Commit df52a663 authored by Vladimír Čunát's avatar Vladimír Čunát

NEWS, docs: update dns64 info

parent 0b748e0e
Pipeline #7892 canceled with stages
in 29 seconds
......@@ -5,6 +5,7 @@ Bugfixes
--------
- daemon: check existence of config file even if rundir isn't specified
- policy.FORWARD and STUB: use RTT tracking to choose servers (#125, #208)
- dns64: fix CNAME problems (#203) It still won't work with query policies.
Improvements
------------
......
......@@ -5,6 +5,8 @@ DNS64
The module for :rfc:`6147` DNS64 AAAA-from-A record synthesis, it is used to enable client-server communication between an IPv6-only client and an IPv4-only server. See the well written `introduction`_ in the PowerDNS documentation.
.. warning:: The module currently won't work well with query policies.
.. tip:: The A record sub-requests will be DNSSEC secured, but the synthetic AAAA records can't be. Make sure the last mile between stub and resolver is secure to avoid spoofing.
Example configuration
......@@ -18,5 +20,6 @@ Example configuration
dns64.config('fe80::21b:aabb:0:0')
.. _RPZ: https://dnsrpz.info/
.. _introduction: https://doc.powerdns.com/md/recursor/dns64
\ No newline at end of file
.. _introduction: https://doc.powerdns.com/md/recursor/dns64
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment