Re: [dnssd] SRP Update: which A/AAAA records to include?

Ted Lemon <mellon@fugue.com> Wed, 18 May 2022 14:05 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14B6DC14F73E for <dnssd@ietfa.amsl.com>; Wed, 18 May 2022 07:05:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.898
X-Spam-Level:
X-Spam-Status: No, score=-6.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZjSOKzWKNcUO for <dnssd@ietfa.amsl.com>; Wed, 18 May 2022 07:05:12 -0700 (PDT)
Received: from mail-oa1-x36.google.com (mail-oa1-x36.google.com [IPv6:2001:4860:4864:20::36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3532C14F745 for <dnssd@ietf.org>; Wed, 18 May 2022 07:05:12 -0700 (PDT)
Received: by mail-oa1-x36.google.com with SMTP id 586e51a60fabf-d39f741ba0so2724671fac.13 for <dnssd@ietf.org>; Wed, 18 May 2022 07:05:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=QSq35/jUdTWlx/DtRPiw2iDIStXHkKCFKFp/AaMfXhM=; b=PFEiY/VnHXWZMvpBwWk7XLaoPtkZEAzIG34x2QcLwqjq50USM/KrdpvMoMaCldjRi/ 8c66cwrxKHZ7TcnAx+30Zmd3NwVQndMZy6yU4YB5HflRhVS9QVRd4Gg/cFqT0nlDiv9m HSiFCqHeefBJO8Phc7DmSDlaVMn+dC+V+H8EyMQ7Fcvd5JWasclMe+ApwaYpgnIif9CY Ue05X1Oec0q6D2Coap50HaDh11xOViWc2oi5vNUD/0G0lHuZG11X61JYIcjLK92+h/qM 6I0svGvZHhh3wc9xBEmBpMiR82Uv/lWkRG/rxBBpNwCjL8PavBB+cO+TlcPQ4LR5ou1k bvGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=QSq35/jUdTWlx/DtRPiw2iDIStXHkKCFKFp/AaMfXhM=; b=1JWmnOCG4IeSNQhrrVgnyRLsuwG6RWsw4/vR1rcFFJxy7iNI9sG3Rhp8/2zD7r31E2 RrT/fMYaHSzXMEXVsYq638BG/MeNNIvvJ/4epoitNH+DeeLNGs1WRW/462WSFPm6to3B DDCi+adORI5ACrI4ncy75w/TmowhVksx5st4zMeqz2dRldlhxPA3TCx9NLvHeYqBfF4y GNYq4qaS7mADGhjjItF+ThzC7PGBX8fKsVp8y5gdp6N750zWDw+5Ftfb7l5OLek55Qjp niqFMcdQFm2IC5nw+8XCMWerK2U7DRHrC0MxOOIjVId0Mn4SGXJd5AewD5U/mAJdWXXr bZ/w==
X-Gm-Message-State: AOAM531rhTht4yTVnLlmOOAxcllIt7Ih25xIZeQZYGkqrZ/CAiLjDRQA Eq5gFIdNRGvAHZ/OVTZ72TB6LJCcX9J05AZ4BhslO72Ni46mcg==
X-Google-Smtp-Source: ABdhPJx8v9kKjW9tb0ZZgkxh35Eyz0Aig8xJangFO/fa0lpTxZDHqyIdGH3rgyyRe5Gom0rV8UZzsZxCPYUtvjlip8Q=
X-Received: by 2002:a05:6870:17a4:b0:e5:8eee:1607 with SMTP id r36-20020a05687017a400b000e58eee1607mr107657oae.12.1652882710696; Wed, 18 May 2022 07:05:10 -0700 (PDT)
MIME-Version: 1.0
References: <DU0P190MB19783F222A7C5EE99DCC5A4DFDD19@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM>
In-Reply-To: <DU0P190MB19783F222A7C5EE99DCC5A4DFDD19@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM>
From: Ted Lemon <mellon@fugue.com>
Date: Wed, 18 May 2022 10:05:00 -0400
Message-ID: <CAPt1N1ki+CkZGDBe2xS7B_MGPsDZt9ywYWpffMRB8AbAo0+9JA@mail.gmail.com>
To: Esko Dijk <esko.dijk@iotconsultancy.nl>
Cc: "dnssd@ietf.org" <dnssd@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d3ab8105df49bece"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/gVhi3iXyysMKZddsvwH06JXjU3Y>
Subject: Re: [dnssd] SRP Update: which A/AAAA records to include?
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 May 2022 14:05:17 -0000

I think the advice in RFC 8766 section 5.5.2 is relevant here. So any
address that would only be reachable on the same link as the client
probably shouldn’t be sent. But I think this is somewhat domain-specific.
E.g., thread has a mesh-local prefix. Maybe we want to allow mesh-local
addresses for stability when mesh clients are discovering each other?  At
present I think ADK just sends off-mesh-reachable addresses. Dunno about
OpenThread.

On Wed, May 18, 2022 at 09:59 Esko Dijk <esko.dijk@iotconsultancy.nl> wrote:

> Hello,
>
>
>
> Here a question about draft-ietf-dnssd-srp-13: Section 2.2.1 defines what
> to publish in an SRP Update. It also refers to RFC 6763 for more details.
>
> But, I cannot find what A / AAAA records a client should publish with an
> SRP Update, from the following text:
>
>
>
> *  The Host Description records for a service are a KEY RR, used to
>
>       claim exclusive ownership of the service registration, and one or
>
>       more RRs of type A or AAAA, giving the IPv4 or IPv6 address(es) of
>
>       the host where the service resides.
>
>
>
> Is it all addresses? Or would a subset be okay also? RFC 6763 also does
> not mention more on this A / AAAA selection.
>
> I found it more clear for mDNS RFC 6762:
>
>
>
> When a Multicast DNS responder sends a Multicast DNS response message
>
>    containing its own address records, it MUST include all addresses
>
>    that are valid on the interface on which it is sending the message,
>
>
>
> But the case of SRP is different. We could add  for SRP in 2.2.1:
>
>
>
> “The Host Description records SHOULD include A and AAAA records for all IP
> addresses via which the service can be reached by all hosts that might
> query the DNS.”
>
>
>
> This formulation borrows from 2.3.1.3, but now applied to the perspective
> of the SRP client.  E.g. link-local address is excluded due to this
> formulation. Also particular (ULA) addresses can be excluded if the client
> knows they have very limited scope of routing.
>
>
>
> Regards
>
> Esko
>
>
>
> *IoTconsultancy.nl*  |  Email/Teams: esko.dijk@iotconsultancy.nl    |
> +31 6 2385 8339
>
>
> _______________________________________________
> dnssd mailing list
> dnssd@ietf.org
> https://www.ietf.org/mailman/listinfo/dnssd
>