Re: DNS Qname minimisation

From	Ondřej Surý <ondrej@sury.org>
Newsgroups	linux.debian.project
Subject	Re: DNS Qname minimisation
Date	2016-03-31 22:00 +0200
Message-ID	<riQV4-1sc-7@gated-at.bofh.it> (permalink)
References	<rfTcK-5vE-15@gated-at.bofh.it> <rg0xz-2kC-15@gated-at.bofh.it> <rg2g2-3vC-7@gated-at.bofh.it> <rhJVE-2nJ-3@gated-at.bofh.it> <rhLup-3dJ-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Mon, Mar 28, 2016, at 21:30, Florian Weimer wrote:
> * Henrique de Moraes Holschuh:
> 
> > On the CDN side, Akamai were warned that their authoritative servers
> > were broken and would interfere with Qname minimization in February
> > 2015[1], and it is still not fixed.  It is the same bad behavior that
> > happened to ECN
> 
> It is similar to ECN indeed.  In both cases, people changed the
> specification, and complained loudly when their changes are
> incompatible with the installation base.

Not sure if that's the case. I think that Akamain implementation is just
broken and needs to be fixed. We'll push Akamai to fix that now that RFC
7816 is out.

I completely don't agree with "NAT for DNS", on the contrary, the QNAME
minimization is transparent for end clients and can be deployed
gradually as resolvers adds support for that.

As for the deep-chains -> some .arpa optimizations probably should land
in the code, but I would point out, that you are mostly ignoring the
caching behaviour of DNS, that would cause QNAME minimization to burst
more queries in the beginning, but after the cache is hot, it won't
(shouldn't have) much operational impact. The more harm is usually done
by TTL < #smallnumberofseconds.

O.
-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Back to linux.debian.project | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

DNS Qname minimisation Hugo Maxwell Connery <hmco@env.dtu.dk> - 2016-03-23 16:50 +0100
  Re: DNS Qname minimisation Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-03-23 17:30 +0100
  Re: DNS Qname minimisation Robert Edmonds <edmonds@debian.org> - 2016-03-24 00:40 +0100
    Re: DNS Qname minimisation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2016-03-24 02:30 +0100
      Re: DNS Qname minimisation Ondřej Surý <ondrej@sury.org> - 2016-03-24 10:50 +0100
        Re: DNS Qname minimisation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2016-03-24 17:50 +0100
      Re: DNS Qname minimisation Henrique de Moraes Holschuh <hmh@debian.org> - 2016-03-28 20:20 +0200
        Re: DNS Qname minimisation Florian Weimer <fw@deneb.enyo.de> - 2016-03-28 22:00 +0200
          Re: DNS Qname minimisation Ondřej Surý <ondrej@sury.org> - 2016-03-31 22:00 +0200

csiph-web