{"id":2044,"date":"2017-06-14T16:51:56","date_gmt":"2017-06-14T16:51:56","guid":{"rendered":"https:\/\/live-infoblox-blog.pantheonsite.io\/?p=2044"},"modified":"2022-10-19T15:49:04","modified_gmt":"2022-10-19T22:49:04","slug":"why-should-we-separate-a-and-aaaa-dns-queries","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/","title":{"rendered":"Why Should We Separate A and AAAA DNS Queries?"},"content":{"rendered":"<p>Imagine what it was like to be an ancient mariner navigating the ocean blue at night using nothing more than stars, a\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Sextant\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">sextant<\/a>\u00a0and a\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Clock#Marine_chronometer\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">marine chronometer<\/a>.\u00a0 Thankfully, navigating the Internet is not as daunting.\u00a0 The method that networked devices use to find their way around the digital ocean is the\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Domain_Name_System\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Domain Name System<\/a>\u00a0(DNS), which translates human-readable host and domain names into numerical IP addresses (and vice versa).<\/p>\n<h2 id=\"toc-hId--1333344776\">Separate DNS Queries<\/h2>\n<p>One aspect of dual-protocol behavior that often surprises peoples is that hosts send two separate DNS queries to their resolver.\u00a0 And today, frankly, all hosts are dual-protocol bilingual and can use either IP version (4 or 6) for their DNS traffic or for the DNS queries and responses contained within.\u00a0 The reason that there are separate IPv4 A record and IPv6 AAAA record DNS queries is that early IPv6 deployments occasionally encountered problems with older IPv4-only resolvers.<\/p>\n<p>If a host sent an ANY query or an IPv6 AAAA DNS query to a resolver which was not IPv6-literate, the resolver would return an erroneous response code (<a href=\"https:\/\/www.iana.org\/assignments\/dns-parameters\/dns-parameters.xhtml#dns-parameters-6\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">RCODE<\/a>) such as NXDOMAIN.\u00a0 The would lead the host to believe that the domain did not exist, when in fact there was a perfectly valid IPv4 A record that, if returned, would have resulted in the host at least making a connection over IPv4.<\/p>\n<p>Because these older DNS resolvers could not handle a AAAA query or response correctly, the IETF issued RFC 4074 \u201c<a href=\"https:\/\/tools.ietf.org\/html\/rfc4074\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Common Misbehavior Against DNS Queries for IPv6 Addresses<\/a>\u201d.\u00a0 Now, hosts issue separate AAAA and A queries and if the AAAA query fails, it is likely that the A query will succeed and the host can connect.<\/p>\n<p>For example, here is a Wireshark packet capture showing that a simple DNS query for\u00a0<a href=\"http:\/\/www.rmv6tf.org\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">www.rmv6tf.org<\/a>\u00a0resulted four packets on the network.\u00a0 The DNS query started with an A record query (packet 74) followed by an A record response (packet 75).\u00a0 Then an AAAA record query (packet 76) was sent and an AAAA record response (packet 79) was returned.\u00a0 The AAAA query is expanded in the frame packet decode window.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-2045\" src=\"https:\/\/live-infoblox-blog.pantheonsite.io\/wp-content\/uploads\/wireshark-packet-capture.jpg\" alt=\"Wireshark Packet Capture\" width=\"700\" height=\"310\" srcset=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/wireshark-packet-capture.jpg 700w, https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/wireshark-packet-capture-300x133.jpg 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>In 2011, when\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/World_IPv6_Day_and_World_IPv6_Launch_Day\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">World IPv6 Day<\/a>\u00a0was approaching, there was significant work performed to improve how hosts operated in dual-protocol environments and recovered from failures of either IP version.\u00a0 The IETF issued RFC 6555 \u201c<a href=\"https:\/\/tools.ietf.org\/html\/rfc6555\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Happy Eyeballs<\/a>\u201d, which outlined a more aggressive algorithm that would provide connection resiliency and make the Internet users\/customers\/eyeballs\u00a0<a class=\" bf_ungated_init\" href=\"http:\/\/vaibhavbajpai.com\/documents\/papers\/proceedings\/dualstack-he-anrw-2016.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">happier with their connectivity<\/a>.\u00a0 This happy eyeballs technique can be implemented in a\u00a0 web browser like Chrome, or the algorithm can be implemented in the host OS like with\u00a0<a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/ee126135(v=ws.10).aspx\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Microsoft Network Connectivity Status Indicator<\/a>\u00a0(NCSI) or in\u00a0<a href=\"https:\/\/www.ietf.org\/mail-archive\/web\/v6ops\/current\/msg22455.html\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Apple iOS or OS X<\/a>.