Re: [Ice] Re-nomination and candidate pair switching in RFC 5245bis - PROPOSAL

Bernard Aboba <bernard.aboba@gmail.com> Thu, 31 August 2017 11:37 UTC

Return-Path: <bernard.aboba@gmail.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E039A1321A5 for <ice@ietfa.amsl.com>; Thu, 31 Aug 2017 04:37:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kvA4bfiMDiOx for <ice@ietfa.amsl.com>; Thu, 31 Aug 2017 04:37:29 -0700 (PDT)
Received: from mail-ua0-x229.google.com (mail-ua0-x229.google.com [IPv6:2607:f8b0:400c:c08::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC2DE132D56 for <ice@ietf.org>; Thu, 31 Aug 2017 04:37:28 -0700 (PDT)
Received: by mail-ua0-x229.google.com with SMTP id 105so1104508uad.3 for <ice@ietf.org>; Thu, 31 Aug 2017 04:37:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=83rPBYW3OhMbZEHV9bjJnuzGfAM0KxGoQ8IEZVAQlIk=; b=Bt2iOcnrYkusiRxg4YFfTNICqlmr2f5hOtdzsGGMIdPFRfPqlkJvmo7mOBmE5+k0mq mpxa58V3Ej5O0vvcTy/TRk2sZ0Khp2BiLcNY52gY5WgYlXNQXkFEGP2AlhqxEWMVC37b yCQlXwS0j7F7wnZz1+z9O/F7wkrGaktCq0w+f7jN3OLIsYGMZMWYQ/Ipl57AK7G4Oxha /KPYvMf7vk1c39c2wwzAso0CkMqh/cl3i9+vLdud3lVzZtkj1Qu2Qq2H5awfIiKIaaYX uE14AHtRk8xHqMOiKR7hX7jhAseAaF8QR7zBJ206+4C3qCZRoGvnk3+xEMf8n9TbDFV2 8VFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=83rPBYW3OhMbZEHV9bjJnuzGfAM0KxGoQ8IEZVAQlIk=; b=GstxXa8GzQTzmUJbYSN8gRei5G8mOD49/OZqY5HmTGekylP0bmUu3gr+HRFp2b4XKN p1/40ClDwMRsiD2A6gkTm5idL+1BL4nxG0ySVM3OkaGGezKQOyf7/Bsd2dRc6orF1DtV B85jellMhmj6wd07am1hoyVauBBG11ZBS5ZI+VE5/Da6IAMk4tZsKRwzqt9u7gwFdpT4 QucM9h75WycUKCHqKc6QLWxgQTw+iuY5CCN9BnG1X38CpLfX/5TSjh5iOGmeoPsY8miw ODUvUyJP+qSgrLqBe8iU8xrQXWveTjDbErXGjADnDMsZfJDyQEZ3wJc9bcCHcK1pPIJ2 Qkig==
X-Gm-Message-State: AHYfb5iOTaDshjsK50PHy8jrcsu6dumHgUAQncem6aCNDZj1cDgG92mN KOUe1zrJpKhpLxCJ5MxD9KI0IhNPBA==
X-Google-Smtp-Source: ADKCNb4c+96TGSU2wnJqQf+m6P0SkuX+qDyYAEoYifMddgJ4127u4DCaZ6lG+IdVOB01B1GKH7d6CEtztWl34nYG7RY=
X-Received: by 10.176.64.234 with SMTP id i97mr2682656uad.52.1504179447541; Thu, 31 Aug 2017 04:37:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.176.74.23 with HTTP; Thu, 31 Aug 2017 04:37:07 -0700 (PDT)
In-Reply-To: <D5CD8D5A.20C78%christer.holmberg@ericsson.com>
References: <7594FB04B1934943A5C02806D1A2204B4CC9ED94@ESESSMB109.ericsson.se> <CAJrXDUHGYkivt5+dnX48C8TkR9W7afoUWAPv8+MbafYNsZsFmA@mail.gmail.com> <CAOW+2duR54wenv088kZSmKJj56u8j=Qi6KzNUNrjA0=o5qhekg@mail.gmail.com> <CAJrXDUEKWCa7GsL_bSrdvVN-erROSgHJt5DO5VOZ2Qx3PQr15g@mail.gmail.com> <CAJrXDUH6vvauP8Bj2k+e5B=reTM=5C+vwD0+WidtdTRW5MpdAA@mail.gmail.com> <0447726F-82C7-43D8-99AE-5B72F0B55B6C@gmail.com> <CAJrXDUEW_N+hyceuMN_j=pA36cN69qYQzDuNoOVXuS9uuBcDtA@mail.gmail.com> <90DEFADE-5113-488A-9C0F-2073681D94B1@gmail.com> <D5CD8D5A.20C78%christer.holmberg@ericsson.com>
From: Bernard Aboba <bernard.aboba@gmail.com>
Date: Thu, 31 Aug 2017 07:37:07 -0400
Message-ID: <CAOW+2du91HqzC+QwU-Be1qRWdWMvrp09YEH8u5YqR7TrG8PvZQ@mail.gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Peter Thatcher <pthatcher@google.com>, "ice@ietf.org" <ice@ietf.org>
Content-Type: multipart/alternative; boundary="94eb2c123566a6495105580b11da"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/X-HoR2di4RUAONTazUV-cbcu390>
Subject: Re: [Ice] Re-nomination and candidate pair switching in RFC 5245bis - PROPOSAL
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Aug 2017 11:37:33 -0000

