Re: [DNSOP] I-D Action: draft-ietf-dnsop-edns-tcp-keepalive-06.txt

In message <9FA7A153-19CB-420A-BEE2-2F0DC9C70D21@sinodun.com>, Sara Dickinson w
rites:
>
> > On 22 Feb 2016, at 18:41, Bob Harold <rharolde@umich.edu> wrote:
> >
> > I am not understanding one thing.
> >
> >  3.3.2.  Sending Responses
> >
> > Says that a server "that receives a query ... without the
> > edns-tcp-keepalive option ... MAY include the edns-tcp-keepalive option
> > in the response"
> >
> > But
> >
> > 3.4.  TCP Session Management
> >
> > Indicates that a server can only send the edns-tcp-keepalive option in
> > an answer if the client includes it in the request.
>
>
> It is subtle, but is the difference between an EDNS0 OPT RR and a
> specific EDNS0 option:
>
> - yes, the server can only send an EDNS0 OPT RR if the client includes
> one in the request but
> - as long as there was an EDNS0 OPT RR in the request, the server can
> send back the edns-tcp-keepalive option even there wasnt one in the OPT
> RR in the request.

Strictly speaking the additional section can have anything the
server feels is relevent including a OPT record (this in RFC 1034).
Clients are expected to cope with anything added to the additional
section.

   6. Using local data only, attempt to add other RRs which may be
      useful to the additional section of the query.  Exit.

That said it is pointless to add a OPT record unless you know the
client understands OPT.  Using a extended rcode would also be
problematic as they require that the client understand OPT records
which can't be determined unless you have see a OPT in the request.

Unknown EDNS options are expected to be ignored in both requests
and replies so it is safe to add a unknown EDNS option to either.

This actually means you can add this option to any response but I
would limit it to responses where there was a OPT record in the
request.

Mark

> Sara.
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org