Add 100.64.0.0/10 prefixes to IPv4 Locally-Served DNS Zones Registry.
draft-ietf-dnsop-rfc6598-rfc6303-04

Abstract

RFC6598 specified that: "Reverse DNS queries for Shared Address Space addresses [100.64.0.0/10] MUST NOT be forwarded to the global DNS infrastructure."

This document formally directs IANA to add the associated zones to the "IPv4 Locally-Served DNS Zones Registry" to prevent such queries accidently leaking to the global DNS infrastructure.

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at http://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on April 12, 2016.

Copyright Notice

Copyright (c) 2015 IETF Trust and the persons identified as the document authors. All rights reserved.

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

Table of Contents

• 1. Introduction
• 2. Changes to IPv4 Locally-Served DNS Zones Registry
• 2.1. RFC6598 Zones
• 3. IANA Considerations
• 4. Security Considerations
• 5. Acknowledgements
• 6. Normative References
• Author's Address

1. Introduction

[RFC6598] specified that: "Reverse DNS queries for Shared Address Space addresses [100.64.0.0/10] MUST NOT be forwarded to the global DNS infrastructure." [RFC6303] provides guidance on handling such queries.

This document directs the IANA to add the IPv4 reverse zones corresponding to 100.64.0.0/10, a netblock reserved in [RFC6598], to the IPv4 Locally-Served DNS Zone Registry established in [RFC6303].

Unlike [RFC1918] address, which are not expected to be seen by other parties, the addresses from [RFC6598] are expected to be seen by parties other than those deploying the addresses, so it is more crucial that recursive nameservers default to serving these zones locally.

2. Changes to IPv4 Locally-Served DNS Zones Registry

To add the following zone listed in RFC6598 Zones [rfc6598zones] to the "IPv4 Locally-Served DNS Zone Registry".

2.1. RFC6598 Zones

• 64.100.IN-ADDR.ARPA
• 65.100.IN-ADDR.ARPA
• 66.100.IN-ADDR.ARPA
• 67.100.IN-ADDR.ARPA
• 68.100.IN-ADDR.ARPA
• 69.100.IN-ADDR.ARPA
• 70.100.IN-ADDR.ARPA
• 71.100.IN-ADDR.ARPA
• 72.100.IN-ADDR.ARPA
• 73.100.IN-ADDR.ARPA
• 74.100.IN-ADDR.ARPA
• 75.100.IN-ADDR.ARPA
• 76.100.IN-ADDR.ARPA
• 77.100.IN-ADDR.ARPA
• 78.100.IN-ADDR.ARPA
• 79.100.IN-ADDR.ARPA
• 80.100.IN-ADDR.ARPA
• 81.100.IN-ADDR.ARPA
• 82.100.IN-ADDR.ARPA
• 83.100.IN-ADDR.ARPA
• 84.100.IN-ADDR.ARPA
• 85.100.IN-ADDR.ARPA
• 86.100.IN-ADDR.ARPA
• 87.100.IN-ADDR.ARPA
• 88.100.IN-ADDR.ARPA
• 89.100.IN-ADDR.ARPA
• 90.100.IN-ADDR.ARPA
• 91.100.IN-ADDR.ARPA
• 92.100.IN-ADDR.ARPA
• 93.100.IN-ADDR.ARPA
• 94.100.IN-ADDR.ARPA
• 95.100.IN-ADDR.ARPA
• 96.100.IN-ADDR.ARPA
• 97.100.IN-ADDR.ARPA
• 98.100.IN-ADDR.ARPA
• 99.100.IN-ADDR.ARPA
• 100.100.IN-ADDR.ARPA
• 101.100.IN-ADDR.ARPA
• 102.100.IN-ADDR.ARPA
• 103.100.IN-ADDR.ARPA
• 104.100.IN-ADDR.ARPA
• 105.100.IN-ADDR.ARPA
• 106.100.IN-ADDR.ARPA
• 107.100.IN-ADDR.ARPA
• 108.100.IN-ADDR.ARPA
• 109.100.IN-ADDR.ARPA
• 110.100.IN-ADDR.ARPA
• 111.100.IN-ADDR.ARPA
• 112.100.IN-ADDR.ARPA
• 113.100.IN-ADDR.ARPA
• 114.100.IN-ADDR.ARPA
• 115.100.IN-ADDR.ARPA
• 116.100.IN-ADDR.ARPA
• 117.100.IN-ADDR.ARPA
• 118.100.IN-ADDR.ARPA
• 119.100.IN-ADDR.ARPA
• 120.100.IN-ADDR.ARPA
• 121.100.IN-ADDR.ARPA
• 122.100.IN-ADDR.ARPA
• 123.100.IN-ADDR.ARPA
• 124.100.IN-ADDR.ARPA
• 125.100.IN-ADDR.ARPA
• 126.100.IN-ADDR.ARPA
• 127.100.IN-ADDR.ARPA

3. IANA Considerations

This document directs IANA to add the zones listed in RFC6598 Zones [rfc6598zones] to the "IPv4 Locally-Served DNS Zone Registry".

IANA is reminded that an insecure delegation for these zones is required for compliance with [RFC6598] to break the DNSSEC chain of trust.

4. Security Considerations

This document is thought to present no additional security risks to the Internet.

5. Acknowledgements

I would like to thank Joe Abley for his review comments.

6. Normative References

Author's Address