Internet DRAFT - draft-ietf-dnsop-update-timeout

draft-ietf-dnsop-update-timeout







DNSOP Working Group                                        T.J. Pusateri
Internet-Draft                                             T. Wattenberg
Intended status: Standards Track                            Unaffiliated
Expires: 26 January 2021                                    25 July 2020


                      DNS TIMEOUT Resource Record
                   draft-ietf-dnsop-update-timeout-01

Abstract

   This specification defines a new DNS TIMEOUT resource record (RR)
   that associates a lifetime with one or more zone resource records.
   It is intended to be used to transfer resource record lifetime state
   between a zone's primary and secondary servers and to store lifetime
   state during server software restarts.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on 26 January 2021.

Copyright Notice

   Copyright (c) 2020 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents (https://trustee.ietf.org/
   license-info) in effect on the date of publication of this document.
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.  Code Components
   extracted from this document must include Simplified BSD License text
   as described in Section 4.e of the Trust Legal Provisions and are
   provided without warranty as described in the Simplified BSD License.




Pusateri & Wattenberg    Expires 26 January 2021                [Page 1]

Internet-Draft           TIMEOUT Resource Record               July 2020


Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
   2.  Requirements Language . . . . . . . . . . . . . . . . . . . .   3
   3.  Sources of TIMEOUT Expiry Time  . . . . . . . . . . . . . . .   3
   4.  Common Usage Patterns . . . . . . . . . . . . . . . . . . . .   4
     4.1.  TIMEOUT records vs. Update Leases . . . . . . . . . . . .   5
     4.2.  Testing for TIMEOUT . . . . . . . . . . . . . . . . . . .   6
   5.  Resource Record Composition . . . . . . . . . . . . . . . . .   6
     5.1.  Represented Record Type . . . . . . . . . . . . . . . . .   6
     5.2.  Represented Record Count  . . . . . . . . . . . . . . . .   7
     5.3.  Method Identifiers  . . . . . . . . . . . . . . . . . . .   7
       5.3.1.  Method Identifier 0: NO METHOD  . . . . . . . . . . .   8
       5.3.2.  Method Identifier 1: MD-SHA256-128  . . . . . . . . .   8
     5.4.  Expiry Time . . . . . . . . . . . . . . . . . . . . . . .   8
   6.  TIMEOUT RDATA Wire Format . . . . . . . . . . . . . . . . . .   9
   7.  Server Behavior . . . . . . . . . . . . . . . . . . . . . . .  10
     7.1.  Primary Server Behavior . . . . . . . . . . . . . . . . .  10
     7.2.  Secondary Server Behavior . . . . . . . . . . . . . . . .  11
   8.  TIMEOUT RDATA Presentation Format . . . . . . . . . . . . . .  11
   9.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  12
   10. Security Considerations . . . . . . . . . . . . . . . . . . .  13
   11. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . .  13
   12. References  . . . . . . . . . . . . . . . . . . . . . . . . .  13
     12.1.  Normative References . . . . . . . . . . . . . . . . . .  13
     12.2.  Informative References . . . . . . . . . . . . . . . . .  14
   Appendix A.  Example TIMEOUT resource records . . . . . . . . . .  15
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  17

1.  Introduction

   DNS Update [RFC2136] provides a mechanism to dynamically add/remove
   DNS resource records to/from a zone.  When a resource record is
   dynamically added, it remains in the zone until it is removed
   manually or via a subsequent DNS Update.  The context of a dynamic
   update may provide lifetime hints for the updated records (such as
   the EDNS(0) Update Lease option [I-D.sekar-dns-ul]), however, this
   lifetime is not communicated to secondary servers and will not
   necessarily endure through server software restarts.  This
   specification defines a new DNS TIMEOUT resource record that
   associates lifetimes with one or more resource records with the same
   owner name, type, and class that can be transferred to secondary
   servers through normal AXFR [RFC5936], IXFR [RFC1995] transfer
   mechanisms.

   An UPDATE lifetime could be stored in a proprietary database on an
   authoritative primary server but there is an advantage to saving it
   as a resource record: redundant primary servers and secondary servers



Pusateri & Wattenberg    Expires 26 January 2021                [Page 2]

Internet-Draft           TIMEOUT Resource Record               July 2020


   capable of taking over as the primary server for a zone automatically
   can benefit from the existing database synchronization of resource
   records.  In addition, primary and secondary servers from multiple
   vendors can synchronize the lifetimes through the open format
   provided by a resource record.

