Re: [homenet] Understanding DNS-SD hybrid proxying [was: Firewall hole punching]

Juliusz Chroboczek <jch@irif.fr> Thu, 24 November 2016 09:47 UTC

Return-Path: <jch@irif.fr>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 575B2129F36 for <homenet@ietfa.amsl.com>; Thu, 24 Nov 2016 01:47:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t6oKu05bDQX8 for <homenet@ietfa.amsl.com>; Thu, 24 Nov 2016 01:47:20 -0800 (PST)
Received: from korolev.univ-paris7.fr (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8739A129F3D for <homenet@ietf.org>; Thu, 24 Nov 2016 01:47:18 -0800 (PST)
Received: from mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [81.194.30.253]) by korolev.univ-paris7.fr (8.14.4/8.14.4/relay1/56228) with ESMTP id uAO9lGa0007709; Thu, 24 Nov 2016 10:47:16 +0100
Received: from mailhub.math.univ-paris-diderot.fr (localhost [127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTP id CA4A5D7ACE; Thu, 24 Nov 2016 10:47:16 +0100 (CET)
X-Virus-Scanned: amavisd-new at math.univ-paris-diderot.fr
Received: from mailhub.math.univ-paris-diderot.fr ([127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id VeVzCFlhyyLY; Thu, 24 Nov 2016 10:47:15 +0100 (CET)
Received: from trurl.irif.fr (col75-1-78-194-40-74.fbxo.proxad.net [78.194.40.74]) (Authenticated sender: jch) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTPSA id 44E2FD7ACD; Thu, 24 Nov 2016 10:47:15 +0100 (CET)
Date: Thu, 24 Nov 2016 10:47:16 +0100
Message-ID: <87vavdp5uj.wl-jch@irif.fr>
From: Juliusz Chroboczek <jch@irif.fr>
To: Tim Chown <Tim.Chown@jisc.ac.uk>
In-Reply-To: <8F1D21A3-239F-43A3-B6B1-550F47CAF993@jisc.ac.uk>
References: <871syc54d1.wl-jch@pps.univ-paris-diderot.fr> <CAPt1N1=eXRBh6UqGGqUSK9cH_jY5MvPcE4MFZUPe2Z48LF7bkA@mail.gmail.com> <87lgwj504t.wl-jch@irif.fr> <CAPt1N1kDCMDBEpt7QYhHtPYjaMJAzw8G81=2y2f=y0ZProeCPA@mail.gmail.com> <13675.1479346312@dooku.sandelman.ca> <3B35AF68-4792-4B2A-8277-A7B49206581F@google.com> <74143607-B81E-4D4C-89D3-4754E0DA7DE1@jisc.ac.uk> <790beb67-a62e-b7dc-b64e-a3fcecfbdb12@mtcc.com> <87zikrihl7.wl-jch@irif.fr> <2EEB3CCD-3C25-4844-95B5-DDE31F982EA2@iki.fi> <87oa17i9eq.wl-jch@irif.fr> <2DAA6FEB-8C87-42DA-9465-E740669C563A@iki.fi> <7i37iinfoa.wl-jch@irif.fr> <8F1D21A3-239F-43A3-B6B1-550F47CAF993@jisc.ac.uk>
User-Agent: Wanderlust/2.15.9
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (korolev.univ-paris7.fr [194.254.61.138]); Thu, 24 Nov 2016 10:47:16 +0100 (CET)
X-Miltered: at korolev with ID 5836B724.005 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)!
X-j-chkmail-Enveloppe: 5836B724.005 from mailhub.math.univ-paris-diderot.fr/mailhub.math.univ-paris-diderot.fr/null/mailhub.math.univ-paris-diderot.fr/<jch@irif.fr>
X-j-chkmail-Score: MSGID : 5836B724.005 on korolev.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000
X-j-chkmail-Status: Ham
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/wtpjfCRMzfguCh61-fJzNbhN134>
Cc: "homenet@ietf.org" <homenet@ietf.org>, Markus Stenberg <markus.stenberg@iki.fi>
Subject: Re: [homenet] Understanding DNS-SD hybrid proxying [was: Firewall hole punching]
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Nov 2016 09:47:21 -0000

> In dnssd we have the “stitching” topic on our plate, around operation of dns-sd
> in unmanaged multi-link networks.  So this is timely discussion.

Aha, excellent.

> We’re beginning work on a BCP for the use of the discovery/advertising proxy in
> enterprise/campus networks, where there is administrative configuration, and
> scalability is a concern. The stitching topic would likely form part of a
> corresponding BCP for unmanaged operation, as per a multi-link homenet.

I could be wrong, but I believe that stitching could be just as useful in
managed networks.  I'm not especially enthused by the solution suggested
in Section 5.1 of dnssd-hybrid-05 (making a single hybrid proxy ubiquitous
through link-layer magic).

> The proxies ask about (discover) services on the link(s) they serve on behalf
> of the (remote) querier. For general info on how dns-sd works, see
> https://tools.ietf.org/html/draft-ietf-dnssd-hybrid-05, Section 5 in
> particular.

The draft suggests that the hybrid proxy does not speak mDNS, but that it
gets the information from an existing mDNS cache (last paragraph of 5.1).
It appears that Markus' OpenWRT implementation follows this model.  As
a general rule, I'm not overly keen on solutions that require dependencies
between daemons, but Markus and Steven have a good track record of beating
such constructs into compliance.

> For more info on that, see
> https://www.ietf.org/proceedings/97/slides/slides-97-dnssd-hybrid-proxy-00.pdf

Will do, thanks.

> The other thing to be aware of is that there is “long lived query” support for
> the proxies being defined via the DNS Push Notifications and DNS Session
> Signalling drafts (https://tools.ietf.org/html/draft-ietf-dnssd-push-09 and
> https://tools.ietf.org/html/draft-ietf-dnsop-session-signal-01).

Oh my.  Is that meant to be optional?

Thanks for all the info,

-- Juliusz