Re: [DNSOP] [Doh] [EXTERNAL] Re: New I-D: draft-reid-doh-operator

Patrick McManus <mcmanus@ducksong.com> Mon, 25 March 2019 09:42 UTC

Return-Path: <mcmanus@ducksong.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B15A120381 for <dnsop@ietfa.amsl.com>; Mon, 25 Mar 2019 02:42:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ducksong.com header.b=IiOPKyBG; dkim=pass (2048-bit key) header.d=outbound.mailhop.org header.b=F7pxWxBF
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x3R2EdkXldfW for <dnsop@ietfa.amsl.com>; Mon, 25 Mar 2019 02:42:05 -0700 (PDT)
Received: from outbound1g.eu.mailhop.org (outbound1g.eu.mailhop.org [52.28.6.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C8B312037F for <dnsop@ietf.org>; Mon, 25 Mar 2019 02:42:04 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1553506922; cv=none; d=outbound.mailhop.org; s=arc-outbound20181012; b=k3/sCIKtEYHWMw6NdpvluvbtZFbiUi5SaqWhqI3KgZ7TStuUEi0Q2ZR+98a9PDsI80z4GMH6CiElu Xe26YiMtDSc0u6oAvrHixlgUjQQa6Xawq9N6rWlLzLkOP9V92TyScWqX/Bx+8ZapqkkrvHC2cgR5YI gLBj6P5DsUKRHlNVKUVnlVkyB9JNUJzL0GddLxAxOdFCAL3kMcFIc2wJz9ZEMGC7lM+BwuEgcW0/x+ ZXCZu01c4wg2c35/mWM81SDK/+bg6Wzo1JKQAsRgv9XmzKgEUMRFkhuYiELGWUSRyOGU4dI8P8m85p ottVeyu0az7GfW89VYT9QfojJWs1jhQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=arc-outbound20181012; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:dkim-signature:dkim-signature:from; bh=rmAiNYT0EY5to5juamBJ83H6A5Uk3rbp+xUxnD+y6zA=; b=OLp5qQuxh52lIcp9IpeYRyRiBd/JQfb8vcqY3m4bPVRUU4vVPw0ExgmTq6i55xFpcOLdyQNOMCOUe x259ABIc5BK0L20g6nkZcy1PEK+lzr9hVJGf1NDywrCcb91fQxhK3QBJOp2ScWvDB05SD7fosyUm6g wXMrataptu4Tn/DEXO9YVuT60VAcwPHqPXv+D0qCNVa6prf4OZkfmnmnagEVHTn9Qa4DS0xjnZJwei wM0mcgqMAHnxXhlDazykWxzU57GrHGn08pcuu4eKe4Wg0yPMn0etzMXDZqhtytcUw0GNykoJl8D3sj GsXR3Btl9tMLroTAacLPhGy+wpAcxxg==
ARC-Authentication-Results: i=1; outbound3.eu.mailhop.org; spf=pass smtp.mailfrom=ducksong.com smtp.remote-ip=209.85.210.52; dmarc=none header.from=ducksong.com; arc=none header.oldest-pass=0;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ducksong.com; s=duo-1537391512170-ea99bbb3; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:from; bh=rmAiNYT0EY5to5juamBJ83H6A5Uk3rbp+xUxnD+y6zA=; b=IiOPKyBGdEyx1vnPIKuCDhO+Ighi8Sr4VnoSiZrXr7PbboG1CDZagqfpOoRcWO/QQHSxOzSDIDtlC j4VfpO5XCpXOQ4eBe+vuEtYu2+Dcb+M/J4Yljq4NY9fpbj4X3bFH9IjKcSswlC9vHhVt6e3iD813A2 ndm2R49MkcqcGtn0=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=dkim-high; h=content-type:cc:to:subject:message-id:date:from:in-reply-to:references: mime-version:from; bh=rmAiNYT0EY5to5juamBJ83H6A5Uk3rbp+xUxnD+y6zA=; b=F7pxWxBFc9jhJZ29aKPuYgG8mVqxrYUUuKbCPsDtLXvwrlKimbj0MDviPskEslKIY1OcuFYYnF4tz 7lLvAHJjVvXnIy8W5zmnmkGe4vhkEXT0LVlwN+pAZ2CCwlGX+4t2nlcot8Bh+9rUjcCiO9fyMBXtda /OfabzpE11G6m2qxQAsTg2HXvo38tjJX2RkNiEI47/U3yZ+OupKvy9XYvnEy/IbvRJ159y1WjZYhEq B+faEAjQdJafwRFrjxcZ2xBjFeRIVFvk/rGlDwX7B9mTCvz9y8WaC1F7dUxpChMyP+3iE4s7HXdZSg AmwnKYETt0igjz2Q+E2VmwsCjhun+Nw==
X-MHO-RoutePath: bWNtYW51cw==
X-MHO-User: 3ccc314d-4ee2-11e9-908b-352056dbf2de
X-Report-Abuse-To: https://support.duocircle.com/support/solutions/articles/5000540958-duocircle-standard-smtp-abuse-information
X-Originating-IP: 209.85.210.52
X-Mail-Handler: DuoCircle Outbound SMTP
Received: from mail-ot1-f52.google.com (unknown [209.85.210.52]) by outbound3.eu.mailhop.org (Halon) with ESMTPSA id 3ccc314d-4ee2-11e9-908b-352056dbf2de; Mon, 25 Mar 2019 09:42:00 +0000 (UTC)
Received: by mail-ot1-f52.google.com with SMTP id j10so940740otq.0 for <dnsop@ietf.org>; Mon, 25 Mar 2019 02:42:00 -0700 (PDT)
X-Gm-Message-State: APjAAAXdRhR5zmr/LlRPSwQoTx4Ejt99tvDMAPUMjfCvs8hSADb082f5 zwb/KDf1s7m450d57Biq7XK4Gw3jrDA/PxWWM7U=
X-Google-Smtp-Source: APXvYqwiq6Xjf//zbuD4/5LHpYVtMhGkvOV+xhe8cNKs4F/C540t/op15L9nAFDLi8aaPWOfTnPrun9pn/fLZy9ORYA=
X-Received: by 2002:a05:6830:109:: with SMTP id i9mr14789282otp.96.1553506919888; Mon, 25 Mar 2019 02:41:59 -0700 (PDT)
MIME-Version: 1.0
References: <04C556AF-D3B3-41A5-B119-8FE5F81FB9A7@huitema.net> <1878722055.8877.1553241201213@appsuite.open-xchange.com> <CABcZeBPmpN-cEPK92QQW3bkvc41Cx5g7B_YuUXCJK3j1qF995Q@mail.gmail.com> <20190322.101434.307385973.sthaug@nethelp.no> <32A78B0C-52B6-46E5-A46F-D63D21DEC52C@sky.uk> <CAOdDvNqb2+4Az+g608QRjYt+ZdUt1L9GAc=MJM3-xd0ZNmeBEQ@mail.gmail.com> <1C720263-10E4-423B-B152-5673E115A4C1@gmail.com> <CAOdDvNrQiM2bpi65tCvwjanQTM1KtcZjRL0aOwS2oAryTR-YEA@mail.gmail.com> <E7E54A3B-4C85-4B64-BEFD-51891534DC9D@gmail.com> <CAOdDvNqKja9SRWa7FpjnGR3XZbVwZbitoU0yuWc+oXw3xXFEQA@mail.gmail.com> <CAH1iCiq-XaeTN_O7rDkKQy6OQaqqyMb=dFoQ-gAEjTMOsVbcBQ@mail.gmail.com> <CAKcm_gNfx6nx9f1C+=VkUHyPjsP7S4yjEUo_xq76GsNT5gzY3A@mail.gmail.com> <a20355fd-b734-e3ce-71dd-6fda9642972a@bellis.me.uk>
In-Reply-To: <a20355fd-b734-e3ce-71dd-6fda9642972a@bellis.me.uk>
From: Patrick McManus <mcmanus@ducksong.com>
Date: Mon, 25 Mar 2019 10:41:48 +0100
X-Gmail-Original-Message-ID: <CAOdDvNr-fKUPJFixEjtc4uZkCUohfc44pyxnVqrA_qrcGbiw2Q@mail.gmail.com>
Message-ID: <CAOdDvNr-fKUPJFixEjtc4uZkCUohfc44pyxnVqrA_qrcGbiw2Q@mail.gmail.com>
To: Ray Bellis <ray@bellis.me.uk>
Cc: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001dbc170584e804a1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/HWKwSgfgCJIPvYwdSmYXBnYFz8w>
Subject: Re: [DNSOP] [Doh] [EXTERNAL] Re: New I-D: draft-reid-doh-operator
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2019 09:42:08 -0000

