explicitly resolve A/AAAA when pulling external IP from icanhazip

theforeman / foreman-infra

Puppet modules and scripts to manage Foreman project infrastructure

https://theforeman.github.io/foreman-infra

Apache License 2.0

23 stars 51 forks source link

explicitly resolve A/AAAA when pulling external IP from icanhazip #2132

Closed evgeni closed 2 months ago

evgeni commented 2 months ago

ipv4.icanhazip.com has an AAAA record, and ipv6 has an A record, which leads to both facts returning v6 addresses.

while this is a missconfiguration on the side of icanhazip.com, we can prevent it from happening by forcing things at the resolver level.

evgeni commented 2 months ago

ipv4.icanhazip.com has an AAAA record

That sounds like it's against the entire point of the service

Yepp. It's a miss-config on the Cloudflare side. I've poked @major (he used to run this service) as I don't know who to poke at CF (who runs the service now).