Re: [DNSOP] WGLC for draft-ietf-dnsop-tcp-requirements

Peter van Dijk <peter.van.dijk@powerdns.com> Thu, 22 April 2021 11:52 UTC

Return-Path: <peter.van.dijk@powerdns.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B6A73A14B1 for <dnsop@ietfa.amsl.com>; Thu, 22 Apr 2021 04:52:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.497
X-Spam-Level:
X-Spam-Status: No, score=-1.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.4, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q7M_8t_izm8M for <dnsop@ietfa.amsl.com>; Thu, 22 Apr 2021 04:52:07 -0700 (PDT)
Received: from mx3.open-xchange.com (alcatraz.open-xchange.com [87.191.39.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CF503A14A2 for <dnsop@ietf.org>; Thu, 22 Apr 2021 04:52:06 -0700 (PDT)
Received: from imap.open-xchange.com (imap.open-xchange.com [84.81.54.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx3.open-xchange.com (Postfix) with ESMTPSA id 897A76A0CA; Thu, 22 Apr 2021 13:52:04 +0200 (CEST)
Received: from plato ([84.81.54.175]) by imap.open-xchange.com with ESMTPSA id G2TJIGRjgWAhfAAA3c6Kzw (envelope-from <peter.van.dijk@powerdns.com>); Thu, 22 Apr 2021 13:52:04 +0200
Message-ID: <1e183403088a65c6443bc152650493047dfadd7c.camel@powerdns.com>
From: Peter van Dijk <peter.van.dijk@powerdns.com>
To: "dnsop@ietf.org" <dnsop@ietf.org>
Date: Thu, 22 Apr 2021 13:52:04 +0200
In-Reply-To: <FB2CFC37-7E0E-46EE-A551-29223D44A12A@verisign.com>
References: <93D82731-7B33-4E39-8DEF-FF6C14803191@gmail.com> <e50a822dcbb3c998e84f449e40a703b137f18521.camel@powerdns.com> <FB2CFC37-7E0E-46EE-A551-29223D44A12A@verisign.com>
Organization: PowerDNS.COM B.V.
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.30.5-1.1
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/aQX52_jJ-h2jrPatmqt1V4ZajHY>
Subject: Re: [DNSOP] WGLC for draft-ietf-dnsop-tcp-requirements
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Apr 2021 11:52:12 -0000

On Wed, 2021-04-21 at 23:47 +0000, Wessels, Duane wrote:
> >   application.  Applications must be coded and configured to make use
> >   of this filter.
> > 
> > While it's good to point out that this feature exists, I do not think
> > mandating it makes sense - implementers and operators might have other
> > preferences for handling open-but-as-yet-unused TCP connections. (Also
> > the lowercase 'must' is confusing.)
> 
> It was not intended as a requirement, but rather to note that the application 
> needs to do some work to utilize them.

Ah! That makes a lot more sense, yes.

>   Hows this?
> 
>        These features are implemented as low-level socket options.
>        It is necessary for applications to be specifically coded and
>        configured to make use of them.

To my non-native eyes this still smells like 'you should do this'.

How about:

These features are implemented as low-level socket options, and they
are not activated automatically. If applications wish to use these
features, they will need to make specific calls to set the right
options, and administrators may need to configure the applications to
make these calls.

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/