNS configuration.
Problem Statement:
Devices using SLAAC rely entirely on RA for DNS configuration. While pfSense can distribute a global DNS server, users lack the ability to assign different DNS servers per device—a capability available in DHCPv4 but missing for IPv6 clients.Proposed Solution:
- Introduce a per-device DNS assignment mechanism within RA settings.
- Implement MAC-based or IP-based DNS assignments within RA.
- Ensure compatibility with RFC 6106 to support proper DNS configuration for SLAAC clients.
Benefits:
Granular DNS Control – Users can specify different DNS servers per device.
Enhanced Security – Individual devices can be assigned specific filtering policies via different DNS servers.
Better IPv6 Management – Aligns IPv6 DNS configuration with existing DHCPv4 flexibility.Alternative Workarounds:
- Firewall-based DNS redirection (not ideal for direct DNS assignment).
- Manual DNS configuration on individual devices (not scalable).
Request for Implementation:
If feasible, adding per-device DNS assignment functionality in pfSense RA settings would significantly improve IPv6 network management, especially for environments where device-specific DNS filtering is required.