Re:Hello IPv6: a minimal tutorial for IPv4 users
by iptrans on Thursday October 07, 2021 @11:55AM
(#28787981)
Having to do a DNS lookup for each firewall rule is going to suck. Not to mention blackholing traffic when cached DNS replies are out of sync with the actual IP.
Re:Hello IPv6: a minimal tutorial for IPv4 users
by admax88qqq on Thursday October 07, 2021 @05:30PM
(#28792338)
Doesn't have to be DNS, could be any sort of cache on the router that updates when new hosts come online or the prefix changes.
Plus blackholing temporarily due to a stale cache is better than blackholing permanently due to a stale rule pointing to an old IP.
I would much rather have a local network naming system that works and use human readable names in all situations where I want to specify firewall rules. It's a shame that this still really isn't an option, the technology is there, it just needs some polish to not require so much tweaking.