Re: [DNSOP] HTTP dns-alt-svc draft

Shumon Huque <shuque@gmail.com> Sat, 23 June 2018 10:51 UTC

Return-Path: <shuque@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8853E130E15 for <dnsop@ietfa.amsl.com>; Sat, 23 Jun 2018 03:51:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vXNI4qTlvE2s for <dnsop@ietfa.amsl.com>; Sat, 23 Jun 2018 03:51:00 -0700 (PDT)
Received: from mail-yb0-x229.google.com (mail-yb0-x229.google.com [IPv6:2607:f8b0:4002:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C2EF130E06 for <dnsop@ietf.org>; Sat, 23 Jun 2018 03:51:00 -0700 (PDT)
Received: by mail-yb0-x229.google.com with SMTP id z12-v6so2770326ybj.4 for <dnsop@ietf.org>; Sat, 23 Jun 2018 03:51:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=zpZZAD+FzmYJEpw8u44T5MuXUB97mF8hrceUmo5T5/s=; b=K/ZLdZlJDivAHalCPiQgR212EAB71y5Ee1e6VT239HlE7g2j+2ciJfT7VcTgc+75ed YWwGjdDy/KLY71rfDK+tlZdW17eBvuBHCePR8Fx6SISs3D3uhztMGm/x5Gi2rQJJcsWj ZejbbuEv6BI/Tf8CoJ8JM1OrU4MY9tOMIa/LZi3dgURuQnyxspF4zKSxXKduPyoJYdQM j81NxMb+QpjKuqBKhFFvaHhgf5C3VgwmS4qcNVGXCSdUdXzb7wXGwiPahckXLtSoBJUT QncAlkxs0jLrz6iA8M+BE1G3XPYioHYNcqc/CBRLAQXL4p2Ifo6QvujlDt3YyS14Uhq4 SnMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=zpZZAD+FzmYJEpw8u44T5MuXUB97mF8hrceUmo5T5/s=; b=jXyViifoKfOp4UGBe60sZd+actYLdkxPMHsAKArgwB33P/zAfgf9ELRVNbKqD9DsTS pLTRSAXwU+4KlXKVQjZpAVHjkxoY0EEhlDLF4cawzavmsxd/0VSWntcK1OGcduqgARSc rd6JrZ2rA1IjKte019AceXgLNYH92b3AgKjsnaqaIP0s5qW4v+TzwlUANcR20sJ/KyzF aAk2Hj/4KSTTlAu5Iqs+XzEvypJ75rG7E357NeQOHAA4YLcGhgkPUN4KWQbOEKj4f/02 LoIdQl91kwvGRwaeP9Hyv7uyzBe7uuE4TtzwxmKlUrQcIhgLjUb/TXv9ReGY2KbrybBJ 74gg==
X-Gm-Message-State: APt69E0O8b7/yIhAIlKusNJoWjShQlOzxX/DRbvEJtGHwmNcNAi94UCK kVKuTYeiDrfOOOKAGSGd+zzWrLJHaIp+/N44Wu4/J+ju
X-Google-Smtp-Source: ADUXVKKhqwY3O/yNDm5WoyA4GtIjzGi1DWYivBoKCovhy+iBhAwcPeFamdBmY/hBnetJCT6N8PYuMDr+R3e1axRp3Dc=
X-Received: by 2002:a25:7583:: with SMTP id q125-v6mr2570617ybc.475.1529751058921; Sat, 23 Jun 2018 03:50:58 -0700 (PDT)
MIME-Version: 1.0
References: <CAHPuVdU6XO6uhxDZpP59FUS6P5L+uG6PHvrr8gd8xDojzavqiw@mail.gmail.com>
In-Reply-To: <CAHPuVdU6XO6uhxDZpP59FUS6P5L+uG6PHvrr8gd8xDojzavqiw@mail.gmail.com>
From: Shumon Huque <shuque@gmail.com>
Date: Sat, 23 Jun 2018 06:50:47 -0400
Message-ID: <CAHPuVdXGtLN0MU8Vnorita+-9PX6507xyiQvWjmP6AJAJqc5Rg@mail.gmail.com>
To: "dnsop@ietf.org WG" <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000763f86056f4cec47"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/uyvyHPsK7xi5RI2Dygsf7gxhef4>
Subject: Re: [DNSOP] HTTP dns-alt-svc draft
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Jun 2018 10:51:03 -0000

On Sat, Jun 23, 2018 at 12:00 AM Shumon Huque <shuque@gmail.com> wrote:

> In other threads, Erik Nygren suggested that we review the proposed
> DNS record for HTTP Alternative Services draft:
>
>     https://tools.ietf.org/html/draft-schwartz-httpbis-dns-alt-svc-02
>     (You might also want to read RFC7838 for background).
>

Another comment on this draft:

I noticed that RFC7838 says:

   The Alt-Svc field value can have multiple values:

   Alt-Svc: h2="alt.example.com:8000", h2=":443"

So, presumably my example in the last message was not quite correct
for representing multiple target hosts for the service:

Instead of:

 _443._https.example.com. 900 IN ALTSVC "h2=\"cdn1.example.org:443\""
 _443._https.example.com. 900 IN ALTSVC "h2=\"cdn2.example.org:8443\""

It probably is:

 _443._https.example.com. 900 IN ALTSVC "h2=\"cdn1.example.org:443\", h2=\"
cdn2.example.org:443\""


It also says:

   When multiple values are present, the order of the values reflects
   the server's preference (with the first value being the most
   preferred alternative).

The preference order of the values does not permit load balancing.
So, if a site wants to do load balancing, as many do today, I assume
they would have to employ only one target hostname, with multiple address
records, and still rely on random/shuffle ordered return of the address
record set from name resolution functions. In this sense, SRV is more
flexible since it supports both priority and proportional load balancing.

Shumon.