[DNSOP] ANAME TTL considerations [issue #30 #34]

Matthijs Mekking <matthijs@pletterpet.nl> Thu, 02 May 2019 09:21 UTC

Return-Path: <matthijs@pletterpet.nl>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E5FF120159 for <dnsop@ietfa.amsl.com>; Thu, 2 May 2019 02:21:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X5PnDpK1bsm7 for <dnsop@ietfa.amsl.com>; Thu, 2 May 2019 02:21:46 -0700 (PDT)
Received: from lb3-smtp-cloud9.xs4all.net (lb3-smtp-cloud9.xs4all.net [194.109.24.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7285B12009A for <dnsop@ietf.org>; Thu, 2 May 2019 02:21:46 -0700 (PDT)
Received: from [IPv6:2001:980:4eb1:1:a53d:dd47:34bd:242b] ([IPv6:2001:980:4eb1:1:a53d:dd47:34bd:242b]) by smtp-cloud9.xs4all.net with ESMTPSA id M7uOhwC87NExlM7uPhmZne; Thu, 02 May 2019 11:21:42 +0200
To: "dnsop@ietf.org" <dnsop@ietf.org>
From: Matthijs Mekking <matthijs@pletterpet.nl>
Message-ID: <5d31cde3-e989-7ef9-dad0-e5a9e6a71988@pletterpet.nl>
Date: Thu, 02 May 2019 11:21:40 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-CMAE-Envelope: MS4wfBNWIRxi2lMR2xH5F1on40WvjURkhHqaLlgbW+DZqdRGM6RTLrjPBk//T1a1QgW4pg+7TaKuGB7l6duPkl89LBBso05g81ZaasxN9Q26EekiPevVLX+9 axDjFFthF8pa8GeNBVa9zuRoTCfli1l7KcyC8icxazCluovcFa+Ze4sFJ4BhcF7IvDrUmqmTibiIXOEXGn29VqtbNourbVPvH7n86N6ncDBBoxLHDvoGaF0M QV6cfakFXJ/EX8D7cAA6ubedRGE58JIeEANenwRE4yo=
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/HX219KF1gG-HIjBzVHuXZqesa1E>
Subject: [DNSOP] ANAME TTL considerations [issue #30 #34]
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 May 2019 09:21:49 -0000

Hi,

Another issue that is still open related to ANAME is the TTL
considerations.

The current draft says that when updating sibling address records
with target address records to reduce the TTL to match the ANAME TTL if
it is greater.

I propose a change that others have expressed as well, that is the TTL
of the sibling address records should be set to the minimum of the
target address records and its intermediate records in case of CNAME
and/or ANAME chains.

The logic is that ANAME is likely to be a more static record, while its
target address records are expected to be more dynamic. Therefor it may
make sense to set different TTLs for the different RRsets, meaning we
should not try to match the ANAME TTL and the TTL of the address records.

This means that when implementing ANAME substitution at the primary,
this will likely stretch the end-to-end TTL (from the authoritative
servers for the target address records to end-user DNS caches) to  near
twice the target address record original TTL.

The suggested change can be found here:

  https://github.com/each/draft-aname/pull/61

I will leave this pull request open for a while to solicit feedback,
counter arguments, approvals, ...


Best regards,

Matthijs