Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread George Michaelson
As long as we're in UDP, with DNSSEC, and many NS, packetsize in DNS will be a "thing" and revoking label compression pushes to fragments and/or TCP. Personally, I think TCP is fine, and the emergence of long-lived bindings in DNS is fine, and this is a bit overblown as a problem. But, I get remin

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Mukund Sivaraman
On Wed, Oct 24, 2018 at 04:26:37PM -0400, Ted Lemon wrote: > The good news is that in a typical DNS message, N is pretty small. > Although I suppose in an internet-facing name server, pretty small is > still pretty big... In BIND, name compression is still one of the big consumers of CPU. It was

Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-extended-error

2018-10-24 Thread George Michaelson
How can it go WGLC with section 6 an open question? in every other respect I like the document. Bad Hair and all. I would like to understand if we could work out a way to do traceroute in the codes, with some defined code to ask the DNS resolver to perform a TTL drop on a counter and mark itself

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Ted Lemon
The good news is that in a typical DNS message, N is pretty small. Although I suppose in an internet-facing name server, pretty small is still pretty big... On Wed, Oct 24, 2018 at 4:25 PM Shane Kerr wrote: > John, > > On 24/10/2018 15.38, John Dickinson wrote: > > On 24 Oct 2018, at 10:01, Vik

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Shane Kerr
John, On 24/10/2018 15.38, John Dickinson wrote: On 24 Oct 2018, at 10:01, Viktor Dukhovni wrote: My reading of RFC 1035 is that DNS name "compression" via "pointers" is restricted to name strictly earlier in the DNS message:    4.1.4. Message compression    In order to reduce the size of me

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Mark Andrews
No. > On 25 Oct 2018, at 6:52 am, Ted Lemon wrote: > > Is there ever a valid reason to have a pointer to a pointer, though? This > is dead easy to detect. > > On Wed, Oct 24, 2018 at 6:48 AM Martin Hoffmann > wrote: > Tony Finch wrote: > > > > Note that limiting the overall length of the

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Ted Lemon
Is there ever a valid reason to have a pointer to a pointer, though? This is dead easy to detect. On Wed, Oct 24, 2018 at 6:48 AM Martin Hoffmann wrote: > Tony Finch wrote: > > > > Note that limiting the overall length of the name isn't enough, > > because a pointer can loop without making the

Re: [DNSOP] I-D Action: draft-wessels-dns-zone-digest-04.txt

2018-10-24 Thread Bob Harold
On Wed, Oct 24, 2018 at 5:49 AM Wessels, Duane wrote: > > > On Oct 22, 2018, at 6:53 PM, Bob Harold wrote: > > > > Just my opinions: > > > > Keep the Reserved field > > > > Include occluded data - it is part of the zone, even if never served. > (Similar to glue data when a server has both a pare

Re: [DNSOP] [Ext] Reserved field in draft-wessels-dns-zone-digest-04.txt

2018-10-24 Thread Paul Hoffman
On Oct 24, 2018, at 2:57 AM, Wessels, Duane wrote: > > > >> On Oct 24, 2018, at 12:16 AM, Paul Hoffman wrote: >> >> Section 5 says: >> >> FOR DISCUSSION: The authors are willing to remove the Reserved field >> from this specification if the working group would prefer it. It >> would mea

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Tony Finch
Viktor Dukhovni wrote: > > c. The most recent pointer expands to a domain that moves > past the location of the pointer, without arriving at that > pointer, because it is just part of the data of some label. > For example: > >... 10 05 l a r r y 10 m o e N

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Viktor Dukhovni
On Oct 24, 2018, at 5:57 AM, dnsop-requ...@ietf.org wrote: > Surely any sequence of labels that terminates with a pointer to any > label within that same sequence is an existence proof of such a loop. > The degenerate case is a single label terminated by a pointer to > itself. So I gather that

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Tony Finch
Ray Bellis wrote: > On 24/10/2018 11:45, Tony Finch wrote: > > > > * Keep a high-water-mark separate from the current location, and require > > pointers to be strictly less than the HWM. (I prefer this way.) > > Right, but to be safe the HWM should be initialised with the position of > the _star

