Re: [Ice] Re-nomination and candidate pair switching in RFC 5245bis - PROPOSAL

Christer Holmberg <christer.holmberg@ericsson.com> Mon, 04 September 2017 05:44 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41F5E1243F6 for <ice@ietfa.amsl.com>; Sun, 3 Sep 2017 22:44:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level:
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oi4kN0hkV_vd for <ice@ietfa.amsl.com>; Sun, 3 Sep 2017 22:44:29 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C124B1286C7 for <ice@ietf.org>; Sun, 3 Sep 2017 22:44:28 -0700 (PDT)
X-AuditID: c1b4fb3a-617ff700000051a3-c1-59ace83a2a60
Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 53.CA.20899.A38ECA95; Mon, 4 Sep 2017 07:44:26 +0200 (CEST)
Received: from ESESSMB109.ericsson.se ([169.254.9.194]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0352.000; Mon, 4 Sep 2017 07:44:26 +0200
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Bernard Aboba <bernard.aboba@gmail.com>
CC: Peter Thatcher <pthatcher@google.com>, "ice@ietf.org" <ice@ietf.org>, Emil Ivov <emcho@jitsi.org>
Thread-Topic: [Ice] Re-nomination and candidate pair switching in RFC 5245bis - PROPOSAL
Thread-Index: AdMGx5vayPULxOekRUuarjHzPdbbFQayu7YAAAG4ewAAAKDJgAAAEW8AAAQIgIAAhTWxQABTJ90AAAuoNvA=
Date: Mon, 04 Sep 2017 05:44:25 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B56289F26@ESESSMB109.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B4CC9ED94@ESESSMB109.ericsson.se> <CAJrXDUHGYkivt5+dnX48C8TkR9W7afoUWAPv8+MbafYNsZsFmA@mail.gmail.com> <CAOW+2duR54wenv088kZSmKJj56u8j=Qi6KzNUNrjA0=o5qhekg@mail.gmail.com> <CAJrXDUEKWCa7GsL_bSrdvVN-erROSgHJt5DO5VOZ2Qx3PQr15g@mail.gmail.com> <CAJrXDUH6vvauP8Bj2k+e5B=reTM=5C+vwD0+WidtdTRW5MpdAA@mail.gmail.com> <0447726F-82C7-43D8-99AE-5B72F0B55B6C@gmail.com> <7594FB04B1934943A5C02806D1A2204B5626F889@ESESSMB102.ericsson.se> <CAOW+2dv9UqW3J+Z_zQYb1fSbOoPkzc2Guiw5eHng-LbwheQ-cg@mail.gmail.com>
In-Reply-To: <CAOW+2dv9UqW3J+Z_zQYb1fSbOoPkzc2Guiw5eHng-LbwheQ-cg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.150]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupikeLIzCtJLcpLzFFi42KZGbFdUdfqxZpIg0ObLC027PvPbLFm5wQW i28Xai2uLX/N6sDisXPWXXaPBZtKPZYs+cnk8f9NYABLFJdNSmpOZllqkb5dAlfGy2crmAtO mFac7NvC0sA4w6SLkZNDQsBEYs+2NcxdjFwcQgJHGCX+Lm5ngnAWM0rMunQGKMPBwSZgIdH9 TxukQURAW6Lv2z4mEJtZIFNixZwVrCC2sECkxL/1nxhBykUEoiTebsqEMJMkbj2VAqlgEVCR mP3rIyOIzSvgK7Hq2FGoTctZJGYu6GQBSXAKBErsXHCPHcRmFBCT+H5qDdQqcYlbT+YzQdws ILFkz3lmCFtU4uXjf6wQtpLEiu2XwE5gFtCUWL9LH6JVUWJK90N2iL2CEidnPmGZwCg6C8nU WQgds5B0zELSsYCRZRWjaHFqcXFuupGRXmpRZnJxcX6eXl5qySZGYAwd3PLbagfjweeOhxgF OBiVeHgLb6+JFGJNLCuuzD3EKMHBrCTCK3EPKMSbklhZlVqUH19UmpNafIhRmoNFSZzXYd+F CCGB9MSS1OzU1ILUIpgsEwenVAPjVKNJHx2ylNIlZHo/f3n0Ni3+1qJJCeXnHyyr/f1Y8cnn /hSvn6uknveafdz0YamE4EfnrdprLzLsmqBwoOP+/egl30/wMjml/zxxd7l0jNtVucYbWiUN hndsFUJk7635os+ZabrZ4Wp/oo11wfo5psvtzaeZrAnfHp/d+dnefuKLMl8N02BTJZbijERD Leai4kQA5blx+50CAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/yPc26PnCOKxgsO8nKvyXfdKvARw>
Subject: Re: [Ice] Re-nomination and candidate pair switching in RFC 5245bis - PROPOSAL
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Sep 2017 05:44:31 -0000

