Zoneserver over ipv6

[kainz]

So, I had reasons recently to run zoneserver-over-ipv6 recently, which if one has tried, you will realize maradns does not really ship support for. Thankfully, if you are running zoneserver on an ipv4 interface, this can be accommodated via systemd's socket-proxy service.

An example to configure such follows:

mararc:

# mararc content
tcp_convert_acl = "0.0.0.0/0"
tcp_convert_server = "IP-OF-UDP-MARADNSSERVER"
ipv4_bind_addresses = "IPV4-ADDRESS-OF-MARASERVER" # pure-ipv6 is much more painful, having an ipv4 range mara can sit on for this even if that v4 range is RFC1918 is easier to provision

/etc/systemd/system/zoneserver-6to4.socket

# this provides for a listening socket for systemd to forward to a socket-notification-listening service
# zoneserver 6to4.socket
[Unit]
Description=Zoneserver-6to4 socket

[Socket]
ListenStream=[IPV6::ZONE::SERVER::IP::HERE]:53
Accept=no

[Install]
WantedBy=sockets.target

/etc/systemd/zoneserver-6to4.service:

# zoneserver 6to4.service
[Unit]
Description=Zoneserver-6to4 service

[Service]
Type=notify
ExecStart=/lib/systemd/systemd-socket-proxyd IPV4-ADDRESS-OF-MARASERVER:53
PrivateTmp=yes
PrivateNetwork=no

After setting these up, and enabling&starting the zoneserver-6to4.socket, you should be able to dig NAME @IPV6::ZONE::SERVER::IP::HERE +tcp and expect valid results!