On Mon, Mar 25, 2019 at 9:58 AM Ray Bellis <ray@bellis.me.uk> wrote:

>
>
> On 25/03/2019 09:28, Ian Swett wrote:
> > One way DoH may be faster than DoT in the near future is that DoH can go
> > over HTTP/3 via QUIC and avoid head of line blocking like Do53.
>
> Head of line blocking shouldn't happen on a modern Do53 server.
>
> See RFC 7766 §6.2.1.1
>
>
I've seen this confusion before, so I can clear it up!

Ray is (I believe) referring to the flexible re-ordering of DNS
request-reply pairs of a TCP channel.. similar to HTTP/2 (though with less
flexibility in granularity iirc). That addresses hol-blocking problems due
to the time the server spends building replies.

Ian is (I believe) referring to head of line blocking problems related to
TCP's in-order delivery semantic and packet loss. TCP packet loss will
delay the delivery of received packets if there are outstanding unreceived
lower-numbered packets. If the data in these packets are unrelated (e.g.
different DNS request/reply pairs) - that causes head of line blocking to
the application. That's true of http/2 and RFC7766 (anything tcp based
really). QUIC streams provide a mechanism for identifying which sequences
actually need to have that dependency. DoH with H3 would use separate
streams for separate requests (as different HTTP exchanges are inherently
on different streams).

Its a shame that the term hol blocking is used for both scenarios - it has
caused a lot of confusion.

hth

-Patrick