diff options
author | Florian Obser <florian@cvs.openbsd.org> | 2021-01-24 18:29:16 +0000 |
---|---|---|
committer | Florian Obser <florian@cvs.openbsd.org> | 2021-01-24 18:29:16 +0000 |
commit | 45e4342d826b827a6a80c8b273747901319ada76 (patch) | |
tree | a4c3e278fd5fb7bd058c1af4a86000d1c8debb09 /sbin/unwind/unwind.h | |
parent | 4e755d4fb5d6d343d7abe5f968c96aa6b2d6ac06 (diff) |
Implement DNS64 synthesis.
When unwind(8) learns new autoconf resolvers (from dhcp or router
advertisements) it checks if a DNS64 is present in this network
location and tries to recover the IPv6 prefix used according to
RFC7050.
The learned autoconf resolvers are then prevented from upgrading to
the validating state since DNS64 breaks DNSSEC.
unwind(8) can now perform its own synthesis. If a query for a AAAA
record results in no answer we re-send the query for A and if that
leads to an answer we synthesize an AAAA answer using the learned
prefixes.
Testing & OK kn
Diffstat (limited to 'sbin/unwind/unwind.h')
-rw-r--r-- | sbin/unwind/unwind.h | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/unwind/unwind.h b/sbin/unwind/unwind.h index f94e5850c5c..1f007cbed0e 100644 --- a/sbin/unwind/unwind.h +++ b/sbin/unwind/unwind.h @@ -1,4 +1,4 @@ -/* $OpenBSD: unwind.h,v 1.51 2021/01/19 16:50:23 florian Exp $ */ +/* $OpenBSD: unwind.h,v 1.52 2021/01/24 18:29:15 florian Exp $ */ /* * Copyright (c) 2018 Florian Obser <florian@openbsd.org> @@ -119,6 +119,9 @@ enum imsg_type { IMSG_NETWORK_CHANGED, IMSG_BLFD, IMSG_REPLACE_DNS, + IMSG_NEW_DNS64_PREFIXES_START, + IMSG_NEW_DNS64_PREFIX, + IMSG_NEW_DNS64_PREFIXES_DONE, }; struct uw_forwarder { |