IETF Logo Mail Archive

[DNSOP] Caching of negative zone (non-authoritative) responses

"Michael J. Sheldon" <msheldon@godaddy.com> Mon, 08 July 2019 16:42 UTC

Return-Path: <msheldon@godaddy.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ED4A12011B for <dnsop@ietfa.amsl.com>; Mon, 8 Jul 2019 09:42:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=secureservernet.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FYaqCJy3CF3Z for <dnsop@ietfa.amsl.com>; Mon, 8 Jul 2019 09:42:42 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750133.outbound.protection.outlook.com [40.107.75.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B25AB120222 for <dnsop@ietf.org>; Mon, 8 Jul 2019 09:42:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=secureservernet.onmicrosoft.com; s=selector2-secureservernet-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/UtOzryzQONUFp5d5cjhiypH+MOfZKmd/8u44a64Yzw=; b=WuGFv2FoIhKloMMQYeHJQTirZi9BcyIA9d8ymaM4ki42WbZ0ttkRsTFWSfYr0mYfa2DQvoWG5CkCxu01cbkCGgPnfJ3pPXIDoF1Kgx05jbFwcXdlY4dpbRpmF4fLNWNWHG6A9UpNbkIqDAqhfipvnzgXfwVS/f97TRpxl1iaECs=
Received: from BYAPR02MB5190.namprd02.prod.outlook.com (20.177.124.15) by BYAPR02MB5494.namprd02.prod.outlook.com (20.177.230.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.18; Mon, 8 Jul 2019 16:42:39 +0000
Received: from BYAPR02MB5190.namprd02.prod.outlook.com ([fe80::8daf:4d97:2db7:fb78]) by BYAPR02MB5190.namprd02.prod.outlook.com ([fe80::8daf:4d97:2db7:fb78%4]) with mapi id 15.20.2052.019; Mon, 8 Jul 2019 16:42:39 +0000
From: "Michael J. Sheldon" <msheldon@godaddy.com>
To: "dnsop@ietf.org" <dnsop@ietf.org>
Thread-Topic: Caching of negative zone (non-authoritative) responses
Thread-Index: AQHVNawfF99VYUuw4EOfm7VOQeF0BA==
Date: Mon, 08 Jul 2019 16:42:39 +0000
Message-ID: <BYAPR02MB51900835E25A720BB9BF23C8DBF60@BYAPR02MB5190.namprd02.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=msheldon@godaddy.com;
x-originating-ip: [2600:8800:2800:33c:ea46:e288:4f40:cc56]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: d8963d12-3014-488c-21ed-08d703c34a3f
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BYAPR02MB5494;
x-ms-traffictypediagnostic: BYAPR02MB5494:
x-microsoft-antispam-prvs: <BYAPR02MB5494B42721A4A0422637AE98DBF60@BYAPR02MB5494.namprd02.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 00922518D8
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(39860400002)(136003)(346002)(376002)(366004)(396003)(189003)(199004)(6506007)(25786009)(55016002)(7736002)(2351001)(68736007)(14454004)(46003)(476003)(9686003)(102836004)(186003)(5660300002)(4744005)(486006)(53936002)(2501003)(6116002)(1730700003)(2906002)(81156014)(81166006)(99286004)(86362001)(305945005)(8676002)(6916009)(5640700003)(73956011)(66946007)(8936002)(66556008)(64756008)(66446008)(66476007)(256004)(71190400001)(71200400001)(76116006)(33656002)(74316002)(6436002)(52536014)(478600001)(316002)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR02MB5494; H:BYAPR02MB5190.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: godaddy.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: MkiIKxdjGr6v7kDxTtlp1RbqToACrIEWrbadTiOn6JnToyUIMoo5vZxGN+ey4+S0m5/ABMFKTg5K7S8xZDQ4cykyTwQZNU4UtzcirYExN27KdngtH25W6ki0ji3CnMbRYHpGTJqCmjSd+NlE3f8tAlDDWxQFY5/cqpSFPHuUO+nFQPw2HcPVVpagzsz+3DlFdV34bCIZahPx5QNqM+ypBoS+QNdYWOmp1QefZ3MC+fmqhctQ3J7E2wj20eGBJxaz3zaUNOeOi6fU4fcCJS4qVBPRgjcJKCHn63nWkXMP9dGCfGxUib7QdAcEGXjVUgjuwtULpYbzj7uBy28oBzScnaJgrdcC8iHF9qLUYllYvTRyhkGtBipxiuvYg4OuimRcYGr/DZf2uFahFLQG8pPnfVDTCw7++Wgap7LUycW+Fvc=
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: godaddy.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d8963d12-3014-488c-21ed-08d703c34a3f
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 16:42:39.4372 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d5f1622b-14a3-45a6-b069-003f8dc4851f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: msheldon@godaddy.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR02MB5494
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/KdSyDFuBWPgD6c1BqPDlLT1srls>
Subject: [DNSOP] Caching of negative zone (non-authoritative) responses
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jul 2019 16:42:48 -0000

This is something that has bugged me for a long time, and I'd love to see a good solution to.

If a record is requested from an authoritative server, where the zone exists, but the records does not exist, the negative response is cached for <minimum> period of time.

If a record is requested from an authoritative server, where the zone does not exist, generally the response is REFUSED, but *this is not cached* by the requesting server. This results in a nearly continuous stream of retries, which continue to result in the same response. Our authoritative servers see no less than 15%, and sometimes as much as 25% of our worldwide traffic as these non-authoritative responses.

There needs to be a means to signal to a recursive server that it should not requery a REFUSED response for a specified period of time. Given that these responses to not have ANSWER records to put a TTL on, return a (new) EDNS record?

Michael Sheldon
Dev-DNS Services
GoDaddy.com

v2.23.0 | Report a Bug | By Email