[GH-ISSUE #2373] Private resource doesn't overwrite IPv6 #6953

Closed
opened 2026-04-25 15:56:45 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @matt01y on GitHub (Jan 29, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2373

Describe the Bug

When having a private resource for test.domain.tld whilst having in public dns a wildcard A and AAAA record for *.domain.tld the IPv6 addres of the global dns stil gets resolved with resolvectl query test.domain.tld.

Environment

  • OS Type & Version: Truenas 25.04.2.6 (running in docker compose)
  • Pangolin Version: 1.15.1
  • Gerbil Version: 1.3.0
  • Traefik Version: 3.6.7
  • Newt Version: 1.9.0
  • Olm Version: cli client 0.3.0 (Linux x86_64)

To Reproduce

Global AAAA DNS record for: *.domain.tld
Private resource for: test.domain.tld

Run resolvectl query test.domain.tld.

results:

  • A record pointing to 100.90.128.XXX (site subnet)
  • AAAA record pointing to global IPv6 of pangolin instance

Expected Behavior

Either:

  • No AAAA record gets returned
  • Pangolin adds support for IPv6 subnets and returns the according IPv6 for test.domain.tld
Originally created by @matt01y on GitHub (Jan 29, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/2373 ### Describe the Bug When having a private resource for `test.domain.tld` whilst having in public dns a wildcard A and AAAA record for `*.domain.tld` the IPv6 addres of the global dns stil gets resolved with `resolvectl query test.domain.tld`. ### Environment - OS Type & Version: Truenas 25.04.2.6 (running in docker compose) - Pangolin Version: 1.15.1 - Gerbil Version: 1.3.0 - Traefik Version: 3.6.7 - Newt Version: 1.9.0 - Olm Version: cli client 0.3.0 (Linux x86_64) ### To Reproduce Global AAAA DNS record for: `*.domain.tld` Private resource for: `test.domain.tld` Run `resolvectl query test.domain.tld`. results: - A record pointing to `100.90.128.XXX` (site subnet) - AAAA record pointing to global IPv6 of pangolin instance ### Expected Behavior Either: - No AAAA record gets returned - Pangolin adds support for IPv6 subnets and returns the according IPv6 for `test.domain.tld`
Author
Owner

@oschwartz10612 commented on GitHub (Jan 29, 2026):

This is expected behavior because we do not support ipv6. We only match v4 A requests and pass all ipv6 through.

We do plan to add v6 support eventually but I think that is a feature request. If you would like you could open a request on the discussions!

https://github.com/orgs/fosrl/discussions/categories/feature-requests

<!-- gh-comment-id:3819813836 --> @oschwartz10612 commented on GitHub (Jan 29, 2026): This is expected behavior because we do not support ipv6. We only match v4 A requests and pass all ipv6 through. We do plan to add v6 support eventually but I think that is a feature request. If you would like you could open a request on the discussions! https://github.com/orgs/fosrl/discussions/categories/feature-requests
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#6953