[dns-operations] Signaling client protocol to authority
Edward Lewis
Ed.Lewis at neustar.biz
Sun Jan 16 16:08:36 UTC 2011
At 8:09 -0500 1/16/11, Patrick W. Gilmore wrote:
>We already have a suggestion to signal the client IP address, signaling the
>protocol the client used seems even easier. So it shouldn't be too
>difficult. Right?
In a query, one can divide the bits of information into two
categories - the data questions (QNAME, etc.) and control data.
Currently the control data is hop-by-hop, as opposed to the data
question is end-to-end (with the ends being the application and the
zone authority). I can't think of any control data that currently is
specified to go end-to-end.
I.e., when the RD bit is turned on from the stub to the recursive
server, the recursive server will turn the RD bit off while it works.
The CD bit will be on from a client that plans to do it's own
validation, even if the CD bit was off in the prompting request.
And I say "currently" because there is a IETF draft on source IP
option in the works. The draft exists but has not achieved any
consensus. As much as I lean in favor of the option being specified,
I think it is pretty clear that it is not accepted by all and even if
it gets to that point, whether it would be successful (in that it
hasn't been put to production). Note: the latter expression of doubt
is not based on the proposal, but its immaturity.
So - I'd say it (what network protocol was used) would be difficult
in the sense that such an option would be precedent setting in
protocol.
>I'll sit back and wait for people to explain how confused I am now. :) Thanx
>for your time.
As for the utility of the access information, I have my doubts. The
reason is that in DNS, if you want the v4 you ask for "A" and if you
want v6 you ask for "AAAA". At my house, for some time now, I have
native v6 from my provider. The DNS serves in /etc/resolv.conf are
still all v4 but when I access www.apnic.net I use v6 for http. (I
have a collection of Macs, not all choose v6 over v4, I haven't had
the time nor enough interest to see if there is some rhyme or reason.)
I realize that any computer might load up an application that is
trying to be enlightened and ask for v6 and v4, and while the
computer might have a v6 prefix it has no routing. It's tempting to
think that if I had to do DNS over v4, I can only do HTTP over v4 but
my own house is a counter-example.
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar You can leave a voice message at +1-571-434-5468
Jan 11, 2011 - Either it's 1/11/11 or 11/1/11, "Junior Saint Broadcast day"
(Nov 11 is senior...)
More information about the dns-operations
mailing list