Re: [Anima] ANI Autoconfiguration via DNS

Esko Dijk <esko.dijk@iotconsultancy.nl> Fri, 16 December 2022 11:10 UTC

Return-Path: <esko.dijk@iotconsultancy.nl>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6BD1C1522B5 for <anima@ietfa.amsl.com>; Fri, 16 Dec 2022 03:10:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iotconsultancy.nl
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rh9zCXYXlOz1 for <anima@ietfa.amsl.com>; Fri, 16 Dec 2022 03:10:50 -0800 (PST)
Received: from EUR02-VI1-obe.outbound.protection.outlook.com (mail-vi1eur02on2121.outbound.protection.outlook.com [40.107.241.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2C37C1522B4 for <anima@ietf.org>; Fri, 16 Dec 2022 03:10:48 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MYgZk4bjwh9ClngXAFsSySwpE10ZiKfju73ITn7Ccgo/JP5ajp8HjvUyGnvjQQGAUn1RJNlbq6R25mqHuoX9XFMgh6UTz0M/vOTb2MfOMYC7e3Olxjk8Ugn02y43ZlHzGNjnjrlO+Om+8AnqOodJyuePkBfN7OFI7KUSITCusrpxfWwiRhWlZjPEssn7uHCFzxDnPMevEU4bM28lW4BXUE6kZXgaOKXrOjCdyrwRFHmZpIHrNtskwd6vna4Jc0u70DJoPnHmKDIAgeDD+/p3sUBlhLwTcpoIz4S9Rv11n4fDmZAC4r5mR8yIW4FGPEwbQbBJKREsGmpMi5QhOCDLRg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yCGh2aW1H/Xo1gfTOc5uUgMAANuHrtIXh4h9w1by7UE=; b=Qkz2xarI5txDMUwHLnzggnQxcZTbc6UqtyuIrm4je0RmGAnmW2kAOZSJnOVrTSBIe/+FLRmrkBxTSFBHXyG8TJI8z/4RZjyEQ+7g1T5xCntbUmXOyZZK5PJ6QgXaIDY3/OXc9rXRQQ19jBE8jKEPbawe8y3JcMlycE8Z96b/GQvsXbM8f2K4n2B1eXTWIgL1G1MyfzwHjlevttEdguBrOXQdbESH5XQBjF7DQ4QUQZtDMdNLOHmqskHv1Ou0YcSH3MjbRmAV4u44tpg0x8k9DMukapSkXlqleC1gTDdag456NgeOiXWWVFyeLH/2W7A1MKUO09cNr7XGBxa6OaqogA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=iotconsultancy.nl; dmarc=pass action=none header.from=iotconsultancy.nl; dkim=pass header.d=iotconsultancy.nl; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iotconsultancy.nl; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yCGh2aW1H/Xo1gfTOc5uUgMAANuHrtIXh4h9w1by7UE=; b=Ad8UYMXZUfj62DW0wEL5FDJZirMHdsW9k4eFkHLzinhMExGhAM1aqEOXluk4UZ6xX9pg2oC3z2wx0kf/N7V4mg2+z9lOGcpFyVwCpf3a36zMK1W5CCrtfmIELe6EcIGnFpGgrQpygOdkh7x8GV/u93ZS6OVUPMtjXW6GveX3uUo=
Received: from DU0P190MB1978.EURP190.PROD.OUTLOOK.COM (2603:10a6:10:3b9::20) by AM0P190MB0659.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:198::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.15; Fri, 16 Dec 2022 11:10:44 +0000
Received: from DU0P190MB1978.EURP190.PROD.OUTLOOK.COM ([fe80::7f21:781:e808:be2]) by DU0P190MB1978.EURP190.PROD.OUTLOOK.COM ([fe80::7f21:781:e808:be2%9]) with mapi id 15.20.5924.012; Fri, 16 Dec 2022 11:10:44 +0000
From: Esko Dijk <esko.dijk@iotconsultancy.nl>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, William Atwood <william.atwood@concordia.ca>, Anima WG <anima@ietf.org>
Thread-Topic: [Anima] ANI Autoconfiguration via DNS
Thread-Index: AQHY8rkNwXg+0oXECUa3Z2QwnhctJ65r2e2ggACa7gCABCEmYA==
Date: Fri, 16 Dec 2022 11:10:43 +0000
Message-ID: <DU0P190MB197859A3C3E114F0AD62F844FDE69@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM>
References: <853134d2-197b-dde4-ccc2-3828854dae27@concordia.ca> <DU0P190MB19789DFB5B9FA99D008DF242FDE39@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM> <328d24f5-07ea-35f6-9c67-e6a3a64753ae@gmail.com>
In-Reply-To: <328d24f5-07ea-35f6-9c67-e6a3a64753ae@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=iotconsultancy.nl;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DU0P190MB1978:EE_|AM0P190MB0659:EE_
