Re: [Ice] ICE PAC: When to start the timer waiting for possible peer reflexive candidates?

Justin Uberti <juberti@google.com> Mon, 29 April 2019 02:00 UTC

Return-Path: <juberti@google.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23257120257 for <ice@ietfa.amsl.com>; Sun, 28 Apr 2019 19:00:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.501
X-Spam-Level:
X-Spam-Status: No, score=-17.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mAGEn_Ih1-Dn for <ice@ietfa.amsl.com>; Sun, 28 Apr 2019 19:00:05 -0700 (PDT)
Received: from mail-it1-x132.google.com (mail-it1-x132.google.com [IPv6:2607:f8b0:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36CBF12024F for <ice@ietf.org>; Sun, 28 Apr 2019 19:00:05 -0700 (PDT)
Received: by mail-it1-x132.google.com with SMTP id z4so14078156itc.3 for <ice@ietf.org>; Sun, 28 Apr 2019 19:00:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=guB467KLQ29ig8OoD0Ihm2ufZPGhy5AYIxdlj73COvk=; b=r/cjhzpJfX9PVH8URGev3s7fh31yyiw9YO+0qu9+IPXM4DDClx6ehAVZsiCWl6YG3L N8TRJHiFrIs8VXsCkeN/W0mLKpRXzdkLj1Tf1znsB1+SkbQSZpC7ZJg/VARjMTC0WIvA IpLxf3JqCqhzqHXcc2JbGeKgU+Fm0WYJQDk+SQ77BH5r4Zd8cz11pSEN9MMO1iUFsCrZ vfA/g1ZHcPkrv/l3GwYHx9HqzELjD0pKOT4q7I/812dBKv9DNGuifD1Hn8ZEpXg5QIIh MQ6P3v4UcqwPLLpyjmJAMUqN2jHqj83xa9zbhUgEbRSbmnQxO3NPN8TzUffHO9iQVOil w7Yg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=guB467KLQ29ig8OoD0Ihm2ufZPGhy5AYIxdlj73COvk=; b=SFcNidyN1RTF5J9+eEFPzU4XtfFCVsqc4OeZikPQ19aWPe02rUj5/z/DXa1RI8VvMJ OcDKV4dzMPZj68eyAu6zeG6CDL/KvzQF/NnVkkIyP99tPaNmzfThnlmYUo31e8UV5xqL d7xnaCaL3slsifgiYTEpU6/ojq3SRxZ29l2lIdDZcdbWOfzaCDJ9DZzITpODpjA79wJo wwHM7ltWo0Ngi2pr5i6JmGInuukgAewrXObDRB71071LXOsWsbqXOkxTArRnwpQdEBPB veTCXTN1Mvci6kSdpdvP7S/UeEEe+rqPPDFIgLqzoc2wXXvzlJCO5sHQM69qDVatYqFg 2DFg==
X-Gm-Message-State: APjAAAXFWFzZOKvGaKn9T9fWQBofwwkxsxoyIIbA2zkX8488sRFT+/3W 29pgrumzftix0S+saO+2qudSQrWHGjcONlmouhP2Tg==
X-Google-Smtp-Source: APXvYqxt/wTpLDCzClcZvsa9b41r1G5UbwBaCy3gAr/wllgkmzoj5mPlzDr3AmQLAbWfmmUwGirML7RY9Ihsv8UXqdc=
X-Received: by 2002:a02:3ecb:: with SMTP id s194mr19811963jas.29.1556503204151; Sun, 28 Apr 2019 19:00:04 -0700 (PDT)
MIME-Version: 1.0
References: <3A66B735-03C9-41FF-95AD-500B0D469C80@ericsson.com> <CAD5OKxsMgNTQPNP4Ni72H+yD4iUeyNK+x6CSvdBApGnPTpr_vg@mail.gmail.com> <A4EC3C01-4D7D-45DF-876D-E58706F74866@ericsson.com> <CAD5OKxt8tDemkK=v4X1gjwJGLYrxcd95S7uV53_fsga6grZ_rA@mail.gmail.com> <30518269-CA9D-4F50-8CE3-062A01DBCD7F@mozilla.com> <CAD5OKxvmRK8Xzu4FSRv3Lgdg-VrrufzGhjAdSmfcLLkrm-jtjw@mail.gmail.com> <0AD3077C-74FA-4585-942A-375B83B3A7A0@ericsson.com> <CAD5OKxsgpf7Hv_nxFOZFwfNk7-_xNRzmoPTA2bZCqZo3wzudKQ@mail.gmail.com> <HE1PR07MB316172053751D307F83DE0EB933E0@HE1PR07MB3161.eurprd07.prod.outlook.com> <CAD5OKxu332E8vzdc4dt09NxXGf9Cr2izwECDAQjc7V_YDx3r5w@mail.gmail.com> <HE1PR07MB316189447ED302BEC5021946933F0@HE1PR07MB3161.eurprd07.prod.outlook.com>
In-Reply-To: <HE1PR07MB316189447ED302BEC5021946933F0@HE1PR07MB3161.eurprd07.prod.outlook.com>
From: Justin Uberti <juberti@google.com>
Date: Sun, 28 Apr 2019 18:59:52 -0700
Message-ID: <CAOJ7v-3Dv4N5j0KykxQf-gHQfvJ9x-VzbTTTcdJyfgYgcdYy5A@mail.gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Cc: Roman Shpount <roman@telurix.com>, Nils Ohlmeier <nohlmeier@mozilla.com>, "ice@ietf.org" <ice@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000093c5f00587a1a4a0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/uiW1Yn5M9CF4idDGutfglx9BIM8>
Subject: Re: [Ice] ICE PAC: When to start the timer waiting for possible peer reflexive candidates?
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Apr 2019 02:00:07 -0000

On Sat, Apr 27, 2019 at 10:42 AM Christer Holmberg <
christer.holmberg@ericsson.com> wrote:

>
> Hi,
>
>
> In a non-trickle case, I think it would be very strange if the agent
> didn’t get any candidates front the peer agent.
>
>
> >I have just sent a message to the mmusic list regarding ice-sip-sdp and
> offers with >no candidates. There is nothing that technically prohibits it
> in RFC 5245, so I >thought it makes sense to add a note which explicitly
> allows it in ice-sip-sdp.
> >
> >There is a valid use case for this, when client is behind NAT and it
> would only >communicate with a server on public address. In such cases,
> client does not need >to collect any candidates and simply send the offer.
> Once it gets the answer from >the server with the public address, client
> can send a STUN bind request to server >address using a local socket not
> bound to any address, which will use default >route. There are multiple
> benefits for implementing it this way, one of which >would be client
> privacy.
>
> One option would then be to say that PAC only applies when an agent
> actually has received some candidates from its peer.
>
> If an agent does NOT receive any candidates from the peer, it knows that
> the only  candidates it will get are peer reflexive ones, and how long the
> agent waits for those is an implementation issue.
>
> Not sure that makes sense, that directly contradicts one of the examples
in the actual PAC document.

Overall I think the Firefox approach makes the most sense - the PAC timer
starts when you have either a local or remote candidate.