   TIMEOUT records can be installed via policy by a primary server,
   manually, or via an external UPDATE from a client.  If TIMEOUT
   records are being managed by an UPDATE client, the client should be
   aware of server software policy with respect to TIMEOUT records to
   prevent the TIMEOUT records from being rejected.  The primary server
   has ultimate responsibility for the records in the database and the
   client must work within the restrictions of the policy of the primary
   server.

   TIMEOUT records can be thought of as a universal method for removing
   stale dynamic DNS records.  Clients such as DHCP servers who best
   know the lease lifetimes can include individual TIMEOUT records in
   the dynamic UPDATE messages specific for each lease lifetime.  These
   TIMEOUT records can be refreshed when the lease is refreshed and will
   timeout the A, AAAA, and PTR records if they are not refreshed by the
   DHCP server.  Additional use cases include service discovery resource
   records installed in unicast DNS servers via UPDATE described in
   [RFC6763], Active Directory Controllers publishing SRV records, DNS
   TXT resource records supporting ACME certificate management
   challenges as described in [RFC8555], Section 8.4, and the limited
   lifetime certificate representations produced by ACME that are stored
   in DANE TLSA resource records [RFC6698].

2.  Requirements Language

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in BCP
   14 [RFC2119] [RFC8174] when, and only when, they appear in all
   capitals, as shown here.  These words may also appear in this
   document in lower case as plain English words, absent their normative
   meanings.

3.  Sources of TIMEOUT Expiry Time

   The expire time may come from many different sources.  A few are
   listed here however, this list is not considered complete.  TIMEOUT
   records may be included along side the records they represent in the
   UPDATE message or they be synthesized by the primary server receiving
   the UPDATE.

   *  Via DHCP Lease Lifetimes.



Pusateri & Wattenberg    Expires 26 January 2021                [Page 3]

Internet-Draft           TIMEOUT Resource Record               July 2020


   *  Via EDNS(0) Update Lease option [I-D.sekar-dns-ul] communicated in
      DNS Update.

   *  Via an administrative default value such as one day (86400
      seconds).

4.  Common Usage Patterns

   TIMEOUT resource records are just one tool in the toolbox for
   cleaning up stale resource records.  They provide a failsafe in case
   other mechanisms meant to clean up records fail.  It might be useful
   to think of them similar to Garbage Collection (GC) or Automatic
   Reference Counting (ARC) used by programming languages for memory
   management.  The model in which the TIMEOUT resource records are used
   depends on the support provided for them by the primary DNS server.

   As it cannot be presumed that all primary authoritative servers will
   manage TIMEOUT resource records internally, an external management of
   the TIMEOUT records and the resource records they represent might be
   necessary.  The client may perform external management of TIMEOUT
   records it creates through an UPDATE or a third party with
   appropriate permission may manage the records.

   If the primary server understands TIMEOUT records and manages them
   based on resource record updates, it will likely know when to remove
   the resource records referenced by the TIMEOUT records.  This is
   similar to ARC.


       ┌─────────────┐
       │Client UPDATE│
       │ with EDNS0  │───┐
       └─────────────┘   │   ┌───────────────┐
                         │   │    Primary    │     Zone     ┌─────────┐
    ┌────────────────┐   ├──▶│(Authoritative)│───Transfer──▶│Secondary│
    │  UPDATE with   │   │   └───────────────┘              └─────────┘
    │TIMEOUT included│───┘
    └────────────────┘


   If the primary server does not understand TIMEOUT records, then an
   external manager (client) will need to use DNS UPDATE to manage
   TIMEOUT records and the resource records they reference.  Garbage
   Collectors run periodically looking for memory no longer being used
   to reclaim.  In a similar way, external TIMEOUT record managers need
   to periodically scan the TIMEOUT records and send DNS UPDATE messages
   to add/remove records when the server doesn't manage them
   automatically.



