[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [RAM] Tunnelling Route Reduction Protocol
On 8/22/07, Noel Chiappa <jnc at mercury.lcs.mit.edu> wrote:
> > Wouldn't that be 49.95%? Half of all first packets tend to be responses
> > such as SYN/ACK that involve no DNS lookup. For a server handling
> > thousands of requests per second, adding a lookup means holding
> > thousands of TCBs in a wait state for the duration of the lookup.
>
> True, but there's an obvious path to take in looking for delay improvments,
> which is to 'piggyback' the reverse mapping information on the connection
> opening.
Hi Noel,
I considered such an approach. There are several potential problems
but the most serious is authentication. I can generally trust a
response to my own query that followed the authoritative server chain.
Theoretically a man-in-the-middle attack is possible, but
operationally it has proven to be a non-issue. I can never trust data
encoded in a random received packet to give me valid route to a
particular destination without first applying a fairly elaborate
authentication scheme.
Regards,
Bill Herrin
--
William D. Herrin herrin at dirtside.com bill at herrin.us
3005 Crane Dr. Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004
_______________________________________________
RAM mailing list
RAM at iab.org
https://www1.ietf.org/mailman/listinfo/ram