Re: [DNSOP] ANAME precedence [issue #58]

神明達哉 <jinmei@wide.ad.jp> Thu, 25 April 2019 18:34 UTC

Return-Path: <jinmei.tatuya@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0EB31200EA for <dnsop@ietfa.amsl.com>; Thu, 25 Apr 2019 11:34:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.669
X-Spam-Level:
X-Spam-Status: No, score=-0.669 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, FROM_EXCESS_BASE64=0.979, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sLbT539xiU4s for <dnsop@ietfa.amsl.com>; Thu, 25 Apr 2019 11:34:46 -0700 (PDT)
Received: from mail-wm1-f51.google.com (mail-wm1-f51.google.com [209.85.128.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 977BD120074 for <dnsop@ietf.org>; Thu, 25 Apr 2019 11:34:45 -0700 (PDT)
Received: by mail-wm1-f51.google.com with SMTP id v14so600121wmf.2 for <dnsop@ietf.org>; Thu, 25 Apr 2019 11:34:45 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=UrECqf6N5yatW7MsJG1oha8au4OEnOnlvyfmrdMfRwQ=; b=qoSmbHJXStKjEey+nURLcwK/wdkM4oDG5tTaiTZ8Rb7U1l5AW7vMoWVisYdLhs5RE1 lcCs5r0Sskw6sFD46XLBhByo8XvRVDogyMQpETiXnB1YoGDfV2ro1VDUhGWspE8gWjEt yFtTReEJC4un2XGIvr23GhT5aQVaT/lk6+6OMakUPX/U/i0ys2U48QtFMLCrraucQ6Bd KXjYfLfxuiAVbNFc2IuiPzRh41Y44Vx9GBS8mhxPPjYrYdmlt61LJw1zqLLwNjghkOVR dSKMkLeEt7eQPIbY4cS8igOCG5f1ZEBNaWpwXvpDgUE9O8uPtNVkmbJdYdAu+XnAfqx2 M1ug==
X-Gm-Message-State: APjAAAXfFX3nSMZXZaI8MQUEfldangRwCs5/+BUUEV+9uRRVHxWvWBX8 fcO5bdRPS2fiphUIRNFSmyYsBJaTzwoUw5pjLb1VWA==
X-Google-Smtp-Source: APXvYqySbP33ACCEGH8jAp7XRSpRnf9gflQ8Cs66q4MMzn0MmTMJ7h62L1acsKJXRDnDe6mZLQwKhfKNNz13zEXLITg=
X-Received: by 2002:a1c:9991:: with SMTP id b139mr4824661wme.53.1556217283784; Thu, 25 Apr 2019 11:34:43 -0700 (PDT)
MIME-Version: 1.0
References: <87d7d127-20cc-8044-277a-d31b1a546219@pletterpet.nl>
In-Reply-To: <87d7d127-20cc-8044-277a-d31b1a546219@pletterpet.nl>
From: 神明達哉 <jinmei@wide.ad.jp>
Date: Thu, 25 Apr 2019 11:34:32 -0700
Message-ID: <CAJE_bqdFQOqg50mVNYMosqqpqpbF0DZR5YeFPs50zM3earOb=A@mail.gmail.com>
To: Matthijs Mekking <matthijs@pletterpet.nl>
Cc: "dnsop@ietf.org" <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000064b31705875f1213"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/5GmJ4MTaSNo6DVSkY-XzwI_Iwpo>
Subject: Re: [DNSOP] ANAME precedence [issue #58]
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Apr 2019 18:34:48 -0000

At Wed, 24 Apr 2019 11:44:37 +0200,
Matthijs Mekking <matthijs@pletterpet.nl> wrote:

> I would like to start separate threads on the remaining issues of the
> ANAME draft. One issue that remains to be solved is whether having an A
> or AAAA record next to the ANAME should take precedence or not.
>
>   Draft: https://datatracker.ietf.org/doc/draft-ietf-dnsop-aname/
>   Issue: https://github.com/each/draft-aname/issues/58
[...]
> Jan Včelák mentioned that at least NS1 uses a different order of
> priority: If an sibling address record exists next to the ANAME it takes
> precedence and no target lookup is done for that address record type.

Is this choice #2 of the github issue #58?

>> sibling address records take precedence, don't to a target lookup for an
address type next to the ANAME.

I'm not sure what this means...if this approach is taken and an
authoritative server has these for an example.com zone:

a.example.com. ANAME another.example.org.
a.example.com. AAAA 2001:db8::1

then, does it always just return the AAAA RRset to a query for
a.example.com/AAAA, regardless of any possible changes to
another.example.org/AAAA?

How is that AAAA created in the first place?  (Is it taken from
another.example.org/AAAA or completely up to the example.com
maintainer?).

Also, especially if both AAAA and A sibling records are available,
what's the purpose of ANAME in the first place if it's (effectively)
not used?

I'm sure I'm just confused and don't understand the expected usage,
but I can't figure it out from the available descriptions.  Could you
clarify it?

--
JINMEI, Tatuya