Re: [DNSOP] Cache utilization review and suggestion for EDNS client-subnet

Mukund Sivaraman <muks@isc.org> Thu, 04 February 2016 11:17 UTC

Return-Path: <muks@isc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3DFB1ACEA4 for <dnsop@ietfa.amsl.com>; Thu, 4 Feb 2016 03:17:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level:
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hxm2tzG9mZ8g for <dnsop@ietfa.amsl.com>; Thu, 4 Feb 2016 03:17:16 -0800 (PST)
Received: from mail.banu.com (mail.banu.com [46.4.129.225]) by ietfa.amsl.com (Postfix) with ESMTP id 46E411ACE97 for <dnsop@ietf.org>; Thu, 4 Feb 2016 03:17:16 -0800 (PST)
Received: from jurassic.l0.malgudi.org (unknown [115.118.217.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.banu.com (Postfix) with ESMTPSA id 515A02FA028A; Thu, 4 Feb 2016 11:17:13 +0000 (GMT)
Date: Thu, 04 Feb 2016 16:47:10 +0530
From: Mukund Sivaraman <muks@isc.org>
To: Yuri Schaeffer <yuri@nlnetlabs.nl>
Message-ID: <20160204111710.GA8514@jurassic.l0.malgudi.org>
References: <20151228022914.GA11204@jurassic.l0.malgudi.org> <56B32D33.5020203@nlnetlabs.nl>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="rwEMma7ioTxnRzrJ"
Content-Disposition: inline
In-Reply-To: <56B32D33.5020203@nlnetlabs.nl>
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/jVYJvfFeBSgOiGHRAw-0xfkhaVA>
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] Cache utilization review and suggestion for EDNS client-subnet
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Feb 2016 11:17:18 -0000

Hi Yuri

On Thu, Feb 04, 2016 at 11:51:31AM +0100, Yuri Schaeffer wrote:
> In any case it would answer with A2 because given the information
> provided this is the most specific answer (it gets it from the root of
> the tree).

The draft doesn't state that the answer is for the SOURCE PREFIX-LENGTH
when SCOPE > SOURCE. At all other times, the answer is meant to be
cached at the SCOPE PREFIX-LENGTH.

I quote the draft (all that's there on the topic):

>  The SCOPE PREFIX-LENGTH in the response indicates the network for
>  which the answer is intended.
>
>  A SCOPE PREFIX-LENGTH value longer than the SOURCE PREFIX-LENGTH
>  indicates that the provided prefix length was not specific enough to
>  select the most appropriate Tailored Response.  Future queries for
>  the name within the specified network SHOULD use the longer SCOPE
>  PREFIX-LENGTH.
	       
Where does it say that the answer is for the SOURCE PREFIX-LENGTH?


> You seem to imply that a SCOPE > SOURCE means an answer from further
> down the tree. But I think it doesn't, or at least it shouldn't. The
> SCOPE is not tied to an answer but rather used as an indicator how
> many bits the authority needs/wants for the most/more specific answer.

So you are saying that your assumption is more correct than my
assumption. :) That may be so, but both are assumptions and because we
can both assume whatever we want, it would be best to describe what the
correct meaning and behavior is in the draft, wouldn't you agree?

Having the auth and resolver sides doing different things in different
flavours of implementation would lead to incorrect caching.

		Mukund