Re: [dns-privacy] [DNSOP] FW: New Version Notification for draft-pan-dnsop-edns-isp-location-00

Paul Vixie <paul@redbarn.org> Wed, 22 March 2017 10:54 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 737C51316F7; Wed, 22 Mar 2017 03:54:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JvykW2cgo0Ss; Wed, 22 Mar 2017 03:54:47 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [24.104.150.213]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 142F01316FC; Wed, 22 Mar 2017 03:54:46 -0700 (PDT)
Received: from [IPv6:2001:559:8000:c9:c871:8ab0:f80d:ed3c] (unknown [IPv6:2001:559:8000:c9:c871:8ab0:f80d:ed3c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id 94FC361F9C; Wed, 22 Mar 2017 10:54:45 +0000 (UTC)
Message-ID: <58D257F4.8090506@redbarn.org>
Date: Wed, 22 Mar 2017 03:54:44 -0700
From: Paul Vixie <paul@redbarn.org>
User-Agent: Postbox 5.0.11 (Windows/20170302)
MIME-Version: 1.0
To: Lanlan Pan <abbypan@gmail.com>
CC: Ask Bjørn Hansen <ask@develooper.com>, "fuyu@cnnic.cn" <fuyu@cnnic.cn>, dns-privacy@ietf.org, Barry Raveendran Greene <bgreene@senki.org>, dnsop <dnsop@ietf.org>
References: <000f01d29dfe$50b6b190$f22414b0$@cn> <CANLjSvXGO3rSpqb7hzwmV=vfm=UTHnQYqfBmt=uD9Mi8cL59Jg@mail.gmail.com> <16B293AD-27A2-4A6D-8A96-7CD847B59708@senki.org> <CANLjSvUJfU1cafGXHyg=DuCnhm09mBm5z4ve2_g6j2ONgt2tRQ@mail.gmail.com> <BBCEC002-D8D9-498E-8567-507181F9215E@develooper.com> <CANLjSvXA03qGN9TZ2oON7bJfygU7Uzor6H3ku83E_NhA3FBa7A@mail.gmail.com> <3C0E763C-4C7F-4A63-A178-58F2AD77D3AC@develooper.com> <CANLjSvWMYt1khfETApcW4Wt3aourPmhY-7Kz3Jrxjv4x89=3HA@mail.gmail.com> <58D22F02.60505@redbarn.org> <CANLjSvUfbOTXZCva-1zuiaxKoF_L02ZJ95c55cPdefeoroZwEg@mail.gmail.com>
In-Reply-To: <CANLjSvUfbOTXZCva-1zuiaxKoF_L02ZJ95c55cPdefeoroZwEg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/REpytrFkljYEGSpdPbZprLigWnw>
Subject: Re: [dns-privacy] [DNSOP] FW: New Version Notification for draft-pan-dnsop-edns-isp-location-00
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Mar 2017 10:54:52 -0000

Lanlan Pan wrote:
> ... Because ECS is also based on the map of
> "*client subnet -> geolocation*" information.

Paul Vixie <paul@redbarn.org>于2017年3月22日周
> wait, what?

Lanlan Pan wrote:
> Hi Paul,

hi.

> https://www.cdnplanet.com/blog/which-cdns-support-edns-client-subnet/

this web page is factually incorrect in that it presupposes that geo-ip
is used. i have added a comment there to this effect.

the original ECS web site
(http://www.afasterinternet.com/howitworks.htm) is somewhat
marketing-oriented, but says only that "With this more intelligent
routing, customers will have a better Internet experience with lower
latency and faster speeds." in other words, it expects that a CDN will
apply its server-selection logic on an address basis, but using the
truncated client subnet rather than to the DNS request source address.
it does not dictate what the CDN's server-selection logic has to be or do.

in RFC 7871 (http://www.afasterinternet.com/ietfrfc.htm) we see this
definition:

> Topologically Close:  Refers to two hosts being close in terms of the
>       number of hops or the time it takes for a packet to travel from
>       one host to the other.  The concept of topological distance is
>       only loosely related to the concept of geographical distance: two
>       geographically close hosts can still be very distant from a
>       topological perspective, and two geographically distant hosts can
>       be quite close on the network.

there is an error on page 22 which is directly on-point:

>    o  Recursive Resolvers implementing ECS should only enable it in
>       deployments where it is expected to bring clear advantages to the
>       end users, such as when expecting clients from a variety of
>       networks or from a wide geographical area.  Due to the high cache
>       pressure introduced by ECS, the feature SHOULD be disabled in all
>       default configurations.

from context, it's clear that they meant "topological area".

actual CDN technology, from as far back as Cisco Distributed Director in
the mid-1990's, has usually ignored geography, for the reasons i gave
up-thread: overlapping and incoherent topology within a geo-ip region
means that geo-location is a very poor predictor of per-path performance.

let me state (again) for the record that i was and remain opposed to ECS
because it's an obviously bad idea and the apparent need for it merely
proves that Stupid DNS Tricks
(http://queue.acm.org/detail.cfm?id=1647302) did not and could not solve
their chosen problem in the first place. it's architectural
cost-shifting, which is a form of both intellectual conversion and
economic compulsion. sad!

however, if you're going to propose a replacement for ECS, you should
correctly describe how it works. <<Because ECS is also based on the map
of "*client subnet -> geolocation*">> is not a correct description. if
EIL is geo-based, then it is completely different from ECS.

-- 
P Vixie