<?xml version="1.0" encoding="utf-8"?>
<?xml-model href="rfc7991bis.rnc"?>

<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
  <!ENTITY oacute "&#243;">
]>

<rfc
  xmlns:xi="http://www.w3.org/2001/XInclude"
  docName="draft-asai-dnsop-rfc4472bis-00" ipr="trust200902" category="info" consensus="yes"
  obsoletes=""
  updates="3901, 44724"
  submissionType="IETF"
  xml:lang="en"
  version="3">

  <front>
    <title abbrev="Staged IPv6 Transition of DNS">
      Staged IPv6 Transition of Domain Name Systems
    </title>
    <author fullname="Hirochika Asai" initials="H." surname="Asai">
      <organization abbrev="Preferred Networks / WIDE Project">Preferred Networks, Inc. / WIDE Project</organization>
      <address>
        <postal>
<!--<country>, <code>, <region>, <street>, <extaddr> for Japan-->
          <street>1-6-1 Otemachi, Chiyoda</street>
          <region>Tokyo</region>
          <code>100-0004</code>
          <country>JP</country>
        </postal>
        <email>panda@wide.ad.jp</email>
      </address>
    </author>
    <author fullname="Takashi Tomine" initials="T." surname="Tomine">
      <organization abbrev="NAOJ / WIDE Project">National Astronomical Observatory of Japan / WIDE Project</organization>
      <address>
        <postal>
          <street>2-21-1 Osawa Mitaka</street>
          <region>Tokyo</region>
          <code>181-8588</code>
          <country>JP</country>
        </postal>
        <email>tomine@wide.ad.jp</email>
      </address>
    </author>

    <date month="March" day="3" year="2025" />

    <!-- Meta-data Declarations -->
    <area>Internet</area>
    <!--<workgroup></workgroup>-->
    <keyword>Domain Name Systems</keyword>
    <keyword>IPv6 Transision</keyword>

    <abstract>
      <t>This document specifies the three-stage IPv6 transition of
      Domain Name Systems (DNS) transport.
      The scope of this document is only the transport between authoritative
      servers and recursive servers, but does not include the transport of
      recursive servers for DNS clients.
      </t>
    </abstract>
  </front>

  <middle>
    <section title="Introduction">
      <t><xref target="RFC3901" /> specifies the IPv6 transport operational
      guidelines of Domain Name Systems (DNS).
      It recommends IPv4-only or dual stack for the authoritative servers
      to avoid the name space fragmentation.
      <xref target="RFC4472" /> also recommends that
      at least one authoritative server enables IPv4 for every zone.
      Keeping IPv4-enabled authoritative servers is important to avoid the
      name space fragmentation as mentioned in <xref target="RFC3901" />.
      However, it could slow down the transition of DNS to the IPv6 by
      prioritizing IPv4 over IPv6.
      </t>
      <t>This document specifies the three-stage IPv6 transition of DNS,
      consisting of the following three steps:
      1) mandating dual stack (i.e., both IPv4 and IPv6 transport)
      for every zone (<xref target="stage1" />),
      2) prioritizing the IPv6 transport over IPv4 by recursive servers or use
      happy eyeballs <xref target="RFC8305" /> (<xref target="stage2" />),
      and 3) turning the IPv4 transport optional for authoritative servers
      (<xref target="stage3" />).
      </t>
      <t>The key words &quot;MUST&quot;, &quot;MUST NOT&quot;,
      &quot;REQUIRED&quot;, &quot;SHALL&quot;, &quot;SHALL NOT&quot;,
      &quot;SHOULD&quot;, &quot;SHOULD NOT&quot;, &quot;RECOMMENDED&quot;,
      &quot;MAY&quot;, and &quot;OPTIONAL&quot; in this
      document are to be interpreted as described in
      <xref target="RFC2119">RFC 2119</xref>.
      </t>
    </section>

    <section anchor="stage1"
        title="Stage 1: Dual Stack DNS Zones">
      <t>The first stage of the IPv6 transiton of DNS is to turn the
      authoritative servers into dual stack by mandating IPv6 as well as IPv4
      transport for every zone.</t>
      <t>Section 1.3 in <xref target="RFC4472" /> states that &quot;the
      recommendation is to always keep at least one authoritative server
      IPv4-enabled, and to ensure that recursive DNS servers support IPv4.&quot;
      This enables IPv4-only recursive servers to reach any name space as
      every zone has at least one authoritative server.
      However, this also demotivates IPv6 deployment on authoritative servers
      as it implies that recursive servers keeps IPv4 access to
      authoritative servers.
      Therefore, it is important to equally define IPv4 and IPv6
      for the authoritative server deployment in the specification.</t>
      <t>This document, at Stage 1, updates <xref target="RFC3901" /> and
      <xref target="RFC4472" /> to reccommend that at least one authoritative
      server enables IPv6 while at least one authoritative server continues to
      keep IPv4-enabled for every zone.
      This does not introduce the DNS name space fragmentation because IPv4
      global reachability is maintained for every zone even if some zones do not
      follow the updated recommendation.
      </t>
      <t>This stage MAY be suspended for a certain period
      of time after updating <xref target="RFC3901" /> and
      <xref target="RFC4472" /> so every zone is prepared.
      </t>
    </section>

