[dnssd] Re: [DNSOP] dnssd request for Assignment in the Underscored and Globally Scoped DNS Node Names

Esko Dijk <esko.dijk@iotconsultancy.nl> Wed, 07 October 2026 15:59 UTC

Received: from dane.soverin.net (dane.soverin.net [185.233.34.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id D6E9542; Wed, 07 Oct 2026 15:59:41 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=iotconsultancy.nl header.s=soverin1 header.b=VekyGULz; spf=pass (mx.ietf.org: domain of esko.dijk@iotconsultancy.nl designates 185.233.34.150 as permitted sender) smtp.mailfrom=esko.dijk@iotconsultancy.nl; dmarc=pass (policy=reject) header.from=iotconsultancy.nl
Received: from smtp.soverin.net (unknown [10.10.4.99]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dane.soverin.net (Postfix) with ESMTPS id 4j0HrD67P4z4p; Wed, 07 Oct 2026 15:59:40 +0000 (UTC)
Received: from smtp.soverin.net (smtp.soverin.net [10.10.4.99]) by soverin.net (Postfix) with ESMTPSA id 4j0HrD2dPKz5L9; Wed, 7 Oct 2026 15:59:40 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iotconsultancy.nl; s=soverin1; t=1791388780; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SFAyO2ml7JuULsaZo3mYrFYOrRKsu/6+x0ZMQBPgWB8=; b=VekyGULz10+XZcR4T4u6Cxcc+8MV2Rv5q6EO8Sy0On4rQbfraHF82bRt5dtXD0uqPTl6su jT70XaQtwKEM6ictwx3FzuSnUwS6dsITClUMeKjUVRjvpgeXrNRgdMnjodt3ek6qY5UuW5 PfhZktF1nRfHQ9dLloxoQfiZaOFgPnvATYB6XIaXbyL6U5/QK9Cc3fNjwhBMgghAwePY6Y 2rN2KC2hdGBTICcheL5vCkDShaYx9TcbS0tWPj1u0Ie97eo8JsUyNy00rdC9CVikpl82om WF/AHgMeil+g/jlpvcC51qbA+0rAlUOKEKInMlawA4DM91yrjURAos8K2j8P8A==
X-CM-Envelope: MS4xfF8Y6iC834LnZ+RY1sNfWURXykyV2MijggJqdM6e3O8A/reAuMiyy4BplEftWaj5XgWWJUABOfvhOgS+Pp/KPsKg8/hQVKTw4iSxmlEsQMKtvEBL258t qRJrnpYyvFCQQbI32JKhub3uFCUm2QOX4h9hkPvRXyJw4rfU2zMPBrqg+3YFUtpsEE+CdF8Wa57X7Ej46CXWXOO1Fq5G439Z8kt/OxHRDanHAbDyBRNcLm6T cDkRoajf2jFzpUU6wdzfPLXAO6TKbDKdNuNcR5GWYs4lou5fS3qmx4wZNL73jTnTeKSjtQgo5h29aAtlCczfMZsRIKu0g0XSBUJZFqbYQMLC8xIymRGRmXjz hiDBEz55skamGtEqaqYCf7Y5/w8qDZYl37abtknvzywkZ+KbAa9t4PKgfrPtWiVv0xg7eVMh
X-Soverin-Id: 01a11717-85e0-7a87-a2ea-88e978f85621
Message-ID: <835791e8-bb67-4f9f-9d53-dd8d8828b545@iotconsultancy.nl>
Date: Wed, 07 Oct 2026 17:59:40 +0200
MIME-Version: 1.0
To: Ted Lemon <mellon@fugue.com>, Paul Wouters <paul@nohats.ca>
References: <126b2251-76cf-fda4-ad03-28bb71872325@nohats.ca> <B6F27118-FE29-455C-85B7-9097008DC7B2@apple.com> <47fd5d7b-9e02-d0db-0188-56e9e262065e@nohats.ca> <D132ADB9-1099-401B-ACC3-0701D03D083E@fugue.com>
Content-Language: en-US
From: Esko Dijk <esko.dijk@iotconsultancy.nl>
Organization: IoTconsultancy.nl
In-Reply-To: <D132ADB9-1099-401B-ACC3-0701D03D083E@fugue.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Spampanel-Class: ham
X-Spamd-Bar: -------
Message-ID-Hash: ZZXIOXY633L3AQD3UOBR4Q6ZQZBYRPQP
X-Message-ID-Hash: ZZXIOXY633L3AQD3UOBR4Q6ZQZBYRPQP
X-MailFrom: esko.dijk@iotconsultancy.nl
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-dnssd.ietf.org-0; header-match-dnssd.ietf.org-1; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Stuart Cheshire <cheshire@apple.com>, dnssd@ietf.org, dnsop <dnsop@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [dnssd] Re: [DNSOP] dnssd request for Assignment in the Underscored and Globally Scoped DNS Node Names
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/_iNSu7lGFVVknUN4t3U5k_daGVA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Owner: <mailto:dnssd-owner@ietf.org>
List-Post: <mailto:dnssd@ietf.org>
List-Subscribe: <mailto:dnssd-join@ietf.org>
List-Unsubscribe: <mailto:dnssd-leave@ietf.org>

