Re: [DNSOP] Genart last call review of draft-ietf-dnsop-dns-tcp-requirements-12
Vladimír Čunát <vladimir.cunat+ietf@nic.cz> Mon, 13 September 2021 11:23 UTC
Return-Path: <vladimir.cunat+ietf@nic.cz>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E83A3A1543; Mon, 13 Sep 2021 04:23:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.879
X-Spam-Level:
X-Spam-Status: No, score=-0.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MISSING_HEADERS=1.021, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VlCOpBQoVz5q; Mon, 13 Sep 2021 04:23:18 -0700 (PDT)
Received: from mail.nic.cz (mail.nic.cz [217.31.204.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D76B3A1540; Mon, 13 Sep 2021 04:23:14 -0700 (PDT)
Received: from [IPV6:2a02:768:2d1c:226::a2e] (unknown [IPv6:2a02:768:2d1c:226::a2e]) by mail.nic.cz (Postfix) with ESMTPSA id 108131409FA; Mon, 13 Sep 2021 13:23:12 +0200 (CEST)
Content-Type: multipart/alternative; boundary="------------O4g94kNGLKwN1JrfaIDODXRT"
Message-ID: <3440b444-f641-ade0-8907-5b44b3d5217e@nic.cz>
Date: Mon, 13 Sep 2021 13:23:11 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.0.3
Content-Language: en-US
Cc: "last-call@ietf.org" <last-call@ietf.org>, "gen-art@ietf.org" <gen-art@ietf.org>, "dnsop@ietf.org" <dnsop@ietf.org>, "draft-ietf-dnsop-dns-tcp-requirements.all@ietf.org" <draft-ietf-dnsop-dns-tcp-requirements.all@ietf.org>
References: <163049116085.32386.13520930346743651891@ietfa.amsl.com> <8EE94D6B-24ED-47FA-A6D0-E79C71E1B154@verisign.com> <4bfcc085-76ca-f178-3b08-ebb9c5777e90@isc.org>
From: Vladimír Čunát <vladimir.cunat+ietf@nic.cz>
In-Reply-To: <4bfcc085-76ca-f178-3b08-ebb9c5777e90@isc.org>
X-Virus-Scanned: clamav-milter 0.102.2 at mail
X-Virus-Status: Clean
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/PvOzhptW9FLekbNObcvESpzpHzk>
Subject: Re: [DNSOP] Genart last call review of draft-ietf-dnsop-dns-tcp-requirements-12
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Sep 2021 11:23:23 -0000
>> For the limit on total number of connections: "Absent any other >> information, >> 150 is a reasonable value for this limit in most cases." > [...] > Maybe this could use a clarification that 150 is good advice only if > you _don't_ have any "TCP-only" clients, like e.g. DoT stubs? I would not be so sure that DoT/DoH are the only cases. What about busy authoritative servers? You get 150 by default, and then some important RRset gets over the UDP limit (say, a DNSKEY rollover) and you get into problems due to overzealous connection limits. IMHO 150 is extremely cheap for a (potentially) busy server. --Vladimir | knot-resolver.cz
- [DNSOP] Genart last call review of draft-ietf-dns… Dan Romascanu via Datatracker
- Re: [DNSOP] Genart last call review of draft-ietf… Wessels, Duane
- Re: [DNSOP] Genart last call review of draft-ietf… Dan Romascanu
- Re: [DNSOP] Genart last call review of draft-ietf… Petr Špaček
- Re: [DNSOP] Genart last call review of draft-ietf… Vladimír Čunát
- Re: [DNSOP] [Gen-art] Genart last call review of … Lars Eggert