Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt

Colm MacCárthaigh <colm@allcosts.net> Thu, 28 January 2010 18:47 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B37AB28C107; Thu, 28 Jan 2010 10:47:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.677
X-Spam-Level:
X-Spam-Status: No, score=-105.677 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rAKTUROOHG83; Thu, 28 Jan 2010 10:47:34 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id E74A728C0FB; Thu, 28 Jan 2010 10:47:33 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NaZFl-000IFO-7W for namedroppers-data0@psg.com; Thu, 28 Jan 2010 18:38:05 +0000
Received: from [209.85.216.204] (helo=mail-px0-f204.google.com) by psg.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from <colm@allcosts.net>) id 1NaZFh-000IEB-5f for namedroppers@ops.ietf.org; Thu, 28 Jan 2010 18:38:01 +0000
Received: by pxi42 with SMTP id 42so1451729pxi.5 for <namedroppers@ops.ietf.org>; Thu, 28 Jan 2010 10:38:00 -0800 (PST)
MIME-Version: 1.0
Received: by 10.141.2.4 with SMTP id e4mr5019519rvi.192.1264703880246; Thu, 28 Jan 2010 10:38:00 -0800 (PST)
In-Reply-To: <52065.1264699087@nsa.vix.com>
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <6184.1264657589@nsa.vix.com> <4966825a1001280807i768a33ccs98f809366bce33d8@mail.gmail.com> <48894.1264695230@nsa.vix.com> <50A91B20-5AC1-4819-91ED-E5141F068D48@wiggum.com> <52065.1264699087@nsa.vix.com>
Date: Thu, 28 Jan 2010 18:38:00 +0000
Message-ID: <6f5b6fe71001281038l677a6680q7cd51facc3b5326f@mail.gmail.com>
Subject: Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt
From: Colm MacCárthaigh <colm@allcosts.net>
To: Paul Vixie <vixie@isc.org>
Cc: namedroppers@ops.ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Thu, Jan 28, 2010 at 5:18 PM, Paul Vixie <vixie@isc.org> wrote:
> if we're going to add something to a global protocol and a global system,
> we have a burden to do good engineering, not just offer point solutions
> that help a single industry.  there's a reason why web browsers can state
> their preferred language, which is customized content.  if we're going to
> customize dns responses at all (which is controversial) then we have to
> allow for the possibility that some dns content producers will want to
> customize based on things beyond just client ip.

Customising responses is already a de-facto part of shared internet
infrastructure. It seems like a standard that mitigates the
sub-optimalities of this approach and improves service for users and
providers alike is desireable. The alternative is non-interoperable
and behind-the-scenes ad-hoc mechanisms.

Restricting the technique to Client IP seems very reasonable, mainly
because it's the most prevalent such factor today. But also because
the aim here should be to improve DNS as a naming mechanism for the
internet, not to make it arbitrary client-identification mechanism.
That doesn't seem like poor engineering.

> (also, many client-ip addresses will be nat'd, and in that sense, ip is no
> longer end to end, and so including a client-ip in the query is a layering
> violation beyond just its fealty to dns incoherency.)

I think the draft takes explicit account of this issue.

-- 
Colm