Re: [art] draft-ietf-dnsop-attrleaf

Mark Andrews <marka@isc.org> Mon, 31 July 2017 04:09 UTC

Return-Path: <marka@isc.org>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52CE6131BC8 for <art@ietfa.amsl.com>; Sun, 30 Jul 2017 21:09:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level:
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gxZwApHaD8Ij for <art@ietfa.amsl.com>; Sun, 30 Jul 2017 21:09:15 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [199.6.1.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60908131D6B for <art@ietf.org>; Sun, 30 Jul 2017 21:09:15 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.ams1.isc.org (Postfix) with ESMTPS id 5C28524AE10; Mon, 31 Jul 2017 04:07:44 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 4F7BD160048; Mon, 31 Jul 2017 04:07:49 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 3406216004F; Mon, 31 Jul 2017 04:07:49 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id UcUvJoU4nDMD; Mon, 31 Jul 2017 04:07:49 +0000 (UTC)
Received: from rock.dv.isc.org (c27-253-115-14.carlnfd2.nsw.optusnet.com.au [27.253.115.14]) by zmx1.isc.org (Postfix) with ESMTPSA id CBDE6160048; Mon, 31 Jul 2017 04:07:48 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id 57C0C806E75D; Mon, 31 Jul 2017 14:07:45 +1000 (AEST)
To: Adam Roach <adam@nostrum.com>
Cc: John Levine <johnl@taugh.com>, art@ietf.org
From: Mark Andrews <marka@isc.org>
References: <20170728183000.26378.qmail@ary.lan> <cb9476d4-50ac-f311-2249-e3caf3266d01@nostrum.com>
In-reply-to: Your message of "Fri, 28 Jul 2017 15:37:29 -0500." <cb9476d4-50ac-f311-2249-e3caf3266d01@nostrum.com>
Date: Mon, 31 Jul 2017 14:07:45 +1000
Message-Id: <20170731040745.57C0C806E75D@rock.dv.isc.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/F1RqQfPokdMYzGWPH-6GQG04pH4>
Subject: Re: [art] draft-ietf-dnsop-attrleaf
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Jul 2017 04:09:17 -0000

In message <cb9476d4-50ac-f311-2249-e3caf3266d01@nostrum.com>, Adam Roach writes:
> 
> On 7/28/17 1:30 PM, John Levine wrote:
> >> ... and then create two additional sub-tables (one for "_tcp"
> >> and one for "_udp"), which register all the "_service" types that can
> >> appear under these two "_proto" types
> > Please, no.  That registry has existed for decades and has upward of
> > 10,000 entries.  See RFC 6335 and:
> >
> >   https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numb
> ers.xhtml
> >
> > I agree that service names that appear in the registry do not belong in attrleaf.
> 
> 
> Ah, yes. I'd missed that the intention of RFC2782 was to allow SRV 
> records to be instantly usable for all registered services, rather than 
> having each service defining specific additional procedures for SRV 
> resolution. (For example, RFC3263 defines some specific rules around 
> handling priorities across different transports, which goes beyond the 
> handling described by RFC2782). On review, your interpretation appears 
> to be correct.
> 
> In that case, it would appear that the main action here would be to 
> clean up the SRV entries in Table 1 -- by my understanding, the way 
> RFC2782 is written, the only registered SRV entries in the registry this 
> document establishes should consist of some strict subset of 
> <https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml>.
> 
> /a

SRV records are ONLY to be use for protocols that specify that they
be looked up.  There are generic proceedures for how to select a
server given that SRV records are permitted in the first place.

RFC2782

Applicability Statement

   In general, it is expected that SRV records will be used by clients
   for applications where the relevant protocol specification indicates
   that clients should use the SRV record. Such specification MUST
   define the symbolic name to be used in the Service field of the SRV
   record as described below. It also MUST include security
   considerations. Service SRV records SHOULD NOT be used in the absence
   of such specification.

This was written this way so that existing protocols like SMTP, DNS, and
HTTP didn't just suddenly sprout SRV "support".

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org