Re: [dnssd] Adoption call for draft-sctl-advertising-proxy

Ted Lemon <mellon@fugue.com> Fri, 13 August 2021 11:19 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E122D3A13F5 for <dnssd@ietfa.amsl.com>; Fri, 13 Aug 2021 04:19:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aRJsyLNTpM9x for <dnssd@ietfa.amsl.com>; Fri, 13 Aug 2021 04:19:41 -0700 (PDT)
Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com [IPv6:2607:f8b0:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFFD73A1427 for <dnssd@ietf.org>; Fri, 13 Aug 2021 04:19:40 -0700 (PDT)
Received: by mail-ot1-x334.google.com with SMTP id 61-20020a9d0d430000b02903eabfc221a9so11717708oti.0 for <dnssd@ietf.org>; Fri, 13 Aug 2021 04:19:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=HGFsFhHkP2Yt9mNr2GuoUpvoxDBPT1nx+OU4sLnKRjI=; b=UUH5TuG6c36iy3I8JrgZ1V3FtyE6S1lMPNEXEL/fKNY/xrIJL5Ycjvkk3ojMxU6MEJ SLeCFYuOsYeGsA08Swaz+KhpU0mL5sZSN/VhK2CFZcwrEUlnwR1hFeixmaG+0lVwXAN/ 3Q6YKYXPoQ1gF5gHdME1lF1VZ3Zrx0jAGxhOIgM4KdRY+/l3iABs55GZ2v7MymVgx3O7 2bYbwxS5KPWWTEsrnSDnPZmLkdQVJoNSlF0FWfdjyDiV/WxQEPg2pYzAWR3TtcKTcybH 4I2QLLonjG3pltQnDSHfD06/h2sz0+Ji9zAUhl0rtfQENUuaBOph0W6JZouxhqcZm+u8 Gswg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=HGFsFhHkP2Yt9mNr2GuoUpvoxDBPT1nx+OU4sLnKRjI=; b=n4rMJX+NB+iEmFxRuGne/35hANUbevao4/BuBCoPKE3V++e3fUUy7+Jpd85DZMkw68 25/PkdTffhRi1rhky0+Bvlt62ZaSslGrjrRyXjP9fUpB3IMVg33UFsvVNYgAPXf2kZLI 8kmwB1B48hXtX4djwo/94tLG/LJ1jmkZ5WThHBcggJ1uQw0Bro0VLZc/boAv1g6Qyber vxkgJSxo9cKOQJRVECcRHtZS+TNJSJprC52GXD6JEl+zcgdvANnRQsWzD3Y3/TY8RL2V qwui/3ZNKvp98a2UBtuWU1UjVBrkf5zg53NidIkxgdp5myF3bR9l6tyQGHLssIqhVSbb XlBg==
X-Gm-Message-State: AOAM530r7ncd1SXeWFNPsWpStCyPtLk5CaEILRgq15+BPfhI+z9k0nG7 bOFmLnFANXbUURU9JsKIt0qLlQCtf/ph8cRZbRpXq1IFzJXopA==
X-Google-Smtp-Source: ABdhPJzp39QUmrNI1JoS3Bce9cFlWW7HpiEexS2cJ6JyKbDxRTiGGOAW+uunaHw1qYMrx/2efmQh0KYlfIY/U1uxegc=
X-Received: by 2002:a9d:68d4:: with SMTP id i20mr1710017oto.63.1628853578337; Fri, 13 Aug 2021 04:19:38 -0700 (PDT)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Fri, 13 Aug 2021 04:19:37 -0700
From: Ted Lemon <mellon@fugue.com>
In-Reply-To: <CADPZrgTu8QeR=yAM+9w0zDJ45Uz7Lgs12-6PKzutTW_p1RkA4Q@mail.gmail.com>
References: <CADPZrgTu8QeR=yAM+9w0zDJ45Uz7Lgs12-6PKzutTW_p1RkA4Q@mail.gmail.com>
MIME-Version: 1.0
Date: Fri, 13 Aug 2021 04:19:37 -0700
Message-ID: <CAPt1N1=NgRRVnD1L_dJ_mZYuE5ReXOv0sK_cL6RcjcmpdQZOYg@mail.gmail.com>
To: Simon Lin <simonlin=40google.com@dmarc.ietf.org>, dnssd@ietf.org
Content-Type: multipart/alternative; boundary="000000000000eda08905c96f063f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/gKqjgTdot_j2_FtyDgssa6m9W8Y>
Subject: Re: [dnssd] Adoption call for draft-sctl-advertising-proxy
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Aug 2021 11:19:46 -0000

On August 12, 2021 at 11:08:44 PM, Simon Lin (
simonlin=40google.com@dmarc.ietf.org) wrote:

> Specifically,
> imagine a dual-radio device (WiFi and Thread) which for some reason
> migrates from being an SRP client to an mDNS client or vice versa.

Interesting—I'm realizing I completely misread Martin's question. I was
assuming that this client would continue to be an SRP client, not switch
between SRP and mDNS.

What's the solution to resolve the case where an SRP client migrates
to be an mDNS client. When the mDNS client tries to advertise its DNS
service, it will conflict with the SRP server of the original SRP
client. I don't think SRP replication can solve this problem.

As Jonathan said, always using SRP regardless of whether the device is
connected via Thread or WiFi can solve this problem. Also maybe the
device can unregister itself from SRP when it has migrated to WiFi,
which requires the device to remember the IP address of the SRP
server, or to use draft-tljd-dnssd-zone-discover.

I don't think dnssd-zone-discover helps with this. I think the client needs
to either unregister itself with SRP before migrating, or follow the same
protocol I mentioned earlier with respect to its service advertisement:
advertise without asserting uniqueness.

> The way I'm currently proposing to address this is by requiring SRP
> replication when there is more than one SRP server, and by not renaming,
> but rather waiting for the conflict to resolve.

Agree that SRP replication is the most user-friendly way of addressing
this problem.

> An additional mitigation strategy is to not actually detect conflicts. If
> we have two conflicting registrations, and SRP replication doesn't
resolve
> them, then they just coexist until one goes away.

Does this strategy violate mDNS protocol? Moreover, if two different
devices register their service on different SRP servers using the same
name, it's not a good idea to not resolve the conflict since the
conflict will last for a long time.

No, it's allowed. If two devices claim the same name, we're now assuming
that this conflict will be resolved out of band rather than through mDNS
conflict detection. TBH, the only time I've ever actually seen an mDNS
conflict happen outside of deliberate testing was when a single device was
connected through two interfaces to the same link and didn't know it.

On the other hand we see conflicts all the time with SRP because of the
two-SRP-server mDNS conflict detection algorithm, so it's pretty clear that
SRP + mDNS conflict detection is a recipe for creating conflicts.

> The only other alternative is to rename. I think this is too heavy of a
> solution, but I'm open to debate.

It increases the complexity on every device that needs to browse for
mDNS services. I would prefer SRP replication to renaming.

This is a good point—SRP replication also increases complexity, but it
constrains it nicely to the more capable nodes on the network—the ones that
are acting as ad-hoc infrastructure and not as end nodes.