Pusateri & Wattenberg    Expires 26 January 2021                [Page 4]

Internet-Draft           TIMEOUT Resource Record               July 2020


   ┌────────────────┐        ┌───────────────┐
   │  UPDATE with   │        │    Primary    │     Zone     ┌─────────┐
   │TIMEOUT included│───────▶│(Authoritative)│───Transfer──▶│Secondary│
   └────────────────┘        └───────────────┘              └─────────┘
                             │               ▲
                           Zone              │
                         Transfer         UPDATE
                             │               │
      ┌─────────────┐        ▼               │
      │Client UPDATE│        ┌───────────────┐
      │ with EDNS0  │───────▶│   timeoutd    │
      └─────────────┘        └───────────────┘


   It should be noted that similar to many instances of Garbage
   Collection, the precision with which TIMEOUT records and the resource
   records they reference are removed is not critical.  Gross timers
   and/or scanning mechanisms are perfectly appropriate and should not
   consume additional resources for the purpose of being precise.  As
   described in Section 5.4 below, expiry times use one second
   resolution.

4.1.  TIMEOUT records vs. Update Leases

   Each application will have to determine when it is better to use
   TIMEOUT resource records, EDNS(0) Update Lease options, or a
   combination of the two.  In some cases, either will serve the same
   purpose.  A differentiating factor is that TIMEOUT resource records
   use absolute time so that the records may be more easily synchronized
   across secondary servers whereas Update Leases are specified in
   relative time offsets.

   If your primary DNS server supports TIMEOUT records directly, it may
   be simpler to just provide an Update Lease lifetime in the DNS UPDATE
   message that the server will use to create the TIMEOUT records
   internally.  If your primary DNS server does not support TIMEOUT
   records and your application uses sources that have real-time clocks
   that are synchronized with standard time sources, TIMEOUT records are
   an available option to the client.  However, if your clients are
   using low-cost hardware without real-time clocks, they should send
   Update Leases to the primary server or an intermediate proxy with a
   synchronized real-time clock.









Pusateri & Wattenberg    Expires 26 January 2021                [Page 5]

Internet-Draft           TIMEOUT Resource Record               July 2020


4.2.  Testing for TIMEOUT

   There is no more reliable mechanism to determine if the primary DNS
   server supports the management of TIMEOUT records than explicitly
   trying it.  Before relying on a server to expire TIMEOUT records, the
   application should send test records and test if they are handled as
   expected.  If the preferred mode of operation is not supported,
   another mode can be attempted.  For example, if sending a DNS UPDATE
   with a EDNS(0) Update Lease of 1 second doesn't cause the record to
   be expired within 6 seconds (1 + 5 fuzz), then the application can
   try including a TIMEOUT record in the DNS UPDATE.  If that doesn't
   automatically expire, TIMEOUT records will need to be managed
   externally.

5.  Resource Record Composition

   TIMEOUT resource records provide expiry times for a mixed variety of
   resource record types with the same owner name, type, and class.
   Since there could exist multiple records of the same record type with
   the same owner name and class, the TIMEOUT resource record must be
   able to identify each of these records individually with only
   different RDATA.  As an example, PTR records for service discovery
   [RFC6763] provide a level of indirection to SRV and TXT records by
   instance name.  The instance name is stored in the PTR RDATA and
   multiple PTR records with the same owner name and only differing
   RDATA often exist.

   In order to distinguish each individual record with potentially
   different expiry times, the TIMEOUT resource record contains an
   expiry time, the record type, a method to identify the actual records
   for which the expiry time applies, and a count of the number of
   records represented.  Multiple TIMEOUT records with the same owner
   name and class are created for each expiry time, record type, and
   resource record representation.  If the expiry time is the same,
   multiple records can be combined into a single TIMEOUT record with
   the same owner name, class, and record type but this is not required.

   The fields and their values in a TIMEOUT record are defined as:

5.1.  Represented Record Type

   A 16-bit field containing the resource record type to which the
   TIMEOUT record applies.  Multiple TIMEOUT records for the same owner
   name, class, and represented type can exist.  Any resource record
   type can be specified in the Represented Record Type including
   another TIMEOUT record.  This specification does not put any
   restrictions on the record type but implementations in authoritative
   servers will likely do so for policy and security reasons.



Pusateri & Wattenberg    Expires 26 January 2021                [Page 6]

Internet-Draft           TIMEOUT Resource Record               July 2020


   QTYPEs and Meta-TYPEs MUST NOT be used as the represented record
   type.  For more information, refer to [RFC6895], Section 3.1.

5.2.  Represented Record Count

   The Represented Record Count is a 8-bit value that specifies the
   number of records of the specified record type with this expiry time.

