IETF Logo Mail Archive

Re: [DNSOP] DNSOP Call for Adoption - draft-tale-dnsop-serve-stale

神明達哉 <jinmei@wide.ad.jp> Thu, 07 September 2017 18:33 UTC

Return-Path: <jinmei.tatuya@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E0AC13263F for <dnsop@ietfa.amsl.com>; Thu, 7 Sep 2017 11:33:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.699
X-Spam-Level:
X-Spam-Status: No, score=-1.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.199, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jD0CxwInz16Y for <dnsop@ietfa.amsl.com>; Thu, 7 Sep 2017 11:33:24 -0700 (PDT)
Received: from mail-qt0-x233.google.com (mail-qt0-x233.google.com [IPv6:2607:f8b0:400d:c0d::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8762132F7E for <dnsop@ietf.org>; Thu, 7 Sep 2017 11:33:23 -0700 (PDT)
Received: by mail-qt0-x233.google.com with SMTP id m35so1401700qte.1 for <dnsop@ietf.org>; Thu, 07 Sep 2017 11:33:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=eocNpxAog0NFonReZwTPGsY5LfVRhPvlmG0hbQUeils=; b=Z7EvKIaPRwe/Otm1+BwTXgeMlAJz4r/Z9HvOCFJOkOI5iMakTe3m3i4Ubu4KEhkzc4 bWXVxtfKg9zOFj/D0QFQnkNGBkxpGX8GdX2dV8ZQ7hPJqrv8I1PzGzs/q9GqoxkyQ4LI iEVV/awZn8zCI1mO9/4uIB4JlMEgvIXEAuPGrfm/G971csJJ9aWQlWIqZZHV3CYKaLlu t/3HdOyVmVYVBbA2w5DTNwZQJ8/9CpoNmPHXWp6wUzrA6Svus4pH6n8GqqUv5qacBVQj 1kF6zmu9Iok25RwxmUUwOYq9rXnocK+S1T/yME9qleDQJqwJq78tQD9aHDyPGDC+Ddh+ uLrw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=eocNpxAog0NFonReZwTPGsY5LfVRhPvlmG0hbQUeils=; b=QYzchA+uJxZ5vjyrIuINHeXrTPksAEsnhXXBY0wQo5yx+WIj7VOfE62hZL49NpBhrN IeD+EyhTogHw6OwdId2+aXUgOtPRMG4ANjLfVzD73vCkWzpvSpDdYn4ttGMowUKJLjtV C21opFl3WYhk5c6cdEDA5iYsLd8i2auukNgHQ563ni5hwEzvvxFX2Cq4C5Fi5DpDF/uK QfWhsCtQefOWxp+nqPZGV5Y6DCdNj8ysRMAlAZAKWn3Mv/+Ok3TxW9zMgszwg3+teuNY DAsE6/UY18t/X8HtW7o67i27126UHQPxraJ/5KVJDFibuSxGW8HWucsWiR+99Ikt79v6 vc9w==
X-Gm-Message-State: AHPjjUijq4GvQIxGqGzXdXAxJEDps39VrCBbKYspgYdPTs3jj0Zlh4Dv 6dl0te0IidpRlBWc0cmBJYO8tNg4Zg==
X-Google-Smtp-Source: AOwi7QAHkduxvVVcOcMVzppU9Q2hGB0w/SN+Fg39D9rQFV2cqlNzUk8LAsBuRbHy1iP5s4Um7Mx7tEThSW0/OgIFecw=
X-Received: by 10.237.60.1 with SMTP id t1mr306985qte.246.1504809202862; Thu, 07 Sep 2017 11:33:22 -0700 (PDT)
MIME-Version: 1.0
Sender: jinmei.tatuya@gmail.com
Received: by 10.200.54.104 with HTTP; Thu, 7 Sep 2017 11:33:22 -0700 (PDT)
In-Reply-To: <ybltw0emmvh.fsf@wu.hardakers.net>
References: <CADyWQ+FHDHcmq-mr0BCHS5A8yvaOQmhTjve1_DmZN6vAc=BKyA@mail.gmail.com> <20170907154234.3z2zbju2sciiy7wr@nic.fr> <ybltw0emmvh.fsf@wu.hardakers.net>
From: 神明達哉 <jinmei@wide.ad.jp>
Date: Thu, 07 Sep 2017 11:33:22 -0700
X-Google-Sender-Auth: 3h-sRYH7hsdvtrgWyPrz_ZG2On0
Message-ID: <CAJE_bqc9zD3Um2oWri7K3L10=MWrUrKpCHpmUGAADKUmFmPYCg@mail.gmail.com>
To: Wes Hardaker <wjhns1@hardakers.net>
Cc: Stephane Bortzmeyer <bortzmeyer@nic.fr>, tjw ietf <tjw.ietf@gmail.com>, dnsop <dnsop@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/VvLF2RMAPAKjlzP90JlnZe10Ypc>
Subject: Re: [DNSOP] DNSOP Call for Adoption - draft-tale-dnsop-serve-stale
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Sep 2017 18:33:25 -0000

At Thu, 07 Sep 2017 10:36:50 -0700,
Wes Hardaker <wjhns1@hardakers.net> wrote:

> > I'm not enthousiastic. We should focus on making the DNS
> > infrastructure more reliable, not on adding something to a pile of
> > already fragile protocols.
>
> I don't believe we have any ideas how to make infrastructure more
> reliable in the face of DDoS attacks.

+1.

If we don't work on a proposal like this, I'd love to see a specific
counter proposal that doesn't violate the current protocol
specification (i.e., using a cached answer beyond its TTL) and still
avoids resolution failure when authoritative servers are forced to be
non-responsive due to huge scale DoS attacks.  Otherwise the more
likely scenario is that some vendors still keep a similar protocol
violation using marketing decoration like "smartness" while other
compliant implementors just look incompetent (and this will be a huge
incentive for the latter group to follow the former, and we'll just
see more proliferation of this violation).

--
JINMEI, Tatuya

v2.23.0 | Report a Bug | By Email