Comment by xurukefi
2 days ago
> How do clients get the address for a nice domain name without the addresses in public DNS?
They don’t. You put the addresses in public DNS.
2 days ago
> How do clients get the address for a nice domain name without the addresses in public DNS?
They don’t. You put the addresses in public DNS.
Yeah, nah. Won't be doing that.
Why not? It's easy to set up and manage and it just points at an internal IP address
I consider that an unnecessary leak of private topology, it's not info that needs to be public. IPv6 addresses are not really ever internal, and an exploitable vulnerability in a firewall product leads to the possibility of a directly addressable target. Guessing a v6 address without a name pointing to it is impractical at best.