Community discussions

 
FIPTech
Member
Member
Topic Author
Posts: 469
Joined: Tue Dec 22, 2009 1:53 am

IPv6 Ping does not work with domain names

Sun Dec 05, 2010 3:20 am

I tried to Ping ipv6.google.com from the Ping tool without success.

I got the error "Error in Ping To - ip address expected" from winbox, or from the command line :

ping address=ipv6.google.com
while resolving ip-address: could not get answer from dns server

Same try from a Linux machine on the same network as this router is working without problem. So i'm sure there is no problem with our DNS servers :

ping6 ipv6.google.com

PING ipv6.google.com(2a00:1450:8002::63) 56 data bytes
64 bytes from 2a00:1450:8002::63: icmp_seq=0 ttl=53 time=48.8 ms
64 bytes from 2a00:1450:8002::63: icmp_seq=1 ttl=53 time=45.8 ms
64 bytes from 2a00:1450:8002::63: icmp_seq=2 ttl=53 time=46.0 ms
64 bytes from 2a00:1450:8002::63: icmp_seq=3 ttl=53 time=44.4 ms


If i ping directly the IP address 2a00:1450:8002::63 it's working :

ping address=2a00:1450:8002::63
HOST SIZE TTL TIME STATUS
2a00:1450:8002::63 56 55 58ms echo reply
2a00:1450:8002::63 56 55 57ms echo reply
2a00:1450:8002::63 56 55 57ms echo reply
2a00:1450:8002::63 56 55 57ms echo reply
2a00:1450:8002::63 56 55 56ms echo reply

Seems like there is a problem with IPv6 AAAA pointers resolution.

There is no problem with IPv4 pointers : pinging google.com does work from the ping tool.

ping google.com
HOST SIZE TTL TIME STATUS
74.125.230.81 56 58 46ms
74.125.230.81 56 58 46ms
74.125.230.81 56 58 45ms
74.125.230.81 56 58 44ms

I tried to enter our IPv6 DNS server addresses in the DNS setup, to see if direct resolution on a IPv6 enabled DNS server was working, but this does not help.


Mikrotik can you correct this for 5.0 rc6 because it is a fondamental tool for IPv6 tests. Don't forget that the end of IPv4 pool is 03 march 2011. Only four monthes. We have now less than one year to fully test and deploy IPv6.

Direct resolution on IPv6 enabled DNS servers is important too because futur clients near 2012 and later will not have access to IPv4 DNS servers. (they will get IPv6 only addresses so they will not be able to contact IPv4 DNS server to get AAAA records).
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Mon Dec 06, 2010 9:57 am

it used to work, will look into the problem.
 
gjnardoni
just joined
Posts: 22
Joined: Sat Dec 11, 2010 5:20 am

Re: IPv6 Ping does not work with domain names

Thu Apr 21, 2011 1:31 am

Hello, It seems the problem is still there.
I upgraded to ROS 5.1 and set DNS (ip->DNS) and added HE.net anycast ipv6 dns server but from mikrotik itself it doesn't resolve any domain into ipv6 address. (ipv6.google.com).
But any machine in the networks resolves very good.

What's the problem?

Cheers.-
 
FIPTech
Member
Member
Topic Author
Posts: 469
Joined: Tue Dec 22, 2009 1:53 am

Re: IPv6 Ping does not work with domain names

Thu Apr 21, 2011 2:58 am

Same problem here with 5.1.

I can't understand how Mikrotik can get positiv results here.


Mikrotik, did you try through a PPPoE IPv6 connection, or Ethernet IPv6 ?


I'm trying through PPPoE.

Perhaps that binding to PPPoE interfaces does not work from the router ? Missing glue code ??

Resolving ipv6.google.com from other machines on the Network works without problems.
 
Ivoshiee
Member
Member
Posts: 471
Joined: Sat May 06, 2006 4:11 pm

Re: IPv6 Ping does not work with domain names

Thu Apr 21, 2011 3:37 pm

I recall it never working on any version of RouterOS.

