Re: [MMUSIC] I-D Action: draft-ietf-mmusic-rtsp-nat-12.txt

Magnus Westerlund <magnus.westerlund@ericsson.com> Thu, 25 October 2012 14:40 UTC

Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 225B821F89A4 for <mmusic@ietfa.amsl.com>; Thu, 25 Oct 2012 07:40:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.229
X-Spam-Level:
X-Spam-Status: No, score=-106.229 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2K2HNs7Huokj for <mmusic@ietfa.amsl.com>; Thu, 25 Oct 2012 07:39:59 -0700 (PDT)
Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id 4C32721F8958 for <mmusic@ietf.org>; Thu, 25 Oct 2012 07:39:59 -0700 (PDT)
X-AuditID: c1b4fb25-b7f926d00000661f-82-50894f361f13
Received: from esessmw0197.eemea.ericsson.se (Unknown_Domain [153.88.253.125]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id D1.76.26143.63F49805; Thu, 25 Oct 2012 16:39:50 +0200 (CEST)
Received: from [127.0.0.1] (153.88.115.8) by esessmw0197.eemea.ericsson.se (153.88.115.88) with Microsoft SMTP Server id 8.3.279.1; Thu, 25 Oct 2012 16:39:50 +0200
Message-ID: <50894F35.1060601@ericsson.com>
Date: Thu, 25 Oct 2012 16:39:49 +0200
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20121010 Thunderbird/16.0.1
MIME-Version: 1.0
To: Flemming Andreasen <fandreas@cisco.com>
References: <20120507075517.12573.64357.idtracker@ietfa.amsl.com> <4FA78A27.4040004@ericsson.com> <507724C4.5090601@cisco.com>
In-Reply-To: <507724C4.5090601@cisco.com>
X-Enigmail-Version: 1.4.5
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuphluLIzCtJLcpLzFFi42KZGfG3VtfMvzPAYNo8Q4v3F3Qtpi5/zOLA 5DHl90ZWjyVLfjIFMEVx2aSk5mSWpRbp2yVwZbz6+5S54JN8xZ2TYQ2MhyW7GDk5JARMJDr3 n2eFsMUkLtxbz9bFyMUhJHCKUWLysvmsEM5yRonDFzaygVTxCmhLrNm8EKyDRUBVYubseUwg NpuAhcTNH41ANRwcogLBEs87iiHKBSVOznzCAhIWAWqdusACJMwsoC7R87uFGcQWFnCWuLr/ EDtIiZBAncTqWekgYU4BTYkDLx4xQ5wmKfH2/StmiFY9iSlXWxghbHmJ5q2zweJCQNMbmjpY JzAKzUKyeBaSlllIWhYwMq9iZM9NzMxJLzfaxAgM0YNbfqvuYLxzTuQQozQHi5I4r/XWPf5C AumJJanZqakFqUXxRaU5qcWHGJk4OKUaGKuc3shv/3smaGtSmOGTaZeuHVn+evcjrYunTc29 GcojtmjcXM35gzeGtTMsbs/rwBhTr/b1b/KnXDdwbi3SOL7leNYm0WlzpmiJ/Zacu6ohOHfJ L9NqpvZTs3t+KF/RdBVYfJmj7+zyZ7wTLJMf6s9sjEvq+q43rUanz/gu++xpv94ZTFEzvKfE UpyRaKjFXFScCAALBZryHwIAAA==
Cc: "mmusic (E-mail)" <mmusic@ietf.org>
Subject: Re: [MMUSIC] I-D Action: draft-ietf-mmusic-rtsp-nat-12.txt
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Oct 2012 14:40:02 -0000

Hi Flemming and WG,

Thanks for the detailed review. As you might have seen we managed to
update this document to address your comments. Below is answers to these
questions.

On 2012-10-11 21:57, Flemming Andreasen wrote:
> Hi Magnus
> 
> I have taken a look at the document and, the only real technical
> comments I have at this point are:
> 
> - Section 6.3 (Non-Supporting Proxies), last paragraph says that:
> <quote>
> This variance in results is the reason
>    we don't recommend the usage of the Proxy-Require header. Instead we
>    recommend the usage of the Supported header to force proxies to
>    include the feature tags they support in the proxy-supported which
>    will provide a positive indication when all proxies in the chain
>    between the client and server support the functionality.  Even if not
>    explicitly indicating support, any SETUP response including a
>    transport specification with "D-ICE" will be implicit indication that
>    the proxy chain supports at least passthrough of this media.
> </quote>
> 
> I didn't follow the inferred logic in the last sentence (how does the
> response convey support for the entire chain). Can you elaborate on that
> part ?

We have reformulated this to hopefully make it clear. But the logic is
like this.

If a client includes a transport specification with protocol D-ICE, and
that reaches the server and that supports it and provide that transport
spec in its answer that again reaches the client then you know that the
D-ICE is supported. This would only occur if any proxies are either
explicitly supporting it or are of the pass-through version.

That needs to be compared with a proxy-require where the passthrough
would be forced to negatively answer that. Also a supported header value
will be stripped by a passthrough proxy as it is not explicitly
supporting the functionality.

That is why you have cases where trying and see if it works might be the
best option.

> 
> - Section 8 (Fallback)
> Section title and overall description is a bit confusing (it seems to be
> about about backwards compatibility with non-ICE supporting RTSP entities).
> Also, the section recommends use of defunct (obsolete) behavior defined
> in RFC 3489 to try and determine the NAT type. Why is that (shouldn't we
> be based on RFC 5389) ?

This fallback text is intended as a discussion of what would happen if a
ICE enabled client would try to use its capabilities to facilitate
NAT/FW traversal when the server is non ICE capable.

The second thing to remember is that a SETUP request normally provides
multiple transport offers, rather than doing try, error, re-try other
alternative.

Thus I at least think it is worth talking what it would mean to use STUN
derived reflex ports as transport identifier and then be willing to send
STUN checks towards the server. So far you actually don't need to do a
attempt to determine the mapping behavior. If one would try it could
reveal the failure mode earlier.

But, maybe we should re-structure this section to say that like ICE the
best fallback addresses from functionality point of view would be a
relay address. Barring that one can attempt using a STUN derived one.
This may however fail, and have unexpected impact on server.

I do agree that we should not depend on the classification behavior of
the old STUN spec. But, the text really is a warning that this is brittle.

> Also, we could really use another set of eyes on it (preferably by
> somebody that has both ICE and RTSP expertise)

Me to.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM
----------------------------------------------------------------------
Ericsson AB                | Phone  +46 10 7148287
Färögatan 6                | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden| mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------