Re: [AVTCORE] Working Group Last Call on "Multiplexing Scheme Updates for QUIC"

David Schinazi <dschinazi.ietf@gmail.com> Fri, 20 May 2022 20:10 UTC

Return-Path: <dschinazi.ietf@gmail.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34A17C1D5AB2 for <avt@ietfa.amsl.com>; Fri, 20 May 2022 13:10:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oyEkyT8wD32N for <avt@ietfa.amsl.com>; Fri, 20 May 2022 13:10:30 -0700 (PDT)
Received: from mail-pj1-x1035.google.com (mail-pj1-x1035.google.com [IPv6:2607:f8b0:4864:20::1035]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C62AC1D469E for <avt@ietf.org>; Fri, 20 May 2022 13:10:30 -0700 (PDT)
Received: by mail-pj1-x1035.google.com with SMTP id l20-20020a17090a409400b001dd2a9d555bso8761783pjg.0 for <avt@ietf.org>; Fri, 20 May 2022 13:10:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=/Q0JwoGpbs0Ow1KvQHW3eZLtUoFfiGDQuwiNfFbe5Mg=; b=oTUCj/bQ+4GApP56+Ti0sduKmt3/jmXJW1dciqmAbYCNp47kLs0fPDGdwhIAa4SczE b+mW57rDOtba/UqLsLs9RgZXd53trQmRLsXpc/nyiiXogkT3jwtkirfn00Z16CbaFzJ4 I6EwEm40ryOymsgOs52aAy/Nhc18nxe7IdzxkPSS57iWF8NqtLZd2nPEEAZm/Im0+9j8 3ghn55VQSQkNVg2p9kQ7tuMarIyhepmGTF2xNDVT/zWFajSyh9NO0jNn4I/aXqay3aMG CHfG5tbhNgyVZcTbVj6FFMoMpezlQmQTKgZKRuh9FcSndddmRPSOqQQGny1Ha4OXFqVA EGjQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=/Q0JwoGpbs0Ow1KvQHW3eZLtUoFfiGDQuwiNfFbe5Mg=; b=7hgQf/j3Fu2T22QPOyXJbm4X6oJE3d0jLN/wp3VxHd8nuywmTuehpLuTkVAv7FnMHb mfYDXq/4mRvryopu1K/AvAn5jPYtSlk3aY55VPO7xRrySCj7bIhmrN6lX79y9DqzzocK wz2EWzPhX/orSSjVAFn3GcZjjrrdYwIcpdU5LFTgCwSWn72i7I/AcxOewT+wFLv4LmQU XVZRxcLI/TFYDj2ONNdd2etPqXZm8t1ZgiwRUr4AaH3nVNW6KsX/xG19gSYDLNnT4ZcJ 4T0Ohip9rwkDwa/8iLrLZC+61B+JJ3uLrcTZHOiMRsD29y9bpB1HqVeXr7jpZ/kwJ/Ww 9MiQ==
X-Gm-Message-State: AOAM530EEu1OP6SC7mthevCjarWvYgmUaRodSaKzgIYw/Bbsu3RNHe8V iaWaQB3sJ4za8JAqPV5mhfa2bgViLy4h3Ek12z4=
X-Google-Smtp-Source: ABdhPJw5TXK/ZTCKfA4symnY+KMuyfthqQg0TrjXElFdcNcLDAHWAvKZmZeNNMphy4apKim2UHFAzHmLaO58e2upy8o=
X-Received: by 2002:a17:90b:3884:b0:1df:d9d5:314b with SMTP id mu4-20020a17090b388400b001dfd9d5314bmr10561358pjb.221.1653077429133; Fri, 20 May 2022 13:10:29 -0700 (PDT)
MIME-Version: 1.0
References: <36F82EF4-B129-410D-9C4B-C629F055E530@8x8.com> <70F58D73-75F0-4E26-BF43-0E173F794D04@8x8.com> <CAPDSy+5NNMmnpT2vraoAR_hVwSGMN0qnBYYikHpJ5PJAHhMUdQ@mail.gmail.com> <CAOW+2dsZ3-+erjc+bHAKzM_LvU26VCZW78UODYrKnp=EktppfA@mail.gmail.com>
In-Reply-To: <CAOW+2dsZ3-+erjc+bHAKzM_LvU26VCZW78UODYrKnp=EktppfA@mail.gmail.com>
From: David Schinazi <dschinazi.ietf@gmail.com>
Date: Fri, 20 May 2022 13:10:17 -0700
Message-ID: <CAPDSy+7rE9au4OgBeu-XNiig7Nf1E7uj8EpcmG+wRL4K7D8jKw@mail.gmail.com>
To: Bernard Aboba <bernard.aboba@gmail.com>
Cc: Jonathan Lennox <jonathan.lennox@8x8.com>, IETF AVTCore WG <avt@ietf.org>, Martin Thomson <mt@lowentropy.net>
Content-Type: multipart/alternative; boundary="000000000000f325ee05df771425"
Archived-At: <https://mailarchive.ietf.org/arch/msg/avt/8s0lAnbrIWSBsk4wy3CRj9IY8XU>
Subject: Re: [AVTCORE] Working Group Last Call on "Multiplexing Scheme Updates for QUIC"
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 May 2022 20:10:34 -0000

Thanks Bernard.

Another option could be to say that 64-79 is ambiguous between QUIC and
TURN,
so it's best to avoid running both on the same socket. However, if both are
in use
then the best algorithm is to pass the packet to QUIC and if it fails to
decrypt then
pass it to TURN. This works in QUICv1 and QUICv2 because for those versions,
all QUIC short header packets are encrypted with forward secure keys. It
might not
work for some future versions of QUIC but we can note that as a warning.