At the moment:

Broken on v4.17:
[admin@Ranume] > ping ipv6.google.com
invalid value for argument address
[admin@Ranume] > 
Broken on v4.16:
[admin@Skhal] > ping ipv6.google.com
invalid value for argument address
[admin@Skhal] > 
Broken on v5.0:
[admin@Jeekim] > ping ipv6.google.com
dns name exists, but no appropriate record
invalid value for argument ipv6-address
[admin@Jeekim] > 
Working on Fedora 14 behind these MT boxes and using the same DNS servers:
[ivo@haskaa ~]$ ping6 ipv6.google.com
PING ipv6.google.com(2a00:1450:8003::68) 56 data bytes
64 bytes from 2a00:1450:8003::68: icmp_seq=1 ttl=52 time=55.3 ms
64 bytes from 2a00:1450:8003::68: icmp_seq=2 ttl=52 time=53.4 ms
^C
--- ipv6.google.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 53.486/54.393/55.301/0.936 ms
[ivo@haskaa ~]$ 
 
User avatar
yarda
Frequent Visitor
Frequent Visitor
Posts: 73
Joined: Tue May 22, 2007 4:58 pm
Location: Czech Republic - Southern Bohemia
Contact:

Re: IPv6 Ping does not work with domain names

Wed Jun 15, 2011 7:58 pm

Testing on 5.4 but not functional yet regular.

[admin@mikrotik] > :put [:resolve ipv6.google.com]
failure: dns name exists, but no appropriate record

on linux behind this MT resolv works good.
 
Ivoshiee
Member
Member
Posts: 471
Joined: Sat May 06, 2006 4:11 pm

Re: IPv6 Ping does not work with domain names

Tue Dec 13, 2011 11:21 pm

Testing on 5.4 but not functional yet regular.

[admin@mikrotik] > :put [:resolve ipv6.google.com]
failure: dns name exists, but no appropriate record

on linux behind this MT resolv works good.
v5.11 and still the same situation. Why is is so difficult to get fixed/supported?
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Wed Dec 14, 2011 12:06 pm

not sure how to react:
RouterOS 5.11 (c) 1999-2011


[admin@hs] > /ping [:resolve ipv6.google.com]
HOST                                     SIZE TTL TIME  STATUS                                                                      
2a00:1450:8005::6a                         56  49 73ms  echo reply                                                                  
2a00:1450:8005::6a                         56  49 59ms  echo reply                                                                  
    sent=2 received=2 packet-loss=0% min-rtt=59ms avg-rtt=66ms max-rtt=73ms 

[admin@hs] > :put [:resolve ipv6.google.com] 
2a00:1450:8005::6a
and i have actually IPv6 working with global ipv6 addressing working.
 
FIPTech
Member
Member
Topic Author
Posts: 469
Joined: Tue Dec 22, 2009 1:53 am

Re: IPv6 Ping does not work with domain names

Wed Dec 14, 2011 12:44 pm

Working for me.

But i did not see this syntax in the Wiki :

http://wiki.mikrotik.com/wiki/Manual:Tr ... ting_tools


Woud be simpler to have a ping6 tool or a parameter for ping.
 
ZipTx
just joined
Posts: 2
Joined: Fri Dec 02, 2011 5:15 am

Re: IPv6 Ping does not work with domain names

Tue Dec 20, 2011 6:15 am

I concur. The behavior isn't consistent with the ipv4 ping syntax where the name resolution automatically happens, but thanks for the post! Google lead me right to the answer here. [:resolve ...] doesn't seem real intuitive and it's not in the mikrotik command help. Verified it works on 5.9 with the [:resolve ...] syntax.
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Wed Dec 21, 2011 1:22 pm

Devs want to address this in general manner not hacking each place with domain separately. So the change is coming.
 