    <section anchor="stage2"
        title="Stage 2: Dual Stack Recursive Servers">
      <t>The second stage is to recommend recursive servers to support the IPv6
      transport for queries to authoritative servers.
      Suppose Stage 1 is successfully implemented, all zones support
      at least one IPv6 authoritative server.
      Then, recursive servers have both choices of IPv4 and IPv6 for access to
      authoritative servers.
      <xref target="RFC4472" /> ensures that recursive servers support IPv4,
      but we do not need to ensure the IPv4 transport at this stage.
      </t>
      <t>In addition to the dual stack recursive server deployment,
      this document recommends that recursive servers prioritize the IPv6
      transport over IPv4 for their recursive queries to authoritative servers
      or use happy eyeballs <xref target="RFC8305" />.
      It enables us to monitor the DNS query traffic by root servers and
      other authoritative servers and analyze the ratio of IPv6 capable
      recursive servers and their performance.
      </t>
    </section>

    <section anchor="stage3"
        title="Stage 3: Optional IPv4 Transport on Authoritative Servers">
      <t>The final step is to turn the IPv4 transport optional on authoritative servers
      so that we prepare for the IPv4 sunset on DNS.
      To do so, Section 1.3 in <xref target="RFC4472" /> could be rephrased to
      &quot;the recommendation is to always keep at least one authoritative server
      IPv6-enabled, and to ensure that recursive DNS servers support IPv6.&quot;
      It is expected that most of authoritative servers continue supporting dual
      stack even if we turn the IPv4 transport optional unless IPv6-only
      authoritative servers are proven to be feasible and credible.</t>
      <t>At Stage 2, IPv6-only recursive servers MAY be theoretically viable.
      However, there is a concern on the name space fragmentation as we
      do not expect all zones over the Internet follow the up-to-date RFCs and
      support IPv6 authoritative servers.
      Therefore, we need careful considerations on turning the IPv4 transport
      optional for recursive servers.
      This document does not turn the IPv4 transport of recursive servers
      optional at Stage 3.
      The sunset of IPv4 DNS should be considered along with the IPv4 sunset of
      all Internet applications.
      </t>
      <t>
      </t>
    </section>

    <section title="Considerations on Timeline of the Staged Transition">
      <t>The timeline of the transition SHOULD globally be advised and aligned
      althogh no synchronous configuration changes are required.
      For example, the following timeline for the staged
      transition proposed in this document is considered:
      </t>
      <ol>
        <li>(By the end of Y2028) Stage 1: Mandate the dual stack transport on all the authoritative
        servers by updating <xref target="RFC3901" /> and
        <xref target="RFC4472" />.</li>
        <li>(Y2030) Stage 2: Prioritize IPv6 transport over IPv4 by recursive
        servers.  A new Internet-Draft MAY be required.</li>
        <li>(Y2035) Stage 3: Turn the IPv4 transport optional by updating
        <xref target="RFC3901" /> and <xref target="RFC4472" /> again
        or by obsoleting them.</li>
      </ol>
      <t>Stage 1 and 2 do not introduce any name space fragmentation
      as the IPv4 transport MUST still be supported nevertheless the IPv6 transport
      is not enabled by part of authoritative servers during their transition delay.
      Stage 2 MAY implement a step-by-step strategy such as World IPv6 Day and
      World IPv6 Launch.
      Stage 3 MAY be deferred if careful analysis of the
      penetration and performance of the IPv6 transport after Stage 2 shows
      concerning results.</t>
    </section>

    <section anchor="IANA" title="IANA Considerations">
      <t>This document does not have IANA Considerations.</t>
    </section>

    <section anchor="Security" title="Security Considerations">
      <t>This document introduces no additional security considerations.</t>
    </section>

  </middle>

  <back>
    <!-- References split into informative and normative -->

    <references title="Normative References">
      <xi:include href="https://bib.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml"/>
      <xi:include href="https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8305.xml"/>
      <!--<xi:include href="https://bib.ietf.org/public/rfc/bibxml/reference.RFC.9471.xml"/>-->
    </references>
    <references title="Informative References">
      <xi:include href="https://bib.ietf.org/public/rfc/bibxml/reference.RFC.3901.xml"/>
      <xi:include href="https://bib.ietf.org/public/rfc/bibxml/reference.RFC.4472.xml"/>
    </references>

  </back>
</rfc>
