Re: [mif] Domain name issue in draft-stenberg-mif-mpvd-dns

Markus Stenberg <markus.stenberg@iki.fi> Tue, 15 March 2016 11:09 UTC

Return-Path: <markus.stenberg@iki.fi>
X-Original-To: mif@ietfa.amsl.com
Delivered-To: mif@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85A7112D52E; Tue, 15 Mar 2016 04:09:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.821
X-Spam-Level:
X-Spam-Status: No, score=-1.821 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HG2RsqV8nqC4; Tue, 15 Mar 2016 04:09:16 -0700 (PDT)
Received: from johanna1.inet.fi (mta-out1.inet.fi [62.71.2.199]) by ietfa.amsl.com (Postfix) with ESMTP id 08F9512D98F; Tue, 15 Mar 2016 04:08:59 -0700 (PDT)
RazorGate-KAS: Status: not_detected
RazorGate-KAS: Rate: 0
RazorGate-KAS: Envelope from:
RazorGate-KAS: Version: 5.5.3
RazorGate-KAS: LuaCore: 80 2014-11-10_18-01-23 260f8afb9361da3c7edfd3a8e3a4ca908191ad29
RazorGate-KAS: Lua profiles 69136 [Nov 12 2014]
RazorGate-KAS: Method: none
Received: from [192.168.200.82] (192.194.110.125) by johanna1.inet.fi (9.0.002.03-2-gbe5d057) (authenticated as stenma-47) id 56E17AEE006F0D8F; Tue, 15 Mar 2016 13:08:56 +0200
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\))
From: Markus Stenberg <markus.stenberg@iki.fi>
In-Reply-To: <56E7E35D.6040108@bellis.me.uk>
Date: Tue, 15 Mar 2016 13:08:55 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <2514F81A-CDC6-4F90-A76D-816A8F4EEDC4@iki.fi>
References: <56E7E35D.6040108@bellis.me.uk>
To: Ray Bellis <ray@bellis.me.uk>
X-Mailer: Apple Mail (2.3112)
Archived-At: <http://mailarchive.ietf.org/arch/msg/mif/4Vx8kYB99kKugnki8B9xZ5yBZ1Y>
Cc: draft-stenberg-mif-mpvd-dns@ietf.org, mif@ietf.org
Subject: Re: [mif] Domain name issue in draft-stenberg-mif-mpvd-dns
X-BeenThere: mif@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Multiple Interface Discussion List <mif.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mif>, <mailto:mif-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mif/>
List-Post: <mailto:mif@ietf.org>
List-Help: <mailto:mif-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mif>, <mailto:mif-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2016 11:09:20 -0000

> On 15.3.2016, at 12.26, Ray Bellis <ray@bellis.me.uk> wrote:
> Looking at section 3 of this draft, I have a problem with the
> specification where it says that for e.g. a /64 the DNS lookup should be
> for _pvd.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.x....ip6.arpa, and likewise the
> /80 example (with 12 leading zeros).
> 
> Taking the /80 example, it would be impossible given this specification
> to distinguish between a /80 where the bits between 64 and 80 were all
> zeros and the corresponding /64 - they would both end up at the same
> point in the ip6.arpa hierarchy.
> 
> In my opinion (and I do have some prior art in this space, see RFC 7216)
> the "_pvd" label must be at the point in the ip6.arpa that presents the
> same level as the prefix being queried for.  Any leading zeros below
> that point (i.e. to the left in the domain name) MUST be omitted.
> 
> Hence in the /80 case, it would be _pvd.<20 labels>.ip6.arpa and in the
> /64 case it would be _pvd.<16 labels>.ip6.arpa

Actually we considered it a feature and not a bug, i.e. subdelegation would still result in same PVD available. I am not sure your scheme would work with subdelegation though.

Given broad example, ISP has /40 for home users, but ultimately the prefix in use may be e.g. /64 (or even something more narrow). Having the _pvd.* in 'all' prefix lengths would be obviously available, or performing (up to 128) lookups with subsequently shorter/longer prefix lengths.

I am not sure how client would know to start lookups from /40, or from /56 assigned to a home, if the link has /64.

Cheers,

-Markus