User avatar
NAB
Trainer
Trainer
Posts: 503
Joined: Tue Feb 10, 2009 4:08 pm
Location: UK
Contact:

Re: IPv6 Ping does not work with domain names

Fri Oct 12, 2012 11:38 pm

So the change is coming.
It's been almost ten months now, is this change any closer?
Nicholas Barnes BSc(hons)
Certified Mikrotik Consultant
Certified Mikrotik Trainer

Vitell - Asterisk, Linux and network consultants
Unofficial IRC channel: #routerboard on irc.z.je
 
User avatar
NAB
Trainer
Trainer
Posts: 503
Joined: Tue Feb 10, 2009 4:08 pm
Location: UK
Contact:

Re: IPv6 Ping does not work with domain names

Thu Nov 15, 2012 1:45 pm

So the change is coming.
It's been over eleven months now, is this change any closer?
Nicholas Barnes BSc(hons)
Certified Mikrotik Consultant
Certified Mikrotik Trainer

Vitell - Asterisk, Linux and network consultants
Unofficial IRC channel: #routerboard on irc.z.je
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Thu Nov 15, 2012 2:39 pm

yes, it is on the feature list and will be removed only when implemented.
 
Agamen
just joined
Posts: 11
Joined: Sat Jan 15, 2011 6:42 pm

Re: IPv6 Ping does not work with domain names

Thu Dec 13, 2012 9:59 am

ROS 6.0rc5:
[admin@MikroTik] > ping ipv6.google.com
dns name exists, but no appropriate record
invalid value for argument ipv6-address
[admin@MikroTik] > ping 2a00:1450:4017:800::1012
HOST SIZE TTL TIME STATUS
2a00:1450:4017:800::1012 56 57 64ms echo reply
2a00:1450:4017:800::1012 56 57 64ms echo reply
2a00:1450:4017:800::1012 56 57 64ms echo reply
2a00:1450:4017:800::1012 56 57 66ms echo reply
sent=4 received=4 packet-loss=0% min-rtt=64ms avg-rtt=64ms max-rtt=66ms
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Thu Dec 13, 2012 10:18 am

that is problem with ping and requires a lot of changes to make it work. So in the mean time do this instead

ros code

/ping [:resolve ipv6.google.com]
since workaround is pretty trivial
 
Kola
newbie
Posts: 46
Joined: Fri Aug 02, 2013 11:42 am

Re: IPv6 Ping does not work with domain names

Tue Sep 30, 2014 6:15 pm

...So in the mean time do this instead ... since workaround is pretty trivial
Then where definitely should be at least something like resolve6! :-? Damn, two years is almost done since the promised feature.
 
Ivoshiee
Member
Member
Posts: 471
Joined: Sat May 06, 2006 4:11 pm

Re: IPv6 Ping does not work with domain names

Mon Jan 26, 2015 2:57 am

...So in the mean time do this instead ... since workaround is pretty trivial
Then where definitely should be at least something like resolve6! :-? Damn, two years is almost done since the promised feature.
Not a resolve6, but the ping6.
 
patrick7
Member Candidate
Member Candidate
Posts: 298
Joined: Sat Jul 20, 2013 2:40 pm

Re: IPv6 Ping does not work with domain names

Tue Jan 27, 2015 4:37 pm

Traceroute with IPv6 and use-dns=yes does not resolve PTR of the hops, too.
 
User avatar
saaremaa
Member Candidate
Member Candidate
Posts: 156
Joined: Tue Feb 02, 2010 7:48 pm
Location: Baltijos šalių miestas

Re: IPv6 Ping does not work with domain names

Tue Jan 27, 2015 8:55 pm

Not confirmed. ROS 6.25. Traceroute with IPv6 and use-dns = yes resolve PTR.
You do not have the required permissions to view the files attached to this post.
CMDR Saaremaa (Gutamaya Sierra Alpha Alpha)
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8319
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: IPv6 Ping does not work with domain names

Wed Jan 28, 2015 4:30 pm

hm-m-m... I think, 8.8.8.8 is not very IPv6...
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
saaremaa
Member Candidate
Member Candidate
Posts: 156
Joined: Tue Feb 02, 2010 7:48 pm
Location: Baltijos šalių miestas

Re: IPv6 Ping does not work with domain names

Sat Jan 31, 2015 9:38 am

hm-m-m... I think, 8.8.8.8 is not very IPv6...
I was tired at work and was not attentive. Yes. The problem is confirmed.
You do not have the required permissions to view the files attached to this post.
CMDR Saaremaa (Gutamaya Sierra Alpha Alpha)
 
SDFadfasdfadsf
just joined
Posts: 20
Joined: Sun Feb 07, 2016 2:21 am

Re: IPv6 Ping does not work with domain names

Sat Jun 11, 2016 9:44 pm

Still broken in 6.35.2
 
User avatar
LouisVisagie
just joined
Posts: 6
Joined: Wed May 29, 2013 9:32 pm
Location: South Africa

Re: IPv6 Ping does not work with domain names

Fri Jul 29, 2016 6:15 pm

[admin@MikroTik Router] > ping nextbigfuture.com
invalid value for argument address:
    invalid value of mac-address, mac address required
    invalid value for argument ipv6-address
    failure: dns name exists, but no appropriate record

is this the same problem? anyone know if nextbigfuture.com is using an ipv6 address now?
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4051
Joined: Wed May 11, 2011 6:08 pm

Re: IPv6 Ping does not work with domain names

Fri Jul 29, 2016 11:43 pm

[admin@MikroTik Router] > ping nextbigfuture.com
invalid value for argument address:
    invalid value of mac-address, mac address required
    invalid value for argument ipv6-address
    failure: dns name exists, but no appropriate record

is this the same problem? anyone know if nextbigfuture.com is using an ipv6 address now?
Not according to a dig I just did....
;; QUESTION SECTION:
;nextbigfuture.com.             IN      A

;; ANSWER SECTION:
nextbigfuture.com.      1800    IN      A       98.124.199.3   <----- only this A record, and no AAAA record

;; AUTHORITY SECTION:
nextbigfuture.com.      172800  IN      NS      dns5.name-services.com.
nextbigfuture.com.      172800  IN      NS      dns2.name-services.com.
nextbigfuture.com.      172800  IN      NS      dns4.name-services.com.
nextbigfuture.com.      172800  IN      NS      dns3.name-services.com.
nextbigfuture.com.      172800  IN      NS      dns1.name-services.com.

;; ADDITIONAL SECTION:
dns1.name-services.com. 152547  IN      A       98.124.192.1
dns2.name-services.com. 152547  IN      A       98.124.197.1
dns3.name-services.com. 152547  IN      A       98.124.193.1
dns4.name-services.com. 152547  IN      A       98.124.194.1
dns5.name-services.com. 152547  IN      A       98.124.196.1
When given a spoon,
you should not cling to your fork.
The soup will get cold.
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: IPv6 Ping does not work with domain names

Sun Jun 25, 2017 3:03 am

Still not really fixed in 6.39.2 ...
[rtradmin@core] > /ping ipv6.google.com
invalid value for argument address:
    invalid value of mac-address, mac address required
    invalid value for argument ipv6-address
    failure: dns name exists, but no appropriate record
Although /ping [:resolve ipv6.google.com] works. From my point of view, for the ping cmd it should not matter, if a host is ipv4 or ipv6.
Additionally a parameter for choosing to ping a host by it's v4 or v6 would be nice.

Thanks
 
idlemind
Forum Guru
Forum Guru
Posts: 1102
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: IPv6 Ping does not work with domain names

Mon Jun 26, 2017 6:23 am

Devs want to address this in general manner not hacking each place with domain separately. So the change is coming.
Is winter coming also? Seriously, getaddrinfo migration takes this long?
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Wed Jun 28, 2017 3:50 pm

This is not getaddrinfo in this case. This is set in RouterOS and, currently, it is not going to be changed to return IPv6 address first and IPv4 after that, but will return IPv4 address if available.There is no information when this will be changed to conform with the RFC to return IPv6 address if usable and then IPv4.
 
idlemind
Forum Guru
Forum Guru
Posts: 1102
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: IPv6 Ping does not work with domain names

Thu Jun 29, 2017 6:41 am

This is not getaddrinfo in this case. This is set in RouterOS and, currently, it is not going to be changed to return IPv6 address first and IPv4 after that, but will return IPv4 address if available.There is no information when this will be changed to conform with the RFC to return IPv6 address if usable and then IPv4.
Thanks for the clarification, sadly it's not an IPv4 vs IPv6 preference issue. You simply cannot ping an IPv6 only host. Try the record ipv6.google.com on a PC and then try it from a MikroTik router.
PS C:\> Resolve-DnsName -Server 8.8.8.8 -Name ipv6.google.com -Type A

