[Pkg-dns-devel] Bug#818292: L-Root IPv6 address renumbering

[Simon Deziel]

Package: unbound
Version: 1.5.8-1

Dear maintainers,

On March 23rd, L-Root will stop responding on the old IPv6. Only the new
IPv6 address will remain functional, see [1],[2] for details. Unbound
upstream updated the builtin root.hints and I attached that patch for
your convenience.

Since those root.hints changes happen from time to time, I think Unbound
could use the data provided by the dns-root-data package as it already
does for the root.key file. Please find a patch that does that.

One drawback of this is if Unbound has a fresher builtin list than
what's provided by dns-root-data, the builtin list would be ignored. It
could be mitigated by editing the config file to use the builtin list if
the unbound binary is more recent than the root.hints file. This
violates the principle of least surprise so probably not a viable solution.

Lastly, since I'm proposing to depend on dns-root-data, I also filled a
bug against it regarding the L-Root IPv6 address change.

Regards,
Simon


1: http://seclists.org/nanog/2016/Mar/255
2: https://unbound.nlnetlabs.nl/pipermail/unbound-
users/2016-March/004262.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: L-root-updated-ipv6-address.patch
Type: text/x-patch
Size: 1234 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20160315/10414ae5/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: root-hints-from-dns-root-data.patch
Type: text/x-patch
Size: 2748 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20160315/10414ae5/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20160315/10414ae5/attachment.sig>