   A count of zero indicates that it is not necessary to represent any
   records in the list.  This is a shortcut notation meaning all
   resource records with the same owner name, class, and record type use
   the same Expiry Time.  When the Represented Record Count is 0, the
   Method Identifier is set to NO METHOD (0) on transmission and ignored
   on reception.  A primary server MUST NOT install a TIMEOUT record
   with No Method/No Count at the same time that a TIMEOUT record exists
   for the same owner name, class, and type with a non-zero record
   count.  Either all records MUST match the No Method/No Count
   shorthand syntax or they MUST all be included in the list of matching
   records.

   In the unlikely event that the Represented Record Count exceeds 255
   which is the largest number representable in 8 bits, multiple
   instances of the same Expiry Time can exist.

5.3.  Method Identifiers

   The Method Identifier is a 8-bit value that specifies an identifier
   for the algorithm used to distinguish between resource records.  The
   identifiers are declared in a registry maintained by IANA for the
   purpose of listing acceptable methods for this purpose.  In addition
   to the method and the index, the registry MAY contain a fixed output
   length in bits of the method to be used or the term "variable" to
   denote a variable length output per record.  It is conceivable,
   though not likely, that the same method could be used with different
   fixed output lengths.  In this case, each fixed output length would
   require a different identifier in the registry.  Additions to this
   registry will be approved with additional documentation under expert
   review.  At the time that the registry is created by IANA, a group of
   expert reviewers will be established.












Pusateri & Wattenberg    Expires 26 January 2021                [Page 7]

Internet-Draft           TIMEOUT Resource Record               July 2020


   Additional methods of representing records may be defined in the
   future.  If such methods are defined, a primary server could create
   TIMEOUT record using a new method that is not understood by a
   secondary server that could take over as the primary in the event of
   an outage or administrative change.  In this case, the new primary
   would not be able to identify the records it is supposed to TIMEOUT.
   This is a misconfiguration and it is the responsibility of the
   administrator to ensure that secondary servers in a position to
   become primary understand the TIMEOUT record methods of the primary
   server.

5.3.1.  Method Identifier 0: NO METHOD

   The method identifier of 0 is defined as "NO METHOD" and MUST NOT be
   used if the represented record count is greater than 0.  The value of
   0 is to be included in the IANA registry of method identifier values.

5.3.2.  Method Identifier 1: MD-SHA256-128

   The method identifier of 1 is defined as "MD-SHA256-128".  Following
   the expiry time is a list of 128-bit values.  Each of these values is
   the first 128-bits of a message digest of the RDATA of a represented
   record in canonical DNSSEC form calculated using the 256-bit SHA-256
   hash algorithm defined in [FIPS180-4].  The canonical DNSSEC form is
   described in [RFC4034], Section 6.  The input length of RDATA for the
   message digest is the RDLEN of the represented record.

5.4.  Expiry Time

   The expiry time is a 64-bit number expressed as the number of seconds
   since the UNIX epoch (00:00:00 UTC on January 1, 1970).  This value
   is an absolute time at which the record will expire.  An absolute
   time is necessary so the TIMEOUT records do not have to change during
   zone transfers.

   There are circumstances when a relative expiry time would be
   convenient due to limited resources for clock synchronization in
   constrained devices.  In this case, DNS UPDATE messages should not
   contain precomputed TIMEOUT records but convey the relative expiry
   time using the EDNS(0) Update Lease Option defined in
   [I-D.sekar-dns-ul].  The relative time is then converted to an
   absolute expiry time when received by the primary server which will
   create the TIMEOUT resource records.








Pusateri & Wattenberg    Expires 26 January 2021                [Page 8]

Internet-Draft           TIMEOUT Resource Record               July 2020


6.  TIMEOUT RDATA Wire Format

   The TIMEOUT resource record follows the same pattern as other DNS
   resource records including owner name, type, class, TTL, RDATA
   length, and RDATA as defined in [RFC1035], Section 3.2.1.

   The RDATA section of the resource record with method identifier NO
   METHOD (0) is illustrated in Figure 1:


      0                   1                   2                   3
      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |      Represented RR Type      |   Count (0)   |   Method (0)  |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |                       Expiry Time (64-bit)                    |
     |                                                               |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


                   Figure 1: Method (0) RDATA Wire Format

   Figure 1 represents the TIMEOUT RDATA field of all matching records
   of the represented type for the same owner name and class.

