Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt
Puneet Sood <puneets@google.com> Tue, 27 July 2021 15:42 UTC
Return-Path: <puneets@google.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 625F63A0E9B for <dnsop@ietfa.amsl.com>; Tue, 27 Jul 2021 08:42:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.098
X-Spam-Level:
X-Spam-Status: No, score=-18.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.499, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tk-iMhLs13FJ for <dnsop@ietfa.amsl.com>; Tue, 27 Jul 2021 08:42:36 -0700 (PDT)
Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D96E13A0E94 for <dnsop@ietf.org>; Tue, 27 Jul 2021 08:42:35 -0700 (PDT)
Received: by mail-wm1-x32a.google.com with SMTP id n11so7872953wmd.2 for <dnsop@ietf.org>; Tue, 27 Jul 2021 08:42:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=b0tprhdq9rKqs6PjhnswA+Oc7yUHRBCsJqDEINyf0Tg=; b=wOGtqgW/11jQKoYdZuiXV1KuV6DqUSgT0PyK/RNS5TH81OjGLJUOoQrx2ZABC+Xgz+ hqt85lyBTBBS/9NWG51NfMy9PpF5g+o+R2MRDsckaoTVaMPJka6LKfhWfSHgHHa+KbZM +zv0iqjCA9o871MpFD4T9/zWeYFFheJ6iB3HM46ZaV7cXd92ZhYOLG0BhrsBYU52cj2E CJTareAs90pPN6i7wVCzQVmjsHGglqdvpoE/w2LBw066bubG/GkAQkWlnCSeUJMh1gvc NcFaq8SoP4WiVFSzrDN0Q+OFNHn5PUniFqL5f1X4OPqkPnBT4F526YtstdBRD3YStDa8 XWyg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=b0tprhdq9rKqs6PjhnswA+Oc7yUHRBCsJqDEINyf0Tg=; b=AOWtEGY5SWWVgGS1MZBmwPZ3GYkvE77ujU9kW6bNc4DPLqKxssgHdNFSziGopA3O7q hn47UUpWjEB5vi4o2Y6RCMnEqGlKQim9oUTt7+ueV08MYwPugjZFfH6Eyq4dltGg4hAD 3+JISxo9Xk5JAW0NBIQFu8UZkVna6d1U0ZZXgHnUAobrHZA+SHyxQv5LBPI84fZfSEnU Yrpdi14fdcMbH31kX+PsXkmxVJupOj2R41gNlKRrrgyuUNqJpmgO/CY+XNuuP2gG6NVH qvjJJCRRO4xBb9FnzC340caLmgB7EoC+uNPK14Em/4QNlBX1Z5HtgmO/Ob7q6tNnrclY OZuA==
X-Gm-Message-State: AOAM530Xt24FTGAsxmw0mfsFg6ax+hHaOuwrVN6lhl3Lwk+f6P4x/e/k 7bCxi5/G/6MD0gdd+CBevxq4FSmIvmFYQ6GQwYeB2kfCQqgJPA==
X-Google-Smtp-Source: ABdhPJxAVI50lomVR4US07JJ8Nv9qjhgU7fEo2IcIw0n95Gc+uGTybGpD4a7Y1qXZ8MjvSFhRE3cn71YlMv3jiZHR7M=
X-Received: by 2002:a1c:46c4:: with SMTP id t187mr4905679wma.64.1627400551560; Tue, 27 Jul 2021 08:42:31 -0700 (PDT)
MIME-Version: 1.0
References: <162733357522.25673.580033570288310145@ietfa.amsl.com>
In-Reply-To: <162733357522.25673.580033570288310145@ietfa.amsl.com>
From: Puneet Sood <puneets@google.com>
Date: Tue, 27 Jul 2021 11:42:19 -0400
Message-ID: <CA+9_gVstayRZufjKbi3TgKxnsg-Jt52y1Z3Znnmocyf_iSdoiQ@mail.gmail.com>
To: IETF DNSOP WG <dnsop@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/_omiSib6Q41jF1-0rMjC4kU5JuE>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jul 2021 15:42:40 -0000
Couple of comments and a readability suggestion * +1 to Geoff Huston's request to provide justification for why sibling glue is desirable in a response. Also would prefer to not make it mandatory in a referral response. If the sibling glue is referring to a dns operator, it is possible that the resolver already has seen the nameserver names before and has the needed A/AAAA records in cache. Truncation in this case would require a redundant query. * Section 5: Promoted or orphan glue The considerations for handling orphan glue will be different for a TLD vs a lower level zone within a domain. I would think that orphan glue in a TLD context should go away when a zone is deleted/expired. Maybe even have sanity checking to prevent such an operation. A readability suggestion * Move the description of all types of glue upfront before getting into recommendations. - real glue - sibling glue - loops with sibling - orphaned glue * Describe the recommendations for including glue. This should also call out the scenario where different kinds of glue/referrals are present in a response (glue, sibling glue). This is implicit in the wording now. -Puneet On Mon, Jul 26, 2021 at 5:06 PM <internet-drafts@ietf.org> wrote: > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Domain Name System Operations WG of the IETF. > > Title : Glue In DNS Referral Responses Is Not Optional > Authors : M. Andrews > Shumon Huque > Paul Wouters > Duane Wessels > Filename : draft-ietf-dnsop-glue-is-not-optional-02.txt > Pages : 7 > Date : 2021-07-26 > > Abstract: > The DNS uses glue records to allow iterative clients to find the > addresses of nameservers that are contained within a delegated zone. > Authoritative Servers are expected to return all available glue > records in referrals. If message size constraints prevent the > inclusion of all glue records in a UDP response, the server MUST set > the TC flag to inform the client that the response is incomplete, and > that the client SHOULD use TCP to retrieve the full response. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dnsop-glue-is-not-optional/ > > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-dnsop-glue-is-not-optional-02.html > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-glue-is-not-optional-02 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Joe Abley
- [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-… internet-drafts
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Puneet Sood
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Joe Abley
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Brian Dickson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Mark Andrews
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Ralf Weber
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Shumon Huque
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Shumon Huque
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Shumon Huque
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Mark Andrews
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… George Michaelson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Geoff Huston
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Shumon Huque
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Ralf Weber
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Joe Abley
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Joe Abley
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Paul Wouters
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Ralf Weber
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Ralf Weber
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Shumon Huque
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Geoff Huston
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Mark Andrews
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Mark Delany
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Geoff Huston
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Geoff Huston
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Jared Mauch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… Jared Mauch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-… John R Levine