Re: [homenet] A TOFU approach to naming things in the homenet (with code!)

Toke Høiland-Jørgensen <toke@toke.dk> Fri, 14 April 2017 21:52 UTC

Return-Path: <toke@toke.dk>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AE221294C9 for <homenet@ietfa.amsl.com>; Fri, 14 Apr 2017 14:52:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=toke.dk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hRWfzQCltBWF for <homenet@ietfa.amsl.com>; Fri, 14 Apr 2017 14:52:44 -0700 (PDT)
Received: from mail.toke.dk (mail.toke.dk [IPv6:2001:470:dc45:1000::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88E32127077 for <homenet@ietf.org>; Fri, 14 Apr 2017 14:52:44 -0700 (PDT)
From: Toke Høiland-Jørgensen <toke@toke.dk>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=20161023; t=1492206762; bh=hTXnfKW9JgwZRveY68DoOZJSZOGwACV7Dg+u7+nOmtU=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=M0giDWs2ztYQn4aztq1uvm4OUQsqNTtHQkjllVXRK3VO3nHScvRmVU2Nu6/iuVnnk gSUVj6/dysw4f/f159NDSmzuq5Uvf1O+vdbKMdzFU4V+4phTCaiLppbgVCt8z+uLFW fnhzFuzgAWGrlfPhaTpCHbyed34oM1A9eqn85VvDd745Ti5K5bwJH5jVjzRwUuoX2m yxkjrnoPqDGi4LqnbBJBNO4toVylFh1Rpx9yVVoBjEXPtsy5Fr8ij4ATq61kUty7sG n3eCmRugkPm5pkoi53h5dxVoYRg39iGhs3J2C3QDjzryO/evo9EuhQEpwlfGRTcWi5 uJkxGjsX0yNkA==
To: Juliusz Chroboczek <jch@irif.fr>
Cc: homenet@ietf.org
References: <87r30vomax.fsf@alrua-x1> <87r30v3xn5.wl-jch@irif.fr> <87h91rnkgc.fsf@alrua-x1> <7i8tn3xc53.wl-jch@irif.fr>
Date: Fri, 14 Apr 2017 23:52:40 +0200
In-Reply-To: <7i8tn3xc53.wl-jch@irif.fr> (Juliusz Chroboczek's message of "Fri, 14 Apr 2017 17:05:44 +0200")
X-Clacks-Overhead: GNU Terry Pratchett
Message-ID: <878tn2odw7.fsf@alrua-x1>
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/jL51BnFeWah_ShthxHWfY_SApyw>
Subject: Re: [homenet] A TOFU approach to naming things in the homenet (with code!)
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 21:52:46 -0000

Juliusz Chroboczek <jch@irif.fr> writes:

>> In the current implementation, a single daemon per registration zone.
>
> Right. Either it could be elected by HNCP, or the daemons could run an
> election among themselves.

Yeah, this makes sense if this mechanism is also used inside the homenet
(to register under dot-home, say). For a globally visible zone (where
you'd presumably only install globally routable addresses) the daemon
could also be outside the homenet.

>> The client will query for a SRV at _nsreg._tcp.<zone> to find the
>> daemon, which can be anywhere, in principle (the daemon will only speak
>> TCP and limits initial registration to a list of configured subnets; I'm
>> currently running mine on a separate server rather than on my router).
>
> Makes sense.  The list of prefixes could be configured by HNCP.

Yup.

>> I punted somewhat on how to discover the zone; the client will currently
>> take it as a command line parameter. But figure that can be distributed
>> via DHCP/RA?
>
> Or put it in DNS under dot-home? Since the client already knows how to
> speak DNS, this avoids yet another coupling between protocols.

Ah yes, that makes sense; since we have a domain that always refers to
the homenet, just define a name under that that will return PTRs to the
zones available for registration.

>> In principle, there's nothing preventing the daemon state from being
>> replicated across the homenet routers, I suppose...
>
> I think it's more complicated and more fragile than having an
> election. I'm not too keen on adding another flooding protocol to the
> Homenet stack.

I said it's possible in principle. I didn't say it was a good idea... ;)

-Toke