Manuel Coppotelli manuelcoppotelli

This was a huge hassle to figure out, so I wrote up a little guide in hopes that others would find it helpful:

How to convince macOS to do IPv6 DNS lookups when your only IPv6 address is via a VPN or tunnel of some sort

The Problem

macOS's domain name resolver will only return IPv6 addresses (from AAAA records) when it thinks that you have a valid routable IPv6 address. For physical interfaces like Ethernet or Wi-Fi it's enough to set or be assigned an IPv6 address, but for tunnels (such as those using utun interfaces) there are some extra annoying steps that need to be taken to convince the system that yes, you indeed have an IPv6 address, and yes, you'd like to get IPv6 addresses back for DNS lookups.

I use wg-quick to establish a WireGuard tunnel between my laptop and a Linode virtual server. WireGuard uses a utun user-space tunnel device to make the connection. Here's how that device gets configured:

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

A Russian translation of this article can be found here, contributed by Timur Demin.
A Turkish translation can be found here, contributed by agyild.
There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.

	<?php

	namespace Larabook\Providers;

	use Illuminate\Support\ServiceProvider;


	class LocalServiceProviderProvider extends ServiceProvider
	{

	.is-loading {
	color: transparent !important;
	pointer-events: none;
	}

	.is-loading:after {
	-webkit-animation: spinAround 500ms infinite linear;
	animation: spinAround 500ms infinite linear;
	border: 2px solid #dbdbdb;
	border-radius: 290486px;

	<?php

	namespace App\Http\Middleware;

	class CaptureRequestExtension
	{
	public function handle($request, $next)
	{
	if ($request->route()->parameter('_extension') !== null) {
	$request->attributes->set('_extension', substr($request->route()->parameter('_extension'), 1));

	apiVersion: v1
	kind: Pod
	metadata:
	generateName: node-shell-
	namespace: kube-system
	spec:
	containers:
	- image: alpine:3.9
	name: shell
	command: ["nsenter"]

	The MIT License (MIT)

	Copyright (c) 2022 Suhail Patel

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is
	furnished to do so, subject to the following conditions:

	# This installation guide will create basic working arch linux installation with encryption.
	# Encryption is implemented with dm-crypt + LUKS on a single disk.

	# Following articles/posts/gists were used as reference
	# https://www.happyassassin.net/2014/01/25/uefi-boot-how-does-that-actually-work-then/
	# https://wiki.archlinux.org/index.php/Installation_guide
	# https://wiki.archlinux.org/index.php/Dm-crypt/System_configuration
	# https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption
	# https://blog.tinned-software.net/automount-a-luks-encrypted-volume-on-system-start/
	# https://gist.github.com/mattiaslundberg/8620837

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>Ansi 0 Color</key>
	<dict>
	<key>Alpha Component</key>
	<real>1</real>
	<key>Blue Component</key>
	<real>0.15294118225574493</real>

	* {
	outline: 1px solid red !important;
	}