Re: [DNSOP] BCP on rrset ordering for round-robin? Also head's up on bind 9.12 bug (sorting rrsets by default)

Paul Vixie <paul@redbarn.org> Mon, 18 June 2018 17:46 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40DE9130EF6 for <dnsop@ietfa.amsl.com>; Mon, 18 Jun 2018 10:46:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xjW9Z5jRB-_1 for <dnsop@ietfa.amsl.com>; Mon, 18 Jun 2018 10:46:23 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [IPv6:2001:559:8000:cd::5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49512130F89 for <dnsop@ietf.org>; Mon, 18 Jun 2018 10:45:28 -0700 (PDT)
Received: from [172.20.1.222] (unknown [12.245.46.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id D73F689291 for <dnsop@ietf.org>; Mon, 18 Jun 2018 17:45:25 +0000 (UTC)
Message-ID: <5B27EFB7.1020400@redbarn.org>
Date: Mon, 18 Jun 2018 18:45:27 +0100
From: Paul Vixie <paul@redbarn.org>
User-Agent: Postbox 5.0.25 (Windows/20180328)
MIME-Version: 1.0
To: dnsop@ietf.org
References: <CAKC-DJimMOtNCSE95kRs6Dy3dC_mxB=8O2WVA7badp8GK2ci-Q@mail.gmail.com> <20180615171231.GF1126@mx4.yitter.info> <CAHPuVdWP=DVj52diWYTHKqHBET0hFyUWvACT-VpH20iKzed-ww@mail.gmail.com> <CA+nkc8AS6+cZfi_NGT2T+FeQkQ5fKn--HQOOuusL1cYFkdKbKA@mail.gmail.com> <20180615195232.GA5926@jurassic> <CAKC-DJhRJwg7cw8iexCgq9axgjyjnQQaXP2+wD4u=sk3PtypRg@mail.gmail.com> <20180618150157.GB9377@mx4.yitter.info>
In-Reply-To: <20180618150157.GB9377@mx4.yitter.info>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/TiTScmr5wEaNdrOPjSLOp00StWY>
Subject: Re: [DNSOP] BCP on rrset ordering for round-robin? Also head's up on bind 9.12 bug (sorting rrsets by default)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Jun 2018 17:46:25 -0000

to the extent that the dns technical community has a choice about 
default behaviour, we should consider the costs to the rest of the 
internet community of each default.

in my prior e-mail to this thread i gave examples of assumptions of 
ordering that were violated by the first round-robin implementation. in 
both cases, the assumption was dangerous -- led to fragility. (leaving a 
bad NS in an RRset, and putting verses of poetry in TXT RRsets.)

assumptions of non-ordering are less dangerous. (expect load balancing 
and don't get it.)

we should, if we can engage on the topic of defaults at all, recommend a 
default that is compatible with less-dangerous assumptions.

in other words we should re-order rrsets by default, so that very few 
people or agents are ever prone to think their order is stable. the spec 
says they are unordered, but human nature says, expect more of what 
you're seeing.

vixie