Re: [DNSOP] WGLC: "Considerations for the use of DNS Reverse Mapping"

Mark Andrews <Mark_Andrews@isc.org> Mon, 31 March 2008 19:34 UTC

Return-Path: <dnsop-bounces@ietf.org>
X-Original-To: dnsop-archive@lists.ietf.org
Delivered-To: ietfarch-dnsop-archive@core3.amsl.com
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1B4E13A6DC3; Mon, 31 Mar 2008 12:34:50 -0700 (PDT)
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CBC213A6A37 for <dnsop@core3.amsl.com>; Mon, 31 Mar 2008 12:34:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.113
X-Spam-Level:
X-Spam-Status: No, score=-2.113 tagged_above=-999 required=5 tests=[AWL=0.486, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lA0RhtNYn75i for <dnsop@core3.amsl.com>; Mon, 31 Mar 2008 12:34:47 -0700 (PDT)
Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) by core3.amsl.com (Postfix) with ESMTP id 3FA8928C3C8 for <dnsop@ietf.org>; Mon, 31 Mar 2008 12:34:46 -0700 (PDT)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.2/8.14.1) with ESMTP id m2VJYcjk072082; Tue, 1 Apr 2008 05:34:39 +1000 (EST) (envelope-from marka@drugs.dv.isc.org)
Message-Id: <200803311934.m2VJYcjk072082@drugs.dv.isc.org>
To: Edward Lewis <Ed.Lewis@neustar.biz>
From: Mark Andrews <Mark_Andrews@isc.org>
In-reply-to: Your message of "Mon, 31 Mar 2008 13:17:11 EDT." <a06240801c416cbfb5028@[10.31.68.58]>
Date: Tue, 01 Apr 2008 06:34:38 +1100
Cc: IETF DNSOP WG <dnsop@ietf.org>, bmanning@vacation.karoshi.com, Peter Koch <pk@DENIC.DE>
Subject: Re: [DNSOP] WGLC: "Considerations for the use of DNS Reverse Mapping"
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsop-bounces@ietf.org
Errors-To: dnsop-bounces@ietf.org

> At 23:17 +0000 3/29/08, bmanning@vacation.karoshi.com wrote:
> >I'm going to ask this question here too..  are we talking about the DNS
> >or are we talking about an applications use of data published in the DNS?
> 
> I think that this is the important question when it comes to know 
> what to write.
> 
> As far as DNS is concerned, "so what" if there are multiple PTR 
> records, yadda, yadda, yadda.  It's nothing to the protocol.
> 
> I was made aware of the desire for limiting PTRs to 1 per address 
> entry via traceroute.  What name should be printed in the one line 
> traceroute gives a hop?
> 
> In general, that's the application's problem.  Apps that can't handle 
> multiple PTRs are the problem to me.  (Why is is that weakly written 
> apps point fingers at the DNS and blame troubles on DNS-being-DNS?)
> 
> Perhaps this document should tell apps writers what they can 
> accomplish with multiple PTRs.
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis                                                +1-571-434-5468
> NeuStar
> 
> Never confuse activity with progress.  Activity pays more.
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop

	Multiple PTR records do not scale.

	Today we have reverse lookups that fail because people
	followed this path and exceeded the 64K DNS message size
	of TCP.

	When people have a 100 thousand virtual domains on a 
	box you just can't have PTR records for all of them.

	Mark
-- 
Mark Andrews, From dnsop-bounces@ietf.org  Mon Mar 31 12:34:50 2008
Return-Path: <dnsop-bounces@ietf.org>
X-Original-To: dnsop-archive@optimus.ietf.org
Delivered-To: ietfarch-dnsop-archive@core3.amsl.com
Received: from core3.amsl.com (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 1B4E13A6DC3;
	Mon, 31 Mar 2008 12:34:50 -0700 (PDT)
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id CBC213A6A37
	for <dnsop@core3.amsl.com>; Mon, 31 Mar 2008 12:34:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.113
X-Spam-Level: 
X-Spam-Status: No, score=-2.113 tagged_above=-999 required=5 tests=[AWL=0.486, 
	BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id lA0RhtNYn75i for <dnsop@core3.amsl.com>;
	Mon, 31 Mar 2008 12:34:47 -0700 (PDT)
Received: from drugs.dv.isc.org (drugs.dv.isc.org
	[IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc])
	by core3.amsl.com (Postfix) with ESMTP id 3FA8928C3C8
	for <dnsop@ietf.org>; Mon, 31 Mar 2008 12:34:46 -0700 (PDT)
Received: from drugs.dv.isc.org (localhost [127.0.0.1])
	by drugs.dv.isc.org (8.14.2/8.14.1) with ESMTP id m2VJYcjk072082;
	Tue, 1 Apr 2008 05:34:39 +1000 (EST)
	(envelope-from marka@drugs.dv.isc.org)
Message-Id: <200803311934.m2VJYcjk072082@drugs.dv.isc.org>
To: Edward Lewis <Ed.Lewis@neustar.biz>
From: Mark Andrews <Mark_Andrews@isc.org>
In-reply-to: Your message of "Mon, 31 Mar 2008 13:17:11 EDT."
	<a06240801c416cbfb5028@[10.31.68.58]> 
Date: Tue, 01 Apr 2008 06:34:38 +1100
Cc: IETF DNSOP WG <dnsop@ietf.org>, bmanning@vacation.karoshi.com,
	Peter Koch <pk@DENIC.DE>
Subject: Re: [DNSOP] WGLC: "Considerations for the use of DNS Reverse
	Mapping"
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>,
	<mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>,
	<mailto:dnsop-request@ietf.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsop-bounces@ietf.org
Errors-To: dnsop-bounces@ietf.org


> At 23:17 +0000 3/29/08, bmanning@vacation.karoshi.com wrote:
> >I'm going to ask this question here too..  are we talking about the DNS
> >or are we talking about an applications use of data published in the DNS?
> 
> I think that this is the important question when it comes to know 
> what to write.
> 
> As far as DNS is concerned, "so what" if there are multiple PTR 
> records, yadda, yadda, yadda.  It's nothing to the protocol.
> 
> I was made aware of the desire for limiting PTRs to 1 per address 
> entry via traceroute.  What name should be printed in the one line 
> traceroute gives a hop?
> 
> In general, that's the application's problem.  Apps that can't handle 
> multiple PTRs are the problem to me.  (Why is is that weakly written 
> apps point fingers at the DNS and blame troubles on DNS-being-DNS?)
> 
> Perhaps this document should tell apps writers what they can 
> accomplish with multiple PTRs.
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis                                                +1-571-434-5468
> NeuStar
> 
> Never confuse activity with progress.  Activity pays more.
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop

	Multiple PTR records do not scale.

	Today we have reverse lookups that fail because people
	followed this path and exceeded the 64K DNS message size
	of TCP.

	When people have a 100 thousand virtual domains on a 
	box you just can't have PTR records for all of them.

	Mark
-- 
Mark AndrewsISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews@isc.org
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop


, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews@isc.org
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop