Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-root-loopback

2015-06-08 Thread fujiwara
> From: Paul Hoffman 
>> If resolvers are encouraged to use NSEC records to synthesize NXDOMAIN
>> responses, would there still be any point to this draft?
> 
> Yes. No one has written up a document on using NSEC records to synthesize 
> NXDOMAIN for the root, and if they do, there will certainly be operational 
> considerations for that that are different than the operational 
> considerations for this draft. I'm not saying one would be better than the 
> other, but I suspect that the operational description of this draft would be 
> easier for an operator to understand.

I wroite "Aggressive use of NSEC/NSEC3 resource records may decrease
queries to Root DNS servers." in
draft-fujiwara-dnsop-nsec-aggressiveuse-00 as a side effect.

Is it related to root-loopback document?

# I will update the draft soon.

--
Kazunori Fujiwara, JPRS 

___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop


[DNSOP] draft-ietf-dnsop-edns-client-subnet-01

2015-06-08 Thread Mark Andrews

Since draft-ietf-dnsop-edns-client-subnet-01 theoretically reverted
the changes made in -00 from draft-vandergaast-edns-client-subnet
then why is the last sentence here with a SHOULD.  MUST be omitted
would be correct to match draft-vandergaast-edns-client-subnet and
the IANA assignment of the option code.

   o  ADDRESS, variable number of octets, contains either an IPv4 or
  IPv6 address, depending on FAMILY, truncated to the number of bits
  indicated by the SOURCE PREFIX-LENGTH field, with bits set to 0 to
  pad to the end of the last octet needed.  Trailing all-zero octets
  SHOULD be omitted.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:  +61 2 9871 4742  INTERNET: ma...@isc.org

___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop


Re: [DNSOP] RFC 2181 - reconsiderations

2015-06-08 Thread Jared Mauch

> On Jun 8, 2015, at 3:11 PM, manning  wrote:
> 
> What do you think?   Is there a reason to not do this?

DNS implementation details are much cleaner than others (e.g.: BGP) in finding 
the root documents and all the additive parts.

In other words, I support pushing these out.

- Jared
___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop


[DNSOP] RFC 2181 - reconsiderations

2015-06-08 Thread manning
Morning y’all.RFC 2181 is a “grab bag” of eight independent items that, 17 
years ago, were not considered “large” enough
to warrant dedicated RFCs.   Quoting from the abstract of the RFC:

"Eight separate issues are considered:

 + IP packet header address usage from multi-homed servers,
 + TTLs in sets of records with the same name, class, and type,
 + correct handling of zone cuts,
 + three minor issues concerning SOA records and their use,
 + the precise definition of the Time to Live (TTL)
 + Use of the TC (truncated) header bit
 + the issue of what is an authoritative, or canonical, name,
 + and the issue of what makes a valid DNS label.

   The first six of these are areas where the correct behaviour has been
   somewhat unclear, we seek to rectify that.  The other two are already
   adequately specified, however the specifications seem to be sometimes
   ignored.  We seek to reinforce the existing specifications.”

It has become unwieldy to try and work on any specific item here without an 
effect on this base document.
There are eight drafts (currently individual submissions), one for each of 
these eight issues.  I’ve read the 
drafts and they have extracted the RFC2181 text for each specific issue, 
verbatim and placed each into 
a dedicated document.   This suggests that as a strictly process issue, that 
the WG could choose to adopt
and fast track these eight IDs to RFC status.   That way work could proceed 
independently on each of the
issues and RFC 2181 could be moved to Historic status.  

What do you think?   Is there a reason to not do this?


manning
bmann...@karoshi.com
PO Box 12317
Marina del Rey, CA 90295
310.322.8102



___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop


Re: [DNSOP] Clarification on EDNS 6891

2015-06-08 Thread Ray Bellis


On 03/06/2015 17:22, Joe Abley wrote:

> I think there's a baked-in expectation that OPT pseudo-RR is included in
> every DNS message, not on every connection (where the transport is
> connection-oriented).

Joe,

Part of the reason this came up is this text in
draft-ietf-edns-tcp-keepalive:

"DNS clients MAY include the edns-tcp-keepalive option in the first
 query sent to a server using TCP transport to signal their desire
 that that specific TCP session be used for multiple DNS transactions."

> While the conventional case of resolver-talks-to-authority makes this
> seem like a highly pedantic observation, we can never be sure of what is
> happening behind the curtain; ALGs that bridge between transports
> (providing a UDP interface on one side but managing a TCP connection
> pool on the other, for example) exist, for example.

Yes, an ALG such as this was the most compelling (albeit hypothetical)
reason that I could think of for not making this assumption, but then
EDNS is *supposed* to be hop-by-hop.

kind regards,

Ray

___
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop