[dns-operations] compressing DNS traffic data
Jim Reid
jim at rfc1035.com
Thu Dec 9 10:06:09 UTC 2010
On 9 Dec 2010, at 07:48, Ray Bellis wrote:
> Strictly speaking most people have been talking about data
> _reduction_ rather than data compression, i.e. throwing
> "uninteresting" data away. Hence decompression is not an issue.
Fair enough Ray. But the idea of "uninteresting" data is troubling
too. If such data exists, it means there's excessive or redundant data
in the DNS protocol. That seems unlikely. Even if the protocol suffers
from excessive or redundant data, who's to say that what we consider
"uninteresting" today becomes important tomorrow?
Some things like the source port number or query ID or QCLASS might
appear to be attractive targets that could be discarded. I disagree.
These things have their uses, even for traffic analysis: eg tracking
the deployment of a resolver implementation which uses a deterministic
set of port numbers or query IDs and the impact(s) this implementation
has. Some might think dropping CLASS from queries and responses is a
no-brainer. But on another thread on this list there's been a
discussion about the problems caused by an implementation which used
the wrong CLASS ID.
More information about the dns-operations
mailing list