Re: [Doh] [DNSOP] [Ext] Re: Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http

Ted Lemon <mellon@fugue.com> Wed, 04 April 2018 19:12 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A13512DA6B for <doh@ietfa.amsl.com>; Wed, 4 Apr 2018 12:12:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uca5EaNvo1Mb for <doh@ietfa.amsl.com>; Wed, 4 Apr 2018 12:12:15 -0700 (PDT)
Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 619B512DA68 for <doh@ietf.org>; Wed, 4 Apr 2018 12:12:15 -0700 (PDT)
Received: by mail-qk0-x233.google.com with SMTP id s78so23677995qkl.8 for <doh@ietf.org>; Wed, 04 Apr 2018 12:12:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=x8sERHXdCp0C3vt4KTrHIIDcCXeu95DqTauHmzGU8pw=; b=dys1V7tDflJXhfwctQIdqd6DHLN1BOXIbuWhFaBnyA6bb/p61Bu+GXqP3vvoLPvmqI BJ2U7sxD2mcpLqdVSjO/SyXhH6+/MvcYb+ynkmd1wk6YHFFDqKUkLrTn5cc9IxY2o0vf +vi3nid/JvxnQ6FnQHDFVS0Q4VoHx7ewhfd2LmbDwuu3Hb/2kQ1/DAiaQOvXw/SOcIGY kfbQz1LcNt2+o/QoMq4GvqCL7OwwGtf1I0WyfEZVWo63uEwbk6wLj0kPoNhZgwiV2E1l HyLbP1jOVSl/ZuBovKX8bvx3u47fxJqlh7X2xdyNzGLmlttzZBK+imOy7h06g29JzGKS aXPQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=x8sERHXdCp0C3vt4KTrHIIDcCXeu95DqTauHmzGU8pw=; b=nDDJSu5/wGEZgcSp/0wwhj1dM7A8ejY3qNfChERuKSsAik57gwyvrl1j8xJ8NXHCtx Sq1+St7U4RjGydCV/o76IeJk3jB5I66TWi9mfTIIsc2DR0cMlLamEcq05aZiqUb3CIVj YAVf/C0G3Du0p9aXpLNvfHo+5eaGRDw5YtXTgb9GdGRs5q3LyifYidr9CL2PsbexKUOL c4IzREFe9rzMC4SBExIxf9D+VRd+EoAq1rN5qA2f3AU2uOlDs+YmnPUWE28rf42Q3GHd Rq5SBTniW1mPKD1R4OTm9u4o8/aQ6QGaEqtjSrhpf7NWXgOYI7GUho0+JLkn29woHmSd kHug==
X-Gm-Message-State: ALQs6tAiDliWgqGJvb7eXT8yCB0rHlWaIBAC41BMSn9o394/Cv1T0glQ v1GUED+rXLLWXvZvZ8piJefjvoPacEY=
X-Google-Smtp-Source: AIpwx49s2a0mltyiIQPEX+Zi3V6Ks3pZlteYeng7GpmIyLvGZzYCjy24+giQ1xI/NKEfGlLEmerIEA==
X-Received: by 10.55.26.86 with SMTP id a83mr24742999qka.165.1522869134364; Wed, 04 Apr 2018 12:12:14 -0700 (PDT)
Received: from [192.168.1.144] (c-24-60-163-103.hsd1.ma.comcast.net. [24.60.163.103]) by smtp.gmail.com with ESMTPSA id w21sm1324579qto.48.2018.04.04.12.12.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Apr 2018 12:12:13 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <53502E6D-8AB9-4198-9824-5F070FC763D7@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_F9DB2B5D-5B70-4B4C-BAF5-5287F38BEC38"
Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\))
Date: Wed, 04 Apr 2018 15:12:12 -0400
In-Reply-To: <5AC52029.9000103@redbarn.org>
Cc: Ray Bellis <ray@bellis.me.uk>, dnsop@ietf.org, doh@ietf.org
To: Paul Vixie <paul@redbarn.org>
References: <152168039295.5550.9572034766968749020.idtracker@ietfa.amsl.com> <CAAObRXKHhk51DxNt5uiYB0gunJ=DNde2j9FJSU=Ky2m4Q1UkhQ@mail.gmail.com> <CABkgnnVL0XaUDS-WzDGaN9-kLx9p3x1+UVuWhvx=Zyo5oRos+w@mail.gmail.com> <19BED07A-942E-4A46-93A6-09770083EFF9@icann.org> <CABkgnnX-=n-reO9yjA8a2pHAD+JtoS5wX1w-dXMnDFdt4HXu-g@mail.gmail.com> <23236.18671.182273.977633@gro.dd.org> <28199575-e2e2-6966-fe17-f678f9f397f3@bellis.me.uk> <5AC4C2F7.7050906@redbarn.org> <3630b151-9628-235e-a5b1-c838b777d9d2@bellis.me.uk> <5AC4E70C.7020003@redbarn.org> <A0A55AED-0CB2-478C-913A-DCA678FBAC33@fugue.com> <5AC4F11F.3050009@redbarn.org> <602DF02A-3A85-4B3B-9E11-F7A701BD25B5@fugue.com> <5AC4F3F5.6080408@redbarn.org> <C2CAFEF1-7A0B-496E-9AE0-7229E4B4062F@fugue.com> <5AC5006C.4050308@redbarn.org> <5307DF51-689E-41C3-AB4A-59611EAD4DA3@fugue.com> <5AC50A04.6030407@redbarn.org> <7E0DD069-A6C4-473F-B51D-5902C7E96A5C@fugue.com> <5AC51AEC.10603@redbarn.org> <24035AD9-C0C4-4BE4-A58A-0E010FB3D0F6@fugue.com> <5AC52029.9000103@redbarn.org>
X-Mailer: Apple Mail (2.3445.6.18)
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/Jp9J8hqqzYx7UyzgRiUr9qHD17g>
Subject: Re: [Doh] [DNSOP] [Ext] Re: Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Apr 2018 19:12:17 -0000

On Apr 4, 2018, at 2:57 PM, Paul Vixie <paul@redbarn.org> wrote:
> no. it uses a DNS response message of rcode SERVFAIL for error signalling. so, it is as transparent as possible, and no more.

Okay.   So the upstream proxy is intended to simply take the "tcp" or "udp" indication and do the query using tcp or udp as indicated?   What if I write a proxy that doesn't support this behavior—will your downstream proxy fail to interoperate with it?   E.g., if it does the query using TCP, or automatically fails over to TCP if it gets a truncated response, and therefore returns a long response to a UDP query, will bad things happen?