rfc9526v4.txt | rfc9526.txt | |||
---|---|---|---|---|
Internet Engineering Task Force (IETF) D. Migault | Internet Engineering Task Force (IETF) D. Migault | |||
Request for Comments: 9526 Ericsson | Request for Comments: 9526 Ericsson | |||
Category: Experimental R. Weber | Category: Experimental R. Weber | |||
ISSN: 2070-1721 Nominum | ISSN: 2070-1721 Nominum | |||
M. Richardson | M. Richardson | |||
Sandelman Software Works | Sandelman Software Works | |||
R. Hunter | R. Hunter | |||
Globis Consulting BV | Globis Consulting BV | |||
December 2023 | January 2024 | |||
Simple Provisioning of Public Names for Residential Networks | Simple Provisioning of Public Names for Residential Networks | |||
Abstract | Abstract | |||
Home network owners may have devices or services hosted on their home | Home network owners may have devices or services hosted on their home | |||
network that they wish to access from the Internet (i.e., from a | network that they wish to access from the Internet (i.e., from a | |||
network outside of the home network). Home networks are increasingly | network outside of the home network). Home networks are increasingly | |||
numbered using IPv6 addresses, which in principle makes this access | numbered using IPv6 addresses, which in principle makes this access | |||
simpler, but accessing home networks from the Internet requires the | simpler, but accessing home networks from the Internet requires the | |||
skipping to change at line 51 ¶ | skipping to change at line 51 ¶ | |||
publication by the Internet Engineering Steering Group (IESG). Not | publication by the Internet Engineering Steering Group (IESG). Not | |||
all documents approved by the IESG are candidates for any level of | all documents approved by the IESG are candidates for any level of | |||
Internet Standard; see Section 2 of RFC 7841. | Internet Standard; see Section 2 of RFC 7841. | |||
Information about the current status of this document, any errata, | Information about the current status of this document, any errata, | |||
and how to provide feedback on it may be obtained at | and how to provide feedback on it may be obtained at | |||
https://www.rfc-editor.org/info/rfc9526. | https://www.rfc-editor.org/info/rfc9526. | |||
Copyright Notice | Copyright Notice | |||
Copyright (c) 2023 IETF Trust and the persons identified as the | Copyright (c) 2024 IETF Trust and the persons identified as the | |||
document authors. All rights reserved. | document authors. All rights reserved. | |||
This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
Provisions Relating to IETF Documents | Provisions Relating to IETF Documents | |||
(https://trustee.ietf.org/license-info) in effect on the date of | (https://trustee.ietf.org/license-info) in effect on the date of | |||
publication of this document. Please review these documents | publication of this document. Please review these documents | |||
carefully, as they describe your rights and restrictions with respect | carefully, as they describe your rights and restrictions with respect | |||
to this document. Code Components extracted from this document must | to this document. Code Components extracted from this document must | |||
include Revised BSD License text as described in Section 4.e of the | include Revised BSD License text as described in Section 4.e of the | |||
Trust Legal Provisions and are provided without warranty as described | Trust Legal Provisions and are provided without warranty as described | |||
skipping to change at line 925 ¶ | skipping to change at line 925 ¶ | |||
* a service provided by the HNA at port 853. | * a service provided by the HNA at port 853. | |||
As a result, even though the same pair of IP addresses may be | As a result, even though the same pair of IP addresses may be | |||
involved, the Control Channel and the Synchronization Channel are | involved, the Control Channel and the Synchronization Channel are | |||
always distinct channels. | always distinct channels. | |||
Uploading and dynamically updating the zone file on the DM can be | Uploading and dynamically updating the zone file on the DM can be | |||
seen as zone provisioning between the HNA (hidden primary server) and | seen as zone provisioning between the HNA (hidden primary server) and | |||
the DM (secondary server). This is handled using the normal zone | the DM (secondary server). This is handled using the normal zone | |||
transfer mechanism involving the AXFR and IXFR. | transfer mechanism involving the AXFR and Incremental Zone Transfer | |||
(IXFR). | ||||
Part of the process to update the zone involves the owner of the zone | Part of the process to update the zone involves the owner of the zone | |||
(the hidden primary server, the HNA) sending a DNS Notify to the | (the hidden primary server, the HNA) sending a DNS Notify to the | |||
