Re: [DNSOP] new EDE draft with a few changes

Eric Orth <ericorth@google.com> Mon, 23 December 2019 20:39 UTC

Return-Path: <ericorth@google.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648B3120CD9 for <dnsop@ietfa.amsl.com>; Mon, 23 Dec 2019 12:39:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level:
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ROXmXxi8kDeT for <dnsop@ietfa.amsl.com>; Mon, 23 Dec 2019 12:39:56 -0800 (PST)
Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF0B31200FF for <dnsop@ietf.org>; Mon, 23 Dec 2019 12:39:55 -0800 (PST)
Received: by mail-wr1-x429.google.com with SMTP id c14so17911077wrn.7 for <dnsop@ietf.org>; Mon, 23 Dec 2019 12:39:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=3qSzEskm4GW1KEl+ZbyHmEGfGTdAwi2axstSXxJ98oQ=; b=nhudZCzzHTX0Ck1qq54cERkFbmgjwE2jhc4wqYLGGMeRyrCEBKVYnC6ndPLS5m/2JG O/la1/o+MRW2MFrvTwNRjIgCHCsndALTAlrq8XAd7RDhxucLqWI21JsMyHpAkOaqMBfs t4DGDG6mMEAeKxCX5X9t1J3tyBK9hFBV7pCj1QshL16wumfxN91QO2G0OojNllEKTN0H voYE7rfYpbeGXlAw9BrLEnZS/tHdPrEqelkbKWVPum0Ton9iUkAE3zH+bIHSP/Sjw4y+ ot3Is9xhrJ4r55NwyrdViVPM0CjdAkMeJU4bUY0qoYRJPcAZicHUPvFTCxIl+VxYQ71r 530w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=3qSzEskm4GW1KEl+ZbyHmEGfGTdAwi2axstSXxJ98oQ=; b=lOy0CiCJAS0wq6MSSj2/u0blTu3w/fqeAXOr4u+Qmr3dzrRHd0TxcZ9V9QQnEfAgLK AeQT5yeeQNuD8m9q1xoEWl+XGysKEvEtIyk3OZHJ+9z8u/A9DjSvO4t8sg2hy08+uoqt ALkTn2Al3CNnqDIvtx32M37yrgWm1TvG89jZOSlGIH9YI2NYLTluKoE55WL3pntsVVcp vbMQaouD8CanJSlNvfB4mG5+LFUXQvqX5o36R5mAHN3TkSV8O8Ea0y5zdBvxm0uYENXq fck8ogp6QONiWdVZ6Igw6gwc3bDRZ3xiQyHyogEWeVmlgAIQeltkb2xpi2SPs/xXCQfi xSVg==
X-Gm-Message-State: APjAAAXiQwYemMbcqZ+2+7Yot0+w/f0HYKTTKsYO1ZM4r7MMlw1dC8eb 8zXK/p6+UwT3Vmli2Ua2MpYDS72xIoMp1VWyancBF8f1Dr8=
X-Google-Smtp-Source: APXvYqwuerPVcxteP5I9esm80kvV/tZ05wZxQtQPZUAQmaghdw9rWXlaysutSwQ2ZA/HOfGX9snSHKUoQjbAaIDAMBQ=
X-Received: by 2002:a5d:6ac5:: with SMTP id u5mr31520125wrw.271.1577133593874; Mon, 23 Dec 2019 12:39:53 -0800 (PST)
MIME-Version: 1.0
References: <ybl36dh5ogq.fsf@w7.hardakers.net>
In-Reply-To: <ybl36dh5ogq.fsf@w7.hardakers.net>
From: Eric Orth <ericorth@google.com>
Date: Mon, 23 Dec 2019 15:39:42 -0500
Message-ID: <CAMOjQcHECyrc1cyvev7zsCheXoU2YJjA2TKbrprywjHq6raA1g@mail.gmail.com>
To: Wes Hardaker <wjhns1@hardakers.net>
Cc: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a0f30b059a65074a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/8FjGcxlxAmlUi440dF2KcNC9WhA>
Subject: Re: [DNSOP] new EDE draft with a few changes
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Dec 2019 20:39:58 -0000

Regarding TC-bit: I would still prefer adding a sentence or two that error
generators should keep the EXTRA-TEXT field short to minimize the need for
truncation.  I proposed some text for this a month or so back, and I don't
recall any negative feedback about the suggestion.  But if that addition is
controversial, I wouldn't object to the current draft.

Regarding forwarding: Making it implementer-choice generally seems good to
me.  But I am unsure what the current draft means by "properly
attributed".  What is the proper way to attribute an EDE?

On Wed, Dec 18, 2019 at 4:11 PM Wes Hardaker <wjhns1@hardakers.net> wrote:

>
> Folks,
>
> Per the discussions in the past about both the TC bit and
> resolver/forwarding, I've updated the draft with the following text for
> these two issues.  Below is a new section that describes these issues.
> I *believe* that this might be a good enough middle ground to get us
> past rough consensus, though I know opinions varied widely on what
> people's definitions of "perfect" is.  [the registry ranges are also
> updated, but I'm fairly confident we're already at rough consensus for
> that.]
>
> Any objections to this path forward?
>
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-extended-error/
>
> diff:
> https://www.ietf.org/rfcdiff?url1=draft-ietf-dnsop-extended-error-12&url2=draft-ietf-dnsop-extended-error-13
>
> ---
>
>
> 3.  Extended DNS Error Processing
>
>    When the response grows beyond the requestor's UDP payload size
>    [RFC6891], servers SHOULD truncate messages by dropping EDE options
>    before dropping other data from packets.  Implementations SHOULD set
>    the truncation bit when dropping EDE options.
>
>    When a resolver or forwarder receives an EDE option, whether or not
>    (and how) to pass along EDE information on to their original client
>    is implementation dependent.  Implementations MAY choose to not
>    forward information, or they MAY choose to create a new EDE option(s)
>    that conveys the information encoded in the received EDE.  When doing
>    so, care should be taken to ensure any information is properly
>    attributed since an EDNS0 option received by the original client will
>    be perceived only to have come from the resolver or forwarder sending
>    it.
>
> --
> Wes Hardaker
> USC/ISI
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>