Re: [bfcpbis] Comments on draft-ietf-bfcpbis-rfc4583bis-03

Tom Kristensen <tomkrist@cisco.com> Tue, 30 October 2012 12:19 UTC

Return-Path: <tomkrist@cisco.com>
X-Original-To: bfcpbis@ietfa.amsl.com
Delivered-To: bfcpbis@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 235B521F8578 for <bfcpbis@ietfa.amsl.com>; Tue, 30 Oct 2012 05:19:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.999
X-Spam-Level:
X-Spam-Status: No, score=-9.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_17=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZH3eDjPxPpfW for <bfcpbis@ietfa.amsl.com>; Tue, 30 Oct 2012 05:19:24 -0700 (PDT)
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id 2ADB421F856E for <bfcpbis@ietf.org>; Tue, 30 Oct 2012 05:19:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4852; q=dns/txt; s=iport; t=1351599564; x=1352809164; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=tprmSNsHMoh90qgAvKhS6rhSHmbIHDLEeILxnccQwlE=; b=bx/QmnpKAdb3OBJIhEzalIHJ8JUGz/hZCs6ExaScRlwvIDtd5FH1VGe+ PJA+7yXPsFiSba6D6E+HwiidhEpBTEsLRWh4CPFtWrJ4w8XQItZrtVVk3 GaYRVXSU0zfZWV+/RIjn+xdW607hYuKXRru/1ylMR+cwQEaEsb0IMGtsM E=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av8EAKrEj1CQ/khN/2dsb2JhbABEwzWBCIIeAQEBBBIBJUABEAsYCRYPCQMCAQIBRQYNAQcBAR6HZAucVY9nkDaLdYZdA5JCgzKBGoRPiG6Ba4Jw
X-IronPort-AV: E=Sophos;i="4.80,679,1344211200"; d="scan'208";a="146017316"
Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-1.cisco.com with ESMTP; 30 Oct 2012 12:19:14 +0000
Received: from [10.54.86.36] (dhcp-10-54-86-36.cisco.com [10.54.86.36]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id q9UCJDB8014050; Tue, 30 Oct 2012 12:19:13 GMT
Message-ID: <508FC5C1.4040702@cisco.com>
Date: Tue, 30 Oct 2012 13:19:13 +0100
From: Tom Kristensen <tomkrist@cisco.com>
Organization: Cisco
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.15) Gecko/20101027 Fedora/3.0.10-1.fc12 Lightning/1.0b2pre Thunderbird/3.0.10
MIME-Version: 1.0
To: Gonzalo Camarillo <Gonzalo.Camarillo@ericsson.com>
References: <5087FAE4.5010900@ericsson.com> <508FA129.1090802@cisco.com> <508FBF31.8000906@ericsson.com>
In-Reply-To: <508FBF31.8000906@ericsson.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: bfcpbis@ietf.org
Subject: Re: [bfcpbis] Comments on draft-ietf-bfcpbis-rfc4583bis-03
X-BeenThere: bfcpbis@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: BFCPBIS working group discussion list <bfcpbis.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/bfcpbis>
List-Post: <mailto:bfcpbis@ietf.org>
List-Help: <mailto:bfcpbis-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bfcpbis>, <mailto:bfcpbis-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Oct 2012 12:19:26 -0000

Gonzalo,

I'll add a definition of "BFCP connection" in rfc4582bis to avoid confusion.

Regarding the setup attr. I merely reflected in rfc4583bis what has been 
part of rfc4582 for a while.
- Cf. http://tools.ietf.org/html/draft-ietf-bfcpbis-rfc4582bis-06#section-7
- Note that the setup attr. is also used in DTLS-SRTP, cf. RFC 5763.

