Re: [DNSOP] [Ext] Re: [Doh] Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http

Ted Lemon <mellon@fugue.com> Wed, 04 April 2018 19:12 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1514312DA68 for <dnsop@ietfa.amsl.com>; Wed, 4 Apr 2018 12:12:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tOoKCR9FrvgZ for <dnsop@ietfa.amsl.com>; Wed, 4 Apr 2018 12:12:15 -0700 (PDT)
Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 505E4126D45 for <dnsop@ietf.org>; Wed, 4 Apr 2018 12:12:15 -0700 (PDT)
Received: by mail-qk0-x230.google.com with SMTP id d206so23722197qkb.0 for <dnsop@ietf.org>; Wed, 04 Apr 2018 12:12:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=x8sERHXdCp0C3vt4KTrHIIDcCXeu95DqTauHmzGU8pw=; b=dys1V7tDflJXhfwctQIdqd6DHLN1BOXIbuWhFaBnyA6bb/p61Bu+GXqP3vvoLPvmqI BJ2U7sxD2mcpLqdVSjO/SyXhH6+/MvcYb+ynkmd1wk6YHFFDqKUkLrTn5cc9IxY2o0vf +vi3nid/JvxnQ6FnQHDFVS0Q4VoHx7ewhfd2LmbDwuu3Hb/2kQ1/DAiaQOvXw/SOcIGY kfbQz1LcNt2+o/QoMq4GvqCL7OwwGtf1I0WyfEZVWo63uEwbk6wLj0kPoNhZgwiV2E1l HyLbP1jOVSl/ZuBovKX8bvx3u47fxJqlh7X2xdyNzGLmlttzZBK+imOy7h06g29JzGKS aXPQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=x8sERHXdCp0C3vt4KTrHIIDcCXeu95DqTauHmzGU8pw=; b=By+RwEwJ5gFSPLTyCFrJMnO9Iw9Vy6Ln2hASrdzw2+AJEj898/Q7xNrcbFWXZlrQcS ISGc0rEdKdBt/zcFyVt9rvHkwqmXwLaIs4CdTAqR7waE+oEm5mjsgqPki5EVYvN0sgFO MXZiv4Q+2APIf+9/TlrJ50yxDWd2awezhE3YpHeOQP1OP0FIS3xMb1xh6dCjpRBoVOOw FVklqhUryiRumRyn0Nn33gOD29PL++Q9mQ9DVcy8bkuByPt2oORY+QoFqwFR90VXoTtB AJGCooSq8PmtiaSniEgt6PVDInV5HpqWV7U0WKBVLM31FCvo7EldipuVnZzB7gDI2Ktl OISg==
X-Gm-Message-State: ALQs6tCEf/5yabOhKzd0f+58URuPJTLSal4PfPQbZECyTBBVU5IVraS3 72IBSo6XzjyhHhvfkWMeXl7fOQ==
X-Google-Smtp-Source: AIpwx49s2a0mltyiIQPEX+Zi3V6Ks3pZlteYeng7GpmIyLvGZzYCjy24+giQ1xI/NKEfGlLEmerIEA==
X-Received: by 10.55.26.86 with SMTP id a83mr24742999qka.165.1522869134364; Wed, 04 Apr 2018 12:12:14 -0700 (PDT)
Received: from [192.168.1.144] (c-24-60-163-103.hsd1.ma.comcast.net. [24.60.163.103]) by smtp.gmail.com with ESMTPSA id w21sm1324579qto.48.2018.04.04.12.12.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Apr 2018 12:12:13 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <53502E6D-8AB9-4198-9824-5F070FC763D7@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_F9DB2B5D-5B70-4B4C-BAF5-5287F38BEC38"
Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\))
Date: Wed, 04 Apr 2018 15:12:12 -0400
In-Reply-To: <5AC52029.9000103@redbarn.org>
Cc: Ray Bellis <ray@bellis.me.uk>, dnsop@ietf.org, doh@ietf.org
To: Paul Vixie <paul@redbarn.org>
References: <152168039295.5550.9572034766968749020.idtracker@ietfa.amsl.com> <CAAObRXKHhk51DxNt5uiYB0gunJ=DNde2j9FJSU=Ky2m4Q1UkhQ@mail.gmail.com> <CABkgnnVL0XaUDS-WzDGaN9-kLx9p3x1+UVuWhvx=Zyo5oRos+w@mail.gmail.com> <19BED07A-942E-4A46-93A6-09770083EFF9@icann.org> <CABkgnnX-=n-reO9yjA8a2pHAD+JtoS5wX1w-dXMnDFdt4HXu-g@mail.gmail.com> <23236.18671.182273.977633@gro.dd.org> <28199575-e2e2-6966-fe17-f678f9f397f3@bellis.me.uk> <5AC4C2F7.7050906@redbarn.org> <3630b151-9628-235e-a5b1-c838b777d9d2@bellis.me.uk> <5AC4E70C.7020003@redbarn.org> <A0A55AED-0CB2-478C-913A-DCA678FBAC33@fugue.com> <5AC4F11F.3050009@redbarn.org> <602DF02A-3A85-4B3B-9E11-F7A701BD25B5@fugue.com> <5AC4F3F5.6080408@redbarn.org> <C2CAFEF1-7A0B-496E-9AE0-7229E4B4062F@fugue.com> <5AC5006C.4050308@redbarn.org> <5307DF51-689E-41C3-AB4A-59611EAD4DA3@fugue.com> <5AC50A04.6030407@redbarn.org> <7E0DD069-A6C4-473F-B51D-5902C7E96A5C@fugue.com> <5AC51AEC.10603@redbarn.org> <24035AD9-C0C4-4BE4-A58A-0E010FB3D0F6@fugue.com> <5AC52029.9000103@redbarn.org>
X-Mailer: Apple Mail (2.3445.6.18)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/vWSxYbeQ_yITPq32H2X1QIs2tnE>
Subject: Re: [DNSOP] [Ext] Re: [Doh] Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Apr 2018 19:12:18 -0000

On Apr 4, 2018, at 2:57 PM, Paul Vixie <paul@redbarn.org> wrote:
> no. it uses a DNS response message of rcode SERVFAIL for error signalling. so, it is as transparent as possible, and no more.

Okay.   So the upstream proxy is intended to simply take the "tcp" or "udp" indication and do the query using tcp or udp as indicated?   What if I write a proxy that doesn't support this behavior—will your downstream proxy fail to interoperate with it?   E.g., if it does the query using TCP, or automatically fails over to TCP if it gets a truncated response, and therefore returns a long response to a UDP query, will bad things happen?