Re: [mif] [DNSOP] [dnsext] 2nd Last Call for MIF DNS server selection document

Keith Moore <moore@network-heretics.com> Fri, 21 October 2011 15:23 UTC

Return-Path: <moore@network-heretics.com>
X-Original-To: mif@ietfa.amsl.com
Delivered-To: mif@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C20241F0C7A; Fri, 21 Oct 2011 08:23:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.732
X-Spam-Level:
X-Spam-Status: No, score=-3.732 tagged_above=-999 required=5 tests=[AWL=-0.134, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UHKl4j3-2McO; Fri, 21 Oct 2011 08:23:28 -0700 (PDT)
Received: from out5.smtp.messagingengine.com (out5.smtp.messagingengine.com [66.111.4.29]) by ietfa.amsl.com (Postfix) with ESMTP id 9FAB81F0C7E; Fri, 21 Oct 2011 08:23:24 -0700 (PDT)
Received: from compute6.internal (compute6.nyi.mail.srv.osa [10.202.2.46]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 522A5212ED; Fri, 21 Oct 2011 11:22:53 -0400 (EDT)
Received: from frontend1.nyi.mail.srv.osa ([10.202.2.160]) by compute6.internal (MEProxy); Fri, 21 Oct 2011 11:22:53 -0400
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=subject:mime-version:content-type:from :in-reply-to:date:cc:message-id:references:to; s=smtpout; bh=EMs naNbFWAbzYVTmyAPeyIEOvaM=; b=JhOGr+0bYJQTTEeukNUKTLnraTetWpYnsnr pb6b3qdGV/2lDNjgBIPcElwF44LhDhkKAImfMDxPbht/Cr4jT3MBwQLxD0UfCQAa y/XS5rSpwC0/ywP7kYDFuYwlYAQFtW1+pqzSKtbeIo4X4YwGPgkncqvWsSP38dRj In2T6fYo=
X-Sasl-enc: Qf8h6JOfifsvLjYPPPW90nSw7CLtRuk73ndPBq5FV+P/ 1319210572
Received: from [192.168.1.16] (host65-16-145-177.birch.net [65.16.145.177]) by mail.messagingengine.com (Postfix) with ESMTPA id BB9A2408B64; Fri, 21 Oct 2011 11:22:50 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: multipart/alternative; boundary="Apple-Mail-68--546556678"
From: Keith Moore <moore@network-heretics.com>
In-Reply-To: <75E5E225-5E08-48AC-8FA4-2C4174486514@nominum.com>
Date: Fri, 21 Oct 2011 11:22:23 -0400
Message-Id: <D96D9D1E-04D9-47D3-9104-7A63C03BF038@network-heretics.com>
References: <COL118-W55403198A984BAAE44BA47B1F70@phx.gbl> <916CE6CF87173740BC8A2CE44309696203782D75@008-AM1MPN1-037.mgdnok.nokia.com> <121DABD1-65E8-4275-8471-9FA38D25C434@nominet.org.uk> <916CE6CF87173740BC8A2CE44309696203783EE0@008-AM1MPN1-037.mgdnok.nokia.com> <4EA09791.8010705@gmail.com> <C8398996-79B5-437E-82A5-6B869ECF8F4E@network-heretics.com> <94C2E518-F34F-49E4-B15C-2CCCFAA96667@virtualized.org> <12477381-9F74-4C50-B576-47EE4322F6BC@network-heretics.com> <CAH1iCiqsN-R87VK3vKityPsY+NXA=0DRASYf_vmBSy8gvYwHdQ@mail.gmail.com> <916CE6CF87173740BC8A2CE44309696203784B27@008-AM1MPN1-037.mgdnok.nokia.com> <814EB5AF-16C2-4016-9D52-61183B82988C@network-heretics.com> <75E5E225-5E08-48AC-8FA4-2C4174486514@nominum.com>
To: Ted Lemon <Ted.Lemon@nominum.com>
X-Mailer: Apple Mail (2.1084)
X-Mailman-Approved-At: Fri, 21 Oct 2011 18:11:47 -0700
Cc: "<mif@ietf.org>" <mif@ietf.org>, "<brian.peter.dickson@gmail.com>" <brian.peter.dickson@gmail.com>, "<dnsop@ietf.org>" <dnsop@ietf.org>, "<dnsext@ietf.org>" <dnsext@ietf.org>, "<pk@isoc.de>" <pk@isoc.de>, "<dhcwg@ietf.org>" <dhcwg@ietf.org>, "<denghui02@hotmail.com>" <denghui02@hotmail.com>
Subject: Re: [mif] [DNSOP] [dnsext] 2nd Last Call for MIF DNS server selection document
X-BeenThere: mif@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiple Interface Discussion List <mif.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mif>, <mailto:mif-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mif>
List-Post: <mailto:mif@ietf.org>
List-Help: <mailto:mif-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mif>, <mailto:mif-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Oct 2011 15:23:30 -0000

On Oct 21, 2011, at 11:11 AM, Ted Lemon wrote:

> On Oct 21, 2011, at 10:04 AM, Keith Moore wrote:
>> And honestly I don't see why handling of non-DNS names like "foo" is in scope for MIF.    
> 
> Because such names are typically resolved using DNS search lists, and at lease one mechanism for setting up search lists is interface-specific.

I don't think it's MIF's job to try to make all existing hacks work, while limiting its scope to specifying how hosts and apps implement things.  

I think it's potentially reasonable for MIF to say things like "here's how you should configure your networks if you want them to be usable from hosts with multiple interfaces."

Also, the subject of multiple active interfaces per host exposes a number of cracks in the Internet architecture, and also exposes cracks in some of the hacks that people have used to work around cracks in the Internet architecture.   IMO, MIF should not be trying to add more hacks.  MIF should primarily do what's best for the Internet architecture in the long term, realizing that IPv4 and therefore RFC 1918 are at EOL.  Hacks to accommodate the existing world should be considered of secondary importance, and should only be considered if they don't pollute the architecture in the long run.

Also, it's arguable that v6 link-local addresses should not be used by applications, even on ad hoc networks, because randomly-generated ULIA prefixes are much better.  And the way you figure out which interface(s) to use in order to reach ULIAs is via routing protocols, not via assuming that a DNS query is specific to a particular network interface.