   The RDATA section of the resource record with method identifier MD-
   SHA256-128 (1) is illustrated in Figure 2:
























Pusateri & Wattenberg    Expires 26 January 2021                [Page 9]

Internet-Draft           TIMEOUT Resource Record               July 2020


      0                   1                   2                   3
      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |      Represented RR Type      |   Count (n)   |   Method (1)  |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |                      Expiry Time (64-bit)                     |
     |                                                               |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |                                                               |
     |                 First 128 bits of SHA256 hash                 |
     |                 of Represented Record 1 RDATA                 |
     |                                                               |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     .                                                               .
     .                                                               .
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     |                                                               |
     |                 First 128 bits of SHA256 hash                 |
     |                 of Represented Record n RDATA                 |
     |                                                               |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


               Figure 2: Method (1) MD-SHA256-128 Wire Format

   Figure 2 represents an arbitrary number of represented records with
   the same owner name, class, and represented type.  For each expiry
   time, a list of the first 128-bits of a SHA256 hash are appended.

7.  Server Behavior

   A server may or may not understand TIMEOUT resource records.  If a
   server does not understand them, they are treated like any other
   resource record that the server may not understand.  See [RFC3597]
   for more information.

7.1.  Primary Server Behavior

   The primary server is the ultimate source of the database and
   policies established by the server may overrule the actions of
   external clients.  The primary server is ultimately responsible for
   ensuring the database is consistent but until TIMEOUT record
   management is built-in to authoritative server software, external
   UPDATE clients will likely manage the records.







Pusateri & Wattenberg    Expires 26 January 2021               [Page 10]

Internet-Draft           TIMEOUT Resource Record               July 2020


   Upon receiving any DNS UPDATE deleting resource records that might
   have been covered by a TIMEOUT RR, a primary server MUST remove all
   represented records in all of the TIMEOUT records with the same owner
   name, class, and represented type.

   A TIMEOUT resource record MUST be removed when the last resource
   record it covers has been removed.  This may be due to the record
   expiring (reaching the expiry time) or due to a subsequent DNS Update
   or administrative action.

   The TIMEOUT record TTL should use the default TTL for the zone like
   any other record.  The TTL values of the records covered by a TIMEOUT
   are not affected by the TIMEOUT expiry time and may be longer than
   the expiry time.  The TIMEOUT RR is mostly for the benefit of the
   authoritative server to know when to remove the records.  The fact
   that some records might live longer in the cache of a resolver is no
   different than other records that might get removed while still in a
   remote resolver cache.

7.2.  Secondary Server Behavior

   A secondary server MUST NOT expire the records in a zone it maintains
   covered by the TIMEOUT resource record and it MUST NOT expire the
   TIMEOUT resource record itself when the last record it covers has
   expired.  The secondary server MUST always wait for the records to be
   removed or updated by the primary server.

8.  TIMEOUT RDATA Presentation Format

   Record Type:
         resource record type mnemonics.  When the mnemonic is unknown,
         the TYPE is represented by the word "TYPE" immediately followed
         by the decimal RR type number, with no intervening whitespace
         as described in [RFC3597], Section 5

   Represented Record Count:
         unsigned decimal integer (0-255)

   Method Identifier:
         unsigned decimal integer (0-255)

   Expiry Time:
         The Expiry Time is displayed as a compact numeric-only
         representation of ISO 8601.  All punctuation is removed.  This
         form is slightly different than the recommendation in [RFC3339]
         but is common for DNS protocols.  It is defined in [RFC4034],
         Section 3.2 as YYYYMMDDHHmmSS in UTC.  This form will always be
         exactly 14 digits since no component is optional.



Pusateri & Wattenberg    Expires 26 January 2021               [Page 11]

Internet-Draft           TIMEOUT Resource Record               July 2020


         YYYY is the year;

         MM is the month number (01-12);

         DD is the day of the month (01-31);

         HH is the hour, in 24 hour notation (00-23);

         mm is the minute (00-59); and

         SS is the second (00-60) where 60 is only possible as a leap
         second.

   List of 0 or more hashes depending on Method Identifier:
         ( hash-1 hash2 ... )

         hash values shown as upper case hexadecimal string;

         some type of white space MUST exist between hash values but
         MUST NOT exist within hash value;

         MUST only display parentheses for one or more hash values;

9.  IANA Considerations

   This document defines a new DNS Resource Record Type named TIMEOUT to
   be exchanged between authoritative primary and secondary DNS servers.
   It is assigned out of the DNS Parameters Resource Record (RR) Type
   registry.  The value for the TIMEOUT resource record type is TBA.