secondaries. In this situation, the only destination that is known | secondaries. In this situation, the only destination that is known | |||
by the HNA is the DM's Control Channel, so DNS Notifies are sent over | by the HNA is the DM's Control Channel, so DNS Notifies are sent over | |||
the Control Channel, secured by a mutually authenticated TLS. | the Control Channel, secured by a mutually authenticated TLS. | |||
Please note that DNS Notifies are not critical to normal operation, | Please note that DNS Notifies are not critical to normal operation, | |||
as the DM will be checking the zone regularly based upon SOA record | as the DM will be checking the zone regularly based upon SOA record | |||
comments. DNS Notifies do speed things up as they cause the DM to | comments. DNS Notifies do speed things up as they cause the DM to | |||
skipping to change at line 1068 ¶ | skipping to change at line 1069 ¶ | |||
WAN interface (by DHCPv6 or PPP with Router Advertisement (RA)), then | WAN interface (by DHCPv6 or PPP with Router Advertisement (RA)), then | |||
the HNA should originate Synchronization Channel updates from, for | the HNA should originate Synchronization Channel updates from, for | |||
example, 2001:db8:f00d:1234::2. | example, 2001:db8:f00d:1234::2. | |||
If an ISP has delegated 2001:db8:aeae::/56 to the HNA via DHCPv6-PD, | If an ISP has delegated 2001:db8:aeae::/56 to the HNA via DHCPv6-PD, | |||
then the HNA should originate Synchronization Channel updates to an | then the HNA should originate Synchronization Channel updates to an | |||
IP address within that subnet, such as 2001:db8:aeae:1::2. | IP address within that subnet, such as 2001:db8:aeae:1::2. | |||
With this relation automatically configured, the synchronization | With this relation automatically configured, the synchronization | |||
between the Home network and the DOI happens in a similar way to the | between the Home network and the DOI happens in a similar way to the | |||
synchronziation of the Public Homenet Zone described earlier in this | synchronization of the Public Homenet Zone described earlier in this | |||
document. | document. | |||
Note that for home networks connected to multiple ISPs, each ISP | Note that for home networks connected to multiple ISPs, each ISP | |||
provides only the DOI of the reverse zones associated with the | provides only the DOI of the reverse zones associated with the | |||
delegated prefix. It is also likely that the DNS exchanges will need | delegated prefix. It is also likely that the DNS exchanges will need | |||
to be performed on dedicated interfaces to be accepted by the ISP. | to be performed on dedicated interfaces to be accepted by the ISP. | |||
More specifically, the reverse zone update associated with prefix 1 | More specifically, the reverse zone update associated with prefix 1 | |||
cannot be performed by the HNA using an IP address that belongs to | cannot be performed by the HNA using an IP address that belongs to | |||
prefix 2. Such constraints do not raise major concerns for hot | prefix 2. Such constraints do not raise major concerns for hot | |||
standby or load-sharing configuration. | standby or load-sharing configuration. | |||
skipping to change at line 1640 ¶ | skipping to change at line 1641 ¶ | |||
Dedicated QUIC Connections", RFC 9250, | Dedicated QUIC Connections", RFC 9250, | |||
DOI 10.17487/RFC9250, May 2022, | DOI 10.17487/RFC9250, May 2022, | |||
<https://www.rfc-editor.org/info/rfc9250>. | <https://www.rfc-editor.org/info/rfc9250>. | |||
[RFC9276] Hardaker, W. and V. Dukhovni, "Guidance for NSEC3 | [RFC9276] Hardaker, W. and V. Dukhovni, "Guidance for NSEC3 | |||
Parameter Settings", BCP 236, RFC 9276, | Parameter Settings", BCP 236, RFC 9276, | |||
DOI 10.17487/RFC9276, August 2022, | DOI 10.17487/RFC9276, August 2022, | |||
<https://www.rfc-editor.org/info/rfc9276>. | <https://www.rfc-editor.org/info/rfc9276>. | |||
[RFC9527] Migault, D., Weber, R., and T. Mrugalski, "DHCPv6 Options | [RFC9527] Migault, D., Weber, R., and T. Mrugalski, "DHCPv6 Options | |||
for Home Network Naming Authority", RFC 9527, | for the Homenet Naming Authority", RFC 9527, | |||
DOI 10.17487/RFC9527, December 2023, | DOI 10.17487/RFC9527, January 2024, | |||
<https://www.rfc-editor.org/info/rfc9527>. | <https://www.rfc-editor.org/info/rfc9527>. | |||
[ZONEENUM] Wang, Z., Xiao, L., and R. Wang, "An efficient DNSSEC zone | [ZONEENUM] Wang, Z., Xiao, L., and R. Wang, "An efficient DNSSEC zone | |||
enumeration algorithm", DOI 10.2495/MIIT130591, April | enumeration algorithm", DOI 10.2495/MIIT130591, April | |||
2014, <https://doi.org/10.2495/MIIT130591>. | 2014, <https://doi.org/10.2495/MIIT130591>. | |||
Appendix A. HNA Channel Configurations | Appendix A. HNA Channel Configurations | |||
A.1. Public Homenet Zone | A.1. Public Homenet Zone | |||
End of changes. 5 change blocks. | ||||
6 lines changed or deleted | 7 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. |