[dns-operations] For darpa.mil, EDNS buffer == 1232 is *too small*. :-(

[Brian Somers]

On Apr 18, 2020, at 9:39 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> Is there any new information on whether something closer to 1400 is
> generally safe also for IPv6?

At Cisco we allow up to 1410 bytes upstream and drop fragments.  We prefer IPv6
addresses when talking to authorities.  We’ve been doing this for years (except for
a period between Feb 2019 and Aug 2019).  Zero customer complaints.

Policy-free addresses are:
    2620:0:ccc::2
    2620:0:ccd::2
    208.67.220.2
    208.67.222.2
If you want to experiment.

—
Brian