Re: [martini] #11: Section 7.3: Outbound Analysis

"martini issue tracker" <trac@tools.ietf.org> Mon, 05 July 2010 20:18 UTC

Return-Path: <trac@tools.ietf.org>
X-Original-To: martini@core3.amsl.com
Delivered-To: martini@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5ED983A682A for <martini@core3.amsl.com>; Mon, 5 Jul 2010 13:18:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.356
X-Spam-Level:
X-Spam-Status: No, score=-102.356 tagged_above=-999 required=5 tests=[AWL=0.244, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hgp-ftObLyQT for <martini@core3.amsl.com>; Mon, 5 Jul 2010 13:18:17 -0700 (PDT)
Received: from zinfandel.tools.ietf.org (unknown [IPv6:2001:1890:1112:1::2a]) by core3.amsl.com (Postfix) with ESMTP id 77FEF3A6824 for <martini@ietf.org>; Mon, 5 Jul 2010 13:18:17 -0700 (PDT)
Received: from localhost ([::1] helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.72) (envelope-from <trac@tools.ietf.org>) id 1OVs7O-0003V8-CK; Mon, 05 Jul 2010 13:18:18 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: martini issue tracker <trac@tools.ietf.org>
X-Trac-Version: 0.11.7
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.11.7, by Edgewall Software
To: adam@nostrum.com, bernard_aboba@hotmail.com
X-Trac-Project: martini
Date: Mon, 05 Jul 2010 20:18:18 -0000
X-URL: http://tools.ietf.org/martini/
X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/martini/trac/ticket/11#comment:2
Message-ID: <076.82d5c253b6141a490f442186a26b78fb@tools.ietf.org>
References: <067.1dc0363dbc71855d1326f8975eb439ff@tools.ietf.org>
X-Trac-Ticket-ID: 11
In-Reply-To: <067.1dc0363dbc71855d1326f8975eb439ff@tools.ietf.org>
X-SA-Exim-Connect-IP: ::1
X-SA-Exim-Rcpt-To: adam@nostrum.com, bernard_aboba@hotmail.com, martini@ietf.org
X-SA-Exim-Mail-From: trac@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
Cc: martini@ietf.org
Subject: Re: [martini] #11: Section 7.3: Outbound Analysis
X-BeenThere: martini@ietf.org
X-Mailman-Version: 2.1.9
List-Id: Discussion of en-mass SIP PBX registration mechanisms <martini.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/martini>, <mailto:martini-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/martini>
List-Post: <mailto:martini@ietf.org>
List-Help: <mailto:martini-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/martini>, <mailto:martini-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Jul 2010 20:18:18 -0000

#11: Section 7.3: Outbound Analysis
---------------------------------------+------------------------------------
 Reporter:  bernard_aboba@…            |       Owner:  adam@…          
     Type:  defect                     |      Status:  assigned        
 Priority:  major                      |   Milestone:  milestone1      
Component:  gin                        |     Version:  1.0             
 Severity:  Candidate WG Document      |    Keywords:                  
---------------------------------------+------------------------------------

Comment(by bernard_aboba@…):

 Review from Cullen Jennings:
 http://www.ietf.org/mail-archive/web/martini/current/msg01539.html

 I sat down read outbound, had some coffee to brace myself for GIN, then
 read GIN, then convinced myself it would all work, then had more coffee
 and convinced myself it did not work, then convinced myself GIN was nuts,
 had more coffee , connived myself outbound was nuts, then had a bunch more
 coffee and decided that in limited cases, GIN and outbound do work
 together. But the combination of GIN, outbound, and GRUU do leave me
 feeling very jittery about if this will all work together (no it's not the
 coffee).

 A PBX could be done two ways. In one architecture it would be a proxy and
 each phone behind it a UA that registers to the PBX. In another
 architecture, the PBX could be a B2BUA and could look like a single or
 multiple UA's on the PBX to SSP connection that GIN is concerned with.

 Let's consider the B2BUA type PBX first as this is probably the most
 common. If the PBX used the same instance-ID for all the calls on the PBX
 to SSP side, and that was also used in the GIN registration, as far as I
 can tell,  it would just work for most the cases current PBX are
 interested in. It seem like it might break stuff on the SSP side that used
 the +sip.instance in caller prefs as two different phones behind the PBX
 would have the same +sip.instance value even though they were different
 phones. In practice, I'm not sure that anything important would require
 devices outside the PBX to look at the +sip.instance for UA in the PBX.
 You should run this by Paul K and see if he can think of something this
 would break.

 If the PBX wants to use different instance ID for the contacts on the PBX
 to SSP side, then I don't see how GIN would work but B2BUA based PBX
 probably don't need to do this.

 Moving on to proxy based PBXs. I not exactly obvious how GIN and and
 outbound would work for a proxy based PBX. Probably the best approach
 would be to have the proxy have  an "pseudo UA" that can deal with all the
 phone numbers and does the single GIN registration from PBX to SSP. Then
 when a call gets routed from the SSP to a given number at the pseudo UA,
 the pseudo UA in the PBX forwards the message to the appropriate UA that
 registered to the PBX. The UA would only register with the PBX and a
 single pseudo UA on the PBX would register (using GIN and outbound) with
 the SSP.

 So all in all, I think for some PBXes, GIN + outbound might work with
 almost no extra code and for other PBXes it might be a bit more work to
 get them both working - I can't imagine any solution that is significantly
 better or less work for the PBX to get both GIN and outbound.

 It's worth nothing that someone with the credentials to do a GIN
 registration has the credentials to hijack all the call for that PBX -
 typically outbound tries to stop one users form getting another users
 call. However both the designs above only require the PBX, not the phones
 attached to the PBX, to have that credential so I don't see that as a
 problem. It should be discussed in the security section.

 Cullen

-- 
Ticket URL: <http://trac.tools.ietf.org/wg/martini/trac/ticket/11#comment:2>
martini <http://tools.ietf.org/martini/>