\u00a0 Regardless, the outcome is that hosts can operate effectively in dual-protocol environments and can recover and establish IP connections using the version that provides the best end-user experience.<\/p>\n<h2 id=\"toc-hId--445841095\">Dangers of ANY Queries<\/h2>\n<p>There are other issues with DNS queries for Query Class (<a href=\"https:\/\/www.iana.org\/assignments\/dns-parameters\/dns-parameters.xhtml#dns-parameters-2\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">QCLASS<\/a>) ANY besides causing problems for very old DNS resolvers that don\u2019t understand IPv6 AAAA records.\u00a0 A DNS ANY query can result in a lot of data returned from the authoritative name server.\u00a0 The DNS server that receives an ANY query will simply respond with all the information it has on the subject including A records, AAAA records, DNSSEC key material, etc.\u00a0 If a DNS server is acting as an\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/Finding-and-Fixing-Open-DNS-Resolvers\/ba-p\/3405\" target=\"_blank\" rel=\"noopener noreferrer\">Open DNS Resolver<\/a>\u00a0and not restricting who can query it, then it may be participating as an unknowing contributor to a DDoS attack.\u00a0 These same types of DDoS attacks can take place,\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/Security-Blog\/DNS-Based-DDoS-Attacks-What-s-In-a-Name\/ba-p\/8465\" target=\"_blank\" rel=\"noopener noreferrer\">not only with DNS<\/a>,\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/Security-Blog\/Don-t-Be-an-Accomplice-in-NTP-based-DDoS-Attacks\/ba-p\/8437\" target=\"_blank\" rel=\"noopener noreferrer\">but with NTP<\/a>,\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/Security-Blog\/DDoS-IoT-and-IPv6-Addressing-the-Threat\/ba-p\/8336\" target=\"_blank\" rel=\"noopener noreferrer\">and may leverage insecure IoT devices<\/a>.<\/p>\n<p>Today, the legitimate uses of an ANY query are almost non-existent, but the nefarious uses of ANY are numerous.\u00a0 Now there are organizations that want to stop answering ANY queries altogether.\u00a0 Among these organizations is CloudFlare, one of the largest\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/Using-a-Content-Delivery-Network-to-IPv6-Enable-your-Site\/ba-p\/9528\" target=\"_blank\" rel=\"noopener noreferrer\">IPv6-enabled Content Delivery Networks<\/a>\u00a0(CDNs).\u00a0 CDNs are another way that we can circumnavigate the Internet seas.\u00a0 CloudFlare\u00a0<a href=\"https:\/\/blog.cloudflare.com\/deprecating-dns-any-meta-query-type\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">stopped answering ANY DNS queries over one year ago<\/a>.\u00a0 If you send a\u00a0<a href=\"https:\/\/blog.cloudflare.com\/what-happened-next-the-deprecation-of-any\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">query for ANY to CloudFlare<\/a>\u00a0you will receive back a NotImp (Not Implemented)\u00a0<a href=\"https:\/\/www.iana.org\/assignments\/dns-parameters\/dns-parameters.xhtml#dns-parameters-6\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">RCODE<\/a>.\u00a0 CloudFlare\u2019s team has also worked on two\u00a0<a href=\"https:\/\/datatracker.ietf.org\/wg\/dnsop\/documents\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">IETF DNSOP working group<\/a>\u00a0drafts on this topic, \u201c<a href=\"https:\/\/tools.ietf.org\/html\/draft-ogud-dnsop-acl-metaqueries-00\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">DNS Meta-Queries restricted<\/a>\u201d and \u201c<a href=\"https:\/\/tools.ietf.org\/html\/draft-ietf-dnsop-refuse-any-04\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Providing Minimal-Sized Responses to DNS Queries that have QTYPE=ANY<\/a>\u201d.<\/p>\n<h2 id=\"toc-hId-441662586\">Future DNS Improvements<\/h2>\n<p>The Internet, DNS servers, host operating systems, service providers and content providers have significantly progressed since RFC 4074 was written to address old IPv4-only resolvers.\u00a0 Now, few of us worry about misbehaving resolvers, other than the concern that they might be\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/Finding-and-Fixing-Open-DNS-Resolvers\/ba-p\/3405\" target=\"_blank\" rel=\"noopener noreferrer\">too permissive in allowing DNS DDoS packet amplification<\/a>.\u00a0 At this middle-stage of IPv6 adoption, should the DNS behavior be changed again?\u00a0 Or would making a mid-voyage course correction lead us toward an Internet\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Bermuda_Triangle\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Bermuda Triangle<\/a>?<\/p>\n<p>During the recent\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/Highlights-from-2017-North-American-IPv6-Summit\/ba-p\/9671\" target=\"_blank\" rel=\"noopener noreferrer\">2017 North American IPv6 Summit<\/a>, Dani Grant from CloudFlare (<a href=\"https:\/\/twitter.com\/thedanigrant\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">@thedanigrant<\/a>), gave a\u00a0<a class=\" bf_ungated_init\" href=\"http:\/\/www.rmv6tf.org\/wp-content\/uploads\/2017\/04\/danigrant_v6.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">presentation about their IPv6 deployment experiences<\/a>.\u00a0 She mentioned the non-response to DNS ANY queries described above and mentioned how we may want to optimize DNS queries for IPv6.