Re: [Ice] Review of draft-holmberg-ice-pac-01

Justin Uberti <juberti@google.com> Thu, 18 April 2019 21:44 UTC

Return-Path: <juberti@google.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38B091203CD for <ice@ietfa.amsl.com>; Thu, 18 Apr 2019 14:44:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.501
X-Spam-Level:
X-Spam-Status: No, score=-17.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RHvjnN9wdWzS for <ice@ietfa.amsl.com>; Thu, 18 Apr 2019 14:44:25 -0700 (PDT)
Received: from mail-io1-xd2d.google.com (mail-io1-xd2d.google.com [IPv6:2607:f8b0:4864:20::d2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F1F312037E for <ice@ietf.org>; Thu, 18 Apr 2019 14:44:25 -0700 (PDT)
Received: by mail-io1-xd2d.google.com with SMTP id s7so3054622iom.12 for <ice@ietf.org>; Thu, 18 Apr 2019 14:44:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wXIMa+rat9aHiq4UkDKMbPNA2tku1KV9k2Mf/dGAhDs=; b=V3Vas1mrgjjEGUUZiw1wO+4JeDZyDC576irNSSNhtS6s9He4PzZ6S9Fx5Hd7doyHl5 unNjHtRGwFnyjY7LJdGB5KXjjk3IX7UOGn1iDWvUw5uIarOz6yv6e3/6B8DnEZ0gB/qS /7Fv2j11mHESlTQkzCyfc++/N/IluAFCDUcei0prD0yKQcAp8KzbJsvgtoeOw1RpX8jQ iHpL8y24SzeCDRPQOEHLJhZVasC8z+6IbQWs4gO0VyBLN8hEjeI1i/eA+eieImx96Snx Gv5tRCAoydNSsEMonofr9ATRAJ477rnQ+Zc8M64CmgCyPmDVXJn2RoysxoPNnZxumAva yt3Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wXIMa+rat9aHiq4UkDKMbPNA2tku1KV9k2Mf/dGAhDs=; b=pbX7LO1suWyRCwoFuuZVGX7gl8waMbigiG7ihLxB/P0YeNP8DtZ18fStA2fGfsMPcn URFQHUS/AoMWnfgylQ/RpqDiL5G6SMhEX3PVTtC2pRuvY4fr/02paR9D03xFpodMLLLm klR5rAvtUJBSjBX650dKRf/1sb17/Zhx1uIxLCyOJMmi8tpqb68RURT5NyArarm1H6bY fqwUyx56Di5Ngon6bQjJ3GJR0NQ5VBpEp2HoexCMDNEZnKoOByyfL7aHJHiR1R6c2oEj 6shDLSuojMOnfM7pMBv4AG9bU22RSpsGvx8TiGwFMFjOrg5I7oYGpz8HdHFHcU5g2QmC 5DCw==
X-Gm-Message-State: APjAAAWARpTZs0Mg4ML/CWz6bZrl/U/1C8rFpCSnFqBpMC3X8x8aQ6Er DbnKVmkjmNboi8XEf6wgNxBllotZTr6QokBcP4VKZA==
X-Google-Smtp-Source: APXvYqzjo7U/PbmuOzgMcf4OR7DrlJl2eftXt1kijPxwgLV4/SSPP3gXhEBaqyX2OXej18fOpD8/BGcGwSD5MxJ/Ci0=
X-Received: by 2002:a6b:d016:: with SMTP id x22mr339305ioa.181.1555623864230; Thu, 18 Apr 2019 14:44:24 -0700 (PDT)
MIME-Version: 1.0
References: <CAOW+2dtVh1abzAF5HSQ728TBAmg=Mtz99piN-eTSdK5b+wVx7g@mail.gmail.com> <CAD5OKxtn8nZcMFsCTST-Wokqz2+QBJZqSfyp95yYR-fEfD61og@mail.gmail.com> <CAOJ7v-0RZr4-f9U3++b39ObFCmpirjYsf75azY86rQX-WfDRbA@mail.gmail.com>
In-Reply-To: <CAOJ7v-0RZr4-f9U3++b39ObFCmpirjYsf75azY86rQX-WfDRbA@mail.gmail.com>
From: Justin Uberti <juberti@google.com>
Date: Thu, 18 Apr 2019 14:44:12 -0700
Message-ID: <CAOJ7v-3DSnrrUhcN+YLv_05macYT6GHWTYn10dV72kYN3QLm3w@mail.gmail.com>
To: Roman Shpount <roman@telurix.com>
Cc: Bernard Aboba <bernard.aboba@gmail.com>, Christer Holmberg <christer.holmberg@ericsson.com>, ICE WG <ice@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d5858d0586d4e744"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/Ax82akgxEKpvlRS-I6DK02xuZeY>
Subject: Re: [Ice] Review of draft-holmberg-ice-pac-01
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Apr 2019 21:44:28 -0000

