Re: QUIC re-chartering: include DNS-over-QUIC?

Erik Nygren <erik+ietf@nygren.org> Thu, 06 February 2020 21:27 UTC

Return-Path: <nygren@gmail.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EBE6120289 for <quic@ietfa.amsl.com>; Thu, 6 Feb 2020 13:27:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.399
X-Spam-Level:
X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1kNKU24_SYbl for <quic@ietfa.amsl.com>; Thu, 6 Feb 2020 13:27:27 -0800 (PST)
Received: from mail-wm1-f49.google.com (mail-wm1-f49.google.com [209.85.128.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A07B1120111 for <quic@ietf.org>; Thu, 6 Feb 2020 13:27:27 -0800 (PST)
Received: by mail-wm1-f49.google.com with SMTP id a5so465923wmb.0 for <quic@ietf.org>; Thu, 06 Feb 2020 13:27:27 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=oUe6KaPWwi+1exZsnkuzDumfOo2eJJpcW7FiFLzqrIM=; b=pU5b4W54EWHexpAl9E77t405ObR4ljq4GKvsAC2whisOVrFHtgSiVORPRUhNA5gQmU VWfAVz/y/35EncMyhikm8ygJuKlzpNIk2iW3an+dbWQaETNgxczi/XCQp1zOB0ul79f1 eWFCqMyxLsb4lT5Hs6qPSYzZnVF7y2K5IP0VRK7X8i9r+WIUQbmxSLivVHWw1JFEf1Ig MXS439oEULOPy+joCgTJGKoduie8ZKCRa5ZsiKSZQaWBDTo5GIM4jqbI5vE4u+0HuEPy rsCHbbHBXZblYwLXEhUt7mGgkg8hDJvjl3EWpB7Kux7AR97jGS33lB8BSvD0fMhckQOO joEg==
X-Gm-Message-State: APjAAAUO9h3+DBQKMICUZ0bQv6pafeT040R9aXUmIUkFMcEYe6+1KnA9 TwrQhwMomj+7uxiJFZiDm9svrNG286Q+gW8pvmc=
X-Google-Smtp-Source: APXvYqyinWQTHoBYHOlyaf9ACfknOEnhLqgbCr+K8HlXC7feHofWjkhCNw5igFHIvFxakuzAmgUs8yTXS/qadW+q2l4=
X-Received: by 2002:a1c:7406:: with SMTP id p6mr7023051wmc.82.1581024445851; Thu, 06 Feb 2020 13:27:25 -0800 (PST)
MIME-Version: 1.0
References: <CAKcm_gNf43tXizw9D2jdtTieh+=zS7PKVDiNNV-UEbP8Gw+mHg@mail.gmail.com> <69F63EAA-B7AB-4874-9AD5-7C8F98A92C77@apple.com> <de87e833-de54-ae5a-cd85-2f93565192f7@redbarn.org>
In-Reply-To: <de87e833-de54-ae5a-cd85-2f93565192f7@redbarn.org>
From: Erik Nygren <erik+ietf@nygren.org>
Date: Thu, 06 Feb 2020 16:27:14 -0500
Message-ID: <CAKC-DJjNbBYVzmN=KxnRKpxK_eJFcbGFvejx1Xms-X2iesBVrg@mail.gmail.com>
Subject: Re: QUIC re-chartering: include DNS-over-QUIC?
To: Paul Vixie <paul@redbarn.org>
Cc: Vidhi Goel <vidhi_goel=40apple.com@dmarc.ietf.org>, IETF QUIC WG <quic@ietf.org>, Christopher Wood <caw@heapingbits.net>, Ian Swett <ianswett=40google.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="00000000000079edb4059deef018"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/VAXm9423L3654-l6uoJScD59nM4>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Feb 2020 21:27:29 -0000

On Thu, Feb 6, 2020 at 4:16 PM Paul Vixie <paul@redbarn.org> wrote:

> i see DoQ as nec'y for QUIC's success but not relevant to DNS beyond the
> fact that DNS is a convenient second example of how QUIC can be used. if
> there are use cases or failure modes not handled well by DoT, i'd like
> to learn more about those.
>

Some possible reasons (not comprehensive):

* Reduce the impact of head-of-line blocking during loss.  If packets are
lost, only the request(s) associated with the loss are impacted.
* Faster resumption and 0RTT behaviors (although you get some of these with
TFO + TLS 1.3 0RTT).  But this substantially reduces the performance impact
when new connections need to be established.
* The previous also means servers can be more aggressive about timing out
connections to reduce the state they need to keep, but while minimizing
perf impact, which can be critical at-scale.
* Better ability for load balancers at-scale to do creative things,
including being able to recover better when Anycast moves routes between
data centers.  (The server-supplied Connection ID means that options become
available to better recover without needing to reset re-establish
connections and without needing to share state between clusters.)
* QUIC provides a framework for future extensions that may be useful in the
DNS space.  For example, FEC might actually be useful for DNS in some cases.

I'm sure there are plenty more reasons...

     Erik