<\/p>\n<p>Marek Vavrusa (<a href=\"https:\/\/twitter.com\/vavrusam\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">@vavrusam<\/a>) and Olafur Gudmundsson (<a href=\"https:\/\/twitter.com\/OGudm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">@OGudm<\/a>) from CloudFlare have put forward an IETF draft titled \u201c<a href=\"https:\/\/tools.ietf.org\/html\/draft-vavrusa-dnsop-aaaa-for-free-00\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Providing AAAA records for free with QTYPE=A<\/a>\u201d.\u00a0 This proposal eliminates the separate A and AAAA query we use today, and return an AAAA record response along with the A record response.\u00a0 This would cut the number of queries and responses in half.<\/p>\n<p>Providing both an A record response and AAAA record response could be thought of as a theoretical \u201cAAAAA response\u201d.\u00a0 Jokingly, the term \u201cQuint-A\u201d was coined by Cody Christman (of Wipro and the\u00a0<a href=\"http:\/\/www.rmv6tf.org\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">RMv6TF<\/a>),\u00a0while at the\u00a0<a href=\"http:\/\/www.rmv6tf.org\/na-ipv6-summit\/2017-north-american-ipv6-event\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">2017 North American IPv6 Summit<\/a>.<\/p>\n<p>Research and work continues in this area to explore how DNS meta-CLASSes can be used to carry additional information such as AAAA records responses.\u00a0 These potential directions may include adding an ADDR meta-query.\u00a0 This would require changes to servers and hosts and would take years to gain wide-scale adoption.\u00a0 The intent here is that these changes could \u00a0result in continuing to drive higher IPv6 adoption rates and reduce the DNS traffic on networks.<\/p>\n<h2 id=\"toc-hId-1329166267\">Summary<\/h2>\n<p>Just like IPv4, IPv6 will never stop evolving as a network protocol.\u00a0 Even though we have standards for global Internet behavior, we are constantly seeking out ways to improve IP networking.\u00a0 Even though IPv6 is now firmly deployed on the Internet and its\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/IPv6-websites-to-help-you-with-your-adoption-initiative-Part-1\/ba-p\/7407\" target=\"_blank\" rel=\"noopener noreferrer\">adoption continues to grow<\/a>, there is still time to optimize IPv6 behavior.\u00a0 What might have worked well when we were embarking on the IPv6 voyage may not be the way we want our systems to behave when we move to a predominantly\u00a0<a href=\"https:\/\/community.infoblox.com\/t5\/IPv6-CoE-Blog\/No-IPv4-or-IPv4less-or-Simply-IPv6-only\/ba-p\/9248\" target=\"_blank\" rel=\"noopener noreferrer\">IPv6-only<\/a>\u00a0Internet.\u00a0 Even though IPv6 is a \u201cwork in progress\u201d, there is no reason to let this slow down your IPv6 deployment plans.\u00a0 Full steam ahead! But we will use our rudder to make some subtle course corrections as we cruise onward.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Imagine what it was like to be an ancient mariner navigating the ocean blue at night using nothing more than stars, a\u00a0sextant\u00a0and a\u00a0marine chronometer.\u00a0 Thankfully, navigating the Internet is not as daunting.\u00a0 The method that networked devices use to find their way around the digital ocean is the\u00a0Domain Name System\u00a0(DNS), which translates human-readable host and [&hellip;]<\/p>\n","protected":false},"author":321,"featured_media":1601,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[17],"tags":[30,38,31,39,36],"class_list":{"0":"post-2044","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-ipv6-coe","8":"tag-dns","9":"tag-ipv6","10":"tag-networking","11":"tag-protocols","12":"tag-threats","13":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Why Should We Separate A and AAAA DNS Queries?<\/title>\n<meta name=\"description\" content=\"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why Should We Separate A and AAAA DNS Queries?\" \/>\n<meta property=\"og:description\" content=\"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-14T16:51:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-10-19T22:49:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"454\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Scott Hogg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Scott Hogg\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/\"},\"author\":{\"name\":\"Scott Hogg\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/ee71ac61fe2ea349f6e991e628d22f4c\"},\"headline\":\"Why Should We Separate A and AAAA DNS Queries?\",\"datePublished\":\"2017-06-14T16:51:56+00:00\",\"dateModified\":\"2022-10-19T22:49:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/\"},\"wordCount\":1143,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/community-banner-12.jpg\",\"keywords\":[\"DNS\",\"IPv6\",\"Networking\",\"Protocols\",\"Threats\"],\"articleSection\":[\"IPv6 CoE\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/\",\"name\":\"Why Should We Separate A and AAAA DNS Queries?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/community-banner-12.jpg\",\"datePublished\":\"2017-06-14T16:51:56+00:00\",\"dateModified\":\"2022-10-19T22:49:04+00:00\",\"description\":\"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/community-banner-12.