Re: [dnsext] common resources from multiple names, sustaining performance and identifying primary names

Mark Andrews <marka@isc.org> Wed, 15 September 2010 06:02 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 442BE3A6A39; Tue, 14 Sep 2010 23:02:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.387
X-Spam-Level:
X-Spam-Status: No, score=-101.387 tagged_above=-999 required=5 tests=[AWL=-0.647, BAYES_20=-0.74, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LQ9g4vlV0P8t; Tue, 14 Sep 2010 23:02:23 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id D53D63A68D8; Tue, 14 Sep 2010 23:02:22 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1Ovkye-000IVm-6B for namedroppers-data0@psg.com; Wed, 15 Sep 2010 05:56:16 +0000
Received: from mx.pao1.isc.org ([2001:4f8:0:2::2b]) by psg.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.72 (FreeBSD)) (envelope-from <marka@isc.org>) id 1Ovkyb-000IVT-Fh for namedroppers@ops.ietf.org; Wed, 15 Sep 2010 05:56:13 +0000
Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "farside.isc.org", Issuer "ISC CA" (verified OK)) by mx.pao1.isc.org (Postfix) with ESMTPS id BD7DBC9426; Wed, 15 Sep 2010 05:56:02 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:ea06:88ff:fef3:4f9c]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by farside.isc.org (Postfix) with ESMTP id 67028E6030; Wed, 15 Sep 2010 05:56:02 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (Postfix) with ESMTP id 223034B981D; Wed, 15 Sep 2010 15:56:00 +1000 (EST)
To: Douglas Otis <dotis@mail-abuse.org>
Cc: IETF DNSEXT WG <namedroppers@ops.ietf.org>
From: Mark Andrews <marka@isc.org>
References: <4C902324.1020005@mail-abuse.org>
Subject: Re: [dnsext] common resources from multiple names, sustaining performance and identifying primary names
In-reply-to: Your message of "Tue, 14 Sep 2010 18:36:36 MST." <4C902324.1020005@mail-abuse.org>
Date: Wed, 15 Sep 2010 15:56:00 +1000
Message-Id: <20100915055600.223034B981D@drugs.dv.isc.org>
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

In message <4C902324.1020005@mail-abuse.org>, Douglas Otis writes:
>   While aliasing a name is how common resources seen from multiple names 
> are normally handled, CNAME and the seldom used DNAME are not very 
> suitable for renaming large portions of the name/resource tree.  
> Resolvers that don't understand DNAME, and those that don't understand a 
> new aliasing paradigm will then need each node replaced with synthesized 
> CNAME records having 0 TTLs. It seems this approach on a large scale is 
> likely to result in a significant performance reduction.

Actually the TTL matches (or will [1] and it is shipping in current
nameservers) that of the DNAME which may or may not be zero and the
majority of caching servers on the planet already understand DNAME.
Anything that does DNSSEC validation is required to understand
DNAME.

[1] http://datatracker.ietf.org/doc/draft-ietf-dnsext-rfc2672bis-dname/

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org