       +=========+=======+============================+============+
       |   Type  | Value | Meaning                    | Definition |
       +=========+=======+============================+============+
       | TIMEOUT | TBA   | expire represented records | Section 5  |
       +---------+-------+----------------------------+------------+

              Table 1: DNS Parameters Resource Record Registry

   This document establishes a new registry of DNS TIMEOUT Resource
   Record Method Identifier values.  The registry shall include a
   numeric identifier, a method name, a description of the method, and
   the length of the output function in bits or the keyword "variable".
   The identifier is to be used in the RDATA section of the TIMEOUT
   resource record.

   Initially, there are two values defined in the registry.  Values from
   240 (0xF0) through 255 (0xFF) are reserved for experimental use.




Pusateri & Wattenberg    Expires 26 January 2021               [Page 12]

Internet-Draft           TIMEOUT Resource Record               July 2020


   +=========+===============+================+==========+============+
   |    ID   | Method Name   | Description    |  Length  | Definition |
   |         |               |                |  (bits)  |            |
   +=========+===============+================+==========+============+
   |    0    | NO METHOD     | All records    |    0     | Section    |
   |         |               | match          |          | 5.3.1      |
   +---------+---------------+----------------+----------+------------+
   |    1    | MD-SHA256-128 | List of        | 128 bits | Section    |
   |         |               | 128-bit hashes |          | 5.3.2      |
   |         |               | of represented |          |            |
   |         |               | records RDATA  |          |            |
   +---------+---------------+----------------+----------+------------+
   | 240-255 | EXPERIMENTAL  | Reserved for   | variable | Section 9  |
   |         |               | Experimental   |          |            |
   |         |               | Use            |          |            |
   +---------+---------------+----------------+----------+------------+

               Table 2: TIMEOUT RR Method Identifier values

10.  Security Considerations

   There is no secure relationship between a TIMEOUT resource record and
   the represented resource records it applies to.  TIMEOUT records
   should typically only apply to resource records created through the
   UPDATE mechanism.  Protection for permanent resource records in a
   zone is advisable.

   Authenticated UPDATE operations MUST be REQUIRED at authoritative
   name servers supporting TIMEOUT resource records.

11.  Acknowledgments

   This idea was motivated through conversations with Mark Andrews.
   Thanks to Mark as well as Paul Vixie, Joe Abley, Ted Lemon, Tony
   Finch, Robert Story, Paul Wouters, Dick Franks, JINMEI, Tatuya,
   Timothe Litt, and Stuart Cheshire for their suggestions, review, and
   comments.

12.  References

12.1.  Normative References

   [FIPS180-4]
              National Institute of Standards and Technology, U.S.
              Department of Commerce, "Secure Hash Standard (SHS) FIPS
              180-4", August 2015,
              <http://nvlpubs.nist.gov/nistpubs/FIPS/
              NIST.FIPS.180-4.pdf>.



Pusateri & Wattenberg    Expires 26 January 2021               [Page 13]

Internet-Draft           TIMEOUT Resource Record               July 2020


   [RFC1035]  Mockapetris, P., "Domain names - implementation and
              specification", STD 13, RFC 1035, DOI 10.17487/RFC1035,
              November 1987, <https://www.rfc-editor.org/info/rfc1035>.

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <https://www.rfc-editor.org/info/rfc2119>.

   [RFC3339]  Klyne, G. and C. Newman, "Date and Time on the Internet:
              Timestamps", RFC 3339, DOI 10.17487/RFC3339, July 2002,
              <https://www.rfc-editor.org/info/rfc3339>.

   [RFC3597]  Gustafsson, A., "Handling of Unknown DNS Resource Record
              (RR) Types", RFC 3597, DOI 10.17487/RFC3597, September
              2003, <https://www.rfc-editor.org/info/rfc3597>.

   [RFC4034]  Arends, R., Austein, R., Larson, M., Massey, D., and S.
              Rose, "Resource Records for the DNS Security Extensions",
              RFC 4034, DOI 10.17487/RFC4034, March 2005,
              <https://www.rfc-editor.org/info/rfc4034>.

