IETF Logo Mail Archive

Re: [dns-privacy] DPRIVE over UDP or TCP

🔓Dan Wing <dwing@cisco.com> Thu, 23 April 2015 19:58 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 961E71B323D for <dns-privacy@ietfa.amsl.com>; Thu, 23 Apr 2015 12:58:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.21
X-Spam-Level:
X-Spam-Status: No, score=-14.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gjv_5uVfhh11 for <dns-privacy@ietfa.amsl.com>; Thu, 23 Apr 2015 12:58:36 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D52811B3233 for <dns-privacy@ietf.org>; Thu, 23 Apr 2015 12:58:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6486; q=dns/txt; s=iport; t=1429819107; x=1431028707; h=mime-version:subject:from:in-reply-to:date:cc:message-id: references:to; bh=IFFMVzJ/m2pXx/Ip+887HElSnAxyDWEI0ysconpkGCU=; b=KdT8+ssGmE7rTEwrEwejYWBH+q9RrHGnod5fuwf1rCV1c+wxx04L1n1C PhGnAn/jN24WGKLwDtaALq545pEJNnap4nO/d1ikfu9Lgw+NjfjpvR4aq PuZF9xShW7eJME0lpNTENrlgdSMZjK0cCVX+k+IX89BAQZdmd3bhklQaj o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BXBACTTjlV/5pdJa1bgwxSXIMawwoJgUcBC4YCAoE3OBQBAQEBAQEBgQqEIAEBAQMBAQEBIEsLEAkCGCcDAgIhBh8RBhMJiA4DCQgNmnedAo9JDYUSAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4s3gk2BVBACAUwEB4JoL4EWBYtUiXeEYoFSgSKGFIdDgwSDTiNggzQeMQGCQwEBAQ
X-IronPort-AV: E=Sophos;i="5.11,633,1422921600"; d="scan'208,217";a="143965532"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-3.cisco.com with ESMTP; 23 Apr 2015 19:58:20 +0000
Received: from [10.24.71.248] ([10.24.71.248]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t3NJwJG1013337 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 23 Apr 2015 19:58:20 GMT
Content-Type: multipart/alternative; boundary="Apple-Mail=_B70ACE2F-0B3D-4CB5-AA61-A964D0775A00"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
From: 🔓Dan Wing <dwing@cisco.com>
In-Reply-To: <CA+9kkMBjJc10h0fDaXaYs4HzMSjM06B_6x=5KvPnEn4iZ7fhsw@mail.gmail.com>
Date: Thu, 23 Apr 2015 12:58:19 -0700
Message-Id: <FFEB42A9-BADC-4CA8-9D58-BB2CD305267A@cisco.com>
References: <832DC193-6328-42EC-B33A-801FC1731EB0@cisco.com> <CA+9kkMBjJc10h0fDaXaYs4HzMSjM06B_6x=5KvPnEn4iZ7fhsw@mail.gmail.com>
To: Ted Hardie <ted.ietf@gmail.com>
X-Mailer: Apple Mail (2.2098)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dns-privacy/QZRSKtzcxYb_VZxcKY9CIkf39rM>
Cc: "dns-privacy@ietf.org" <dns-privacy@ietf.org>
Subject: Re: [dns-privacy] DPRIVE over UDP or TCP
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Apr 2015 19:58:44 -0000

On 22-Apr-2015 03:24 pm, Ted Hardie <ted.ietf@gmail.com> wrote: 
> On Wed, Apr 22, 2015 at 10:15 AM, 🔓Dan Wing <dwing@cisco.com <mailto:dwing@cisco.com>> wrote:
> During the DPRIVE meeting in Dallas, several questions came up about UDP versus TCP.  We had previously submitted a "DNS over DTLS" document which predated DPRIVE.  We re-submitted the document with a few edits and a filename that makes it easier to find, https://tools.ietf.org/html/draft-wing-dprive-dnsodtls <https://tools.ietf.org/html/draft-wing-dprive-dnsodtls>, diffs at https://tools.ietf.org/rfcdiff?url1=draft-wing-dnsop-dnsodtls-01&url2=draft-wing-dprive-dnsodtls-00 <https://tools.ietf.org/rfcdiff?url1=draft-wing-dnsop-dnsodtls-01&url2=draft-wing-dprive-dnsodtls-00>
> 
> The working group may want to consider the advantages of DNS over DTLS over UDP compared to using TCP:
> 
>  * No reliance on operating system support of TCP Fast Open [RFC7413] to achieve same number of round trips.
>  * Avoidance of TCP's network head of line blocking.
> 
> 
> ​Just to confirm my understanding, with DTLS plus anycast, you'd have similar issues for restart as TCP (state being associated with a single endpoint, timeout required for flushing state).  Is that your thinking as well?​

They are different, notably around a 'synchronized' TCP session.  See my other email about anycast, subject was Anycast and TCP-based DPRIVE queries, http://www.ietf.org/mail-archive/web/dns-privacy/current/msg00729.html

-d


> 
> regards,
> 
> Ted
> 
>  
> -d
> 
> 
> _______________________________________________
> dns-privacy mailing list
> dns-privacy@ietf.org <mailto:dns-privacy@ietf.org>
> https://www.ietf.org/mailman/listinfo/dns-privacy <https://www.ietf.org/mailman/listinfo/dns-privacy>
>

v2.23.0 | Report a Bug | By Email