Re: [homenet] Understanding DNS-SD hybrid proxying [was: Firewall hole punching]

Markus Stenberg <markus.stenberg@iki.fi> Thu, 24 November 2016 11:00 UTC

Return-Path: <markus.stenberg@iki.fi>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6C0B1298C6 for <homenet@ietfa.amsl.com>; Thu, 24 Nov 2016 03:00:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.821
X-Spam-Level:
X-Spam-Status: No, score=-1.821 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dH0CZKWSdmuw for <homenet@ietfa.amsl.com>; Thu, 24 Nov 2016 03:00:06 -0800 (PST)
Received: from julia1.inet.fi (mta-out1.inet.fi [62.71.2.231]) by ietfa.amsl.com (Postfix) with ESMTP id 74795129892 for <homenet@ietf.org>; Thu, 24 Nov 2016 02:59:45 -0800 (PST)
Received: from [192.168.200.122] (195.20.116.1) by julia1.inet.fi (9.0.002.03-2-gbe5d057) (authenticated as stenma-47) id 5782991C03FDAA59; Thu, 24 Nov 2016 12:57:16 +0200
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Markus Stenberg <markus.stenberg@iki.fi>
In-Reply-To: <8F1D21A3-239F-43A3-B6B1-550F47CAF993@jisc.ac.uk>
Date: Thu, 24 Nov 2016 12:59:35 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <C3CDAF6E-A241-41AA-ACA1-17442A127AC9@iki.fi>
References: <871syc54d1.wl-jch@pps.univ-paris-diderot.fr> <CAPt1N1=eXRBh6UqGGqUSK9cH_jY5MvPcE4MFZUPe2Z48LF7bkA@mail.gmail.com> <87lgwj504t.wl-jch@irif.fr> <CAPt1N1kDCMDBEpt7QYhHtPYjaMJAzw8G81=2y2f=y0ZProeCPA@mail.gmail.com> <13675.1479346312@dooku.sandelman.ca> <3B35AF68-4792-4B2A-8277-A7B49206581F@google.com> <74143607-B81E-4D4C-89D3-4754E0DA7DE1@jisc.ac.uk> <790beb67-a62e-b7dc-b64e-a3fcecfbdb12@mtcc.com> <87zikrihl7.wl-jch@irif.fr> <2EEB3CCD-3C25-4844-95B5-DDE31F982EA2@iki.fi> <87oa17i9eq.wl-jch@irif.fr> <2DAA6FEB-8C87-42DA-9465-E740669C563A@iki.fi> <7i37iinfoa.wl-jch@irif.fr> <8F1D21A3-239F-43A3-B6B1-550F47CAF993@jisc.ac.uk>
To: Tim Chown <Tim.Chown@jisc.ac.uk>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/HhAKpNfPBHHzk-14uFeQGmrD9uc>
Cc: "homenet@ietf.org" <homenet@ietf.org>, Juliusz Chroboczek <jch@irif.fr>
Subject: Re: [homenet] Understanding DNS-SD hybrid proxying [was: Firewall hole punching]
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Nov 2016 11:00:08 -0000

> On 24 Nov 2016, at 11.28, Tim Chown <Tim.Chown@jisc.ac.uk> wrote:
> In dnssd we have the “stitching” topic on our plate, around operation of dns-sd in unmanaged multi-link networks.  So this is timely discussion.
> 
> We’re beginning work on a BCP for the use of the discovery/advertising proxy in enterprise/campus networks, where there is administrative configuration, and scalability is a concern. The stitching topic would likely form part of a corresponding BCP for unmanaged operation, as per a multi-link homenet.

For the record, 'stitching' combined with mdns is really hard. One of the reasons I gave up on my original mdns proxy designs, which incorporated stitching. 

As long as there is no conflict, it is trivial, but dealing with conflict in user-friendly manner is essentially impossible in presence of any resource name rewriting (and that inevitably happens when hybrid proxy is involved).

mdns conflict precedence may change as result of rewrites -> have to do really ugly things to force one party to rename, if you want the ground truth to match what is presented in the stitched zone. If you do not want that, then the problem becomes just matter of providing long-lived name rewrites if and only if conflicts are detected, and it is not much more fun either.

Cheers,

-Markus