   [RFC6895]  Eastlake 3rd, D., "Domain Name System (DNS) IANA
              Considerations", BCP 42, RFC 6895, DOI 10.17487/RFC6895,
              April 2013, <https://www.rfc-editor.org/info/rfc6895>.

   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
              May 2017, <https://www.rfc-editor.org/info/rfc8174>.

12.2.  Informative References

   [I-D.sekar-dns-ul]
              Cheshire, S. and T. Lemon, "Dynamic DNS Update Leases",
              Work in Progress, Internet-Draft, draft-sekar-dns-ul-02, 2
              August 2018,
              <https://tools.ietf.org/html/draft-sekar-dns-ul-02>.

   [RFC1995]  Ohta, M., "Incremental Zone Transfer in DNS", RFC 1995,
              DOI 10.17487/RFC1995, August 1996,
              <https://www.rfc-editor.org/info/rfc1995>.

   [RFC2136]  Vixie, P., Ed., Thomson, S., Rekhter, Y., and J. Bound,
              "Dynamic Updates in the Domain Name System (DNS UPDATE)",
              RFC 2136, DOI 10.17487/RFC2136, April 1997,
              <https://www.rfc-editor.org/info/rfc2136>.





Pusateri & Wattenberg    Expires 26 January 2021               [Page 14]

Internet-Draft           TIMEOUT Resource Record               July 2020


   [RFC5936]  Lewis, E. and A. Hoenes, Ed., "DNS Zone Transfer Protocol
              (AXFR)", RFC 5936, DOI 10.17487/RFC5936, June 2010,
              <https://www.rfc-editor.org/info/rfc5936>.

   [RFC6698]  Hoffman, P. and J. Schlyter, "The DNS-Based Authentication
              of Named Entities (DANE) Transport Layer Security (TLS)
              Protocol: TLSA", RFC 6698, DOI 10.17487/RFC6698, August
              2012, <https://www.rfc-editor.org/info/rfc6698>.

   [RFC6763]  Cheshire, S. and M. Krochmal, "DNS-Based Service
              Discovery", RFC 6763, DOI 10.17487/RFC6763, February 2013,
              <https://www.rfc-editor.org/info/rfc6763>.

   [RFC8555]  Barnes, R., Hoffman-Andrews, J., McCarney, D., and J.
              Kasten, "Automatic Certificate Management Environment
              (ACME)", RFC 8555, DOI 10.17487/RFC8555, March 2019,
              <https://www.rfc-editor.org/info/rfc8555>.

Appendix A.  Example TIMEOUT resource records

   The following example shows sample TIMEOUT resource records based on
   DNS UPDATEs containing A and AAAA address records plus the
   corresponding PTR records.

   A host sending a name registration at time Tn for "A" and "AAAA"
   records with lease lifetime Ln would have a series of UPDATEs (one
   for each zone) that contain:

   +=============================================+====+================+
   | Name                                        | RR | Value          |
   |                                             |Type|                |
   +=============================================+====+================+
   | s.example.com.                              | A  | 192.0.2.5      |
   +---------------------------------------------+----+----------------+
   | s.example.com.                              |AAAA| 2001:db8::5    |
   +---------------------------------------------+----+----------------+
   | 5.2.0.192.in-addr.arpa.                     |PTR | s.example.com. |
   +---------------------------------------------+----+----------------+
   | 5.0.0.0.0.0.0.0.0.0.0.0.b8.d.1.20.ip6.arpa. |PTR | s.example.com. |
   +---------------------------------------------+----+----------------+

                  Table 3: Example Address Records Update

   Next, consider the TIMEOUT resource records that would be generated
   for the records in Table 3.






Pusateri & Wattenberg    Expires 26 January 2021               [Page 15]

Internet-Draft           TIMEOUT Resource Record               July 2020


   +=============================================+====+===+===+========+
   | Owner Name                                  |Type|Cnt|Mth| Expire |
   +=============================================+====+===+===+========+
   | s.example.com.                              | A  | 0 | 0 | Tn+Ln  |
   +---------------------------------------------+----+---+---+--------+
   | s.example.com.                              |AAAA| 0 | 0 | Tn+Ln  |
   +---------------------------------------------+----+---+---+--------+
   | 5.2.0.192.in-addr.arpa.                     |PTR | 0 | 0 | Tn+Ln  |
   +---------------------------------------------+----+---+---+--------+
   | 5.0.0.0.0.0.0.0.0.0.0.0.b8.d.1.20.ip6.arpa. |PTR | 0 | 0 | Tn+Ln  |
   +---------------------------------------------+----+---+---+--------+

                      Table 4: Address TIMEOUT records

   Next, assume there are two hosts advertising the same service type
   (different service types will have different owner names).  We will
   use _ipp._tcp.example.com as an example.

