[as112-ops] [gii-ops] Advice requested on a proposal to delegate .local to AS112

[Stephane Bortzmeyer]

On Thu, Apr 21, 2016 at 09:45:38PM +0200,
 Colin Petrie <cpetrie at ripe.net> wrote 
 a message of 30 lines which said:

> *) How well deployed is RFC7535 (and the corresponding implementation
> guidance in RFC7534)?

Querying RIPE Atlas probes on the SOA of empty.as112.arpa, it seems it
exists at least five nodes: ICANN, RIPE, Hivane, Ottix and a
mysterious one which does not populate the SOA properly.

[empty.as112.arpa. . 0 28800 7200 604800 86400] 
[blackhole.as112.arpa. noc.dns.icann.org. 1 604800 60 604800 604800] 
[as112.ottix.net. dns.ottix.net. 1 604800 60 604800 604800]
[as112.hivane.net. info.hivane.net. 1 604800 60 604800 604800]
[blackhole.as112.arpa. dns.ripe.net. 1 604800 60 604800 604800] 

> *) How do we measure its deployment? Atlas probes, open resolver
> *scans, etc.

I used Atlas probes.

> *) What is the criteria to declare the new AS112 worthy of having real
> things delegated to it?

You're thinking of the capacity necessary to handle the many requests
for jack-pc.local?

> I'm not aware of any existing delegations.

Me neither but we have to start somewhere. Do note that, because of
the structure of the new AS112, people can delegate to it without any
permission and you have no way to know (you'll see the increase of
traffic but not the suffix delegated, unless the prefix is revealing,
which is the case for .onion).

For testing, I delegated sink.bortzmeyer.fr to the new AS112.

% dig A foobar.sink.bortzmeyer.fr

; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> A foobar.sink.bortzmeyer.fr
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51518
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;foobar.sink.bortzmeyer.fr. IN A

;; ANSWER SECTION:
sink.bortzmeyer.fr.	86373 IN DNAME empty.as112.arpa.
sink.bortzmeyer.fr.	86373 IN RRSIG DNAME 8 3 86400 (
				20160501133113 20160412055833 38319 bortzmeyer.fr.
				eZXo1gDK4V1ZgHT9GxYvzjGFXgD794b/XY+OowBx+tqG
				4+tDEzQOJkANhJPGcF41Y2p7urtWLpzhhxjDcml4I5oq
				GYtRBVbtQXukpbvHPHRUXQU6BcIk6SQUEcbZgU+HOPeq
				94pU8TH6NpV61SoOMWyRqGvyC0fuqkuz1SHFwg8= )
foobar.sink.bortzmeyer.fr. 1800	IN CNAME foobar.empty.as112.arpa.

;; AUTHORITY SECTION:
empty.as112.arpa.	1800 IN	SOA as112.hivane.net. info.hivane.net. (
				1          ; serial
				604800     ; refresh (1 week)
				60         ; retry (1 minute)
				604800     ; expire (1 week)
				604800     ; minimum (1 week)
				)

;; Query time: 401 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Sun Apr 24 10:35:25 CEST 2016
;; MSG SIZE  rcvd: 351