Hi,

>"The irony is that "ice2" is used to prevent a legacy ICE peer from using aggressive nomination. But, isn't allowing re-nomination more or less bringing "aggressive >nomination" back? :)"
>
>[BA] I think we need to carefully examine the implications of "passive aggressive" as well as the meaning of "nomination" in RFC 5245bis and make sure that the meaning >(and its implications) of these notions are articulated.
>
>*Prior* to nomination, I believe that RFC 5245bis allows both the controlling and controlled sides to select validated pairs to send media on, and permits *either side* to >switch between validated pairs.  I don't think this is said explicitly anywhere, but it is true, isn't it?

Perhaps it could be more clear, but there is text:

Section 11.1.1 says:

   "Agents always send media using a candidate pair, using candidate
   pairs in the VALID LIST.  Once a candidate pair has been selected
   only that candidate pair (referred to as selected pair) is used for
   sending media."

>Wouldn't that also imply that the return path doesn't have to match the sending path?  Again, not said anywhere explicitly, but it seems like it would be the case. 

There is no text mandating the paths to match prior to nomination.

>That would also seem to imply that prior to nomination we have the flexibility for implementations to support mujlti-path RTP? (e.g. sending different RTP flows using >different candidate pairs). Again, not said explicitly anywhere. 

While I guess it would technically be possible, I don't think that's the intention. 

Every now and then there have been discussion about never nominating, allowing usage of multiple valid pairs. But, if using multiple valid pairs is something people want to do I think we should properly specify how it is done, so that people don't have to do it using hacks.

> Then somehow, *after* nomination, many of these magical properties vanish, for reasons that I find hard to justify.
>
> Again, the reasoning behind this is not explained in RFC 5245bis...

The reason is that entities can release resources.

>, nor are all the magical powers restored by the re-nomination document.

Re-nomination does not mean (AFAIU) that you suddenly can start switching between valid pairs - it means that you change the one valid pair that you are going to use for media.

>The problem I think arises from a full articulation of the meaning of "nomination" in RFC 5245bis. 
>
>For example, if we are removing the concept of resource release from nomination and basing it on consent instead, 

I think it's still good to explicitly say that endpoints are allowed to release resources.

Also, after some thinking, I am not sure a re-nomination really would need consent. If the peer responds to a nomination STUN request it means it accepts the (re-)nomination. 

>we need to explain the meaning of "nomination" encapsulated in the negotiation of "ice2".  Which of the following statements are implied by "nomination"? 
>
>1.  "I want to use this pair (and only this pair) to send"
>2. "I want to receive using this pair (and only this pair)"
>3. "I have selected a set of validated pairs for sending and will request consent for them"
>4. "I have granted consent for a set of pairs suitable for receiving"
>5. "The controlled side can release candidates that are neither receiving or sending consent requests"?  
>
>Right now, it is not clear to me which of these statements are implied by RFC 5245bis (or which ones are implied by the renomination document). 

I'll let others speak on behalf of the re-nomination document. In my understanding, 5245bis currently implies, once nomination occurs: 1, 2* and 5.

* Section 11.2 contains the following text:

   "Even though ICE agents are only allowed to send media using valid
   candidate pairs (and, once a candidate pair has been selected, only
   on the selected pair) ICE implementations SHOULD by default be
   prepared to receive media on any of the candidates provided in the
   most recent candidate exchange with the peer."

I think that text is confusing. After a pair has been selected, an endpoint should not have be prepared to receive media on any of the candidiates. 

Regards,

Christer




On Sat, Sep 2, 2017 at 4:00 AM, Christer Holmberg <christer.holmberg@ericsson.com> wrote:
Hi

> [BA] It seems like the document would at least need to talk about consent to include a "may". As it is,
> negotiating "ice2" only means that you're talking to a slightly refurbished RFC 5245 implementation.
> That's like the difference between a new car with driver assist (a modern WebRTC ICE implementation
>with Trickle) and an Edsel that's been waxed and given an oil change. 

The irony is that "ice2" is used to prevent a legacy ICE peer from using aggressive nomination. But, isn't allowing re-nomination more or less bringing "aggressive nomination" back? :)

Regards,

Christer