Re: [Ice] ICE PAC: When to start the timer waiting for possible peer reflexive candidates? - discussion restart

Justin Uberti <juberti@google.com> Thu, 11 July 2019 03:42 UTC

Return-Path: <juberti@google.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B245A120048 for <ice@ietfa.amsl.com>; Wed, 10 Jul 2019 20:42:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.205
X-Spam-Level:
X-Spam-Status: No, score=-16.205 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, PDS_NO_HELO_DNS=1.295, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdzMFOVxEjb5 for <ice@ietfa.amsl.com>; Wed, 10 Jul 2019 20:42:47 -0700 (PDT)
Received: from mail-vk1-xa2b.google.com (mail-vk1-xa2b.google.com [IPv6:2607:f8b0:4864:20::a2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F396C120090 for <ice@ietf.org>; Wed, 10 Jul 2019 20:42:46 -0700 (PDT)
Received: by mail-vk1-xa2b.google.com with SMTP id b64so898260vke.13 for <ice@ietf.org>; Wed, 10 Jul 2019 20:42:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=pEEJpZOPX+NEOo+1c0BLYSavWAcExchCp5be+dg/R6k=; b=ZTUp10N5VEFAZFctwDissFlfNHkUbF03GFQiEI6fWyUrAxGODHJX1L4MOtdlf+ko+T WEVujy6RfKFacz6iuUwNuiCtPeLxfyTXRDfsPfPOTlTuHWWMKZG6QsyNalH5yFtCF9NI wXMnX0SMv1YlXln5H7KLkPyvW7e1xVKr/6rJOBqg+nl3v3DNqwiGW16Q4tZrCdaEVsnE WDp2zwLRBg3hWZOuDE8urhcfBDLSKnZNgu/EbHzIvfuoo6NFrmKn6sRTOUfqVtGOWWKO 7Ifw6IA4UASVeBr8PE3ifdR1PDX8Egdc+4QMMSfLQZWLe6VTIY0Z/mrsWae38ldSgFRF AQQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=pEEJpZOPX+NEOo+1c0BLYSavWAcExchCp5be+dg/R6k=; b=ZwIUNIPoc/O9ZZ6DdEWEjapJ8ogC0sLzXzdbePFerisOiAoJKA7mHB7wdaQm0HV1Yu M+wREZp6ffiLP0XawPmGx+z1ZW73wTV2tbNOzWGbtXSI37GSXf85FTflcuesK+AJ4Y+z XBnWkSeYEXClZC5TTwhqxYo9s842dC/BF0FpXyMqOSFl1F0GSgOBR9KH6SOe1xz3OVkr ZY0HUYpbwCIwEHK0cJEgIVw0zHOvd1lnjtgLZeMzAbIpkP51X45EvSqLhsEJC72dWUFF XLqFt1FvIu4OWpD+5arFKxTOX7STHpriLZQ87w4gSaL8m/9SQ7tGPCPRrBRmO+FdWlI3 gvQg==
X-Gm-Message-State: APjAAAVlW9B2Ix+7gB4UFBS7FTYwX4mZbbCv9ggOFsrtvbemntWEJEEb kSYWXUEok0Z76izkkuTVrbSdSUA8kIyiQ2GHWLSsbA==
X-Google-Smtp-Source: APXvYqy0rGuU1muxlxMxtoXi/pKoR4wZFQCv0QFNdPvjt5+GlCt1YmReXyzKAihtQQSJaTnUqCBy/MG6FHf6+UlzmTE=
X-Received: by 2002:a1f:9ad7:: with SMTP id c206mr442666vke.31.1562816565371; Wed, 10 Jul 2019 20:42:45 -0700 (PDT)
MIME-Version: 1.0
References: <AFCE8799-8865-454F-8478-81CE11E9B454@ericsson.com> <1aa5aac7-af59-4e3b-8651-18f6e6431a2d@alvestrand.no> <66678ADA-7C02-4D9D-B9D2-308873BC0125@ericsson.com> <7a829bc0-d066-a3be-b7be-9b39ce799821@alvestrand.no> <CAJrXDUHZJURLvzBYX2MGcMsrFgyOagW5=s1OSXwDmTZpsruD0A@mail.gmail.com> <VI1PR07MB3167F21EF7A1009B8EB9948B93FB0@VI1PR07MB3167.eurprd07.prod.outlook.com> <CAOJ7v-11EjJK644RCb=nASVu_vwkhOxzj4XY4JUBW+1Fr19yOA@mail.gmail.com> <CAOJ7v-20GcArjJ0K0ECjtM4RHXPgnx=zs15XAYDEcZjaYinYJg@mail.gmail.com> <6AC08C9F-22F2-46CA-970C-65F54461D20E@mozilla.com>
In-Reply-To: <6AC08C9F-22F2-46CA-970C-65F54461D20E@mozilla.com>
From: Justin Uberti <juberti@google.com>
Date: Wed, 10 Jul 2019 20:42:33 -0700
Message-ID: <CAOJ7v-03U+LYQM9_zCiZNjrfW_kO2fcPd3-y-YoHPNNQohqZvA@mail.gmail.com>
To: Nils Ohlmeier <nohlmeier@mozilla.com>
Cc: Christer Holmberg <christer.holmberg@ericsson.com>, Peter Thatcher <pthatcher@google.com>, Harald Alvestrand <harald@alvestrand.no>, Roman Shpount <roman@telurix.com>, "ice@ietf.org" <ice@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003b151f058d5f96b0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/zOKFzTvlzROvRT9bTNDu1lLHfAA>
Subject: Re: [Ice] ICE PAC: When to start the timer waiting for possible peer reflexive candidates? - discussion restart
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Jul 2019 03:42:49 -0000

I see your point, but I tend to think you could always encounter some sort
of unrecoverable system error like this (even after seeing that local
candidates exist), and the ICE agent could always blow up ICE in such a
situation.

On Wed, Jul 10, 2019 at 8:34 PM Nils Ohlmeier <nohlmeier@mozilla.com> wrote:

>
> > On 10Jul, 2019, at 16:09, Justin Uberti <juberti@google.com> wrote:
> >
> > When writing up this text, I realized there are edge cases where you
> might want to discover prflx candidates even if you didn't send any
> candidates (e.g., you don't send any candidates, you get a single IP from
> the remote side, and when you check it, you get a response back from a
> different IP).
> >
> > Ergo, I think we should start the timer as soon as we have local and
> remote ICE credentials, regardless of whether or not we send a candidate.
>
> Technically there is another edge case (for trickle only I believe): if
> you hand out SDP, but then local gathering of host candidates fails for
> some bizarre reason (e.g. application ran out of file descriptors or
> something alike). In that scenario it would be pointless to start the PAC
> timer, or at least you should end it early when you know that the pairing
> table will stay empty forever.
> Unfortunately the other side will have to wait for the PAC timer to expire
> before giving up, as we don’t have any means to indicate that we are
> neither going to send candidates nor are able to check peers candidates.
>
> Or to state it differently: the PAC timer should be started when at least
> local host candidates exist and local and remote ICE credentials have been
> exchanged.
>
> Best regards
>   Nils Ohlmeier
>
>