Name                           Type   TTL   Section    NameHost
----                           ----   ---   -------    --------
ipv6.google.com                CNAME  86399 Answer     ipv6.l.google.com

Name                   : l.google.com
QueryType              : SOA
TTL                    : 59
Section                : Authority
NameAdministrator      : dns-admin.google.com
SerialNumber           : 160439217
TimeToZoneRefresh      : 900
TimeToZoneFailureRetry : 900
TimeToExpiration       : 1800
DefaultTTL             : 60



PS C:\> Resolve-DnsName -Server 8.8.8.8 -Name ipv6.google.com -Type AAAA

Name                           Type   TTL   Section    NameHost
----                           ----   ---   -------    --------
ipv6.google.com                CNAME  86394 Answer     ipv6.l.google.com

Name       : ipv6.l.google.com
QueryType  : AAAA
TTL        : 299
Section    : Answer
IP6Address : 2607:f8b0:4009:811::200e
Looking at one of my routers:
[admin@rtr1] > ping count=2 ipv6.google.com
invalid value for argument address:
    invalid value of mac-address, mac address required
    invalid value for argument ipv6-address
    failure: dns name exists, but no appropriate record
I guess, let's start by making sure we've got the right issue. I understand you don't have a plan to fix a preference for IPv6 over IPv4. Is that the same answer for this level of basic functionality?

This probably extends into the tools as well. I just checked /tool traceroute. It works with www.google.com which works (has an A record) and doesn't work with ipv6.google.com (no A record but has a AAAA record).
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: IPv6 Ping does not work with domain names

Thu Jun 29, 2017 11:54 am

the problem will go away when IPv6 is set as a preferred option for the :resolve command and elsewhere where RouterOS attempts to resolve a hostname to IP address. When forced the :resolve command is returning the IPv6 address, hence the workaround of /ping [:resolve ipv6.only.domain] is working.
 
idlemind
Forum Guru
Forum Guru
Posts: 1102
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: IPv6 Ping does not work with domain names

Thu Jun 29, 2017 2:15 pm

I assume that'll have the inverse effect of not working with IPv4 names then?
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4051
Joined: Wed May 11, 2011 6:08 pm

Re: IPv6 Ping does not work with domain names

Thu Jul 06, 2017 5:55 pm

Wouldn't happy eyeballs dictate that it try both and utilize whichever opens faster?
(Or maybe that RFC only applies to browsers and media player applications, but not appliances such as routers, etc)
When given a spoon,
you should not cling to your fork.
The soup will get cold.
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: IPv6 Ping does not work with domain names

Fri Mar 09, 2018 3:39 pm

This workaround is a definitive solution? :? :shock:
the problem will go away when IPv6 is set as a preferred option for the :resolve command and elsewhere where RouterOS attempts to resolve a hostname to IP address. When forced the :resolve command is returning the IPv6 address, hence the workaround of /ping [:resolve ipv6.only.domain] is working.
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
idlemind
Forum Guru
Forum Guru
Posts: 1102
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: IPv6 Ping does not work with domain names

Fri Mar 09, 2018 4:03 pm

This workaround is a definitive solution? :? :shock:
the problem will go away when IPv6 is set as a preferred option for the :resolve command and elsewhere where RouterOS attempts to resolve a hostname to IP address. When forced the :resolve command is returning the IPv6 address, hence the workaround of /ping [:resolve ipv6.only.domain] is working.

Yup, still no movement. I suspect we'll see little improvement until the market truly forces their hands. It's good thing that Ubnt is iterating and releasing IPv6 features for their controller on top of the support they already have in other products.
 
zer0t3ch
just joined
Posts: 1
Joined: Wed Sep 12, 2018 3:46 pm

Re: IPv6 Ping does not work with domain names

Sun Dec 02, 2018 1:52 am

It's been over 5 years, now. Does it really take that long to figure out how to make a commonly-used utility at least fall-back to AAAA records when there are no A records? Or any of the other numerous solutions?
 
alaine
just joined
Posts: 3
Joined: Fri Jun 12, 2015 2:36 pm

Re: IPv6 Ping does not work with domain names

Fri Dec 21, 2018 4:25 am

RouterOS 6.43.7 on all devices.

