I’ve been thinking on how to create reverse zone for /64 subnet from delegated routed /48 from Hurricane Electric. First when i was first time request delegation for routed /48 i’ve defined this configuration on my nameservers
In named.conf
zone "7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa" { type master; file "reverse-2001-470-f8e7_48.IP6.ARPA"; };
In reverse-2001-470-f8e7_48.IP6.ARPA
$TTL 3d ; Default TTL (bind 8 needs this, bind 9 ignores it) @ IN SOA a.ns.domain.tld. hostmaster.domain.tld. ( 200909180 ; Serial number (YYYYMMdd) 24h ; Refresh time 30m ; Retry time 2d ; Expire time 3d ; Default TTL (bind 8 ignores this, bind 9 needs it) ) ; Name server entries IN NS a.ns.domain.tld. IN NS b.ns.domain.tld. IN NS c.ns.domain.tld. IN NS d.ns.domain.tld. ; IPv6 PTR entries ; Subnet #1 $ORIGIN 0.0.0.0.7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa. 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR sub1.ipv6.domain.tld. ... ... ... ; Subnet #2 $ORIGIN 1.0.0.0.7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa. 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR sub2.ipv6.domain.tld. ... ... ... ; Subnet #next .... ... ...
But, in the other hand, We can also divide route /48 into per /64 zone basis. of course it’s required defining every single /64 zone on named.conf.
In named.conf
/* * 2001:470:f8e7:1::/64 * */ zone "1.0.0.0.7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa" { type master; file "reverse-2001-470-f8e7-1_64.IP6.ARPA"; }; In reverse-2001-470-f8e7-1_64.IP6.ARPA $TTL 86400 ; Default TTL (bind 8 needs this, bind 9 ignores it) $ORIGIN 1.0.0.0.7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa. @ IN SOA a.ns.domain.tld. hostmaster.domain.tld. ( 200907114 ; Serial number (YYYYMMdd) 28800 ; Refresh time 7200 ; Retry time 864000 ; Expire time 86400 ; Default TTL (bind 8 ignores this, bind 9 needs it) ) ; Name server entries IN NS a.ns.domain.tld. IN NS b.ns.domain.tld. IN NS c.ns.domain.tld. IN NS d.ns.domain.tld. ; Subnet #1 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR sub1.ipv6.domain.tld. ... ... ...
Next subnet in name.conf…
/* * 2001:470:f8e7:2::/64 * */ zone "2.0.0.0.7.e.8.f.0.7.4.0.1.0.0.2.ip6.arpa" { type master; file "reverse-2001-470-f8e7-2_64.IP6.ARPA"; };
And so on..
Both above configuration will answering query request properly. Onething that i’m not realy so sure is what/how the “Righteous way” for defining those reverse routed /48.
any idea? hehe… 😉