Re: Last Call: <draft-iab-2870bis-01.txt> (DNS Root Name Service Protocol and Deployment Requirements) to Best Current Practice

"Carlos M. Martinez" <carlosm3011@gmail.com> Fri, 30 May 2014 17:20 UTC

Return-Path: <carlosm3011@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD3121A02C9 for <ietf@ietfa.amsl.com>; Fri, 30 May 2014 10:20:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.75
X-Spam-Level:
X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZA64uAyVUkH8 for <ietf@ietfa.amsl.com>; Fri, 30 May 2014 10:20:47 -0700 (PDT)
Received: from mail-yk0-x230.google.com (mail-yk0-x230.google.com [IPv6:2607:f8b0:4002:c07::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBF271A6F98 for <ietf@ietf.org>; Fri, 30 May 2014 10:20:45 -0700 (PDT)
Received: by mail-yk0-f176.google.com with SMTP id q9so1730443ykb.21 for <ietf@ietf.org>; Fri, 30 May 2014 10:20:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:reply-to:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=4NyfPJkF2vL6v3hWp2A0YMEy4sTBjEXxUcYGA7V62OY=; b=kvv0UvexuSlwlXSbejvm45HoZVi1gzJLROfyFHATubxaRZJI5fwCVZcz0YdsI0/xqf hlC/HnzmB90T/lFUvqVXnJjZKEslW/NMyjxnH23bhG1bksEEDCuUzQaVMET3LP39ZY/9 1IbWOo5HDUF+UAItVpAsVzh503uCX0ANUzu9B1prwd18mQ510qQhx9dEOp95IRBgHqkF joXaYyRlMA3w/1hXmGhPW8ZLEoKcr/YGmmfRf14S8zbkkWMAKEROwt7yh68GbsF++PNE KtwucN8+TB3x8L388ItpnpTIM5RFJdGaK1RpMEG85I9XXSUQeLN/z4rcz3UbMoXTOPfr HzNA==
X-Received: by 10.236.66.139 with SMTP id h11mr23210160yhd.30.1401470441153; Fri, 30 May 2014 10:20:41 -0700 (PDT)
Received: from albion.local ([2001:13c7:7001:7000:951a:9371:cae8:bf7c]) by mx.google.com with ESMTPSA id l41sm6918059yhg.53.2014.05.30.10.20.39 for <ietf@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 30 May 2014 10:20:40 -0700 (PDT)
Message-ID: <5388BDE5.50200@gmail.com>
Date: Fri, 30 May 2014 14:20:37 -0300
From: "Carlos M. Martinez" <carlosm3011@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: ietf@ietf.org
Subject: Re: Last Call: <draft-iab-2870bis-01.txt> (DNS Root Name Service Protocol and Deployment Requirements) to Best Current Practice
References: <20140520204238.21772.64347.idtracker@ietfa.amsl.com> <6.2.5.6.2.20140521194638.06eaf508@resistor.net> <1111FB79-012A-414B-B8CD-0BBDAE8BD6A8@hopcount.ca> <6.2.5.6.2.20140522095317.0c5fd648@elandnews.com> <5C02BCCA-79D7-40A5-BFB0-26284A667E78@vpnc.org> <DC9ED318-2352-4AF0-8A43-29D237C32B64@vigilsec.com> <924045CD-DC34-423B-8702-CD99CF687D46@vpnc.org> <31344.1401304682@sandelman.ca> <BF0C8B7B-27D0-40B8-8FBD-5D255951222F@ericsson.com> <538795FB.6060205@gmail.com> <5387A307.4000903@gmail.com> <70E8B2EF-FD92-4DEF-BA98-0604041B0C30@isi.edu> <5388AA1B.1050803@gmail.com> <12F4F047-95C4-45E5-BFE1-4A5F6F6008A8@isi.edu>
In-Reply-To: <12F4F047-95C4-45E5-BFE1-4A5F6F6008A8@isi.edu>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/FZCXTiva1wYQAKpKa9dl_iOqeek
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: carlos@lacnic.net
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2014 17:20:48 -0000

Maybe you can better explain to us where you draw the line of
'operational practices' vs 'requirements'

Requiring IPv6, or anycast, or feature X is, in my opinion, a just that,
a requirement.

