Re: [BEHAVE] WGLC: draft-ietf-behave-turn-tcp-04

"Dan Wing" <dwing@cisco.com> Sat, 22 August 2009 00:14 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E92223A6924 for <behave@core3.amsl.com>; Fri, 21 Aug 2009 17:14:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.759
X-Spam-Level:
X-Spam-Status: No, score=-6.759 tagged_above=-999 required=5 tests=[AWL=-0.160, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9lozl-iMUxnU for <behave@core3.amsl.com>; Fri, 21 Aug 2009 17:14:29 -0700 (PDT)
Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 8FECD3A68FA for <behave@ietf.org>; Fri, 21 Aug 2009 17:13:58 -0700 (PDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApsEAOvUjkqrR7MV/2dsb2JhbACLFrF6iDc2B5AKBYIygWg
X-IronPort-AV: E=Sophos;i="4.44,253,1249257600"; d="scan'208";a="231496464"
Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-1.cisco.com with ESMTP; 22 Aug 2009 00:14:04 +0000
Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n7M0E45C028707; Fri, 21 Aug 2009 17:14:04 -0700
Received: from dwingwxp01 ([10.32.240.197]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id n7M0E4WC007205; Sat, 22 Aug 2009 00:14:04 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Ari Keranen' <ari.keranen@nomadiclab.com>, draft-ietf-behave-turn-tcp@tools.ietf.org
References: <0a9901ca10f2$93cdab60$5f7d150a@cisco.com> <4A8BD224.1070508@nomadiclab.com>
Date: Fri, 21 Aug 2009 17:14:04 -0700
Message-ID: <05fd01ca22bd$7534ac30$c5f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcogtwncBlsjNJfmS+GpSby82N7wbwCBb4IQ
In-Reply-To: <4A8BD224.1070508@nomadiclab.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1984; t=1250900044; x=1251764044; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dwing@cisco.com; z=From:=20=22Dan=20Wing=22=20<dwing@cisco.com> |Subject:=20RE=3A=20[BEHAVE]=20WGLC=3A=20draft-ietf-behave- turn-tcp-04 |Sender:=20; bh=CW+1bxh8lcchqUqjIuPPrIPFA/dmqKVArgub5fW7TWM=; b=peTw6Hu+h9xLTUkXzXssUtKgu+M+j999iErlXNRu0hJ6yl5dVuXE4Xivpc PNobHBojmdmg9vo+B5BbmDZi+T5QhtldrJcAkowAnzqscapu52KyWc2g2iCY 7dMcq9fNxmGy4AhpxKOGOQx/IHIdOX2245ID9c1e4CloBy/YRxiFg=;
Authentication-Results: sj-dkim-1; header.From=dwing@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; );
Cc: draft-ietf-behave-turn@tools.ietf.org, behave@ietf.org
Subject: Re: [BEHAVE] WGLC: draft-ietf-behave-turn-tcp-04
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Aug 2009 00:14:30 -0000

 

> -----Original Message-----
> From: behave-bounces@ietf.org 
> [mailto:behave-bounces@ietf.org] On Behalf Of Ari Keranen
> Sent: Wednesday, August 19, 2009 3:21 AM
> To: draft-ietf-behave-turn-tcp@tools.ietf.org
> Cc: behave@ietf.org
> Subject: Re: [BEHAVE] WGLC: draft-ietf-behave-turn-tcp-04
> 
> Hi,
> 
> One technical issue in draft-ietf-behave-turn-tcp-04 caught 
> my attention:
> 
> In section 4.5., "Sending and Receiving Data" is says:
> 
>     [...] Data on a data connection MUST NOT
>     be interpreted as STUN messages.
> 
> I think this is too heavy restriction. What about if the peer 
> wants to 
> send some STUN messages on the path via the TURN server and 
> would need 
> the TURN client to parse them as STUN?

How would the TURN server identify such traffic that it should
respond to?  Thinking aloud, one solution is for the local TURN
client to tell the TURN server which STUN username(s) indicate 
the STUN message is intended for the TURN server.

> I would rather make this "SHOULD NOT" to be future proof. Or even 
> removing the whole restriction should not do much harm, right?

The reason for this passage is so that ICE connectivity checks
can be performed, through the TURN server, between the endpoints.
If the TURN server 'eats' (processes) the incoming messages
from the remote peer, the connectivity checks will fail.


This is really something that belongs in the TURN specification
because I believe it is not unique to TURN-TCP.  If anything, the 
TURN specification should say something like: 

  In the absence of an standards-track enhancement to identify 
  STUN traffic intended for the TURN server, data on a data
  connection MUST NOT be interpreted as a STUN message.

Thoughts?

(CC'ing TURN authors.)

-d


> 
> Cheers,
> Ari
> _______________________________________________
> Behave mailing list
> Behave@ietf.org
> https://www.ietf.org/mailman/listinfo/behave
>