On 28/08/2013 1:41 a.m., Michael Graham wrote:
Hi all, It's been a while since anyone asked this on the list so I thought I'd ask again. What it the recommended steps if a site's AAAA is completely broken? For example ondemand5.com fails as SERVFAIL after 2-4 secs. Disabling ipv6 in proc isn't enough to stop squid doing the AAAA lookup and it looks like I will need to pass ipv6.disable=1 to the kernel on startup to stop the lookup. The other option is that I can contact the admin for this dns server and tell them that there dns server is broken. What other options do I have for handling sites that have broken AAAA records?
What problem is it causing you exactly? Squid getting a SERVFAIL means it goes on and uses the IPv4 addresses instead.
NP: It is worth noting that this SERVFAIL happens on *less* IPv6-enabled sites overall than on IPv4-enabled ones. About 0.01% of IPv6 sites last time it was measured by APNIC researchers, and things have been steadily improving. Disabling access to IPv6 networks *entirely* for all your customers is a bit of overkill for that type of error rate.
Amos