Not sure if we touched this already in the thread: but the practical 
implication of all this, if I understand correctly:

1. services to be used with DNS-SD are to be registered in the IANA 
"Service Name and Transport Protocol Port Number Registry". The service 
name is in there without underscore. When used in DNS-SD, it gets an 
underscore - for example "meshcop" becomes "_meshcop._udp.<domain>".

2. service names like above 'meshcop' are (almost) never registered in 
the IANA "Underscored and Globally Scoped DNS Node Names" registry. They 
should just go into the registry under 1. With that, they can be used in 
combination with _udp or _tcp.

This fits with Paul's remark:

 > But perhaps the Service Name and Transport Protocol Port Number Registry
 > https://www.iana.org/assignments/service-names-port-numbers?search=dns
 > would be a better fit for such a registration ?

This seems for sure a better place if it is just about "some new service 
that can be accessed via DNS-SD, or mDNS". Whether locally or globally. 
As long as it gets postfixed by either "._udp" or "._tcp".

There might be reasons why some elements get into both registries: I see 
"ldap" is an example of such entry.

best regards

Esko


On 10/3/26 00:12, Ted Lemon wrote:
> If you read the original SRV RFC, it says that all protocol labels are followed by either _tcp or _udp, and that is why they are used for DNSSD as well. The reason for this is that the TCP port namespace and the UDP port namespace are separate namespaces, so without specifying the port namespace in the label, the SRV record is actually ambiguous, since it itself does not specify a transport type.
>
> This whole model is probably not ideal, but it's what we have. So in this context, the fact that the protocol label precedes a transport label does not mean that it therefore does not need to be registered: just the opposite. With respect to SRV records, there _aren't_ any labels other than _tcp and _udp that immediately precede the domain containing the service name. The service type is always followed by one or the other.
>
>> On 2 Oct 2026, at 23:55, Paul Wouters <paul=40nohats.ca@dmarc.ietf.org> wrote:
>>
>> On Fri, 2 Oct 2026, Stuart Cheshire wrote:
>>
>>>> Or if phrased differently, you wouldn't put DNS-SD entries in your
>>>> public forward DNS zone that is hosted on the internet.
>>> Absolutely you would, and people do.
>>>
>>> This is described in the O’Reilly book “Zero Configuration Networking: The Definitive Guide”
>>>
>>> <https://www.oreilly.com/library/view/zero-configuration-networking/0596101007/>
>>>
>>> For an example closer to home, consider the IETF itself. For many years, IETF meetings provided a printer in the “terminal room”. The NOC staff added DNS records to describe that printer. This made the printer discoverable from any wired or wireless network in any of the IETF meeting rooms, not just from the local Ethernet in the terminal room. A step-by-step explanation of precisely how this worked is available here:
>>>
>>> <https://datatracker.ietf.org/doc/html/draft-cheshire-dnssd-roadmap-03#appendix-A>
>> Ahh, thank you for that clarification. But I still see in such an example:
>>
>>                  term-printer._pdl-datastream._tcp.meeting.ietf.org. srv
>>
>> It is still below _tcp, so I would argue that falls outside the scope of
>> the Underscored and Globally Scoped DNS Node Names, which only talks
>> about the most parental underscore domain registrations.
>>
>> It seems pdl-datastreama (without underscore) is registered in the regular
>> ports and services registry, eg
>>
>> https://www.iana.org/assignments/service-names-port-numbers?search=9100
>>
>> So this still leads me to believe that these entries below the protocol
>> identigier in dns-sd, do not belong in the Underscored and Globally
>> Scoped DNS Node Names Registry.
>>
>> If I am still getting this wrong, please do let me know.
>>
>> Paul
>> _______________________________________________
>> DNSOP mailing list -- dnsop@ietf.org
>> To unsubscribe send an email to dnsop-leave@ietf.org
> _______________________________________________
> dnssd mailing list -- dnssd@ietf.org
> To unsubscribe send an email to dnssd-leave@ietf.org