DNS over Dedicated QUIC Connections

by zaik • 4 years ago

38 14 4 years ago

dsp2• 4 years ago

Do we have more protocols for dns than commonly used dns record types yet? There’s been quite a proliferation recently. :)

denkmoon• 4 years ago

He who controls the DNS controls the internet.

y0ssar1an• 4 years ago

DNS over HTTPS uses TCP-based http/2, which is less efficient than UDP-based QUIC (aka http/3).

dsp2• 4 years ago

DNS over HTTPS uses TCP-based http/2

DoH (ietf rfc 8484) recommends http/2 as a minimum, http/3 is a valid DoH transport.

which is less efficient

What kind of efficiency are you referencing? This is not a clear cut issue.

UDP-based QUIC (aka http/3)

The linked rfc uses only the quic transport, not http/3.

throw0101a2• 4 years ago

Can't wait for Paul Vixie's† take on this. :)

† He's a co-founder of Internet Systems Consortium (ISC).

tptacek3• 4 years ago

DoQ uses the DoT port, so I assume he'll approve of it; his objection to DoH was that it's designed to blend in with HTTPS traffic, and is difficult for network operators to filter.

Regardless of what the standard says, though, this is going to end up running over 443/udp from browsers, or it's not really going to run anywhere at all.

rektide• 4 years ago

The fact that this requires a dedicated quic connection seemed like a huge turn off to me. As an oine service I'd rather be able to manage & juggle different protocols multiplexed onto a single quic connection as I see fit, rather than be subject to networks trying to apply their own smarts & priorities. I think I can help my users better than network operators in the middle will do.

gliiics• 4 years ago

his objection to DoH was that it's designed to blend in with HTTPS traffic, and is difficult for network operators to filter.

Why's that a bad thing?

paulvixie• 4 years ago

If you need encrypted DNS and you have to do it over udp, you will have to use doq or doh3, both of which contain session state on both ends points. We thought of dns over dtls but it just wasn't more efficient than dot, even though dtls and dot also contain some session state.

DNS over Dedicated QUIC Connections

Related Stories