Re: [dnsext] we need help to make names the same, was draft-yao-dnsext-identical-resolution-02 comment

[Paul Vixie <[e-mail]>]

> Date: Fri, 18 Feb 2011 14:36:53 +0000
> From: Suzanne Woolf <[e-mail]>
> ...
> I *think* Andrew's text above says no, we can't reasonably help
> registry operators if we leave applications with the same problem they
> have now (knowing for themselves that string $x needs to map to string
> $y). But rather than argue with something he may not have actually
> said, I'm looking for further comments on this point.

registry operators (and those who govern) asked about name sameness and
it's fair to answer them with a cost-benefit analysis, such as:

"1. dns provides aliases but these are application-visible and many
   protocols forbid their use, for example MX -> alias -> {A|AAAA}
   so these may not be suitable for your proposed use.

"2. services are name-aware, so any dns sameness whether based on
   existing alias technology or on some imaginable new technology
   would still require service config changes, for example to postfix
   and apache configs on all servers which were going to become
   multinamed.  even if we add new dns technology to support some
   kind of automation in that area, it will still require a global
   upgrade of server side technology, and the failure mode for clients
   contacting non-upgraded servers could be unpredictable/unsettling.
   so, adding new sameness will have a high cost and a long tail.

"3. some existing dns data elements are harmonized around the idea of
   a "canonical name" (for example, {A|AAAA} and PTR) and applications
   often enforce this.  the dns and all applications would have to be
   changed to either remove assumptions about canonical names, or to
   change the definition of a canonical name from a scalar to a vector.
   this has the same high costs and long tail as described for #2 above.

"please choose a tradeoff and give us appropriate marching orders.  thanks."
_______________________________________________
dnsext mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/dnsext