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/community-banner-12.jpg\",\"width\":660,\"height\":454},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/ipv6-coe\\\/why-should-we-separate-a-and-aaaa-dns-queries\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IPv6 CoE\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/ipv6-coe\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Why Should We Separate A and AAAA DNS Queries?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/ee71ac61fe2ea349f6e991e628d22f4c\",\"name\":\"Scott Hogg\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_321_1574118215-96x96.jpg\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_321_1574118215-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_321_1574118215-96x96.jpg\",\"caption\":\"Scott Hogg\"},\"description\":\"Scott Hogg has 30 years of network and security experience and is president of Hogg Networking with. Scott Hogg specializes in teaching Internet Protocol version 6 (IPv6) and providing implementation guidance. Scott is CCIE #5133 (Emeritus) and CISSP #4610. Scott is Chair Emeritus of the Rocky Mountain IPv6 Task Force (RMv6TF), a member of the IPv6 Center of Excellence (COE), and co-author of the Cisco Press book on IPv6 Security.\",\"sameAs\":[\"https:\\\/\\\/hexabuild.io\"],\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/scott-hogg\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Why Should We Separate A and AAAA DNS Queries?","description":"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/","og_locale":"en_US","og_type":"article","og_title":"Why Should We Separate A and AAAA DNS Queries?","og_description":"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.","og_url":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/","og_site_name":"Infoblox Blog","article_published_time":"2017-06-14T16:51:56+00:00","article_modified_time":"2022-10-19T22:49:04+00:00","og_image":[{"width":660,"height":454,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg","type":"image\/jpeg"}],"author":"Scott Hogg","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Scott Hogg","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/"},"author":{"name":"Scott Hogg","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/ee71ac61fe2ea349f6e991e628d22f4c"},"headline":"Why Should We Separate A and AAAA DNS Queries?","datePublished":"2017-06-14T16:51:56+00:00","dateModified":"2022-10-19T22:49:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/"},"wordCount":1143,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg","keywords":["DNS","IPv6","Networking","Protocols","Threats"],"articleSection":["IPv6 CoE"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/","url":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/","name":"Why Should We Separate A and AAAA DNS Queries?","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg","datePublished":"2017-06-14T16:51:56+00:00","dateModified":"2022-10-19T22:49:04+00:00","description":"There is a reason that a host sends separate DNS queries to a resolver. Find out why the queries are separated to reduce problems with older resolvers here.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/community-banner-12.jpg","width":660,"height":454},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/ipv6-coe\/why-should-we-separate-a-and-aaaa-dns-queries\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"IPv6 CoE","item":"https:\/\/www.infoblox.com\/blog\/category\/ipv6-coe\/"},{"@type":"ListItem","position":3,"name":"Why Should We Separate A and AAAA DNS Queries?"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/ee71ac61fe2ea349f6e991e628d22f4c","name":"Scott Hogg","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_321_1574118215-96x96.jpg","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_321_1574118215-96x96.jpg","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_321_1574118215-96x96.jpg","caption":"Scott Hogg"},"description":"Scott Hogg has 30 years of network and security experience and is president of Hogg Networking with. Scott Hogg specializes in teaching Internet Protocol version 6 (IPv6) and providing implementation guidance. Scott is CCIE #5133 (Emeritus) and CISSP #4610. Scott is Chair Emeritus of the Rocky Mountain IPv6 Task Force (RMv6TF), a member of the IPv6 Center of Excellence (COE), and co-author of the Cisco Press book on IPv6 Security.","sameAs":["https:\/\/hexabuild.io"],"url":"https:\/\/www.infoblox.com\/blog\/author\/scott-hogg\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/2044","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/321"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=2044"}],"version-history":[{"count":2,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/2044\/revisions"}],"predecessor-version":[{"id":8080,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/2044\/revisions\/8080"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/1601"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=2044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=2044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=2044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}