Tracking this in https://github.com/cdh4u/draft-ice-pac/issues/7

On Mon, Apr 15, 2019 at 8:33 PM Justin Uberti <juberti@google.com> wrote:

> I don't think there's an easy way to use a newly discovered prflx
> candidate, given the rules about changing the selected pair after ICE has
> completed, but I think this implies that one shouldn't be too hasty to
> declare ICE completion either.
>
> Since some implementations may malfunction if they don't get a
> USE-CANDIDATE quickly, I am not sure if we can wait the full STUN timeout
> interval, but perhaps a somewhat shorter delay (e.g. a few seconds) could
> be recommended before sending USE-CANDIDATE.
>
> On Mon, Apr 8, 2019 at 10:55 AM Roman Shpount <roman@telurix.com> wrote:
>
>> Bernard,
>>
>> The big issue here is when ICE agent can release candidates. Normally,
>> when ICE nomination completes, unused ICE candidates, such as unused local
>> interfaces or TURN candidates are released after a short (3 second)
>> timeout. Because of this, running new ICE connectivity checks without ICE
>> re-start (which means new ufrag and pwd, signaling exchange and allowing
>> remote to gather new candidates) is likely not going to succeed. For
>> instance, one party can move from IPv4 to IPv6 network, but the other party
>> would already release its lPv6 candidate, which will cause all connectivity
>> checks to fail.  Also, peer reflexive candidates are not gathered after ICE
>> nomination is complete. Changing this will not be a backwards compatible
>> change. This is completely different from the use case discussed in ice-pac
>> draft, which deals with ICE nomination failing before peer reflexive
>> candidates are discovered. All that ice-pac draft does is specifying a
>> delay for ICE nomination completion in the absence of remote candidates,
>> not collecting remote candidates after nomination is complete.
>>
>> Regards,
>> _____________
>> Roman Shpount
>>
>>
>> On Mon, Apr 8, 2019 at 1:28 PM Bernard Aboba <bernard.aboba@gmail.com>
>> wrote:
>>
>>> A question has arisen recently about the behavior with respect to peer
>>> reflexive candidates discovered *after* ICE completion:
>>> https://github.com/w3c/webrtc-nv-use-cases/issues/10
>>>
>>> draft-holmberg-ice-pac doesn't relate to that question, but I'm
>>> wondering whether we might also see significant differences in
>>> implementation behavior there as well. RFC 8445 appears to require an ICE
>>> restart to be able to use a newly discovered peer reflexive candidate after
>>> ICE completion because it represents a change in the destination, but I'm
>>> wondering if there are implementations that enable a peer reflexive
>>> candidate to be used anyway.
>>>
>>> Christer Holmberg said:
>>>
>>> "Hi,
>>>
>>> Doing an ICE restart means you have to collect and exchange candidates again. Of course one can do that once ICE failure has been declared, and nothing prevents one from doing an ICE restart after that if one thinks the result will be different. But, the focus of the draft is not to declare ICE failure while working candidates may still arrive.
>>>
>>> Having said that, one should of course not wait forever for the peer reflexive candidates. The draft will not mandate a specific time value, but there probably will be a little more text about things to take into consideration when determining how long to wait.
>>>
>>> Regards,
>>>
>>>
>>> Christer"
>>> _______________________________________________
>>> Ice mailing list
>>> Ice@ietf.org
>>> https://www.ietf.org/mailman/listinfo/ice
>>>
>> _______________________________________________
>> Ice mailing list
>> Ice@ietf.org
>> https://www.ietf.org/mailman/listinfo/ice
>>
>