I was with Andrews & Arnold running full IPv4 and native IPv6. When I was with them, I was able to run your IPv6 Readiness Test and score a full 10/10.

I have now switched to Zen Internet running a HE (Hurricane Electric) IPv6 tunnel.

On both setups, I run dnsmasq (broadband router is Linux CentOS) with this listening on both IPv4 and IPv6 local interfaces. But, I now only score 9/10 for the IPv6 Readiness Test - the part that is failing is:

Your DNS server (possibly run by your ISP) appears to have no access to the IPv6 Internet, or is not configured to use it. This may in the future restrict your ability to reach IPv6-only sites.

I have looked at what is happening at this part of the test and it seems it is trying to resolve A and AAAA records against ds.v6ns.v6test.thinkbroadband.com:

Text
1 23 4	12:25:54.809629 IP 192.168.0.130.44976 > 192.168.0.1.53: 59202+ A? ds.v6ns.v6test.thinkbroadband.com. (51) 12:25:54.809687 IP 192.168.0.130.9411 > 192.168.0.1.53: 34418+ AAAA? ds.v6ns.v6test.thinkbroadband.com. (51)12:25:54.810126 IP 192.168.0.1.53 > 192.168.0.130.44976: 59202 ServFail 0/0/0 (51) 12:25:54.810239 IP 192.168.0.1.53 > 192.168.0.130.9411: 34418 ServFail 0/0/0 (51)

Can you confirm if this is expected behaviour and how exactly this part of the test works? If it is the HE tunnel, I fail to see how this would affect the result of the test.

1
23
45
67
89
1011
1213
1415
1617
1819
2021
2223
2425
2627
2829
3031

$ dig -t A ds.v6ns.v6test.thinkbroadband.com
 ; <<>> DiG 9.8.3-P1 <<>> -t A ds.v6ns.v6test.thinkbroadband.com
;; global options: +cmd;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 19089;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
 ;; QUESTION SECTION:
;ds.v6ns.v6test.thinkbroadband.com. IN  A 
;; Query time: 20 msec;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Thu Feb 11 19:50:47 2016;; MSG SIZE  rcvd: 51
 $ dig -t AAAA ds.v6ns.v6test.thinkbroadband.com
 ; <<>> DiG 9.8.3-P1 <<>> -t AAAA ds.v6ns.v6test.thinkbroadband.com
;; global options: +cmd;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 16287;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
 ;; QUESTION SECTION:
;ds.v6ns.v6test.thinkbroadband.com. IN  AAAA 
;; Query time: 14 msec;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Thu Feb 11 19:51:01 2016;; MSG SIZE  rcvd: 51

In reply to a post by hazey_flakes:

With regards to rDNS, again please email the request to the IPv6 team, they'll then get this set up for you. We are working on DNS and portal tools to support IPv6 but I cannot provide a commitment for when these will be available.

Domain name:
    zen.co.uk

...

Name servers:
    ns0.zen.co.uk             212.23.8.1
    ns1.zen.co.uk             212.23.3.1

In reply to a post by mixt:

Final point of note - you really need to map some IPv6 addresses and glue-records against your name servers and with Nominet, because currently you're only serving IPv6 reverse DNS from IPv4-only enabled infrastructure.

Edited by deleted (Thu 03-Mar-16 12:28:21)

In reply to a post by mixt:

FYI, I have just gained knowledge from Zen technical support themselves that not all of Zen's gateways are IPv6 enabled. I rebooted my router yesterday and landed up on gateway dsl9 (normally I connect to dsl6) and, on that gateway, no link level IPv6 address is presented on the ppp interface, completely breaking IPv6 connectivity (this normally shows up as "inet6 addr: fe80::1/10 Scope:Link" upon running ifconfig).