-- Tom

On 10/30/2012 12:51 PM, Gonzalo Camarillo wrote:
> Hi Tom,
>
> thanks for your answers.
>
> With respect to the term BFCP connection, in addition to making a
> consistent use of it across both documents, make sure it is defined
> somewhere so that implementers are clear on what it means.
>
> Regarding UDP, we cannot really use the setup attribute for that. That
> attribute is defined for connection oriented protocols. Additionally, we
> need to be consistent regarding DTLS and TLS server determination.
> Section 8 explains how to determine the endpoint acting as the TLS
> server (i.e., the answerer). We cannot determine which endpoint acts as
> the DTLS server in a different way.
>
> Cheers,
>
> Gonzalo
>
>
> On 30/10/2012 11:43 AM, Tom Kristensen wrote:
>    
>> On 10/24/2012 04:27 PM, Gonzalo Camarillo wrote:
>>      
>>> Folks,
>>>
>>>        
>> [...]
>>      
>>> Comments on draft-ietf-bfcpbis-rfc4583bis-03
>>>
>>> Section 3 includes a discussion about how to set the port field. That
>>> discussion is only relevant to TCP. The new draft needs to explain that
>>> and add a discussion about port handling in UDP.
>>>
>>>        
>> Good catch. Reorganizing the text and adding this for UDP:
>>
>>    "When UDP is used as transport, the port field contains the
>>     port to which the remote endpoint will direct BFCP messages
>>     regardless of the value of the 'setup' attribute."
>>
>>      
>>> Also, the document needs to discuss what is the equivalent of
>>> establishing a TCP connection (i.e., it allows endpoints to start
>>> exchanging BFCP messages) in UDP.
>>>
>>>        
>> The term "BFCP connection" is used in rfc4582bis/rfc4583bis independent
>> of underlying transport.
>>
>>   (For rfc4582bis: I propose we keep this common term regardless of
>> underlying transport and change the three occurrences of "BFCP
>> association" in Section 6.2 and 8.31 to "BFCP connection" as well.)
>>
>> However, we do indeed need to specify the counterpart of Section 7 "TCP
>> Connection Management" for UDP as transport. Will add a sentence or two,
>> since using UDP as transport is quite straight forward. Will also need
>> to add a UDP description to Section 8, i.e. mandate using the 'setup'
>> attribute when DTLS is used.
>>
>> Added to start of Section 7, now renamed to "BFCP Connection Management":
>>    "BFCP connections may use TCP or UDP as underlying transport. BFCP
>>     entities exchanging BFCP messages over UDP will direct the BFCP
>>     messages to the peer side connection address and port provided in
>>     the SDP 'm' line. TCP connection management is more complicated
>>     and is described below."
>> And the subsection named "TCP Connection Management" follows.
>>
>> Added this sentence at the end of Section 8:
>>    "Endpoints that use the offer/answer model to establish a DTLS
>> association MUST
>>     support the 'setup' attribute, as defined in RFC 4145. When
>>     DTLS is used with UDP, the 'setup' attribute indicates which of the
>> endpoints
>>     (client or floor control server) initiates the DTLS association setup."
>>
>>      
>>> Section 6 contains the following new paragraph:
>>>
>>> " Note: In [15] 'm-stream' was erroneously used in Section 9.  Although
>>>     the example was non-normative, it is implemented by some vendors.
>>>     Therefore, it is RECOMMENDED to support parsing and interpreting
>>>     'm-stream' the same way as 'mstrm' when receiving."
>>>
>>> The text should clarify (or be more explicit about) whether existing
>>> implementations are floor control server implementations or client
>>> implementations. The idea is that new implementers know clearly what
>>> exactly they need to support in order to be backwards compatible with
>>> those legacy implementations (whose implementers did not read RFCs but
>>> only the examples :-) ).
>>>
>>>        
>> Yeah, what kind of developers do this kind of things? :-P
>>
>> Usage of a=floorid (and mstrm/m-stream) applies to endpoints willing to
>> act as server, will add this to the second sentence in the note:
>>    "[...] some vendors and occurs in cases where the endpoint is willing
>> to act as an server."
>>
>>      
>>> The last paragraph of Section 8 discusses which entity behaves as the
>>> TLS server. Do we need a similar discussion for DTLS?
>>>
>>>        
>> Indeed. Handled above.
>>
>> -- Tom
>>
>>      
>