Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt

Ted Hardie <ted.ietf@gmail.com> Mon, 01 February 2010 17:52 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CE9343A67AB; Mon, 1 Feb 2010 09:52:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.499
X-Spam-Level:
X-Spam-Status: No, score=-105.499 tagged_above=-999 required=5 tests=[AWL=1.100, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKPh43stFPup; Mon, 1 Feb 2010 09:52:17 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id 05D833A65A6; Mon, 1 Feb 2010 09:52:17 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1Nc0Kc-000Ldm-Fu for namedroppers-data0@psg.com; Mon, 01 Feb 2010 17:45:02 +0000
Received: from [209.85.222.198] (helo=mail-pz0-f198.google.com) by psg.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from <ted.ietf@gmail.com>) id 1Nc0KY-000Ld1-Uk for namedroppers@ops.ietf.org; Mon, 01 Feb 2010 17:44:59 +0000
Received: by pzk36 with SMTP id 36so5752984pzk.5 for <namedroppers@ops.ietf.org>; Mon, 01 Feb 2010 09:44:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=pf6VICGuibmNb0TXXRX55geZSZsTAtCVYX6su0Jon7Q=; b=xk1BVx6y25hQArxCSu+dFgX/Mc02T/EOdv5orCSFXi375yfL4BvqsDviPHpDhJITBE KCeHQWvARTdwNeWDiSJOOTvfY2n+bT3CXMHVENV1YynqBcRaS1rrToHbpDByPm9qBk91 9Ver1j1lNJCgRVoSW4IMUzpX2aNTczyoteNfw=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=nunLauXC7NYYq9oxwH/i9QXOmTwDFvd931MPdoXwQzHp/YmldJAVTXcrEs/XvEqUZh WVf7whb3Vx5qXbhkSfjDKtMmrAqO7tz86GclwOIYiQ92d47zb/PrPR1xf09pD2kfwKA4 i0CYbdKRS7/0pdBej3hVguBEvH6zbkllIXU8k=
MIME-Version: 1.0
Received: by 10.142.4.41 with SMTP id 41mr1784408wfd.56.1265046298196; Mon, 01 Feb 2010 09:44:58 -0800 (PST)
In-Reply-To: <139D0D6A-5A31-4EE8-88B9-3CACE933187B@icsi.berkeley.edu>
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <OF675CC47F.6FE1B342-ON802576BA.00453090-C12576BA.0047E04C@nominet.org.uk> <74DFF61A-A8BB-4B46-A873-F2407C34C412@sackheads.org> <139D0D6A-5A31-4EE8-88B9-3CACE933187B@icsi.berkeley.edu>
Date: Mon, 01 Feb 2010 09:44:57 -0800
Message-ID: <6e04e83a1002010944q7abfabc6h892ce4cbb1bddcbf@mail.gmail.com>
Subject: Re: [dnsext] Re: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt
From: Ted Hardie <ted.ietf@gmail.com>
To: Nicholas Weaver <nweaver@icsi.berkeley.edu>
Cc: John Payne <john@sackheads.org>, Roy Arends <roy@nominet.org.uk>, Wilmer van der Gaast <wilmer@google.com>, namedroppers@ops.ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

Howdy,

On Mon, Feb 1, 2010 at 8:39 AM, Nicholas Weaver
<nweaver@icsi.berkeley.edu> wrote:
>
> a)  Not everything is HTTP or HTTPS and supports such clean redirections.
>
And this is one of the clearest point in this whole debate:  CDNs serve one
sort of application, which has a host of other methods in play (redirects,
content negotiation, an UPGRADE mechanism to change the security characteristics
of the channel).   Many other applications do not have any of these or use
fundamentally different approaches (store-and-forward protocols, for example,
are pretty unlikely to use a redirect-style approach).

Are we expecting the client's interaction with the DNS to be different on an
application basis here?  Specifically, do we expect the DNS query to look
different when the browser makes a request than when the mail stack does?
How realistic is that, really, without the browser maintaining its own stack?
Isn't it more likely that this will be turned on or off globally?  If
it does vary, what
does that mean for intermediate caching?  Does
this create yet another pressure to reduce cache times?

On a slightly different point, I think Stephane's point on the prevalence of
tunnels in Mobile IP situations is being lost here--we not only have the case
of proxy/tunnels configured for specific applications, but the MIP tunnels which
may be in play here--and that hits a lot of mobile clients that I fear are not
captured in netalyzr data.

regards,

Ted Hardie