Date: Fri, 2 Jun 2017 12:38:04 +0100 From: Matthew Seaman <matthew@FreeBSD.org> To: Gary Palmer <gpalmer@freebsd.org> Cc: freebsd-net@freebsd.org Subject: Re: Ipv6 / DNS questions Message-ID: <a82571bb-8027-8cb5-37d5-b82051b9b671@FreeBSD.org> In-Reply-To: <20170602113010.GA74033@in-addr.com> References: <759e086e-e6c3-3b3a-1578-834af5adce0d@denninger.net> <7b0eda86-34d3-9bf7-df5f-45060a956942@freebsd.org> <20170602113010.GA74033@in-addr.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --cuxcoPCk6PCALLeMI2BmJgh3kaKup03aJ Content-Type: multipart/mixed; boundary="JggAtEjsus8JWJJf5nwXIH8fmDxEaobOi"; protected-headers="v1" From: Matthew Seaman <matthew@FreeBSD.org> To: Gary Palmer <gpalmer@freebsd.org> Cc: freebsd-net@freebsd.org Message-ID: <a82571bb-8027-8cb5-37d5-b82051b9b671@FreeBSD.org> Subject: Re: Ipv6 / DNS questions References: <759e086e-e6c3-3b3a-1578-834af5adce0d@denninger.net> <7b0eda86-34d3-9bf7-df5f-45060a956942@freebsd.org> <20170602113010.GA74033@in-addr.com> In-Reply-To: <20170602113010.GA74033@in-addr.com> --JggAtEjsus8JWJJf5nwXIH8fmDxEaobOi Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2017/06/02 12:30, Gary Palmer wrote: >> Assuming that you always get the same /64 assigned to your gateway, th= en >> the address SLAAC assigns to your server will be constant so long as >> you're on the same hardware, since the SLAAC address is generated from= >> the network prefix and the MAC address of the NIC. In that case, it >> often suffices to update the DNS manually. > Only if >=20 > ipv6_privacy=3D"YES" >=20 > is not set. Ah, but ipv6_privacy is intended for use on personal laptops and other devices where you'ld prefer not to have your MAC address available as a tracking cookie when acting as a web client. It's not intended for use on a web server. Even if you do turn it on IIRC the effect is to add alias IPs on that network interface, alongside the standard address that SLAAC would generate anyhow. Cheers, Matthew --JggAtEjsus8JWJJf5nwXIH8fmDxEaobOi-- --cuxcoPCk6PCALLeMI2BmJgh3kaKup03aJ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJZMU4iXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnIBEP/3kxRmcVIdJu49YO49zXEcR5 KOnJT+8AV3XeAzEyUx+KaAd9PVNiQWaT1XOJZuD3Y/jU8Tsp/HZllfnScYEB4ko6 QlLiOYT23aO1oq00G0VEQA7lTsftbLdBzFgXin056VS56yMAwUiY4R35v/zo9t0S bnjhmiP8P8trJgrsYOlSp7vgld+N6XL6zscj/MKI+4SYqNcb2Q1Y2tA/5IJrWYle VI8VR3VK+Zt36yabWYnYz48dlH9hozCs3zIeLS0hw/KRyMXxoz5u9GCXOzlCxEBu OlyGho27AuEBYa0zJKqGrgpPP6oFSSAVKjk35wb/AVpNiuk2bkQ9UITvvHXecoZW bEZxDsoQUbaMQ4S3XzH1lwf2phheen7UOPKJh3gd69RsPK8fYSNiEB1ulnLh4KIK YBc8hIP5YawW3OBPiCmFidjuhKXHFltceWKLPjg7pkRh/zRipCoII5G/GFbWCe2i C2a3rECkOjS3ennL3HYlWgSTKY1W5i2roKnoXLojoILTZGOLSOAvb9wRNnbSW1GJ kJcFX41ARF3qSsU5wkBSAFFd0GRsPZJGwRg2R6PbDeEMsm/p0ufDa08ii2wIq68N bjSEtpQ+o0BwP9Mz0jYLHndvNx5D+OwCa23Q2jYhZeyYLH3mgHptTV0S8V8559qA 0+o11xv+ZIKN5u6jo9Ir =Nq19 -----END PGP SIGNATURE----- --cuxcoPCk6PCALLeMI2BmJgh3kaKup03aJ--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?a82571bb-8027-8cb5-37d5-b82051b9b671>