Problem and aim
We don't get IPv6 from our ISP thus I have an IPv6 tunnel which works fine but is, of course, not very fast. And not really reliable. I like to have IPv6 available "just in case" but I want certain hosts (domains) to be connected with IPv4 only.
It seems to me that all applications try IPv6 first; this is probably a glibc setting. I would be fine if this default would be reversed (for all applications).
It would be possible to block IPv6 addresses / networks with Netfilter but there are two problems:
- Would this cause a delay as the app waits for a IPv6 timeout before it tries IPv4?
- Some domains seem to be mixed that it looks like chaos. Separating google.com and youtube.com seems like something you don't want to do if you can avoid it.
I just note that the man page for
ip route says for the routing type
The local senders get an EHOSTUNREACH error.
Does the same happen with Netfilter DROPs or REJECTs? Such an error should not cause a relevant delay.
Another solution (rather easy one if that is possible) would be to filter AAAA records for certain domains. If that is not (easily) possible: Is it possible to connect the DNS server and Netfilter so that I know "IP address X belongs to domain Y" so that I can add it to Netfilter? Anything more elegant than logging everything and grepping the log?
The way to go?
Which (other) possibilities are there and what is the easiest?