Re: [dnssd] Adoption call for draft-sctl-advertising-proxy

Ted Lemon <mellon@fugue.com> Fri, 13 August 2021 22:40 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 304493A2923 for <dnssd@ietfa.amsl.com>; Fri, 13 Aug 2021 15:40:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p2iELRaWmC0K for <dnssd@ietfa.amsl.com>; Fri, 13 Aug 2021 15:40:37 -0700 (PDT)
Received: from mail-ot1-x332.google.com (mail-ot1-x332.google.com [IPv6:2607:f8b0:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D62B3A2922 for <dnssd@ietf.org>; Fri, 13 Aug 2021 15:40:37 -0700 (PDT)
Received: by mail-ot1-x332.google.com with SMTP id d10-20020a9d4f0a0000b02904f51c5004e3so13856655otl.9 for <dnssd@ietf.org>; Fri, 13 Aug 2021 15:40:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:in-reply-to:references:mime-version:date:message-id:subject:to :cc; bh=iCZlNhQF22Jn6KWkF8Heb8x9CnnF9ll29+aNkw3j5zM=; b=s8Md3W126eosAppzrsWo1bnDWowUrMVoPM6/BRy1PajvNLwomIn0O4wbdA3WsBlkvL lZsEOmIHsQETHP3lCUsJe8JxTaqqya2p9V7gFiKOUb9+7Tmtj+dYbSb23+y1z/p90dnL c+9iZjBb7RcxcxsgldwS9WSe28u13rQ6e61WbfjFUrenPrZ8gd3SXzMbCwY1kid4f7OA DxCFHb4Bh8he57HDTw9NcboykNOJQqe5SvhsoSDlSzAjJFqIuqtq8pUgelKHPW6i0oeZ rdBbtPmI5/KaxK7Ne6IEgAqy1zry7n2zOxPDzJre7IUcYiUb/wbnxthC2kxOb5gDXNuk zjvA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to:cc; bh=iCZlNhQF22Jn6KWkF8Heb8x9CnnF9ll29+aNkw3j5zM=; b=DqwBPe9u9O8BzQ7RkCcs49wodYG/Bg+Mn7Yp09jT40K10Ew+4GEGu6Ruf9+oApbItg kmwrKhCbI57TCnKWYPipZXXNk0H9+qIistMwwnE9cZhy0aqoYYe/Ed8opqt3u19OlHc0 8RGu+yTUnBMSuAAFsYaXCuq7oGiv9B7DYIqPGYAClF4cdFUX/hQNKLPIVMMic2Q4Frnn 1jkkERFkxDvvyruXA5S/psiganD35oZjy8tt5xwHxsOIa+uVLsVfUsmyN3JYMUDjlqIV dwP48IZrZ+p7c139suaIZdz94HoF/ZNPihGzeJyVDrCzGngfAJP5a+YbmsGFc5ai+dyv wPEg==
X-Gm-Message-State: AOAM531zlmodROKHsuVI437Pcd5h4W8ukksomdmaP+eYJ77cTBo9UfGQ 0Xv0c6uSxV8Y04QXDVnc22GNFzzYI1FHSfFduXcMkg==
X-Google-Smtp-Source: ABdhPJz/68Dg+arUzgFoy9ycbB2T7QblkQx8fJEIWGMP4vo8faFcx7bKq72fb/lNtgOaKVNRPBffCREcsj/C5wkHxTw=
X-Received: by 2002:a9d:491c:: with SMTP id e28mr3812509otf.342.1628894435266; Fri, 13 Aug 2021 15:40:35 -0700 (PDT)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Sat, 14 Aug 2021 00:40:34 +0200
From: Ted Lemon <mellon@fugue.com>
In-Reply-To: <CAGwZUDvgFM33rnRkn0VZAx5fd+J-1LmwohoxmzSv0H0n=7pYow@mail.gmail.com>
References: <CADPZrgTu8QeR=yAM+9w0zDJ45Uz7Lgs12-6PKzutTW_p1RkA4Q@mail.gmail.com> <CAPt1N1=NgRRVnD1L_dJ_mZYuE5ReXOv0sK_cL6RcjcmpdQZOYg@mail.gmail.com> <CAGwZUDsWat3yPFt49t-YYdEee9Ck9bq=Fq+c-mgorocfUN22bQ@mail.gmail.com> <CAPt1N1nhNeXPOidkJRGEM=D-Nd+Nb8zndCCGhMJoTXS6POBbUA@mail.gmail.com> <CAGwZUDvgFM33rnRkn0VZAx5fd+J-1LmwohoxmzSv0H0n=7pYow@mail.gmail.com>
MIME-Version: 1.0
Date: Sat, 14 Aug 2021 00:40:34 +0200
Message-ID: <CAPt1N1kEJwvMTR=GG_m7R9f-M_FYkN8N4dhLYK4J4wnixXpgLg@mail.gmail.com>
To: Jonathan Hui <jonhui@google.com>
Cc: dnssd@ietf.org
Content-Type: multipart/alternative; boundary="00000000000030ecf305c9788a89"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/LmjWxU-yeYtMB2OcyEaLmi_5u4U>
Subject: Re: [dnssd] Adoption call for draft-sctl-advertising-proxy
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Aug 2021 22:40:39 -0000

On August 13, 2021 at 6:24:51 PM, Jonathan Hui (jonhui@google.com) wrote:

Another thing to be aware of is that because of the way mDNS works, if you
> are using mDNS for discovery, a name conflict when names aren't being
> defended will sit around in the cache for a few minutes. If names are
> defended, this doesn't happen; one alternative is to just defend names and
> count on SRP to deal with conflicts, but the downside of this is that now
> there is a delay before the new information appears.
>
> This delay could potentially be minimized by retrying to register as soon
> as the SRP replication update has been acknowledged by all SRP replication
> peers—right now my code (when name defense is enabled) just waits two
> minutes before re-attempting, which is a lot longer than should be
> necessary.
>
Sounds like a good idea to explore. My initial concern is that waiting for
positive confirmation from all peers can lead to other failure modes
resulting from poor implementation or connectivity. At the same time, those
same assumptions are what would lead us back to needing other mitigations.

The problem with anything that's ad-hoc and not integrated into the
infrastructure is that there's no model that guarantees success. It's
always going to be best effort. The goal has to be to make "best" as good
as possible, but have a backup strategy for when it's not quite good enough.