Now we would like to do the following: 1. Make our nameservers listen on IPv6 2. Add v6 addresses to the nameservers in our zone, so they can receive v6 traffic 3. Add v6 addresses to the host records, for example "www AAAA", etc... 1. Make our nameservers listen on IPv6 In BIND's named.conf, in the options section: listen-on-v6 { any; }; In Unbound's unbound.conf, in the "server:" section: do-ip6: yes interface: ::0 interface: 0.0.0.0 NSD will start up by default and listen on IPv6 2. If necessary, add the IPv6 addresses of your nameservers in your zone. *** READ THIS CAREFULLY *** For example, in for the parent zone 'nsrc.org' we have: ws.nsrc.org. NS tldserv.ws.nsrc.org. NS tldslave.ws.nsrc.org. Since tldserv.ws and tldslave.ws are IN the zone being delegated, then we need to add glue records! ; v4 GLUE records tldserv.ws.nsrc.org. A 10.10.0.251 tldslav.ws.nsrc.org. A 10.10.0.246 In the same way, we will need IPbv6 glue records: ; v6 GLUE records tldserv.ws.nsrc.org. AAAA fdba:dc55:48c7::251 tldslave.ws.nsrc.org. AAAA fdba:dc55:48c7::246 In the child zone 'ws.nsrc.org', we will need to declare these hosts as well. In fact, as explained in class, you MUST declare them otherwise you will experience strange problems with resolution: ws.nsrc.org. SOA ... NS tldserv NS tldslave tldserv A 10.10.0.251 AAAA fdba:dc55:48c7::251 tldslave A 10.10.0.246 AAAA fdba:dc55:48c7::246 In your zone "MYTLD", you MAY or MAY NOT have used NSes IN your zone. - If you did (i.e.: ns1.MYTLD for example) Then you need to proceed as above, and ADD the IPv6 records for the nameservers you declared - If you didn't (you used "master.grpX.ws.nsrc.org) You need to do nothing here :) The administrator of ws.nsrc.org will add a the v6 address you have configured on eth0 to the DNS record for "master.grpX.ws.nsrc.org". This should already be the case: # dig AAAA master.grpX.ws.nsrc.org Try and ping these hosts: # ping6 tldserv.ws.nsrc.org # ping6 tldslave.ws.nsrc.org # ping6 master.grpX.ws.nsrc.org Try performing DNS queries in v6 against tldserv + tldslave: # dig -6 @tldserv.ws.nsrc.org ws.nsrc.org ns # dig -6 @tldslave.ws.nsrc.org ws.nsrc.org ns 3. Add IPv6 addresses for the 'www' record in your zone You should know how to do this now! 4. Try and ping other people's hosts in the room using v6. Use dig to connect to other people's nameservers, and verify that they: - answer in IPv6 - have an IPv6 record for their name - provide DNS answer with IPv6 addresses!