Operational practice would dictate HOW you fulfill the IPv6, or anycast,
or X requirement.

~Carlos

On 30/05/2014 13:09, manning bill wrote:
> then you won’t mind if the IETF write RFCs to dictate operational policies to RIRs?
> 
> 
> /bill
> Neca eos omnes.  Deus suos agnoscet.
> 
> On 30May2014Friday, at 8:56, Carlos M. Martinez <carlosm3011@gmail.com> wrote:
> 
>> Actually, you got me thinking. Why not require anycast, indeed. I think
>> at some point it will become necessary. Maybe as a SHOULD this time.
>>
>> The argument of 'operational autonomy' cannot be sacrosanct. If you
>> agree to provide a service that the whole internet depends on, then you
>> need to comply with a few requirements. If you can't / won't, well...
>> you can opt out.
>>
>> Operating a root server is not a god-given right or burden. Just opt out
>> if you cannot fulfil the requirements the whole Internet needs. Some
>> things just come with the territory.
>>
>> If, on the other hand, you operate some random email server out there,
>> then yes, I agree you are pretty much the king of your castle. You are
>> free to not do DMARC if you don't want to.
>>
>> I do agree with Patrik that the enforcement part is not the IETF's
>> responsibility. That lies elsewhere. But past failures in enforcement
>> should not deter the IETF of setting the requirements the IETF deems
>> necessary for the correct operation of the Internet.
>>
>> ~Carlos
>>
>>
>> On 29/05/2014 18:24, manning bill wrote:
>>> and why not require anycast?  if your going to meddle in other companies operations, be bold!
>>>
>>>
>>> /bill
>>> Neca eos omnes.  Deus suos agnoscet.
>>>
>>> On 29May2014Thursday, at 14:13, Carlos M. Martinez <carlosm3011@gmail.com> wrote:
>>>
>>>> I need to clarify something here (thanks TM for spotting this).
>>>>
>>>> I didn't mean to say that the IETF should require all root server
>>>> operators to provide anycast copies. I'd very much would like them to,
>>>> but there yes, I don't think the IETF can/should require that.
>>>>
>>>> My comment about 'this requirement is well within...' was only intended
>>>> to apply to the IPv6 issue.
>>>>
>>>> regards,
>>>>
>>>> ~Carlos
>>>>
>>>> On 29/05/2014 17:18, Carlos M. Martinez wrote:
>>>>> I think there is enough consensus saying that root server operators MUST
>>>>> support IPv6. I think it's hard to argue that the Internet needs this to
>>>>> move to IPv6, as otherwise we'll be saying that it'll be ok for future
>>>>> networks to not be able to access some root servers, or putting the
>>>>> burden of supporting all IPv6 on a subset of root servers.
>>>>>
>>>>> If you add that not all root server operators offer anycast copies, or
>>>>> do it in a limited way, well, we could be putting the IPv6 internet in a
>>>>> fragile position.
>>>>>
>>>>> IMO, setting this requirement is well within the core competencies of
>>>>> the IETF.
>>>>>
>>>>> Then comes the question what to do (if anything) with those root server
>>>>> operators who chose to ignore this MUST.
>>>>>
>>>>> IMO, This is probably outside the IETF's sphere, and it should be
>>>>> possible to even say so in the proposed document.
>>>>>
>>>>> cheers!
>>>>>
>>>>> ~Carlos
>>>>>
>>>>> On 29/05/2014 05:24, Jari Arkko wrote:
>>>>>>
>>>>>>> I would like every A-M.root-servers.net have an A and AAAA record.
>>>>>>>
>>>>>>> I don't care how the root-server operators decide to partition to workload
>>>>>>> among hardware.
>>>>>>
>>>>>> Yes, that is my view as well.
>>>>>>
>>>>>>> Over time we will need more v6 responders and fewer v4
>>>>>>> responders.
>>>>>>> I don't think that there is, or should be, any requirement that v4 and v6 be
>>>>>>> answered by the same system, and given anycast, they might even be in
>>>>>>> different locations.
>>>>>>>
>>>>>>> I think that the current text captures this just fine:
>>>>>>
>>>>>> Agreed.
>>>>>>
>>>>>> Jari
>>>>>>
>>>>
>>>
>>
>