From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <starlink@gndrsh.dnsmgr.net>
Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by lists.bufferbloat.net (Postfix) with ESMTPS id 7EF173B29E
 for <starlink@lists.bufferbloat.net>; Mon, 17 Apr 2023 10:39:01 -0400 (EDT)
Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1])
 by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id 33HEcq6u056123;
 Mon, 17 Apr 2023 07:38:52 -0700 (PDT)
 (envelope-from starlink@gndrsh.dnsmgr.net)
Received: (from starlink@localhost)
 by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id 33HEcqi7056122;
 Mon, 17 Apr 2023 07:38:52 -0700 (PDT) (envelope-from starlink)
From: "Rodney W. Grimes" <starlink@gndrsh.dnsmgr.net>
Message-Id: <202304171438.33HEcqi7056122@gndrsh.dnsmgr.net>
In-Reply-To: <snrs238r-q3ro-5p5o-9o7o-8q81p76s5rn4@ynat.uz>
To: David Lang <david@lang.hm>
Date: Mon, 17 Apr 2023 07:38:52 -0700 (PDT)
CC: =?ISO-8859-15?Q?David_Fern=E1ndez?= <davidfdzp@gmail.com>,
 starlink@lists.bufferbloat.net
X-Mailer: ELM [version 2.4ME+ PL121h (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Subject: Re: [Starlink] fiber IXPs in space
X-BeenThere: starlink@lists.bufferbloat.net
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Starlink has bufferbloat. Bad." <starlink.lists.bufferbloat.net>
List-Unsubscribe: <https://lists.bufferbloat.net/options/starlink>,
 <mailto:starlink-request@lists.bufferbloat.net?subject=unsubscribe>
List-Archive: <https://lists.bufferbloat.net/pipermail/starlink>
List-Post: <mailto:starlink@lists.bufferbloat.net>
List-Help: <mailto:starlink-request@lists.bufferbloat.net?subject=help>
List-Subscribe: <https://lists.bufferbloat.net/listinfo/starlink>,
 <mailto:starlink-request@lists.bufferbloat.net?subject=subscribe>
X-List-Received-Date: Mon, 17 Apr 2023 14:39:01 -0000

> On Sun, 16 Apr 2023, David Fern?ndez via Starlink wrote:
> 
> > The idea would be that the satellite inspects IP packets and when it
> > detects a DNS query, instead of forwarding the packet to ground
> > station, it just answers back to the sender of the query.
> 
> This would be a bad way to implement it. You don't want to override queries to 
> other DNS servers, but it would be very easy to create an anycast address that 
> is served by the satellites.

Yes, and the later is what I proposed, the idea of intercepting
someone ELSE'S anycast address and processing it would be
wrong in many ways, in effect a Man In the Middle attack
as stated else where.

> David Lang
--
Rod Grimes                                                 rgrimes@freebsd.org