IETF Logo Mail Archive

Re: [DNSOP] "DNS resolver should not use 'ANY' to get cached records for TTL" (bugzilla)

Olafur Gudmundsson <olafur@cloudflare.com> Sat, 07 March 2015 18:15 UTC

Return-Path: <olafur@cloudflare.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23D3A1A00CF for <dnsop@ietfa.amsl.com>; Sat, 7 Mar 2015 10:15:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.378
X-Spam-Level:
X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQs6LLjJ0djF for <dnsop@ietfa.amsl.com>; Sat, 7 Mar 2015 10:15:43 -0800 (PST)
Received: from mail-la0-x233.google.com (mail-la0-x233.google.com [IPv6:2a00:1450:4010:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D15D41A010E for <dnsop@ietf.org>; Sat, 7 Mar 2015 10:15:39 -0800 (PST)
Received: by labgm9 with SMTP id gm9so23979032lab.8 for <dnsop@ietf.org>; Sat, 07 Mar 2015 10:15:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HJFmePXAfNCAmojawDskCr5T1dGGoujuK0LeO9WPkKg=; b=dvuC2Kk9bbjCMvzGsISg+4fc7vMBEcCwc4N4D4UY1l6zuf1Z1W9JeVN3COzQgxMWqM PfdP0oh/IyCwrGiMD6eOlbj+mzwMWRiqZ8Ly2cf+DZPMkKJxMGxaJhKyHCZ9ssn1Lrsc EdRVxxMPYBK6hiWVhqflDyfK8mnVNW8PXHmus=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=HJFmePXAfNCAmojawDskCr5T1dGGoujuK0LeO9WPkKg=; b=l6c0nmk2S8Zn27EvCbOqdkgm5L3GyGK2yJRRdzP1PlevH454fcNQrLKVJs5EVlBKuF rnvLOinCVSmfhITRDiVF+uAKB1+BUD2VXclwxkF+PeLirkzwZkoOd/PuKOJ4AqZwRPoX Bw/w5oz9gMM58BnOK1JcIpo7xHEAdM1wJLzEe5HBd7Kp0FhTmB0xxjMf+W45AVG7sEte 8ie+gfxxY3iXUHdAXG8LcNmNE4bKzV+twtKL7WOUFW+ZigQRr8DHvKj72mJRCyqk/MVB j88W7QWKJu5MJ0mnsRaZQPXYgNx2cQ3ueZKSG23Avhy0R+d+WOc4DVsyef2AsQHjOIBd 06AA==
X-Gm-Message-State: ALoCoQkQehloAXNOvaPiHakcqcXRe6+wdepOWnDXMPWRyJeG4DBgtRQJO1v5ZARCmEQ4UNSZ1IvQ
MIME-Version: 1.0
X-Received: by 10.112.51.114 with SMTP id j18mr17763917lbo.97.1425752138009; Sat, 07 Mar 2015 10:15:38 -0800 (PST)
Received: by 10.152.148.73 with HTTP; Sat, 7 Mar 2015 10:15:37 -0800 (PST)
Received: by 10.152.148.73 with HTTP; Sat, 7 Mar 2015 10:15:37 -0800 (PST)
In-Reply-To: <54FA7E49.6090208@redbarn.org>
References: <54FA7E49.6090208@redbarn.org>
Date: Sat, 07 Mar 2015 13:15:37 -0500
Message-ID: <CAN6NTqwd9TUue-CjG+nvx95yRMRSK7mUAQrNJX+MShdtzJawHg@mail.gmail.com>
From: Olafur Gudmundsson <olafur@cloudflare.com>
To: Paul Vixie <paul@redbarn.org>
Content-Type: multipart/alternative; boundary="001a113363f4b9659b0510b6c99f"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/s4bkK8N7vMb9H9c1P_eLhYvQOH0>
Cc: dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] "DNS resolver should not use 'ANY' to get cached records for TTL" (bugzilla)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Mar 2015 18:15:45 -0000

Paul,

Marek and I agree with you to expand the scope to include all meta types at
Authoratitive servers.

And address your other points as well, thanks for the support.
Olafur
 On Mar 6, 2015 11:28 PM, "Paul Vixie" <paul@redbarn.org> wrote:

> this made the news tonight:
>
> > Tracking Flags:
> > tracking-firefox36:    +
> > status-firefox36:    fixed
> > tracking-firefox37:    +
> > status-firefox37:    fixed
> > tracking-firefox38:    +
> > status-firefox38:    fixed
> > tracking-firefox39:    +
> > status-firefox39:    fixed
> > relnote-firefox:    36+
>
>
> (https://bugzilla.mozilla.org/show_bug.cgi?id=1093983)
>
> notes--
>
> 1. i support the adoption and progression of olafur's draft, regardless
> of mozilla's retraction of the bad logic in tonight's firefox release.
>
> 2. it's not going to change the amplification/reflection problem and
> should not mention that problem at all.
>
> 3. it should be renamed to "restricting DNS meta-data queries".
>
> 4. it should be expanded to include RD=0 against recursion-only servers,
> IXFR/AXFR, and anything else in the DNS protocol that would be useful
> for both diagnostics and surveillance.
>
> 5. non-response to these queries should be designed to avoid re-query
> storms from common initiators.
>
> i agree to review and contribute.
>
> vixie
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>

v2.23.0 | Report a Bug | By Email