[DNSOP] Re: DELEXT: Proposed Delegation Type Ranges

Michael Richardson <[email protected]> Fri, 21 Aug 2026 14:12:27 -0400
Newsgroups	gmane.ietf.dnsop
Message-ID	<[email protected]>
Roy Arends <[email protected]> wrote:
    > Range 2: NS-Preserving Delegation Types

    > A Delegation Type in this range does not alter the inclusion of the NS
    > RRset in a referral. When a delegation contains Delegation Types from
    > this range, and none from Range 1, an authoritative server MUST include
    > the NS RRset in the referral, together with the Delegation Type
    > RRsets. If a delegation also contains Delegation Types from Range 1,
    > the Range 1 rule takes precedence: the authoritative server MUST NOT
    > include the NS RRset in the referral.

I'm surprised by the precedence, but I can mostly see why.
If we were allocating DS today (without DELEG existing), would DS come from
this range then?

    > Range 3: On-Demand Delegation Types
    > Delegation Types in this range are not included in referrals. An
    > authoritative server MUST NOT include Delegation Types from this range
    > in a referral. Delegation Types in this range MUST be explicitly
    > queried.

Can you give us an example?
Have we special cased this before?

    > Subsequently, the DELEXT draft will read:

    > Decimal  Hex      Registration Procedures   Note

    > 61440-   0xF000-  Expert Review or          NS-Omitting delegation TYPEs
    > 61567    0xF07F   Standards Action

    > 61568-   0xF080-  Expert Review or          NS-Preserving delegation TYPEs
    > 61695    0xF0FF   Standards Action

    > 61696-   0xF100-  Expert Review or          On-Demand delegation TYPEs
    > 61935    0xF1EF   Standards Action

    > 61936-   0xF1F0-  Private Use               Private delegation TYPEs
    > 61951    0xF1FF

Total cost seems to be 512 values from our 64K total.
That seems fine, even if we never use Range 3.


--
Michael Richardson <[email protected]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide

**       My working hours and your working hours may be different.         **
** Please do not feel obligated to reply outside your normal working hours **

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
signature.asc (application/pgp-signature, 487 B)