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Ray Bellis
On 24/10/2018 11:45, Tony Finch wrote: > There are two basic ways to avoid it: > > * Keep a high-water-mark separate from the current location, and require > pointers to be strictly less than the HWM. (I prefer this way.) Right, but to be safe the HWM should be initialised with the position of

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread John Dickinson
On 24 Oct 2018, at 10:01, Viktor Dukhovni wrote: My reading of RFC 1035 is that DNS name "compression" via "pointers" is restricted to name strictly earlier in the DNS message: 4.1.4. Message compression In order to reduce the size of messages, the domain system utilizes a compressio

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Martin Hoffmann
Tony Finch wrote: > > Note that limiting the overall length of the name isn't enough, > because a pointer can loop without making the name longer. You are, of course, right. Kind regards, Martin ___ DNSOP mailing list DNSOP@ietf.org https://www.ietf.o

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Tony Finch
Viktor Dukhovni wrote: > > My reading of RFC 1035 is that DNS name "compression" via "pointers" is > restricted to name strictly earlier in the DNS message: [snip] > > And yet, here and there I see mention of having to take care to avoid "loops", > but loops are impossible in a monotone strictly d

Re: [DNSOP] Reserved field in draft-wessels-dns-zone-digest-04.txt

2018-10-24 Thread Joe Abley
HI Duane, On Oct 24, 2018, at 11:57, Wessels, Duane wrote: > Personally I feel like keeping the Reserved field is potentially useful in > the future, but harmless if it never gets used. Can you say more about why > keeping it prevents independent work? I would also appreciate more words on t

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Martin Hoffmann
bert hubert wrote: > On Wed, Oct 24, 2018 at 05:01:53AM -0400, Viktor Dukhovni wrote: > > And yet, here and there I see mention of having to take care to > > avoid "loops", but loops are impossible in a monotone strictly > > decreasing sequence. > > Yes. This is one of the best ways of preventin

Re: [DNSOP] Reserved field in draft-wessels-dns-zone-digest-04.txt

2018-10-24 Thread Wessels, Duane
> On Oct 24, 2018, at 12:16 AM, Paul Hoffman wrote: > > Section 5 says: > > FOR DISCUSSION: The authors are willing to remove the Reserved field > from this specification if the working group would prefer it. It > would mean, however, that a future version of this protocol designed >

Re: [DNSOP] I-D Action: draft-wessels-dns-zone-digest-04.txt

2018-10-24 Thread Wessels, Duane
> On Oct 22, 2018, at 6:53 PM, Bob Harold wrote: > > Just my opinions: > > Keep the Reserved field > > Include occluded data - it is part of the zone, even if never served. > (Similar to glue data when a server has both a parent and child zone.) > > If you might have multiple zonemd record

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Joe Abley
On Oct 24, 2018, at 11:01, Viktor Dukhovni wrote: > And yet, here and there I see mention of having to take care to avoid "loops", > but loops are impossible in a monotone strictly decreasing sequence. Surely any sequence of labels that terminates with a pointer to any label within that same seq

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Shane Kerr
Viktor, On 24/10/2018 11.01, Viktor Dukhovni wrote: My reading of RFC 1035 is that DNS name "compression" via "pointers" is restricted to name strictly earlier in the DNS message: 4.1.4. Message compression In order to reduce the size of messages, the domain system utilizes a comp

Re: [DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread bert hubert
On Wed, Oct 24, 2018 at 05:01:53AM -0400, Viktor Dukhovni wrote: > And yet, here and there I see mention of having to take care to avoid "loops", > but loops are impossible in a monotone strictly decreasing sequence. Yes. This is one of the best ways of preventing such loops. Some libraries accide

[DNSOP] Clarification question: compression pointers always to names earlier in the packet?

2018-10-24 Thread Viktor Dukhovni
My reading of RFC 1035 is that DNS name "compression" via "pointers" is restricted to name strictly earlier in the DNS message: 4.1.4. Message compression In order to reduce the size of messages, the domain system utilizes a compression scheme which eliminates the repetition of domain