Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-edns-chain-query

Tony Finch <dot@dotat.at> Wed, 11 November 2015 16:41 UTC

Return-Path: <fanf2@hermes.cam.ac.uk>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06ED81B2BC8 for <dnsop@ietfa.amsl.com>; Wed, 11 Nov 2015 08:41:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level:
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sNgdzyJ9TmTs for <dnsop@ietfa.amsl.com>; Wed, 11 Nov 2015 08:41:30 -0800 (PST)
Received: from ppsw-50.csi.cam.ac.uk (ppsw-50.csi.cam.ac.uk [131.111.8.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E409D1B2BCE for <dnsop@ietf.org>; Wed, 11 Nov 2015 08:41:29 -0800 (PST)
X-Cam-AntiVirus: no malware found
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:37869) by ppsw-50.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.158]:25) with esmtpa (EXTERNAL:fanf2) id 1ZwYSd-0006wV-qv (Exim 4.86_36-e07b163) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 11 Nov 2015 16:41:27 +0000
Received: from fanf2 by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local id 1ZwYSd-0007Yq-BM (Exim 4.72) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 11 Nov 2015 16:41:27 +0000
Date: Wed, 11 Nov 2015 16:41:27 +0000
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: Paul Vixie <paul@redbarn.org>
In-Reply-To: <4611426.Grkv5enuug@linux-85bq.suse>
Message-ID: <alpine.LSU.2.00.1511111632550.25050@hermes-2.csi.cam.ac.uk>
References: <5635CF1A.4030803@gmail.com> <2974092.InZ2j6Ioop@linux-85bq.suse> <alpine.LSU.2.00.1511111538160.25050@hermes-2.csi.cam.ac.uk> <4611426.Grkv5enuug@linux-85bq.suse>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/MNSpORqIg6GBlJhbDFnKl9QJ7S4>
Cc: dnsop@ietf.org, Paul Hoffman <paul.hoffman@vpnc.org>
Subject: Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-edns-chain-query
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Nov 2015 16:41:34 -0000

Paul Vixie <paul@redbarn.org> wrote:

> > You get the entire CNAME chain in the first RTT so you can validate all
> > the links in the chain in the second RTT.
>
> here, you appear to be planning for a stub validator, which makes RD=1 queries.

Yes, that's what edns-chain-query is for.

> yes, that's flooding the channel. you're allowed one work-stream per
> query, in order that timeouts and other loss are only felt as
> backpressure by those apps who caused them.

Where is that specified?

> i have no objection to multiple parallel outstanding upstream queries
> over a TCP stream.

Why is TCP special?

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Shannon, South Rockall: Southwesterly 7 to severe gale 9, increasing storm 10,
perhaps violent storm 11 later. Very rough or high, becoming high or very high
later. Rain or thundery showers. Moderate or poor, occasionally good.