I have exactly the same problem with Mikrotik unable to resolve AAAA records from a hostname.

My test Mikrotik LtAP device gets CGNAT protected private IPv4 address of 100.64.0.0/18 from the mobile operator. There is no inbound access to that.
The same Mikrotik LtAP device gets dynamic and changing IPv6 address address and IPv6 prefix, which is nice. That IPv6 address is accessible from the Internet.

The "/ip cloud" DDNS hostname now has both A and AAAA records, which is nice. The X.sn.mynetname.net gets updated with the CGNAT external A-record and the native IPv6 address. Nice.

When I am on Mikrotik CLI elsewhere in the world, there is no way to use IPv6 when saying "/system ssh 123456789.sn.mynetname.net".

One of the listed "solutions" 6 years ago was " /ping [resolve ipv6.google.com]" . That only works when the hostname has only the AAAA record, but no A record.

The X.sn.mynetname,net addresses have both A and AAAA records. And again, Mikrotik will only resolve to a lonely A record, if that is available. Another example of the same thing is when user says "/ping [:resolve google.com]", resolving allways to IPv4-only. "google.com" hostname has the AAAA record, Mikrotik is never bothered to ask that, ever.

Even when the Mikrotik DNS cache has the target hostname and its AAAA record already known and cached (and no A record cached), Mikrotik resolver will still A-record query the outside DNS resolvers, and force using the A record for everything. Not good.

This seems to be really unwanted issue to fix in Mikrotik.

For the easiest solution, could Mikrotik implement a new ":resolve" function with name of ":resolve6"? That ":resolve6" will only query AAAA recods (and follow CNAMES of course). A matching ":resolve4" would be important to have too, forcing query of the plain A records (and following the CNAMEs). And still now, the funny plain stupid-vanilla ":resolve" thingie can stay as it is and as it wants to [not]work.

This suggestion does not break anything, all systems and scripts will work exactly as before. Now the users who have to use hostnames and forcing IPv6 addresses, can say "/ping [:resolve6 google.com]" and get the functionality and results they need.
 
idlemind
Forum Guru
Forum Guru
Posts: 1102
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: IPv6 Ping does not work with domain names

Fri Dec 21, 2018 6:59 am

RouterOS 6.43.7 on all devices.

I have exactly the same problem with Mikrotik unable to resolve AAAA records from a hostname.

My test Mikrotik LtAP device gets CGNAT protected private IPv4 address of 100.64.0.0/18 from the mobile operator. There is no inbound access to that.
The same Mikrotik LtAP device gets dynamic and changing IPv6 address address and IPv6 prefix, which is nice. That IPv6 address is accessible from the Internet.

The "/ip cloud" DDNS hostname now has both A and AAAA records, which is nice. The X.sn.mynetname.net gets updated with the CGNAT external A-record and the native IPv6 address. Nice.

When I am on Mikrotik CLI elsewhere in the world, there is no way to use IPv6 when saying "/system ssh 123456789.sn.mynetname.net".

One of the listed "solutions" 6 years ago was " /ping [resolve ipv6.google.com]" . That only works when the hostname has only the AAAA record, but no A record.

The X.sn.mynetname,net addresses have both A and AAAA records. And again, Mikrotik will only resolve to a lonely A record, if that is available. Another example of the same thing is when user says "/ping [:resolve google.com]", resolving allways to IPv4-only. "google.com" hostname has the AAAA record, Mikrotik is never bothered to ask that, ever.

Even when the Mikrotik DNS cache has the target hostname and its AAAA record already known and cached (and no A record cached), Mikrotik resolver will still A-record query the outside DNS resolvers, and force using the A record for everything. Not good.

This seems to be really unwanted issue to fix in Mikrotik.

For the easiest solution, could Mikrotik implement a new ":resolve" function with name of ":resolve6"? That ":resolve6" will only query AAAA recods (and follow CNAMES of course). A matching ":resolve4" would be important to have too, forcing query of the plain A records (and following the CNAMEs). And still now, the funny plain stupid-vanilla ":resolve" thingie can stay as it is and as it wants to [not]work.

This suggestion does not break anything, all systems and scripts will work exactly as before. Now the users who have to use hostnames and forcing IPv6 addresses, can say "/ping [:resolve6 google.com]" and get the functionality and results they need.

Regardless of workarounds MikroTik's apathetic approach to IPv6 lost MikroTik 2 full network refreshes on my side in December alone to Ubiquiti. At least they (Ubiquiti) demonstrated that they are capable of developing IPv6 related features.
Last edited by idlemind on Fri Dec 21, 2018 3:15 pm, edited 1 time in total.
 
mistry7
Forum Guru
Forum Guru
Posts: 1326
Joined: Tue Oct 13, 2009 11:57 am
Location: Germany

Re: IPv6 Ping does not work with domain names

Fri Dec 21, 2018 7:52 am

RouterOS 6.43.7 on all devices.

I have exactly the same problem with Mikrotik unable to resolve AAAA records from a hostname.

My test Mikrotik LtAP device gets CGNAT protected private IPv4 address of 100.64.0.0/18 from the mobile operator. There is no inbound access to that.
The same Mikrotik LtAP device gets dynamic and changing IPv6 address address and IPv6 prefix, which is nice. That IPv6 address is accessible from the Internet.

The "/ip cloud" DDNS hostname now has both A and AAAA records, which is nice. The X.sn.mynetname.net gets updated with the CGNAT external A-record and the native IPv6 address. Nice.

When I am on Mikrotik CLI elsewhere in the world, there is no way to use IPv6 when saying "/system ssh 123456789.sn.mynetname.net".

One of the listed "solutions" 6 years ago was " /ping [resolve ipv6.google.com]" . That only works when the hostname has only the AAAA record, but no A record.

The X.sn.mynetname,net addresses have both A and AAAA records. And again, Mikrotik will only resolve to a lonely A record, if that is available. Another example of the same thing is when user says "/ping [:resolve google.com]", resolving allways to IPv4-only. "google.com" hostname has the AAAA record, Mikrotik is never bothered to ask that, ever.

Even when the Mikrotik DNS cache has the target hostname and its AAAA record already known and cached (and no A record cached), Mikrotik resolver will still A-record query the outside DNS resolvers, and force using the A record for everything. Not good.

This seems to be really unwanted issue to fix in Mikrotik.

For the easiest solution, could Mikrotik implement a new ":resolve" function with name of ":resolve6"? That ":resolve6" will only query AAAA recods (and follow CNAMES of course). A matching ":resolve4" would be important to have too, forcing query of the plain A records (and following the CNAMEs). And still now, the funny plain stupid-vanilla ":resolve" thingie can stay as it is and as it wants to [not]work.

This suggestion does not break anything, all systems and scripts will work exactly as before. Now the users who have to use hostnames and forcing IPv6 addresses, can say "/ping [:resolve6 google.com]" and get the functionality and results they need.

Regardless of workarounds MikroTik's apathetic approach to IPv6 lost MikroTik 2 full network refreshes on my side in December alone to Ubiquiti. At least they demonstrated that they are capable of developing IPv6 related features.
They are looking for another thinks like KidControl
and surprise KidControl doesn’t work with IPv6
 
muetzekoeln
Member Candidate
Member Candidate
Posts: 145
Joined: Fri Jun 29, 2018 2:34 pm

Re: IPv6 Ping does not work with domain names

Fri Dec 21, 2018 10:27 am

KidControl doesn’t work with IPv6

Well, RouterOS Version 6.44beta50 added IPv6 for KidControl and I am quite happy about this.
Let's hope that means, that IPv6 will be better supported in the rest of RouterOS in the near future ....
 
alaine
just joined
Posts: 3
Joined: Fri Jun 12, 2015 2:36 pm

Re: IPv6 Ping does not work with domain names

Fri Dec 21, 2018 8:27 pm

Solution 1: A quick and easy way is to implement the following commands. These do not break existing scritps:

- :resolve6 = resolves to AAAA records, following CNAME's of course
- :resolve4 = resolves A records, following CNAME's of course

---------- 8< -------- 8< -----

Solution 2: Optionally, the current ':resolve' could be pimped to accept an optional second argument of QUERY RR. Again, as current implementations only use single argument <arg>, it could easily be extended to support the RR info too. Again, this as well is 100% backwards compatible. Examples:

- put [:resolve xkcd.com] = resolves as it currently does
- put [:resolve xkcd.com A] = asks for a 'A' record, as it does without second argument
- put [:resolve xkcd.com AAAA] = asks for a 'AAAA' IPv6 address
- etc

---------- 8< -------- 8< -----

Both these solutions are 100% backwards compatible to all the existing scripts, and also very very easy to implement.

Depending which is considered more difficult inside Mikrotik product politics, extending current commands with backwards compatibility OR creating new commands. Personally I would prefer the second solution, since all of those 'new commands' are same in real life.

Again, I hope Mikrotik notices the "current solution" of using "put [:resolve ipv6.google.com]", does not work at all when the hostname also has an A record too. In Google context, better example is [:resolve google.com] , offering both A and AAAA records.
 
kurio
just joined
Posts: 5
Joined: Sun Dec 22, 2013 6:15 pm

Re: IPv6 Ping does not work with domain names

Wed Dec 26, 2018 10:30 pm

Yes, when i see how Mikrotik ignores for YEARS the ipv6 standards, i would agree that they will certainly loose corporate sector and become ipv6-"ready" home routers.
There is no more unused ipv4 addresses, nor ipv4-only new businesses. The decline will be automatic, if they refuse to implement RFC and ipv6 commands, like ping6 or ping -6.
For me the next router will be ipv6 - compliant.
 
eduplant
just joined
Posts: 8
Joined: Tue Dec 19, 2017 9:45 am

Re: IPv6 Ping does not work with domain names

Sun Jan 20, 2019 12:13 pm

I didn't realize there was a thread that was this old about frustration with the RFC-noncompliant nature of DNS resolution in RouterOS. I think @alaine was on the right track in 2015 when they suggested that the best angle to take is a backward-compatible improvement to :resolve. Anyone still following this thread (maybe even from Mikrotik) might want to take a look at my proposal for :resolve improvements over here. The exact same behaviors I suggest could be used implicitly behind the scenes to make :ping work like you expect.

Here is a relevant snippet:

1. Continue the default behavior to only return one record, but provide an option full-answer=true|false to return the full answer.

The :resolve command is used for both debugging and scripting purposes and this change benefits both purposes. Since RouterOS has DNS server functionality, it's always frustrating to debug DNS-related issues when the router itself doesn't have a good DNS client. Currently, the only recourse is to use dig or nslookup from a client device and then inspect :ip dns cache on the router to see what happened. From a scripting perspective, it would be nice to be given all of the answers for a query for round-robin connections, health checks, etc.

2. Provide an option in :ip dns called client-behavior: prefer-v4|dual-stack

prefer-v4 preserves the legacy behavior and will return A record(s) if both A and AAAA are available. Since some users are undoubtedly relying on this quirk, this can remain the RouterOS default for several versions to give them time to migrate.
dual-stack follows RFC 8305 and attempts dual-stack resolution like a standard DNS client. If both address families are present and RouterOS has a configured IPv6 address it can use as a source, the AAAA record(s) are returned. After a sufficient amount of time, this should become the RouterOS default.

The fact that RouterOS unconditionally prefers IPv4 makes it ill-suited as a modern dual-stack client. I don't fully understand why the choice was made in the first place. Although not in my ask here (because of the amount of work that would be involved), I do hope that RouterOS 7 has a proper RFC-8305-compliant control plane for any connections the router makes.
 
theprojectgroup
just joined
Posts: 22
Joined: Tue Feb 21, 2017 11:40 pm

Re: IPv6 Ping does not work with domain names

Fri Aug 30, 2019 12:23 pm

This is real ? Still an issue!

Why not just implement a second ping command called ping6?

Who is online

Users browsing this forum: Google [Bot] and 95 guests