Christer said:

"However, one option would be to require consent in order to do switching.
Then, before the switching takes place, an endpoint would have to get
consent. And, if the remote peer has released the candidate the consent
would fail, and the switch can’t be done."

[BA] That makes sense.

Question:  Is the list of post-nomination validated pairs solely chosen by
the controlling side maintaining consent on them?  Or can the controlled
side indicate an interest in retaining a validated pair by maintaining
consent on it as well? If so, would this imply that controlling and
controlled sides could send on different pairs?



On Thu, Aug 31, 2017 at 2:53 AM, Christer Holmberg <
christer.holmberg@ericsson.com> wrote:

> Hi,
>
> >The problem as I understand it is that RFC 5245bis is intended to be
> usable by non-WebRTC implementations, so it cannot mandate (or even
> mention??) consent.
>
> Correct.
>
> However, one option would be to require consent in order to do switching.
> Then, before the switching takes place, an endpoint would have to get
> consent. And, if the remote peer has released the candidate the consent
> would fail, and the switch can’t be done.
>
> >If this seems silly to you (it does to me) maybe it would make more sense
> to assume RFC 5245bis is for use in a modern ICE implementation usable with
> WebRTC, because after all, isn't that what ICE developers should be working
> on???
>
> I think we also want “legacy” implementations, that previously used
> non-ICE mechanisms, to migrate to ICE.
>
> Regards,
>
> Christer
>
>
>
> On Aug 30, 2017, at 4:55 PM, Peter Thatcher <pthatcher@google.com> wrote:
>
>
>
> On Wed, Aug 30, 2017 at 11:23 AM Bernard Aboba <bernard.aboba@gmail.com>
> wrote:
>
>> On Aug 30, 2017, at 12:28 PM, Peter Thatcher <pthatcher@google.com>
>> wrote:
>>
>> On Wed, Aug 30, 2017 at 9:26 AM Peter Thatcher <pthatcher@google.com>
>> wrote:
>>
>> As far as "just enough" so that it isn't a hindrance: that's why I wanted
>>> to say that agents *may* switch.  It allows a renomination in the future.
>>> Saying they MUST NOT is a hindrance.  I would be fine if the *may* requires
>>> negotiation.  That's what https://www.ietf.org/
>>> archive/id/draft-thatcher-ice-renomination-01.txt does: it negotiates
>>> "renomination".  And that's what Chrome's implementation of WebRTC does.
>>>
>>
>> [BA] It seems like the document would at least need to talk about consent
>> to include a "may". As it is, negotiating "ice2" only means that you're
>> talking to a slightly refurbished RFC 5245 implementation. That's like the
>> difference between a new car with driver assist (a modern WebRTC ICE
>> implementation with Trickle) and an Edsel that's been waxed and given an
>> oil change.
>>
>
> You always need to have consent to use a candidate pair.  I guess the
> question you're asking is how recent does the consent need to be.  But I'm
> not sure we need to standardize that.  If an implementation chooses to be
> too aggressive about switching, it will send a path that doesn't work.  In
> your analogy, you're worried about the driver assist doing something dumb
> and crashing into the Edsel.  Well, don't ship a car that crashes.  Do we
> need to standardize "don't switch to a candidate pair that doesn't work"
> (AKA don't crash)?
>
>