IPv6 setup / unbound no IPv6 name resolution

Started by andyrtr, February 11, 2025, 08:27:16 PM

Previous topic - Next topic
I'm on OPNsense 25.1 coneected to MDCC cable internet with the modem in bridged mode.
IPv4 works well but I struggle to properly setup IPv6 for the local network. My current settings:

WAN: DHCPv6
Prefix delegation size "56" ( "ifctl -6pi re1" gives xxx::/56)
Request prefix only "unchecked" (checked shows the WAN_DHCP6 gateway red and "ifctl -6pi re1" doesn't report anything back)
Send prefix hint: "checked" (doesn't seem to matter)

LAN: 
IPv6 Configuration Type - Track Interface (SLAAC - ping IPv6 addr. works but browser test fails, DHCPv6 seems also to basically work)
Parent interface - WAN
Assign prefix ID - 0
Manual configuration - DHCPv6/RADVD unchecked

root@OPNsense:~ # ping -6 heise.de
ping: cannot resolve heise.de: Address family for hostname not supported
root@OPNsense:~ # ping 2001:4860:4860:0:0:0:0:8888
PING(56=40+8+8 bytes) 2a0c:d242:1:90:1000::3dc7 --> 2001:4860:4860::8888
16 bytes from 2001:4860:4860::8888, icmp_seq=0 hlim=119 time=17.029 ms

So basically IPv6 seems to work but name resolution using unbound seems to fail.
This changes when I enable under System/Settings/General both options to
"Allow DNS server list to be overridden by DHCP/PPP on WAN" + "Do not use the local DNS service as a nameserver for this system".

Any idea what's wrong the unbound setup not resolving the IPv6 path? Anything else I need to check or change?

I guess everything is working as intended:
root@OPNsense:~ # ping -6 heise.de
ping: cannot resolve heise.de: Address family for hostname not supported
root@OPNsense:~ # ping -6 www.heise.de
PING(56=40+8+8 bytes) 2a0c:d242:1:90:1000::3dc7 --> 2a02:2e0:3fe:1001:7777:772e:2:85
16 bytes from 2a02:2e0:3fe:1001:7777:772e:2:85, icmp_seq=0 hlim=58 time=20.612 ms

Maybe the documentation should be fixed.