Monday, March 4, 2019

Anycast CDN issues with Hurricane Electric IPv6 Tunnel

Is there any way I can implement dnsmasq or any DNS forwarder in such a way that it queries both IPv4 and IPv6 upstream DNS servers at the same time and returns the A records from IPv4 DNS server and AAAA records from IPv6 DNS Server?

I have setup IPv6 tunnel from Hurricane Electric (HE) Tunnelbroker at my home since my ISP offers only /64 subnet. So all my IPv4 traffic goes through my ISP directly and IPv6 traffic is tunneled over HE. I have a dnsmasq server setup on the router that caches and forwards DNS requests to IPv4 Google DNS. The nearest HE endpoint that I am connecting to is in another country and the latency is 130ms from my home. Since the DNS requests are made through my ISP directly, the Anycast IPs of popular CDNs have <30ms ping on IPv4 but the latency is more than 300ms on IPv6. If I switch the the upstream DNS to IPv6 Google DNS, the IPv6 ping to CDNs is <150ms but the IPv4 ping is over 300ms, since the DNS requests are made through HE tunnel and the nearest Anycast IPs are returned which have higher latency on my IPv4 link.



No comments:

Post a Comment