Stopping IPv6 result/resolution for public endpoints from DNSDIST

Viewed 20

Current Setup:

  • We have a dnsdist cluster, front-ended by a private anycast IP.
  • This private anycast IP is configured in all the machines in my on-prem cluster, this makes sure any DNS query will land on my dnsdist cluster.
  • From the DNSdist cluster I have two servers (8.8.8.8 and 8.8.4.4), all requests get forwarded to these 2 endpoints if no spoof records are found.

Problem statement

  • I want to control that all DNS queries should return only IPv4 results, all IPv6 queries should be blocked at dnsdist and return no result found (should not go to public resolver).
0 Answers
Related