Archive

Re: [hybi] -09: abstract and introduction

Iñaki Baz Castillo <ibc@aliax.net> Thu, 16 June 2011 10:31 UTC

MIME-Version: 1.0
In-Reply-To: <BANLkTinWNrjdA9sx3Kx7NX_h7OC8k0e_cg@mail.gmail.com>
References: <4DF91FCA.8060403@stpeter.im> <BANLkTinBEprfvY7oRu6_ZeiX4ei0rS5GjA@mail.gmail.com> <4DF93B86.7050704@stpeter.im> <BANLkTinWNrjdA9sx3Kx7NX_h7OC8k0e_cg@mail.gmail.com>
Date: Thu, 16 Jun 2011 12:31:00 +0200
Message-ID: <BANLkTinJJKgtq+pr3AuY90SfbhSVJSVbMQ@mail.gmail.com>
From: =?UTF-8?Q?I=C3=B1aki_Baz_Castillo?= <ibc@aliax.net>
To: Peter Saint-Andre <stpeter@stpeter.im>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Cc: "hybi@ietf.org" <hybi@ietf.org>
Subject: Re: [hybi] -09: abstract and introduction
Precedence: list

2011/6/16 Iñaki Baz Castillo <ibc@aliax.net>et>:
> You have not enough data. A WebSocket service is not just identified
> by a host and optional port, it also requires an URI schema (ws for
> plain TCP or wss for TLS over TCP). So you need a WebSocket URI (like
> "ws://1.2.3.4[:999]).
>
> In your example above, if you want to point a client to the WebSocket
> service at example.com, how do you know wheter to use TLS or not? you
> need to know the URI schema for that.
>
> Of course, in the case of using SRV records things change a bit (since
> the server IP and port) must be determined by performing SRV
> procedures and more than one valid destinations can be retrieved in
> the DNS response.


However there is a way, at least in SIP protocol, for the client to
discover which transport (UDP, TCP, TLS over TCP) to use when
contacting a server: using DNS NAPTR records (RFC 2915).

For example, a SIP client wants to contact the server with domain
oversip.net so it performs a NAPTR DNS query:

  $ host -t NAPTR oversip.net
  oversip.net has NAPTR record 10 50 "S" "SIP+D2U" "" _sip._udp.oversip.net.
  oversip.net has NAPTR record 40 50 "S" "SIP+D2S" "" _sip._sctp.oversip.net.
  oversip.net has NAPTR record 50 50 "S" "SIPS+D2S" "" _sips._sctp.oversip.net.
  oversip.net has NAPTR record 5 50 "S" "SIPS+D2T" "" _sips._tcp.oversip.net.
  oversip.net has NAPTR record 10 50 "S" "SIP+D2T" "" _sip._tcp.oversip.net.

If the SIP client just supports SIP over UDP, TCP and TLS, it would
just take DNS records with service "SIP+D2U", "SIP+D2T" and
"SIPS+D2T".
It would then choose the resource with best 'order' (in this case
"SIPS+D2T") and perform a DNS SRV query for  _sips._tcp.oversip.net,
retrieving various SRV records (each one with a domain for which DNS A
must be queried, and a port). Then the client should try the SRV
record with best priority (taking into account the 'weight' field if
more than one record with same 'priority') and connect via TCP to the
resulting IP and port.

I see that NAPTR records don't exist in XMPP, so given a domain how
does a client know wheter it must use TCP or TLS??


-- 
Iñaki Baz Castillo
<ibc@aliax.net>

[hybi] -09: abstract and introduction Peter Saint-Andre
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Peter Saint-Andre
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Simon Pieters
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Iñaki Baz Castillo
Re: [hybi] -09: abstract and introduction Greg Wilkins
Re: [hybi] -09: abstract and introduction Peter Saint-Andre
Re: [hybi] -09: abstract and introduction Alessandro Alinone
Re: [hybi] -09: abstract and introduction Salvatore Loreto
Re: [hybi] -09: abstract and introduction Alexey Melnikov