Re: [dnssd] New Version Notification for draft-sctl-service-registration-02.txt

Ted Lemon <mellon@fugue.com> Wed, 18 July 2018 16:27 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39CB813119B for <dnssd@ietfa.amsl.com>; Wed, 18 Jul 2018 09:27:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NtyjVc2832Fo for <dnssd@ietfa.amsl.com>; Wed, 18 Jul 2018 09:27:53 -0700 (PDT)
Received: from mail-it0-x229.google.com (mail-it0-x229.google.com [IPv6:2607:f8b0:4001:c0b::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A619F130E9E for <dnssd@ietf.org>; Wed, 18 Jul 2018 09:27:53 -0700 (PDT)
Received: by mail-it0-x229.google.com with SMTP id 188-v6so5139246ita.5 for <dnssd@ietf.org>; Wed, 18 Jul 2018 09:27:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=rodv01DM0AoyQrIjSKfUBFrcDwWONTXR+34D3Xrcia0=; b=h1BzvDT+Dpec7/8CAyGx3XaHD1Qe9KYeSocx2N1ZC1ut1+k14wmJbLuewSoweVia8L 2N0UC6zDSGeyRujaESnxJ+MwPgpf4icXOa+N520jE11H6ox/SmrtOFcuMUpR5gP0HR3t rt73Akr25vZiuJiElAHwkfa+GeOvq/vsRQ/snLsffrpHpnKiHqyEeuQZSgzIgBSoQQyi EM2lhuhnXMf4Du2i9iLcJE4u7PwHRSAu8f2eyFdAXpXSxgf0nOLrKXdub5rcxtIvb2eU rwxt56HTcL2orWHl1l3u7bG88ZgYQfbr8w4Cc6bad2yFg/amMAFDQAYYh7VbvvLBVb5a WF3g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=rodv01DM0AoyQrIjSKfUBFrcDwWONTXR+34D3Xrcia0=; b=tMY10QuMyYdbG3MYvTQ5O8hTA80I66eAETMJIIsJQ8nfjZBJsc5uhxRWO94nlSHOX4 GzH7Gjk8AzB3nrYKdoxHqhhdyYYSM9jwR0diUcM5hGicW1lNDW1bZV8EZtkZ+BDNb/lw 0HAM0kSHxAjwgmLXkJA9+JRcMdbH9bVjD8BY9lYQ5H0Clvl3B9bQ+EFI6Q6BHD8q7G54 F3XnwxKqzY6OtUbWfwd8mudZ7LE+D46+o1IsVBkrYwTdhvM0DUHexSHLGhLeZs6xhH6c R/piQ0YqM4bjBKhfp3PVeYaj0F3Y8UrK/ojxso9CLzBJY0AsG5lbmwHCgrcm+ZASPO+S cKaw==
X-Gm-Message-State: AOUpUlF7tWK3Lp2MgHo56YYO7hoEUL+77FSyYdX5OFLCRE9wME6ZcKcO gVlFnya60BFRH7OA58D5SOnk03UVOhanEq5TQi10nQ==
X-Google-Smtp-Source: AAOMgpf+pUO/dpe5k3IelBpHpaopJYH5myLYCtJYgwRp896zvxgfSPqGPgv0iRbK/310rxTGN1tUiTQKe8PdpZA0I3g=
X-Received: by 2002:a24:d485:: with SMTP id x127-v6mr2719765itg.82.1531931272689; Wed, 18 Jul 2018 09:27:52 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a4f:5f86:0:0:0:0:0 with HTTP; Wed, 18 Jul 2018 09:27:12 -0700 (PDT)
In-Reply-To: <3D4620BB-19AA-4190-8F9E-76A613661CC8@bangj.com>
References: <153168722035.21892.2695151923270049902.idtracker@ietfa.amsl.com> <CAPt1N1mYtPRxP6F-JwKbWey3r_vSaNP5srbkf314gdjfdNe8mw@mail.gmail.com> <87d0vn7b5t.fsf@toke.dk> <CALX6+rAjz2FtsQkhNyp=xYjXovUJUMN5Bg5iRHSWzMTJaZtCjg@mail.gmail.com> <CAPt1N1kODz72aHwF0z-uhYo4tojwsLEQJwLyzP8zeUYXduFkyQ@mail.gmail.com> <87a7qq6fdk.fsf@toke.dk> <CAPt1N1k59CM8WG4HoqXkG-crUEJbk+KNppX_pgkVFdwbSxNDpw@mail.gmail.com> <CAPt1N1khnMaRE2oe5WEQmonB8AJcLeBm=OB=i1trbEuc=XiL5Q@mail.gmail.com> <B88554CD-2117-44CC-ACA0-F5ACB3F48F88@bangj.com> <CAPt1N1=42Wum5x0s4dJZUB1t2i7g-UUJwcmWKQV5HMM5mAYyQQ@mail.gmail.com> <0542F0E1-88BB-4EF5-9897-CB608E5792C9@bangj.com> <CAPt1N1mrr=od-HBEDoS+Bs7fHuHj1Kc0HU-+6+NvhCyWDywYLg@mail.gmail.com> <CAPt1N1nFj5DpkRepLQ=Jmk=Spx87tNcfUMGyJRuAT=26givYKw@mail.gmail.com> <8BC77FD3-B2E6-4980-A315-7595D250C49E@bangj.com> <CA15413D-D7FB-4923-9B51-A824FF6598D5@bangj.com> <3D4620BB-19AA-4190-8F9E-76A613661CC8@bangj.com>
From: Ted Lemon <mellon@fugue.com>
Date: Wed, 18 Jul 2018 12:27:12 -0400
Message-ID: <CAPt1N1=MjxTvzRZmrY7btR0NDoa3R9bzp4+wiaq2onUGqQi3XA@mail.gmail.com>
To: Tom Pusateri <pusateri@bangj.com>
Cc: dnssd <dnssd@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000054577e0571488ba5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/OwkuiAoXOXtBMF6JiugKBADd2Fc>
Subject: Re: [dnssd] New Version Notification for draft-sctl-service-registration-02.txt
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2018 16:27:58 -0000

Of course, you still have a very good point in that the anycast update
method relies on UDP, so sending the key multiple times isn't desirable.
 But I also don't see a way around this.   We could have the server
replicate the key, I guess.

