Re: [dns-privacy] Multiple DNS requests per packet, multiple packet responses

Mark Andrews <marka@isc.org> Wed, 19 March 2014 18:52 UTC

Return-Path: <marka@isc.org>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92E221A0729 for <dns-privacy@ietfa.amsl.com>; Wed, 19 Mar 2014 11:52:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.448
X-Spam-Level:
X-Spam-Status: No, score=-2.448 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wdh9GJdJzhnp for <dns-privacy@ietfa.amsl.com>; Wed, 19 Mar 2014 11:52:18 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [IPv6:2001:500:60::65]) by ietfa.amsl.com (Postfix) with ESMTP id A460F1A071A for <dns-privacy@ietf.org>; Wed, 19 Mar 2014 11:52:18 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) by mx.ams1.isc.org (Postfix) with ESMTP id C33962383CC; Wed, 19 Mar 2014 18:51:56 +0000 (UTC) (envelope-from marka@isc.org)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 7236E160060; Wed, 19 Mar 2014 18:53:01 +0000 (UTC)
Received: from rock.dv.isc.org (unknown [149.20.50.236]) by zmx1.isc.org (Postfix) with ESMTPSA id 69E80160051; Wed, 19 Mar 2014 18:53:01 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id CE197119DED6; Thu, 20 Mar 2014 05:51:55 +1100 (EST)
To: Phillip Hallam-Baker <hallam@gmail.com>
From: Mark Andrews <marka@isc.org>
References: <CAMm+LwgXExHH6YxpvQLEsgZ+C4uUjvv0E=+g0XBmWVBrQnG_-w@mail.gmail.com> <alpine.LSU.2.00.1403191801520.31260@hermes-1.csi.cam.ac.uk> <CAMm+LwjMuy9OcjG6XK9LY2pjig65caoKOL_j0vW+bRVOmdaaMw@mail.gmail.com>
In-reply-to: Your message of "Wed, 19 Mar 2014 14:19:43 -0400." <CAMm+LwjMuy9OcjG6XK9LY2pjig65caoKOL_j0vW+bRVOmdaaMw@mail.gmail.com>
Date: Thu, 20 Mar 2014 05:51:55 +1100
Message-Id: <20140319185155.CE197119DED6@rock.dv.isc.org>
Archived-At: http://mailarchive.ietf.org/arch/msg/dns-privacy/sWyiITxAXImOZ2p7MIjYUq9BpSA
Cc: Tony Finch <dot@dotat.at>, dns-privacy@ietf.org
Subject: Re: [dns-privacy] Multiple DNS requests per packet, multiple packet responses
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Mar 2014 18:52:21 -0000

In message <CAMm+LwjMuy9OcjG6XK9LY2pjig65caoKOL_j0vW+bRVOmdaaMw@mail.gmail.com>
, Phillip Hallam-Baker writes:
> On Wed, Mar 19, 2014 at 2:06 PM, Tony Finch <dot@dotat.at> wrote:
> 
> > Phillip Hallam-Baker <hallam@gmail.com> wrote:
> > >
> > > In particular, if we let a DNS query ask more than one question at a
> > > time then we improve latency of responses.
> >
> > No need to change the protocol, just make the queries concurrently. If
> > your implementation makes that slow, fix the implementation. You would
> > have to fix it anyway in order to support the protocol changes, so you
> > might as well do the fix without the protocol change. No need to waste
> > time and money on talking about paper protocols.
> >
> 
> This is not a change. It is implementing RFC1035 as written.
> 
> BIND and co have done it wrong all these years. If the implementations are
> not wrong then where is the RFC that states QDCOUNT = 1?

The HEADER is future proof.  The protocol is written for QDCOUNT = 1 for QUERY.
The HEADER does NOT support QDCOUNT != 1 for general <QNAME,QTYPE,QCLASS> in
the query section.  There is no defined behaviour for fixed <QNAME,QCLASS>
and variable <QCLASS>.
 
> I have talked to the engineers at several browser companies and they tell
> me that parallel queries do not actually work the way you imagine.
> 
> In the first place it is only possible to issue the queries at all if you
> override the built in platform API. But even when you do, problems are
> caused by middleboxes and ISPs which limit the number of concurrent queries.

Total BS.  There are system resolvers that are thread aware.  Fire
off # threads in parallel then join. 

> For a resolver, the change is cheap. The benefit to the client is enormous.
> 
> 
> -- 
> Website: http://hallambaker.com/
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org