Re: [DNSOP] New Version Notification for draft-gersch-dnsop-revdns-cidr-00.txt

Frederico A C Neves <fneves@registro.br> Fri, 30 March 2012 10:27 UTC

Return-Path: <fneves@registro.br>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA3E921F869C for <dnsop@ietfa.amsl.com>; Fri, 30 Mar 2012 03:27:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.528
X-Spam-Level:
X-Spam-Status: No, score=-2.528 tagged_above=-999 required=5 tests=[AWL=0.072, BAYES_00=-2.599, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AeaR6EDSuPvT for <dnsop@ietfa.amsl.com>; Fri, 30 Mar 2012 03:27:33 -0700 (PDT)
Received: from clone.registro.br (clone.registro.br [IPv6:2001:12ff:0:2::4]) by ietfa.amsl.com (Postfix) with ESMTP id D9DDA21F84F3 for <dnsop@ietf.org>; Fri, 30 Mar 2012 03:27:32 -0700 (PDT)
Received: by clone.registro.br (Postfix, from userid 1000) id 36D74E04A0; Fri, 30 Mar 2012 07:27:32 -0300 (BRT)
Date: Fri, 30 Mar 2012 07:27:32 -0300
From: Frederico A C Neves <fneves@registro.br>
To: Ray Bellis <Ray.Bellis@nominet.org.uk>
Message-ID: <20120330102732.GA61566@registro.br>
References: <20120217000918.22307.43753.idtracker@ietfa.amsl.com> <2D04DB88-9570-4DE3-A796-F4F07AF5EF74@secure64.com> <017101ccefd5$51790560$f46b1020$@lampo@eurid.eu> <C21F43CF-9CA9-4A40-A7CC-463C5139F362@secure64.com> <E2FDD0E1-9C08-43C4-967E-1AE9102D817E@nic.cz> <2C012FE1-A40D-473F-89D8-52673182A581@nominet.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <2C012FE1-A40D-473F-89D8-52673182A581@nominet.org.uk>
Cc: Ond??ej Surý <ondrej.sury@nic.cz>, "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] New Version Notification for draft-gersch-dnsop-revdns-cidr-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Mar 2012 10:27:33 -0000

On Fri, Mar 30, 2012 at 10:19:43AM +0000, Ray Bellis wrote:
> 
> On 30 Mar 2012, at 12:09, Ond??ej Surý wrote:
> 
> > Hi Joseph,
> > 
> > since I am not sure if you understood my point (I am not sure if I was able
> > to understand it myself :), I am summarizing it to the mailing list.
> > 
> > I like the direction of your work, but I miss a way how to put more stuff under
> > the named prefix.
> > 
> > I would like you to update RFC2317 together with your document, so the end
> > customers don't have two distinct trees in their DNS infrastructure.
> 
> +1

I'm not quite sure 2317 can be used for shorter prefixes but it's
actually only seen in the wild for /25 onwards. The proposed idea
works for any prefix outside the 8 or 4 bit boundary depending on what
family we are talking.

> > F.e. if I have 1.0.m.82.129.in-addr.arpa prefix in the DNS and I have delegate
> > it to the customer, how do I put my PTRs in?  The block owner would still have
> > to delegate another "dummy" prefix with CNAMEs and you have to handle it in
> > separate zone.
> > 
> > BTW one more observation.  Since you don't have to do any zone cuts in the binary
> > part, why not merge them into just one label?  E.g. something like 10.m.82.129.in-addr.arpa or 10001101.m.82.129.in-addr.arpa.
> 
> With the current scheme it's possible to delegate longer prefixes, and this is a necessary feature.
> 
> The stuff Dan was saying about two alternate representations concerns me, though.  As written, by default:
> 
>   192.168.64/18 is 1.0.m.168.192
> 
> but
> 
>   192.168.64/24 is 64.168.192
> 
> which is not a sub-domain of the enclosing /18 representation.
> 
> This way lies dragons, I think...

If your parent have't made their mind I agree with you, but this is
very unlekely.

> Ray

Fred