Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt

Nicholas Weaver <nweaver@ICSI.Berkeley.EDU> Thu, 28 January 2010 22:58 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6846E3A68AD; Thu, 28 Jan 2010 14:58:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.599
X-Spam-Level:
X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zueo-yJnr5Bi; Thu, 28 Jan 2010 14:58:28 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id B3BD83A680C; Thu, 28 Jan 2010 14:58:28 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NadDZ-000Pmr-QY for namedroppers-data0@psg.com; Thu, 28 Jan 2010 22:52:05 +0000
Received: from [192.150.186.11] (helo=fruitcake.ICSI.Berkeley.EDU) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from <nweaver@ICSI.Berkeley.EDU>) id 1NadDW-000Plx-79 for namedroppers@ops.ietf.org; Thu, 28 Jan 2010 22:52:02 +0000
Received: from [IPv6:::1] (jack.ICSI.Berkeley.EDU [192.150.186.73]) by fruitcake.ICSI.Berkeley.EDU (8.12.11.20060614/8.12.11) with ESMTP id o0SMptNM013208; Thu, 28 Jan 2010 14:51:55 -0800 (PST)
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <201001282206.o0SM6m8a000684@stora.ogud.com>
In-Reply-To: <201001282206.o0SM6m8a000684@stora.ogud.com>
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
Message-Id: <72430F7A-AD0B-455D-BA02-B96B654245C6@icsi.berkeley.edu>
Content-Transfer-Encoding: quoted-printable
Cc: Nicholas Weaver <nweaver@ICSI.Berkeley.EDU>, Wilmer van der Gaast <wilmer@google.com>, namedroppers@ops.ietf.org
From: Nicholas Weaver <nweaver@ICSI.Berkeley.EDU>
Subject: Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt
Date: Thu, 28 Jan 2010 14:51:55 -0800
To: Olafur Gudmundsson <ogud@ogud.com>
X-Mailer: Apple Mail (2.1077)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Jan 28, 2010, at 2:06 PM, Olafur Gudmundsson wrote:
> The proposal in the draft moves almost all the cost of fixing the
> "problem" to the Recursive resolvers. Both by adding the option to the
> queries, and by the onerous requirement to fragment their internal cache
> based on source address of the stub-resolvers.
> This moves the cost of solving the "problem" from the CDN providers to the
> recursive resolvers operators, and I question if that is fair or justified.

OTOH, it only moves the cost of fixing the problem to the recursive resolvers where it IS a problem, as the ISP recursive resolvers, and self-run recursive resolvers, shouldn't generally have this as an issue.

> <dnsext-chair-hat=on>
> The open question for the working group is the following:
> "Is it one of DNS roles to provide information on where the query
> originated from?"

A different way of phrasing the question embedded in this draft: 

A significant and well established usage has, largely but not completely correctly, assumed that the DNS query address as seen by the authority provides meaningful information on the client's network location, as a side consequence of DNS resolution either being provided by the network provider or as part of the end network's own systems.

Should DNS enable this assumption to continue when DNS resolution is provided by a different party than network transport?