Re: [bfcpbis] BFCP-UDP and DTLS

Tom Kristensen <tomkrist@cisco.com> Wed, 28 November 2012 14:35 UTC

Return-Path: <tomkrist@cisco.com>
X-Original-To: bfcpbis@ietfa.amsl.com
Delivered-To: bfcpbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F4E821F8462 for <bfcpbis@ietfa.amsl.com>; Wed, 28 Nov 2012 06:35:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level:
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1gmbAhBt7olq for <bfcpbis@ietfa.amsl.com>; Wed, 28 Nov 2012 06:35:52 -0800 (PST)
Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id 328EC21F84D2 for <bfcpbis@ietf.org>; Wed, 28 Nov 2012 06:35:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6000; q=dns/txt; s=iport; t=1354113352; x=1355322952; h=message-id:date:from:mime-version:to:subject:references: in-reply-to; bh=qWwjkbliN23UXCCt6qyV7iBrAqtvah3FMsxcLT1b88M=; b=i1AqwhK2L+n/5CEicAqpELOptza/CDW77+JK5y4B223dksXnwjtg1PEx YcMrehJ3Mc5/XiT20TyJLEivFeRp8hlIGJ3mgPGr6eVMUi569oyBwJjQm dCmaPC3nLR3dFDgd+GbmPfHWaigcZCANhbgirrmI5S7in8qzBw7/ydhxC 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AiQGALEgtlCQ/khL/2dsb2JhbABFgkmJQLQMFnOCHgEBAQQBAQEqQQoRCxgJFg8JAwIBAgEVMBMGAgEBiAsMvnAEjD+EQQOST4MyhWuKWYJx
X-IronPort-AV: E=McAfee;i="5400,1158,6909"; a="9988830"
Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-4.cisco.com with ESMTP; 28 Nov 2012 14:35:51 +0000
Received: from [10.61.102.228] (dhcp-10-61-102-228.cisco.com [10.61.102.228]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qASEZo4w028396 for <bfcpbis@ietf.org>; Wed, 28 Nov 2012 14:35:51 GMT
Message-ID: <50B62146.2050707@cisco.com>
Date: Wed, 28 Nov 2012 15:35:50 +0100
From: Tom Kristensen <tomkrist@cisco.com>
Organization: Cisco
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.15) Gecko/20101027 Fedora/3.0.10-1.fc12 Lightning/1.0b2pre Thunderbird/3.0.10
MIME-Version: 1.0
To: bfcpbis@ietf.org
References: <7594FB04B1934943A5C02806D1A2204B047F4F@ESESSMB209.ericsson.se>
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B047F4F@ESESSMB209.ericsson.se>
Content-Type: multipart/alternative; boundary="------------060207080001000900000201"
Subject: Re: [bfcpbis] BFCP-UDP and DTLS
X-BeenThere: bfcpbis@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: BFCPBIS working group discussion list <bfcpbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/bfcpbis>
List-Post: <mailto:bfcpbis@ietf.org>
List-Help: <mailto:bfcpbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Nov 2012 14:35:54 -0000

Thanks Christer,

In the upcoming version of rfc4583bis, the usage of the RFC 4145 'setup' 
will be described (in Section 8). This attribute was just mentioned in 
rfc4582bis until now.

In rfc4582bis we say: "In order to facilitate the initial establishment 
of NAT bindings, and to maintain those bindings once established, BFCP 
entities using unreliable transport are RECOMMENDED to use STUN <xref 
target="RFC5389"/> Binding Indication for keep-alives, as described for 
ICE <xref target="RFC5245"/>."

However, we may refer to Section 6.7 (and especially 6.7.2) as well, but 
that may belong to rfc4582bis (where usage of STUN binding indications 
are recommended) instead of rfc4583bis?

-- Tom

On 11/28/2012 09:55 AM, Christer Holmberg wrote:
>
> Hi,
>
> I haven't really been following the BFCPbis work, so I appologize if 
> the following has been discussed.
>
> draft-ietf-bfcpbis-rfc4583bis-03 refers to section 5 of RFC 5763 for 
> the SDP Offer/Answer procedures, and DTLS role selection (TLS 
> client/server).
>
> However, I think it would also be good to refer to section 6.7 of RFC 
> 5763. Especially section 6.7.2 is important, in my view. It says that 
> the passive UA sends a STUN request, in order to open the NAT pin 
> hole, which means both UAs don't have to be active if they are behind 
> NATs, and don't support ICE. Otherwise it could cause problem, if both 
> are active and end up acting as TLS clients.
>
> Regards,
>
> Christer
>
>
> _______________________________________________
> bfcpbis mailing list
> bfcpbis@ietf.org
> https://www.ietf.org/mailman/listinfo/bfcpbis
>