Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

Thu Feb 11 21:16:56 UTC 2010

In message <a05493651002110426u7d9688c9i273ff64c456ecdc7 at mail.gmail.com>, Igor 
Ybema writes:
> Hi,
> 
> We are using 6to4 on our fallback site because the provider there is
> not able to provide us native IPv6 yet. We have also installed a
> fallback nameserver over there using a 6to4 address.
> 
> This works good and no complains what so ever in the past.
> 
> However, last week Denic (registry for .de) changed their policy (or
> their checks). They don't allow a nameserver for a .de domain anymore
> which contains a 6to4 address. The policy is "it should be a global
> unicast AND the block should be assigned to a RIR for suballocation
> purpose".
> The 6to4 range is Global Unicast
> (http://www.iana.org/assignments/ipv6-unicast-address-assignments/)
> but it is not assigned to a RIR because it is a special block. This
> fails their policy and their checks (resulting in a ERROR: 105 All
> IPv6 Addresses must be Global Unicast).
> 
> Ok, policy is policy and we should not complain. However, I'm asking
> your opinions about this policy. I find this really stupid because
> this completely brakes use for 6to4 in Germany and their is no good
> reason to block it.
> 
> We know we should push our provider to support native IPv6, and we do.
> But this should not stop us using IPv6 6to4.
> 
> regards, Igor Ybema

If you can't get native IPv6 then use a tunneled service like
Hurricane Electric's (HE.NET).  It is qualitatively better than
6to4 as it doesn't require random nodes on the net to be performing
translation services for you which you can't track down the
administrators of.  You can get /48's from HE.

I use HE.NET and have for the last 7 or so years for my home network.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org