[dns-operations] Looking for a public blackhole/sinkhole IP address

Jared Mauch jared at puck.nether.net
Wed Nov 26 17:46:08 UTC 2014


> On Nov 26, 2014, at 10:13 AM, Paul Wouters <paul at nohats.ca> wrote:
> 
> http://tools.ietf.org/html/rfc6598 defines 100.64.0.0/10
> 
>   Packets with Shared Address Space source or destination addresses
>   MUST NOT be forwarded across Service Provider boundaries.  Service
>   Providers MUST filter such packets on ingress links.  One exception
>   to this paragraph's proscription is in the case of business
>   relationships, such as hosted CGN services.
> 
>   When running a single DNS infrastructure, Service Providers MUST NOT
>   include Shared Address Space in zone files.  When running a split DNS
>   infrastructure, Service Providers MUST NOT include Shared Address
>   Space in external-facing zone files.
> 
> So you should be fine to use it :)


That’s certainly not the intent/purpose of the block of space any more than
hard-coding 10.0.0.1 or some other answer like 1.1.1.1 or 1.2.3.4.

- Jared



More information about the dns-operations mailing list