David

On Fri, May 20, 2022 at 11:15 AM Bernard Aboba <bernard.aboba@gmail.com>
wrote:

> David --
>
> Thank you for your comments. I will make the changes you recommend with
> respect to bit greasing.
>
> The TURN channel conflict issue will require some WG discussion.
>
> TURN channels are not supported in WebRTC, so the potential conflict
> between TURN channels and QUIC short header packets would not occur in a
> situation where the STUN/TURN/RTP/RTCP implementation is webrtc-based.
> While ICE traffic will be exchanged prior to exchange of P2P QUIC packets,
> I believe that TURN channel traffic can overlap in time with QUIC short
> header packets, and since there is overlap in their first octet range with
> TURN channels and QUIC short header packets, the only solution might be to
> say "don't use TURN channels".   Anyone see an issue with that?
>
> Even though the P2P QUIC trial in Chromium only. allowed a single
> connection between endpoints, the WG has discussed the potential need for
> more than one P2P QUIC connection between endpoints. So we probably want to
> avoid assumptions about a single connection between peers, if possible.
>
> On Fri, May 20, 2022 at 10:23 AM David Schinazi <dschinazi.ietf@gmail.com>
> wrote:
>
>> [ QUIC to BCC ]
>>
>> Thanks for the ping Jonathan.
>>
>> I've read the document and overall it looks good, it's clear and
>> well-written, however I found a couple issues:
>>
>> First issue is on QUIC bit greasing; the draft currently says:
>>
>>    However, it is not compatible with QUIC Bit
>>    greasing, as defined in [I-D.ietf-quic-bit-grease].  Therefore, in
>>    situations where multiplexing is desired, QUIC Bit greasing MUST NOT
>>    be negotiated.
>>
>> but that doesn't reflect how QUIC bit grease works: every endpoint
>> indicates
>> it is willing to accept grease - you don't need both endpoints to agree
>> to receive
>> grease for grease to be enabled in the other direction. So I'd rephrase
>> it as such:
>>
>>    However, it is not compatible with QUIC Bit
>>    greasing, as defined in [I-D.ietf-quic-bit-grease].  Therefore,
>>    endpoints that wish to use multiplexing on their socket MUST
>>    NOT send the grease_quic_bit transport parameter.
>>
>> Similarly, I'd remove any mention of "negotiating QUIC bit greasing" in
>> other
>> parts of the document since the use of "negotiation" is unclear.
>>
>> Also, typo "demultplexed"
>>
>> Second issue is on the demultiplexing algorithm; draft currently says:
>>
>>    If the value is
>>    between 64 and 79 inclusive, then if a packet has been previously
>>    forwarded that is in the range of 192 and 255, then the packet is
>>    QUIC, otherwise it is TURN Channel.
>>
>> It's unclear to me what the scope of "if a packet has been previously
>> forwarded" is. In particular, how far back does "previously" go? If it
>> means "since this socket has been opened", then this only works if
>> there is only one QUIC connection on this socket. Also, is this a
>> listening socket (3-tuple) or a connected socket (5-tuple)? One
>> more point about this: relying on the fact that connections start
>> with long headers is dangerous: QUICv1 behaves that way but the
>> QUIC invariants on RFC8999 specify that other versions of QUIC
>> might change that.
>>
>> David
>>
>>
>> On Fri, May 20, 2022 at 9:46 AM Jonathan Lennox <jonathan.lennox@8x8.com>
>> wrote:
>>
>>> The AVTCore working group is holding a Working Group Last Call on its
>>> document “Multiplexing Scheme Updates for QUIC”.
>>>
>>> We would appreciate review by subject matter experts in QUIC.  Please
>>> comment on the avt@ietf.org mailing list.
>>>
>>> For background, the abstract of this document is:
>>>
>>>    This document defines how QUIC, Datagram Transport Layer Security
>>>    (DTLS), Real-time Transport Protocol (RTP), RTP Control Protocol
>>>    (RTCP), Session Traversal Utilities for NAT (STUN), Traversal Using
>>>    Relays around NAT (TURN), and ZRTP packets are multiplexed on a
>>>    single receiving socket.
>>>
>>>    This document updates RFC 7983 and RFC 5764.
>>>
>>>
>>> Begin forwarded message:
>>>
>>> *From: *Jonathan Lennox <jonathan.lennox@8x8.com>
>>> *Subject: **Working Group Last Call on "Multiplexing Scheme Updates for
>>> QUIC"*
>>> *Date: *May 20, 2022 at 12:40:06 PM EDT
>>> *To: *avt@ietf.org
>>>
>>> This is an announcement of Working Group Last Call (WGLC) on
>>> "Multiplexing Scheme Updates for QUIC”.
>>>
>>> The document is available for inspection here:
>>> https://datatracker.ietf.org/doc/draft-ietf-avtcore-rfc7983bis/
>>>
>>> WGLC will last until Monday, June 6, 2022, midnight Pacific Time.
>>>
>>> In response, please reply with one of the following:
>>>    * I support publication of the document as is.
>>>    * I support publication of the document, but have comments (please include
>>> details)
>>>    * I object to publication of the document, based on the following issues
>>> (please include details),
>>>
>>> Jonathan
>>> For the AVTCore Chairs
>>>
>>>
>>> _______________________________________________
>> Audio/Video Transport Core Maintenance
>> avt@ietf.org
>> https://www.ietf.org/mailman/listinfo/avt
>>
>