   Host A sends an UPDATE at time Ta with lease life La for PTR, SRV, A,
   AAAA, and TXT records.  Host B sends an UPDATE at time Tb with lease
   life Lb for PTR, SRV, A, and TXT records.

    +===========================+=========+===========================+
    | Owner name                | RR Type | Value                     |
    +===========================+=========+===========================+
    | _ipp._tcp.example.com.    | PTR     | p1._ipp._tcp.example.com. |
    +---------------------------+---------+---------------------------+
    | p1._ipp._tcp.example.com. | SRV     | 0 0 631 p1.example.com.   |
    +---------------------------+---------+---------------------------+
    | p1._ipp._tcp.example.com. | TXT     | paper=A4                  |
    +---------------------------+---------+---------------------------+
    | p1.example.com.           | A       | 192.0.2.1                 |
    +---------------------------+---------+---------------------------+
    | p1.example.com.           | AAAA    | 2001:db8::1               |
    +---------------------------+---------+---------------------------+

                      Table 5: DNS UPDATE from Host A














Pusateri & Wattenberg    Expires 26 January 2021               [Page 16]

Internet-Draft           TIMEOUT Resource Record               July 2020


    +===========================+=========+===========================+
    | Owner name                | RR Type | Value                     |
    +===========================+=========+===========================+
    | _ipp._tcp.example.com.    | PTR     | p2._ipp._tcp.example.com. |
    +---------------------------+---------+---------------------------+
    | p2._ipp._tcp.example.com. | SRV     | 0 0 631 p2.example.com.   |
    +---------------------------+---------+---------------------------+
    | p2._ipp._tcp.example.com. | TXT     | paper=B4                  |
    +---------------------------+---------+---------------------------+
    | p2.example.com.           | A       | 192.0.2.2                 |
    +---------------------------+---------+---------------------------+

                      Table 6: DNS UPDATE from Host B

   For these printer registrations, the TIMEOUT records on the server
   would look like the following:

   +=========================+====+=+=+================================+
   | Owner Name              |Type|C|M| Expire / Hash                  |
   +=========================+====+=+=+================================+
   | _ipp.tcp.example.com.   |PTR |1|1| Ta+La                          |
   |                         |    | | |69D67BCB98E8809702B9DFCA6B865558|
   +-------------------------+----+-+-+--------------------------------+
   | _ipp.tcp.example.com.   |PTR |1|1| Tb+Lb                          |
   |                         |    | | |7EBE34BC8B3E7306F8FCF1D6805331E1|
   +-------------------------+----+-+-+--------------------------------+
   |p1._ipp._tcp.example.com.|SRV |0|0| Ta + La                        |
   +-------------------------+----+-+-+--------------------------------+
   |p1._ipp._tcp.example.com.|TXT |0|0| Ta + La                        |
   +-------------------------+----+-+-+--------------------------------+
   |p2._ipp._tcp.example.com.|SRV |0|0| Tb + Lb                        |
   +-------------------------+----+-+-+--------------------------------+
   |p2._ipp._tcp.example.com.|TXT |0|0| Tb + Lb                        |
   +-------------------------+----+-+-+--------------------------------+
   | p1.example.com.         | A  |0|0| Ta + La                        |
   +-------------------------+----+-+-+--------------------------------+
   | p1.example.com.         |AAAA|0|0| Ta + La                        |
   +-------------------------+----+-+-+--------------------------------+
   | p2.example.com.         | A  |0|0| Tb + Lb                        |
   +-------------------------+----+-+-+--------------------------------+

                      Table 7: Service TIMEOUT records

Authors' Addresses







Pusateri & Wattenberg    Expires 26 January 2021               [Page 17]

Internet-Draft           TIMEOUT Resource Record               July 2020


   Tom Pusateri
   Unaffiliated
   Raleigh, NC
   United States of America

   Email: pusateri@bangj.com


   Tim Wattenberg
   Unaffiliated
   Cologne
   Germany

   Email: mail@timwattenberg.de





































Pusateri & Wattenberg    Expires 26 January 2021               [Page 18]