[DNSOP] draft-gersch-dnsop-revdns-cidr-01: Alternative Encoding for Names at Octet Boundaries

Shane Amante <shane@castlepoint.net> Fri, 13 April 2012 05:56 UTC

Return-Path: <shane@castlepoint.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A40FD21F85EF for <dnsop@ietfa.amsl.com>; Thu, 12 Apr 2012 22:56:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.553
X-Spam-Level:
X-Spam-Status: No, score=-1.553 tagged_above=-999 required=5 tests=[AWL=1.046, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dWsH8B3dUqDi for <dnsop@ietfa.amsl.com>; Thu, 12 Apr 2012 22:56:46 -0700 (PDT)
Received: from dog.tcb.net (dog.tcb.net [64.78.150.133]) by ietfa.amsl.com (Postfix) with ESMTP id 224DD21F85B7 for <dnsop@ietf.org>; Thu, 12 Apr 2012 22:56:46 -0700 (PDT)
Received: by dog.tcb.net (Postfix, from userid 0) id C4548268063; Thu, 12 Apr 2012 23:56:45 -0600 (MDT)
Received: from mbpw.castlepoint.net (65-101-252-129.hlrn.qwest.net [65.101.252.129]) (authenticated-user smtp) (TLSv1/SSLv3 AES128-SHA 128/128) by dog.tcb.net with SMTP; for dnsop@ietf.org; Thu, 12 Apr 2012 23:56:45 -0600 (MDT) (envelope-from shane@castlepoint.net)
X-Avenger: version=0.7.8; receiver=dog.tcb.net; client-ip=65.101.252.129; client-port=49768; syn-fingerprint=65535:54:1:64:M1452,N,W1,N,N,T,S; data-bytes=0
From: Shane Amante <shane@castlepoint.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 12 Apr 2012 23:56:30 -0600
Message-Id: <B5AEA4AC-C838-4832-A80F-C5CD5183EE6E@castlepoint.net>
To: dnsop@ietf.org
Mime-Version: 1.0 (Apple Message framework v1257)
X-Mailer: Apple Mail (2.1257)
Subject: [DNSOP] draft-gersch-dnsop-revdns-cidr-01: Alternative Encoding for Names at Octet Boundaries
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Apr 2012 05:56:46 -0000

I think this is a good draft.

I do have one comment, based on experimenting with both encoding a /16 in DNS zone files and the resulting lookups on those IP prefixes contained under it.  As this document progresses I would very much like to advocate that the WG considers picking a single method for encoding the prefixes in zone files and, just as importantly, that the only method be the one outlined in Section 5.3:
http://tools.ietf.org/html/draft-gersch-dnsop-revdns-cidr-01#section-5.3

Ultimately, I found it somewhat confusing to obey the encoding rules defined in Section 5.1 wrt octet/nibble-aligned vs. non-octet/nibble-aligned IP prefixes.  As one real-world example, consider the case of a IPv4 /8, with a variety of octet vs. non-octet aligned prefixes allocated (for routing) and delegated (for DNS) to downstream customers.  In that case, tools use to encode in the DNS zone files, as well as look them up (e.g.: dig), must not use "m" notation for prefixes at /8, /16 and /24 boundaries.  However, for prefixes at non-octet aligned boundaries, (e.g.: /9, /18, /20, etc.), they do need to use "m" notation.  I believe the problem will only get substantially worse when considering nibble vs. non-nibble boundaries for IPv6 prefixes being encoded.

While the current draft has tried to do a good job prescribing the rules for encoding & looking up prefixes on octet/nibble vs. non-octet/non-nibble boundaries in Section 5.1, I've found that it is substantially more simple using a single naming scheme in Section 5.3 for all prefix lengths.  Thus, I would propose that the WG consider all IP prefixes be encoded as per what has been defined in Section 5.3.  Ultimately, I think this should result in simpler tools used to encode the zones and, just as importantly, tools that will be developed to look-up RRsets in these zones.

Lastly, FWIW, I agree with the practical operational considerations provided in paragraphs 2 - 4 of Section 5.3 as to why having the "m" sub-domain for holding the IP prefixes is a good thing, hence why I recommend that be the single approach.

I would welcome others thoughts on the matter.

-shane