Re: [DNSOP] Clarifying referrals (#35)

Andrew Sullivan <ajs@anvilwalrusden.com> Wed, 29 November 2017 01:17 UTC

Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2EA1120724 for <dnsop@ietfa.amsl.com>; Tue, 28 Nov 2017 17:17:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=yitter.info header.b=a/9KUlHI; dkim=pass (1024-bit key) header.d=yitter.info header.b=Be+byHkv
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Exj0HKhyhAAu for <dnsop@ietfa.amsl.com>; Tue, 28 Nov 2017 17:17:39 -0800 (PST)
Received: from mx4.yitter.info (mx4.yitter.info [159.203.56.111]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1894612025C for <dnsop@ietf.org>; Tue, 28 Nov 2017 17:17:39 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mx4.yitter.info (Postfix) with ESMTP id 5AF38C06D1; Wed, 29 Nov 2017 01:17:38 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yitter.info; s=default; t=1511918258; bh=CY+1V76Ip9/ce4jHuZIxyEJEGsQ8Dr4OKo9xV6706xQ=; h=From:To:CC:Date:In-Reply-To:References:Subject:From; b=a/9KUlHIVNOPgDH0fdgW5Ri8OwzDc1pBwV9dq0EJz8qMriuy/ARlzX4Jgoi3YLyXb 2zQUZFBBeHgVX23pVOo412yOWWLgGfdBmMBkAYzcB1CtWM7DT1YTn9qKs/FNCBR2xX 6U9zm417jO5AiWTHmregNbA66SEq5AMSfXq2Bg8s=
X-Virus-Scanned: Debian amavisd-new at crankycanuck.ca
Received: from mx4.yitter.info ([127.0.0.1]) by localhost (mx4.yitter.info [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qek3xx6755FU; Wed, 29 Nov 2017 01:17:36 +0000 (UTC)
From: Andrew Sullivan <ajs@anvilwalrusden.com>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yitter.info; s=default; t=1511918256; bh=CY+1V76Ip9/ce4jHuZIxyEJEGsQ8Dr4OKo9xV6706xQ=; h=From:To:CC:Date:In-Reply-To:References:Subject:From; b=Be+byHkv1sfxPaKOHPEJQMc19KaGGgAWlKzDNl8RR50BmwpkmjLElC7yeJU9qMb3Z GIsjv3rAOG15p4Un71rQm+jgWy3SgmS4oRv+bgxb2iwjI0VuGoGgg1+aU+10mHAhgi 7z/hZyiDuo5VkkB+iwFvzdJPsYWDjBWqEHUkHfWk=
To: Mark Andrews <marka@isc.org>
CC: dnsop@ietf.org
Date: Tue, 28 Nov 2017 20:17:34 -0500
Message-ID: <1600559b7b0.2772.55b9c0b96417b0a70c4dcaded0d2e1c6@anvilwalrusden.com>
In-Reply-To: <FAA4A6D6-1454-4705-B87F-1FB96CC50658@isc.org>
References: <20171112075445.tf2ut5dxzhhnqe7l@mx4.yitter.info> <20171128195025.ifzwsjk42wz7ard6@mx4.yitter.info> <FAA4A6D6-1454-4705-B87F-1FB96CC50658@isc.org>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="utf-8"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/Gp_M5pAKqJgVUFruvZa132VG0TU>
Subject: Re: [DNSOP] Clarifying referrals (#35)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Nov 2017 01:17:41 -0000

Excellent point!  Thanks.

-- 
Please excuse my clumbsy thums



----------
On November 28, 2017 15:40:14 Mark Andrews <marka@isc.org> wrote:

> The AA bit may or may not be set depending upon whether the response contains
> a CNAME/DNAME or not.
>
>> On 29 Nov 2017, at 6:50 am, Andrew Sullivan <ajs@anvilwalrusden.com> wrote:
>>
>> Dear colleagues,
>>
>> Joe Abley and I have just submitted a draft
>> (https://datatracker.ietf.org/doc/draft-sullivan-dnsop-refer-down/)
>> that is intended to capture the discussion here about referrals and
>> how to describe them.  It is intended for BCP, and it discourages
>> upward referrals by authoritative servers.
>>
>> That leaves the task of the referrals definition.  I have some new
>> text below:
>>
>> ---%<---cut here---
>>
>> Referral: A type of response in which a server, signalling that it is
>> not authoritative for an answer, provides the querying resolver with
>> an alternative place to send its query.  A referral contains an empty
>> answer section.  It contains the NS RRset for the referred-to zone in
>> the authority section.  It may contain RRs that provide addresses in
>> the additional section.  The AA bit is clear.
>>
>> There are two types of referral response.  The first is a downward
>> referral (sometimes described as "delegation response"), where the
>> server is authoritative for some portion of the QNAME.  The Authority
>> section RRset's RDATA contains the name servers specified at the
>> referred-to zone cut.  In normal DNS operation, this kind of response
>> is required in order to find names beneath a delegation.
>>
>> The second is an upward referral (sometimes described as "root
>> referral" or just "referral response", as distinct from the delegation
>> response above), where the server is not authoritative for any portion
>> of the QNAME.  When this happens, the referred-to zone in the
>> Authority section is usually the root zone (.).  In normal DNS
>> operation, this kind of response is not strictly speaking required to
>> work, and in practice some authoritative server operators will not
>> return referral responses beyond those required for delegation.
>>
>> [optional: see draft-sullivan-dnsop-refer-down-00 or whatever.  We'll
>> only include this reference if the other draft reaches WG consensus
>> before terminology-bis]
>>
>> ---cut here--->%---
>>
>> Comments, please.  Also, Joe and I solicit comments on the referrals
>> draft proper, but it would be nice to put that in a different thread.
>>
>> Best regards,
>>
>> A
>>
>> --
>> Andrew Sullivan
>> ajs@anvilwalrusden.com
>>
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742              INTERNET: marka@isc.org
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop