Re: HTTP Alternative Services Best Practices?

Ryan Hamilton <rch@google.com> Mon, 16 December 2019 20:26 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63EA6120918 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 16 Dec 2019 12:26:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.251
X-Spam-Level:
X-Spam-Status: No, score=-10.251 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UggGhhUefo8v for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Mon, 16 Dec 2019 12:26:05 -0800 (PST)
Received: from frink.w3.org (frink.w3.org [IPv6:2603:400a:ffff:804:801e:34:0:38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82DCF120916 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Mon, 16 Dec 2019 12:26:05 -0800 (PST)
Received: from lists by frink.w3.org with local (Exim 4.89) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1igwuJ-0001qK-A6 for ietf-http-wg-dist@listhub.w3.org; Mon, 16 Dec 2019 20:23:55 +0000
Resent-Date: Mon, 16 Dec 2019 20:23:55 +0000
Resent-Message-Id: <E1igwuJ-0001qK-A6@frink.w3.org>
Received: from mimas.w3.org ([2603:400a:ffff:804:801e:34:0:4f]) by frink.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <rch@google.com>) id 1igwuG-0001pc-CG for ietf-http-wg@listhub.w3.org; Mon, 16 Dec 2019 20:23:52 +0000
Received: from mail-wr1-x433.google.com ([2a00:1450:4864:20::433]) by mimas.w3.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from <rch@google.com>) id 1igwuD-00029c-HB for ietf-http-wg@w3.org; Mon, 16 Dec 2019 20:23:52 +0000
Received: by mail-wr1-x433.google.com with SMTP id b6so8900197wrq.0 for <ietf-http-wg@w3.org>; Mon, 16 Dec 2019 12:23:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FRekzuASJwqnOwGI3om9JxY0V0Za8GHuSt6P0qaVTLU=; b=LeKnvPfxQJIgGS8gkM9vllr4xY028AzolVMWHDVqPaOmqY4QdrRrtjTBct1K4ka+be y7zqOu7V1JPwGpsPHwTFnmUkSnKHenjp4vHaDW4qViDRVStx3oXvK0uFoMyqTcJC540e kuFh/0PemdxwrIeGuiYopeTamVsMzCnad8VdqPwKeRhfid2R5hoxx5idCHAe8kgrTPR0 9oOb807Tn6Pzz0+9l5rAaGygU0nFRwSJTcief9GAc0l46qi6fOArA8mrTuHvWC8iJ2aF P8TrCG4aFL4v/9I0+TMYFqcNF/4lUOlRLJU9AavcwyoZQb/2DFpsbT22G3ccqwCAtr9q uUDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FRekzuASJwqnOwGI3om9JxY0V0Za8GHuSt6P0qaVTLU=; b=ubV3/+9YsF0+BVPIX7WlnfTY+sbOz/Vfzz+M9RcaStwODRxkwCV4yZQMvdbwiv4Z+x Qlg/iPnrlOUshzelF0FMtgzQEwlg0Q7Zo/wsvCDOEcveXipkNo6cU1qiMhWo7IHrcnwL I52jg1mwNEGb1A3uMgc1IHUmGqaDn8eTIXVgY3ni5GBNFibtfFkcMh/j9ijZEuCyDfwe ZiCk4XbnKEu0NzHWJLmpaDmGs5jHgMYKujcc/7+ioJgErP9N2blnXx5UwVz7pPeVEFry JOFZdEMUJKHz4LtpyNlPLORDEcTcLKl2rebzHjAl4d64g51uI9c8SxvgXo7FtB939Bfa blNg==
X-Gm-Message-State: APjAAAXeFeRx7HJHjMsQdVmUre7RztMw6DjdaSTwT8nvRhECCyxdOSI7 gipbRkscbJx/VbXtermoHXJZuCPHvN4iHz9Ow/LQsg==
X-Google-Smtp-Source: APXvYqwUVQCxbBZuJYeRy4dG4/mBwEwAWe7CQxubDONk+xBQDMoTYS2C2hs7NDJRnDD3aatVuoER+NODsXJYcFCtf68=
X-Received: by 2002:adf:f484:: with SMTP id l4mr32300142wro.207.1576527827691; Mon, 16 Dec 2019 12:23:47 -0800 (PST)
MIME-Version: 1.0
References: <CALGR9oaCNigDAZP=ue-sORxCJFzkVynhaJszjjY_ohN56ewy8g@mail.gmail.com>
In-Reply-To: <CALGR9oaCNigDAZP=ue-sORxCJFzkVynhaJszjjY_ohN56ewy8g@mail.gmail.com>
From: Ryan Hamilton <rch@google.com>
Date: Mon, 16 Dec 2019 12:23:34 -0800
Message-ID: <CAJ_4DfQDgaouwoMyG1f2v4_CndWWNpqft+9=zbOfeM_ek7mSHA@mail.gmail.com>
To: Lucas Pardue <lucaspardue.24.7@gmail.com>
Cc: QUIC WG <quic@ietf.org>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: multipart/alternative; boundary="0000000000002648ed0599d7fd90"
Received-SPF: pass client-ip=2a00:1450:4864:20::433; envelope-from=rch@google.com; helo=mail-wr1-x433.google.com
X-W3C-Hub-Spam-Status: No, score=-19.6
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: mimas.w3.org 1igwuD-00029c-HB a22ced479114a8a364a352604ac60572
X-Original-To: ietf-http-wg@w3.org
Subject: Re: HTTP Alternative Services Best Practices?
Archived-At: <https://www.w3.org/mid/CAJ_4DfQDgaouwoMyG1f2v4_CndWWNpqft+9=zbOfeM_ek7mSHA@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/37222
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Thanks for raising this issue! I think documenting best practices/guidance
would be a great idea. I think the Google servers advertise a 30 day
expiration (because 24 hours is *really* short). Further, it turns out that
Chrome implicitly assumes persist = true (because Chrome incorrectly
doesn't implement persist = false). We have a bunch of deployment
experience with this model which I think suggests that shorter ttls and
persist = false would be have a deleterious impact on performance.

On Mon, Dec 16, 2019 at 4:02 AM Lucas Pardue <lucaspardue.24.7@gmail.com>
wrote:

> Hello QUIC and HTTP members,
>
> HTTP Alternative Services (Alt-Svc) is specified in RFC 7838 which was
> published in 2016 [1]. Many of us are starting to use Alt-Svc and I wonder
> if its appearance of simplicity might cause some unintended effects on the
> Internet. In the 3 or so years since it was published, have any best
> practices emerged that might be useful to capture.
>
> Major uses of Alt-Svc today in no particular order: switching to gQUIC
> (typically on the same port), switching to HTTP/3, Opportunistic Encryption
> (RFC 8164) [2], Opportunistic Onion (advertising .onion [3]), and traffic
> management by advertising alternatives with different destination IPs or
> network path characteristics.
>
> Arguably, HTTP/3 will be the largest-scale deployed use case of Alt-Svc
> both in terms of advertisements and clients that take them up. Alt-Svc for
> this can be deceptively simple, which may lead to unexpected outcomes. For
> example, the minimal expression:
>
> Alt-Svc: h3-24=":443"
>
> invokes default values for parameters, "ma" is fresh for 24 hours and
> "persist" is false (i.e. clear alternative cache on network changes). One
> could imagine how this could cause bursts of activity at regular periods,
> or cascades due to end-user local conditions such as flocking or hopping.
>
> Finally, the proposal for an HTTPSVC DNS record [4] might attract a
> different population of operator that is less familiar with the expected
> behaviour of Alt-Svc implementations.
>
> Does anyone think it would be useful to share or document some guidance?
>
> Cheers
> Lucas
>
> [1] https://tools.ietf.org/html/rfc7838
> [2] https://tools.ietf.org/html/rfc8164
> [3] https://tools.ietf.org/html/rfc7686
> [4] https://tools.ietf.org/html/draft-ietf-dnsop-svcb-httpssvc-01
>