Sign inConnect your agent
infochanged

Gateway, Cloudflare One - Request Gateway DNS64 through DNS locations and EDNS

Announced
Tags
Gateway, Cloudflare-One
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-10-13-gateway-dns64-opt-in/

<p>You can now request DNS64 through Cloudflare Gateway DNS location settings or Extension Mechanisms for DNS (EDNS) options.</p> <p>DNS64 synthesizes <code>AAAA</code> records from <code>A</code> records for IPv6-only networks. These networks require network address translation from IPv6 to IPv4 (NAT64).</p> <p>Turn on <strong>Enable DNS64</strong> for a location, or include an empty EDNS option <code>65051</code> in individual queries. Both mechanisms support UDP, TCP, DNS over TLS (DoT), and DNS over HTTPS (DoH).</p> <p>For example, request DNS64 through EDNS with <code>dig</code>:</p> <figure class="nb-code-figure" data-nb-lang="bash"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="bash" data-nb-lang="bash"><code><span class="line"><span class="nb-shiki-1t8gfj">dig</span><span class="nb-shiki-mdbnqw"> @"&lt;DNS_RESOLVER_IP&gt;"</span><span class="nb-shiki-mdbnqw"> ipv4only.arpa</span><span class="nb-shiki-mdbnqw"> AAAA</span><span class="nb-shiki-mdbnqw"> +ednsopt=</span><span class="nb-shiki-dzsirb">65051</span><span class="nb-shiki-mdbnqw"> +short</span></span></code></pre></figure> <p>The existing <code>cf-dns-options: dns64</code> DoH header remains supported independently. DNS64 is off by default. Each mechanism independently requests synthesis.</p> <p>For configuration, API update behavior, and request examples, refer to <a href="https://developers.cloudflare.com/cloudflare-one/traffic-controls/resolver-endpoints/dns64/">DNS64</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.