Brian wrote:
> Indeed, but how can you impose a constraint that DNS zone transfers
> etc do not in any way depend on NERD/LISP? That is where I am
> puzzled.
Wouldn't it be good enough that LISP/Ivip or whatever states in
its architectural RFC that addresses which depend on this
mapping scheme should not be used for certain purposes, including?:
1 - BGP routers, including ITRs and ETRs - obviously.
2 - Root and TLD nameservers. Probably many second level
nameservers such as .com.au. too. Probably including
any nameserver which does something under in-addr.arpa
on which anyone else's but the operator's addresses
depend upon for reverse mapping.
3 - Any nameserver on which the mapping scheme depends.
4 - Whatever central database servers control the mapping
system, including interfaces for user control of mapping
of their IP addresses, servers for all push and pull update
activities and any independent systems which monitor
where a mobile host is connecting, and automatically
initiate changes to the mapping database if the mobile
host's current link fails.
Then all the critical nameservers have ordinary BGP-accessible
addresses, so their zone transfers go via ordinary BGP,
irrespective of what the mapping system does.