x-ms-office365-filtering-correlation-id: 76f40091-5b8b-4623-c64a-08dadf562cf4
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU0P190MB1978.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230022)(346002)(366004)(39830400003)(396003)(136003)(376002)(451199015)(478600001)(966005)(71200400001)(6506007)(53546011)(7696005)(186003)(9686003)(38100700002)(41300700001)(83380400001)(110136005)(86362001)(66946007)(66556008)(8676002)(76116006)(64756008)(66446008)(33656002)(2906002)(316002)(66476007)(55016003)(5660300002)(52536014)(8936002)(44832011)(38070700005)(122000001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: AI7j7DkFGOifvvi43kE3x1dpiyXz8dgsAh83ML5MCnSZEvHvLlMGogk/b1F3iQcl4/YskD0UOaHPgzZk4cllgd5WjOrMglM1f1n0I0e35SQRhOEywUKAn//o9hMtIU2TbHK2yEVyzi5Ms70e+9j1MmIVgLrcabT0fVJjBA+U+aI1o63MK31zSQHROvyKFdGQinD4w3zCr1drIWvE6ZjoVlvr5CSovXpSPCgnJzHyhvJSozweA1kwc23O2Vw/YizVu3/J1TE7GGG8ROQPEePBNGNfyWxmwMEy36nQ/KArnZr01EX+FOTIpWPJvpiqin+WoVYCa5q2PTDxBdY8Jmnp1T5bE78G1Ha7uAZwV1IV2GjPR1MkMkcIzRvY/5QTECu6K6ddlpFc3NuxhUmIW/jEjr8BukKEzn4zDd2545IsjgUuUT7k3kJ1gShS7zrfITbTG7KdAx8m0w92vJSJl1yZrZ1F0gpo7Pnalp9hAV7ieHGpodnYS1KKt9FkWnjS12IIdEeIizbsa1HISXQOjpigVS+8RP5+OKkP1oRd/Vd/7wH57IW8W6udgF+ilIaffzmFKDObcdDysfbBRuaRR3pNAJ+0cN52PAUT/ebmZlcbkxEraTM1KQf21OrKS7qNqbXeE7aS1KaPiDbFZbB+mLZX2X6/7uNk6c626T+1F8jvKL2Wz1VuaXdJQBhbEEVFdgl9MA06K6wNdMcccz+8RLX45mQ395goosIGGCW+fdfybj2nzVGISgnrWie6+9n93aLYsGsS79Irxtlew6T1PcoPExnx1U1slLXwbB8Ry6Nh6ggMb5h+8QcjvN8bJWrdjPtNuvfZbthGzvtjCX7Kfz8WL5p190aZho+IiAHK/hN0AOS45xiW9BYQQGLntf2/3dgvBOWfrZsqrnhw3xSjPpqQbG0UiGc75w/4S+Upcnt9RUclmvS+X3eUb57Tz8F6aNwOdHJITNF2QfeknOcLLRgYndmk8d1OR0MDdjdmIp9HEo0S7z31TmofHAQkmqruKKAkApnyFZmNgE2hE7j1EFaERacfqwk8rMIqjTpLSKt1955VUCeHI21nxJkDNOWP8cccaUTo77G0vQlKBVsa25VL0k5Z9TEks9rz2yPB1Rq6T1kbNWJwUZIHl1hH+7GTn7vzk1KMZJ5jY/bxp5inPA4nr2/7SpReHTamCMu28oxDjfT6pm3ke/pJjEugnw8vCdU83kTEZpdzquqX7hujjYvYvnLHm3BPa+2/ASb2Ovdf0fs0hIxFsfEPonDXmK3jlvD1jXe6TcGANdH8B3TPdFeKwylFrhleHzbh9gSEt7scYcpWxjACAhRbowWs0w9xetcYiGEB3ZWm3nY2C9dTp+F4o7eNCWdNUdX1tANpsgDhWs3F6qDJDRTaT/jtxiTAVJFSxk3efoTgjvUpzb3puiILpD7LHm4J1K6M3AUmo5IwMKMSWR0ItAZ6qfV5X2LSh0WCSMi0WYkvmacPEcU3B5rYXpj5ROW7tXjZpF+iznNLEBjDnqhQ8toP9nMOXlWdRxzF1GRDSnnzrSDNsCkfzJeINoOOMJGALJoen4PetcxT+gAhtsCEN4lmhQ++H7Qy1ya2Ztma1bJ3yvlFUI6XqMNDrq+hOgWnrUdCbg8j7tjrutbhdrpZW9PJC/lO7PwooehSjgfjG+jo7QBHuKtA4e6XCA==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: iotconsultancy.nl
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU0P190MB1978.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 76f40091-5b8b-4623-c64a-08dadf562cf4
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Dec 2022 11:10:44.0142 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 58bbf628-15d2-46bc-820b-863b6774d44b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: XmwvvKaoB1arAdRV6b2xgaXtU7MyY/8kkmsl/VjDuMmXbEGTJ7D5ByiQbksXx9X2RAeOjsEkm1Vk1dNrrltC0hxz7CgNu8CfhdZrgjIjSuk=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P190MB0659
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/HxKH9j3HS8zgdXjPSwJGwo3EhFU>
Subject: Re: [Anima] ANI Autoconfiguration via DNS
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Dec 2022 11:10:55 -0000

Ok, this clarifies the concept further, thanks.

