Re: [dnsext] DNAME with exceptions - work-around found

Niall O'Reilly <Niall.oReilly@ucd.ie> Mon, 13 September 2010 15:12 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D97CE3A6A15; Mon, 13 Sep 2010 08:12:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.169
X-Spam-Level:
X-Spam-Status: No, score=-6.169 tagged_above=-999 required=5 tests=[AWL=0.430, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IHzHX8UuaXhv; Mon, 13 Sep 2010 08:12:49 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id EDD003A6A11; Mon, 13 Sep 2010 08:12:48 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1OvAfN-000BhK-6F for namedroppers-data0@psg.com; Mon, 13 Sep 2010 15:09:57 +0000
Received: from mail.ucd.ie ([193.1.169.34] helo=dakota.ucd.ie) by psg.com with esmtps (TLSv1:RC4-MD5:128) (Exim 4.72 (FreeBSD)) (envelope-from <Niall.oReilly@ucd.ie>) id 1OvAfK-000Bgm-OX for namedroppers@ops.ietf.org; Mon, 13 Sep 2010 15:09:54 +0000
Received: from conversion-daemon.dakota.ucd.ie by dakota.ucd.ie (Sun Java System Messaging Server 6.2-2.05 (built Apr 28 2005)) id <0L8O00J01XOBA400@dakota.ucd.ie> (original mail from Niall.oReilly@ucd.ie) for namedroppers@ops.ietf.org; Mon, 13 Sep 2010 16:09:52 +0100 (IST)
Received: from [10.0.1.177] (bark.no8.be [83.141.81.52]) by dakota.ucd.ie (Sun Java System Messaging Server 6.2-2.05 (built Apr 28 2005)) with ESMTPSA id <0L8O00EBYY4GXJ00@dakota.ucd.ie>; Mon, 13 Sep 2010 16:09:52 +0100 (IST)
Date: Mon, 13 Sep 2010 16:09:56 +0100
From: Niall O'Reilly <Niall.oReilly@ucd.ie>
Subject: Re: [dnsext] DNAME with exceptions - work-around found
In-reply-to: <AANLkTim8o93AQhj_oUvWMvqNH6DiN_W9mLSznRLu9ePA@mail.gmail.com>
To: Brian Dickson <brian.peter.dickson@gmail.com>
Cc: namedroppers@ops.ietf.org
Message-id: <4C8E3EC4.2030805@ucd.ie>
MIME-version: 1.0
Content-type: text/plain; format="flowed"; charset="UTF-8"
Content-transfer-encoding: 7bit
References: <AANLkTim8o93AQhj_oUvWMvqNH6DiN_W9mLSznRLu9ePA@mail.gmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-IE.utf8; rv:1.9.1.12) Gecko/20100826 Thunderbird/3.0.7
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On 10/09/10 21:34, Brian Dickson wrote:
> Here's the trick - on the authority server, serve up more-specific zone(s)
> as needed, whose owner would have been a descendant of one of the DNAMEs
> used to make things "the same".

	[Without considering cache]

	All descendant zones would have to use the same set of
	authority servers as those which carried the
	furthest (highest, least-specific) occluding DNAME,
	or a superset of that set.

	Ouch!

	/Niall