On Wed, Jul 18, 2018 at 12:25 PM, Tom Pusateri <pusateri@bangj.com> wrote:

> Just saw this in Section 2: "By requiring the use of TCP, the possibility
> of off-network spoofing is eliminated”. So requiring TCP is already handled.
>
> Searching for _dns-update._udp.<domain> still seems odd but that’s been
> going on for a while a presume.
>
> Tom
>
>
> On Jul 18, 2018, at 12:15 PM, Tom Pusateri <pusateri@bangj.com> wrote:
>
> Looking in the IANA registry, dns-update isn’t assigned for TCP. So either
> you search for _dns-update._udp.<domain> and use TCP or you register _tcp.
>
> And while you could use an EDNS(0) OPT RR to set the maximum UDP packet
> size larger than 512, you probably wouldn’t want to set it larger than the
> MTU and 1480 isn’t big enough for 3 KEYs plus other records.
>
> Tom
>
> On Jul 18, 2018, at 12:05 PM, Tom Pusateri <pusateri@bangj.com> wrote:
>
> If you are adding more KEY records, you will certainly exceed the UDP
> update size of 512 bytes. The draft doesn’t mention transport but maybe
> this should be restricted to TCP.
> The draft does mention searching for the update server using
> _dns-update._udp.<domain>. But then it won’t be able to use UDP for
> updates.
>
> Thanks,
> Tom
>
> On Jul 17, 2018, at 4:12 PM, Ted Lemon <mellon@fugue.com> wrote:
>
> Tim pointed out that we need to protect the Service Instance Name as well
> as the Host Description with a KEY record, because FCFS naming has to
> protect both the service description and the host description.   Here are
> the changes:
>
> https://github.com/StuartCheshire/draft-sctl-service-registration/compare/
> ae53618d8231733701ccdda4d336692a529c9f6b...5c85181881b84ed1132d544e157df8
> da85874597
>
> On Mon, Jul 16, 2018 at 6:42 PM, Ted Lemon <mellon@fugue.com> wrote:
>
>> The question of whether we update RFC6763 is basically "is there text
>> that is in RFC6763 that is no longer correct because of this document."  I
>> think the answer is no.
>>
>> On Mon, Jul 16, 2018 at 6:41 PM, Tom Pusateri <pusateri@bangj.com> wrote:
>>
>>> Ok, just checking. So given that 6763 semi-defines service registration
>>> protocol as DNS Dynamic Update, should this document claim it updates 6763?
>>>
>>> Thanks,
>>> Tom
>>>
>>> On Jul 16, 2018, at 6:01 PM, Ted Lemon <mellon@fugue.com> wrote:
>>>
>>> The title of RFC 6763 is DNS-Based Service Discovery.   So I tried to
>>> harmonize the document toward that—did I miss something?
>>>
>>> On Mon, Jul 16, 2018 at 5:59 PM, Tom Pusateri <pusateri@bangj.com>
>>> wrote:
>>>
>>>> How is DNS-Based Service Discovery different from DNS Service
>>>> Discovery?
>>>>
>>>> Is this meant to distinguish from RFC 6763?
>>>>
>>>> Thanks,
>>>> Tom
>>>>
>>>> On Jul 16, 2018, at 5:46 PM, Ted Lemon <mellon@fugue.com> wrote:
>>>>
>>>> BTW, the current version of the document on github now includes fixes
>>>> for all the points that have been raised other than the ones I said I
>>>> wasn't going to fix: https://github.com/Stuart
>>>> Cheshire/draft-sctl-service-registration
>>>>
>>>> On Mon, Jul 16, 2018 at 5:29 PM, Ted Lemon <mellon@fugue.com> wrote:
>>>>
>>>>> On Mon, Jul 16, 2018 at 5:27 PM, Toke Høiland-Jørgensen <toke@toke.dk>
>>>>> wrote:
>>>>>
>>>>>> Ted Lemon <mellon@fugue.com> writes:
>>>>>>
>>>>>> Why can't it be just a Host Description? Might be useful for a device
>>>>>> that just wants to register its name but doesn't (currently, or ever)
>>>>>> advertise any services...
>>>>>>
>>>>>> Good question.   What does the working group think?   :)
>>>>>
>>>>>
>>>> _______________________________________________
>>>> dnssd mailing list
>>>> dnssd@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dnssd
>>>>
>>>>
>>> _______________________________________________
>>> dnssd mailing list
>>> dnssd@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dnssd
>>>
>>>
>>>
>>
> _______________________________________________
> dnssd mailing list
> dnssd@ietf.org
> https://www.ietf.org/mailman/listinfo/dnssd
>
>
> _______________________________________________
> dnssd mailing list
> dnssd@ietf.org
> https://www.ietf.org/mailman/listinfo/dnssd
>
>
> _______________________________________________
> dnssd mailing list
> dnssd@ietf.org
> https://www.ietf.org/mailman/listinfo/dnssd
>
>
>