[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jabber-jdev
Subject:    [jdev] lack of SRV support
From:       Peter Saint-Andre <stpeter () stpeter ! im>
Date:       2012-08-22 15:43:05
Message-ID: 5034FE09.8080302 () stpeter ! im
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Recently the jabber.org IM service has been subject to repeated DoS
attacks against its primary IP address. To sidestep the issue, we've
set up our SRV records such that we have a secondary IP address with a
higher SRV "priority" (see RFC 2782). According to RFC 6120, Section
3.2.1, clients and servers that want to connect to jabber.org should
attempt to connect to the primary IP address and, when that fails
(which it does), try to connect to the secondary IP address. However,
many XMPP implementations are not behaving this way. In other words,
we have a lot of broken code out there. The jabber.org admins have
been encouraging our users to file bug reports with the relevant
projects, but I think we might want to have a broader effort at
testing DNS lookup and TCP connection processes. Pointing your code at
jabber.org right now is a good first step to determine if your code
works correctly. Longer term we could set up a test server with a
similar configuration and document the results on a wiki page.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlA0/ggACgkQNL8k5A2w/vytsQCgmorvO6WJj1qM9ZY6arEpfqYc
EakAoLtrcuMzvT2sJQ7Zx282WQXc4kb5
=npzQ
-----END PGP SIGNATURE-----
_______________________________________________
JDev mailing list
Info: http://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: JDev-unsubscribe@jabber.org
_______________________________________________
[prev in list] [next in list] [prev in thread] [next in thread]