[as112-ops] [gii-ops] Advice requested on a proposal to delegate .local to AS112

[Joe Abley]

On 21 April 2016 at 20:24:10, William Sotomayor (wfms at ottix.net) wrote:

>*) How well deployed is RFC7535 (and the corresponding implementation 
>guidance in RFC7534)? 

I've not yet done a table survey to see how well RFC7534, but it's close 
to time to get doing it. But last I saw, it wasn't well deployed. 
How did you measure it?

When you say it's not well-deployed, are you talking about the number of nodes supporting blackhole.as112.arpa, or the number of nodes supporting v6 transport for prisoner, blackhole-1 and blackhole-2, or something else?

>*) How do we measure its deployment? Atlas probes, open resolver scans, 
>etc. 

Currently in progres is an open resolver scan, so results are just about 2 
weeks away. 
I'd be interested in learning more about your methodology.

>*) What is the criteria to declare the new AS112 worthy of having real 
>things delegated to it? I'm not aware of any existing delegations. 
>Please correct me if I'm wrong. 
The new AS112 presumably has the same number of things delegated to it, although lame delegation are possible (and no doubt detectable, if you receive the traffic).

The only thing that changed for the delegation AS112 service was the addition of AAAA RRs for prisoner, blackhole-1 and blackhole-2.

The only zone ever intended to be delegated to blackhole.as112.arpa is empty.as112.arpa. That's the domain name that zone administrators wanting to sink traffic using DNAME would redirect to.

>(And as an AS112 w/RFC7535 operator, we don't get delegated DNS traffic 
>to the new prefixes, last time I looked (a few months ago)) 
I'm not sure what that means. If you announce 2620:4f:8000::/48 you don't see traffic at ::1, ::6 and ::42? Or something else?

Therein lies the rub. I'm not sure there's a 1:1 uptake between RFC7534 
and the RFC it replaced. 
I'm not sure exactly what that means, either. What would uptake for 7534 look like? More queries? Use of v6 for nameservers that didn't previously have AAAAs? Queries to blackhole.as112.arpa? All of the above?

As for DNAME, I don't see much in that regard either. 
Do you mean you aren't seeing any queries for empty.as112.arpa? Or you're not aware of anybody having installed a DNAME to empty.as112.arpa?



Joe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/mailman/private/as112-ops/attachments/20160421/d72bb1ec/attachment.html>