Re: [DNSOP] Fwd: New Version Notification for draft-bellis-dnsop-session-signal-00.txt

"Jan Komissar (jkomissa)" <jkomissa@cisco.com> Fri, 15 July 2016 19:17 UTC

Return-Path: <jkomissa@cisco.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D46912D9F5 for <dnsop@ietfa.amsl.com>; Fri, 15 Jul 2016 12:17:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.808
X-Spam-Level:
X-Spam-Status: No, score=-15.808 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A3XJBhPLBOAS for <dnsop@ietfa.amsl.com>; Fri, 15 Jul 2016 12:17:11 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AACC312D8E5 for <dnsop@ietf.org>; Fri, 15 Jul 2016 12:17:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4271; q=dns/txt; s=iport; t=1468610230; x=1469819830; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=iwt77GaSg4YpkK5QTsN9X4kyQ3Z5ACzujw4iwM5PXH8=; b=GmeWmNs0r835In8S27i003X3B6AUcZQCF906QdCyhIzYHalQiuIm15L+ zm/JIv1fIc4kCvuFTDqJhOINJla18j2UqafHi2qA34MqMNe83GVu3cFtK ypN4Gj+hzW7sLsMcZJ6nYFGlZwWDSBX3OQC+ZDx03K1mEJnrsSBdC6uT9 k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0A3AgBiNYlX/4MNJK1cAYM9VnwGuG6BeySFdgKBLzgUAQEBAQEBAWUnhF0BBQEBbAkSAgEIFy8nCx0IAgQBEogwDr9aAQEBAQEBAQEBAQEBAQEBAQEBGgWGKoRNhCoWhVsFjgg5imABhhKCe4VNgWuEWYhxhl2JPQEeNoI+gTVuhVR/AQEB
X-IronPort-AV: E=Sophos;i="5.28,369,1464652800"; d="scan'208";a="124606243"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 15 Jul 2016 19:17:09 +0000
Received: from XCH-RCD-020.cisco.com (xch-rcd-020.cisco.com [173.37.102.30]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id u6FJH9IQ021777 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 15 Jul 2016 19:17:09 GMT
Received: from xch-aln-019.cisco.com (173.36.7.29) by XCH-RCD-020.cisco.com (173.37.102.30) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 15 Jul 2016 14:17:09 -0500
Received: from xch-aln-019.cisco.com ([173.36.7.29]) by XCH-ALN-019.cisco.com ([173.36.7.29]) with mapi id 15.00.1210.000; Fri, 15 Jul 2016 14:17:09 -0500
From: "Jan Komissar (jkomissa)" <jkomissa@cisco.com>
To: Ray Bellis <ray@isc.org>, dnsop <dnsop@ietf.org>
Thread-Topic: [DNSOP] Fwd: New Version Notification for draft-bellis-dnsop-session-signal-00.txt
Thread-Index: AQHR19Uo2Q4qODTKGEGCawDuGpw7c6AZ/A4A
Date: Fri, 15 Jul 2016 19:17:08 +0000
Message-ID: <D3AE6549.59F05%jkomissa@cisco.com>
References: <20160706221423.26712.42026.idtracker@ietfa.amsl.com> <33bde57f-3160-acc3-e483-605eb13aa283@isc.org>
In-Reply-To: <33bde57f-3160-acc3-e483-605eb13aa283@isc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.6.0.151221
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.86.252.200]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <41FC1C98C637FF499B77B1EA47EA2281@emea.cisco.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/1zLkod7-DA72CKL5cCjlLSbJBqk>
Subject: Re: [DNSOP] Fwd: New Version Notification for draft-bellis-dnsop-session-signal-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Jul 2016 19:17:13 -0000

Hi Ray,

Here¹s some comments on this draft.

1. Introduction
Even if EDNS(0) currently has "per-message² semantics, I¹m not sure that
it would be wrong to extend it to have per-session semantics when used in
a Session Signaling message.

3.1 Message Format
I am not comfortable with a message format that is not backwards
compatible. Current packet logging code expects all DNS data to be in RR
format, even the EDNS(0) OPT RR. Keeping the Session Signaling in RR
format would make it easier to use existing logging and capturing code.
(How would tcpdump handle a DNS packet with the Session Signaling OpCode
in the current format?)

3.2 Message Handling
While it does make sense that Session Signaling requests are processed in
order, I don¹t think it necessarily makes sense for SS messages to be
³sequencing points.² Since DNS queries may take a long time, a SS message
would block the client from performing any other queries while one
outstanding query is very slow. It could be up to the client if it wants
to wait for all outstanding responses before issuing a SS request.

4.2.1 Terminate
I think the reconnect delay makes sense when you don¹t have anycast or
load-balancing, but still have multiple servers identified by multiple SRV
records. The reconnect delay would then force a client to look for another
server. It also makes sense when a server is trying to shed load and wants
to stop terminated clients from reconnecting immediately.

4.2.2 Idle Timeout

There should be a way for a client to reset the server¹s idle timeout
counter by sending a Session Keepalive message indicating that it¹s still
operational. In cases like DNS Push Notification
(draft-ietf-dnssd-push-08.txt) the client isn¹t idle because it has no
work for the server, but it is waiting for an update from the server that
may or may not come.

DNS Push Notification also specifies that a server should wait 1.5 times
the idle timeout before terminating a client to avoid race conditions
around the timeout expiration. It may be useful to adopt the same practice
here.

Regards,

Jan Komissar


On 7/6/16, 6:24 PM, "DNSOP on behalf of Ray Bellis"
<dnsop-bounces@ietf.org on behalf of ray@isc.org> wrote:

>I've just submitted this draft, which resulted from discussions in
>Buenos Aires related to issues with using EDNS for persistent signalling
>(c.f. RFC 7828), and also from an overlap with draft-ietf-dnssd-push and
>its (mis-)use of the edns-tcp-keepalive option.
>
>The intention here is to split out session-related stateful options from
>the dnssd-push draft into a more generic specification.
>
>Please note that the question of whether to use an alternate message
>format for this OpCode (as it is currently specified) or whether to
>shoe-horn the options into an RR lookalike (per EDNS) is still a matter
>of some debate between the authors.  With no consensus amongst us I felt
>if important that the WG be able to weigh in on that debate.
>
>Ray
>
>-------- Forwarded Message --------
>Subject: New Version Notification for
>draft-bellis-dnsop-session-signal-00.txt
>
>A new version of I-D, draft-bellis-dnsop-session-signal-00.txt
>has been successfully submitted by Ray Bellis and posted to the
>IETF repository.
>
>Name:		draft-bellis-dnsop-session-signal
>Revision:	00
>Title:		DNS Session Signaling
>Document date:	2016-07-06
>Group:		Individual Submission
>Pages:		10
>URL:
>https://www.ietf.org/internet-drafts/draft-bellis-dnsop-session-signal-00.
>txt
>Status:
>https://datatracker.ietf.org/doc/draft-bellis-dnsop-session-signal/
>Htmlized:
>https://tools.ietf.org/html/draft-bellis-dnsop-session-signal-00
>
>
>Abstract:
>   The Extension Mechanisms for DNS (EDNS(0)) [RFC6891] is explicitly
>   defined to only have "per-message" semantics.  This document defines
>   a new Session Signaling OpCode used to carry persistent "per-session"
>   type-length-values (TLVs), and defines an initial set of TLVs used to
>   handle feature negotiation and to manage session timeouts and
>   termination.
>
>_______________________________________________
>DNSOP mailing list
>DNSOP@ietf.org
>https://www.ietf.org/mailman/listinfo/dnsop