I see this as useful in a fully distributed ACP, for services to 'find each other' and also find nearest instances of particular services. All without having necessarily a central node that gets service registrations, keeps a database in memory of these, and serves service lookup requests.
(The latter concept of DNS service registration using an SRP Registrar as currently defined in the dnssd WG, is still possible - the Registrar itself can be advertised as a service in GRASP. But such thing may not be needed in ACP context. And it requires using the 'legacy' DNS-SD formats again.)

About using an ASA as a "proxy" to the classic DNS system, i.e. client sends GRASP service query and the proxy-ASA does the real DNS query, I had some doubts because the client might as well send its DNS queries in 'legacy' format directly to the GRASP-advertised DNS server.
But clearly the defined solution would enable both approaches.  So it could still be good to have this service encoding in GRASP available as a generic tool ; it may evolve over time how ASAs/ACP-nodes would use it in practice.

Regards
Esko
 
-----Original Message-----
From: Brian E Carpenter <brian.e.carpenter@gmail.com> 
Sent: Tuesday, December 13, 2022 20:58
To: Esko Dijk <esko.dijk@iotconsultancy.nl>; William Atwood <william.atwood@concordia.ca>; Anima WG <anima@ietf.org>
Subject: Re: [Anima] ANI Autoconfiguration via DNS

On 13-Dec-22 23:53, Esko Dijk wrote:
> Hello Bill,
> 
> You mention "the advantages of using native CBOR encoding".  So this refers to the CBOR encoding of (DNS) service properties, which would avoid parsing of the old DNS format.
> As I understand there's a wish of people to avoid having a DNS data parser in devices in the ACP, since the already-present CBOR parser can then be used instead.
> 
> Now if we would have such DNS-in-CBOR format, it would be more generally useful in IETF and not just in ANIMA. Do you agree?

If it's a 1:1 encoding of DNS format into CBOR, yes, and it sounds like useful work in any case.

However, when making a toy implementation of Toerless's proposal when it first appeared, I found that it is something different. What he proposes is a great simplification of the complexities of DNS-SD, where the semantics are split up over SRV, AAAA (or A) and TXT records, all of which need to be parsed to extract the semantic content and then merged into a single JSON-like object. This complexity is much better done in a single autonomic service agent that doesn't need to be in a constrained node. That is the advantage of Toerless's proposal and it is really ANIMA scope, IMHO.

Code at https://github.com/becarpenter/graspy/blob/master/ASA-examples/GetDNSSD2.py , lines 199 through 281. You will see several calls to the DNS resolver and analysis of the results;
the client node will just see a single CBOR object (inside a GRASP objective) or an error return.

Regards
     Brian
  
> If the format is more generally useful it could be defined in either one of the CBOR, CoRE, or DNSSD WGs.  (Although the latter may not be willing to renew something that's "already good")
> And we need to keep in mind the effort of the CoRE WG (still ongoing draft-ietf-core-href) to define a better encoding of the URI -> the CRI, in CBOR. It isn't trivial to cover all properties of the URI correctly. It takes a lot of effort.
> 
> If we still decide to do this in ANIMA WG context I would just go for the simplest possible subset of DNS-SD that fulfills the use cases and not try to be complete.
> 
> Regards
> Esko
> 
> -----Original Message-----
> From: Anima <anima-bounces@ietf.org> On Behalf Of William Atwood
> Sent: Monday, November 7, 2022 15:56
> To: Anima WG <anima@ietf.org>
> Subject: [Anima] ANI Autoconfiguration via DNS
> 
> Item 08 in the ANIMA agenda for IETF 115.
> 
> draft-eckert-anima-grasp-dnssd presents standards for the data
> structures (GRASP objectives) that will be required to effect
> autoconfiguration of basic services such as syslog, NTP, and DNS, using
> GRASP.
> 
> draft-eckert-anima-services-dns-autoconfig presents standards for
> actually providing these services, using the objectives defined in
> draft-eckert-anima-grasp-dnssd.
> 
> A strong argument is given in section 1 of
> draft-eckert-anima-grasp-dnssd, showing that the reliability and
> security of GRASP, and the advantages of using native CBOR encoding and
> GRASP flooding, justify the effort to define a GRASP-specific approach,
> rather than just using GRASP to carry the packets of the needed services.
> 
> Clearly these services are essential to any running distributed system,
> and standardizing their on-the-wire representation will likely reduce
> potential problems with incompatible software in the future.
> 
> I therefore encourage the WG to adopt these two drafts as Working Group
> documents.
> 
>     Bill Atwood
>