DNS over TLS using IPv6

[caffee1]

I'm new to v2 and downloaded the current version (2.0.9477.3) today.
In benchmarking some DNS over TLS servers, I noticed the results does not appear to plot any ipv6 dns servers I included in the benchmark (e.g. google at 2001:4860:4860::8888 and 2001:4860:4860::8844). These are green in the list of servers indicating they are not sidelined. Nevertheless no plot or tabular data was produced for these servers. Is this perhaps a "more-to-come" or have I missed something in my configuration ?

I should note that I specified running DNS over TLS servers. On closer examination of the add/remove function, I see I am only able to specify DNS over TLS servers by their name and not their address. Perhaps this would be a useful addition since I am accustomed to specifying DNS servers by address.

 

[DanR]

I should note that I specified running DNS over TLS servers.

That is why DNSB is only testing DOT servers. Because you told it to.

Have you saved an INI file?

If you have NOT saved an INI file:

Click the red icon in the UL corner of DNSB's main window (no benchmark running) to display the drop down main menu. About a fourth of the way down there are four DNS protocols. Click them to enable or disable as you wish.

If you have saved an INI file:

With DNSB not running:

You will have to either delete or rename the INI file, or move the INI file out of the DNSB folder. Then restart DNSB. DNSB will enable all protocols. After selecting the number of measurements DNSB will again ask you which protocol(s) you wish to test.

The presence of an INI file overrides the choice of protocols on the main drop down menu.

 

[peterblaise]

What are the Alt Spacebar menu settings and the
on-the-way-to-Benchmark settings for
IPv4, IPv6, DoH, and DoT?

 

[caffee1]

That is why DNSB is only testing DOT servers. Because you told it to.

Have you saved an INI file?

If you have NOT saved an INI file:

Click the red icon in the UL corner of DNSB's main window (no benchmark running) to display the drop down main menu. About a fourth of the way down there are four DNS protocols. Click them to enable or disable as you wish.

If you have saved an INI file:

With DNSB not running:

You will have to either delete or rename the INI file, or move the INI file out of the DNSB folder. Then restart DNSB. DNSB will enable all protocols. After selecting the number of measurements DNSB will again ask you which protocol(s) you wish to test.

The presence of an INI file overrides the choice of protocols on the main drop down menu.

Thank you for your thoughts. I always learn something when someone favors me with a reply.
Let me try another tack on my question: using the DNS over TLS entry for tls://dns.google.com as an example, how can I know whether the benchmark is testing over ipv6 ? Is there a way to add an entry specifically for one of google's ipv6 tls addresses to ensure ipv6 is used ?

 

[Steve]

@caffee1 : You found a bug! Thank you!

Although just placing an IP in the Add/Remove dialog will light up the [ Add IP ] button, if you preface that IP with https:// or tls:// then it will light up either the [ Add DoT ] or [ Add DoH ] buttons, thus allowing you to add a DoH or DoT resolver with an IP.

At least, it's supposed to. It DOES work for IPv4 addresses but the bug you just found was that it should also work for IPv6 addresses... And it does not. I've made a note about that and I'll get that fixed for the 4th release.

Thank you!!

 

[Schrodinger's Cat]

@Steve I think this maybe similar/related and not fully addressed; DNSB doesnt use the convention for IPv6 addreses input for URIs eg. https://[2001:4860:4860::8888]/dns-query

Newsgroup discussion: [1] and [2]

Issue Ticket: https://dev.grc.com/support/33/

 

[Schrodinger's Cat]

how can I know whether the benchmark is testing over ipv6 ? Is there a way to add an entry specifically for one of google's ipv6 tls addresses to ensure ipv6 is used ?

At the moment no (for DoH/DoT domain inputs), but you can check if it does: by running wireshark/packet capture on the machine to see where outgoing packets are destined to. But IIRC on Win11 may default to giving IPv6 address resolution priority, IPv4 on Win10? unsure about other platforms

 

[Steve]

@Steve I think this maybe similar/related and not fully addressed; DNSB doesnt use the convention for IPv6 addreses input for URIs eg. https://[2001:4860:4860::8888]/dns-query

Newsgroup discussion: [1] and [2]

Issue Ticket: https://dev.grc.com/support/33/

Thanks! I've captured that. I'll follow up!

 

[Steve]

@Steve I think this maybe similar/related and not fully addressed; DNSB doesnt use the convention for IPv6 addreses input for URIs eg. https://[2001:4860:4860::8888]/dns-query

Newsgroup discussion: [1] and [2]

Issue Ticket: https://dev.grc.com/support/33/

Done! I implemented this last evening. The new feature will be present in the forthcoming Release #4.

Since every source shows that IPv6 addresses in URLs -must- be enclosed in [square brackets], the Benchmark follows that protocol.