<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div class=""><div><blockquote type="cite" class=""><div class="">On Nov 24, 2016, at 3:54 AM, Trevor Cordes <<a href="mailto:trevor@tecnopolis.ca" class="">trevor@tecnopolis.ca</a>> wrote:</div><div class=""><br class=""><span class="" style="float: none; display: inline !important;">First I found this named option:</span><br class=""><span class="" style="float: none; display: inline !important;">filter-aaaa-on-v4 (and -v6)</span><br class=""><span class="" style="float: none; display: inline !important;">"It is intended to help the transition from IPv4 to IPv6 by not giving</span><br class=""><span class="" style="float: none; display: inline !important;">IPv6 addresses to DNS clients unless they have connections to the IPv6</span><br class=""><span class="" style="float: none; display: inline !important;">Internet."</span><br class=""><span class="" style="float: none; display: inline !important;">Super description and chart here:</span><br class=""><a href="https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html" class="">https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html</a><br class=""></div></blockquote></div><br class=""><div class="">This came up recently for me in another discussion. As an IPv6 pioneer, I'm fully IPv6 enabled and have been for the last 10 years or so. At some points that has been over <a href="http://he.net" class="">HE.net</a> IPv6 tunnels, and more recently that has been native IPv6 access. As I'm my own ISP, and I do my own BGP for myself, the address ranges I use for myself are properly registered and located in Winnipeg, Manitoba so I don't have any issues running Netflix with their latest "war on tunnels". However, for people who have a <a href="http://he.net" class="">HE.net</a> IPv6 tunnel (very very common), which has IPv6 space which is registered in the US, this causes issues with netflix when requests start cross countries of apparent origin.</div><div class=""><br class=""></div><div class="">One of the solutions I found that worked quite nicely was to run a separate recursive DNS server for netflix users that had the filter-aaaa-on-* options enabled. Queries for netflix domains are then routed to this DNS server that strips out the AAAA records so that netflix runs only over the IPv4 connection, originating from a Canadian IP keeping netflix happy.</div><div class=""><div class=""><br class="webkit-block-placeholder"></div><div class=""><br class="Apple-interchange-newline">Theodore Baschak - AS395089 - Hextet Systems<br class=""><a href="https://ciscodude.net/" class="">https://ciscodude.net/</a> - <a href="https://hextet.systems/" class="">https://hextet.systems/</a><br class=""><a href="http://mbix.ca/" class="">http://mbix.ca/</a></div></div></div><div class=""><br class=""></div></body></html>