Re: [DNSOP] DNSOP Presentation "The Camel"

Robert Edmonds <> Tue, 20 March 2018 21:45 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 729C6129C6B for <>; Tue, 20 Mar 2018 14:45:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id kpU5ZI-X9rxd for <>; Tue, 20 Mar 2018 14:45:40 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 7CE9612711D for <>; Tue, 20 Mar 2018 14:45:40 -0700 (PDT)
Received: by (Postfix, from userid 1000) id D2F0E12C1609; Tue, 20 Mar 2018 17:45:39 -0400 (EDT)
Date: Tue, 20 Mar 2018 17:45:39 -0400
From: Robert Edmonds <>
To: Paul Vixie <>
Cc: Joao Damas <>, dnsop <>
Message-ID: <>
References: <> <> <> <>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <>
Archived-At: <>
Subject: Re: [DNSOP] DNSOP Presentation "The Camel"
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 20 Mar 2018 21:45:42 -0000

Paul Vixie wrote:
> Joao Damas wrote:
> > Camels are indeed great animals and they can be loaded until
> > eventually one more insignificant straw breaks their back. I guess
> > that is were Bert thinks the DNS is at now and I don’t completely
> > disagree
> i was pretty horrified even before ECS. dnssec sentinels feels like friday
> the 13th part 37. there were danger signs saying "don't go here, there's no
> road, nothing to see, and no way back" and we ignored them.

Speaking of being horrified, compare the growth rate on the graph on
slide 2 in this presentation:

With the growth rate on the graph in this article for the same time

A hybrid resolution model that allows leaf queries for parts of the DNS
to be resolved direct-to-authority at endpoints would be very helpful
for some use cases (especially, CDNs) and could stall the insatiable
growth in resolution capacity needed at centralized resolvers. Not to
mention, such a model would provide a solid deprecation path for ECS.

I also note most but not all of the stuff Bert is talking about in his
slide deck are on the inter-server side of the protocol (resolver to
authority). But there are also other DNS camels that have been slowly
gestating in the browser world, e.g.:

Robert Edmonds