Re: [MMUSIC] DTLS-SDP and JSEP Conflicts

Taylor Brandstetter <deadbeef@google.com> Fri, 25 August 2017 23:32 UTC

Return-Path: <deadbeef@google.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50C8C13243A for <mmusic@ietfa.amsl.com>; Fri, 25 Aug 2017 16:32:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QTZ2YaxJ7tOM for <mmusic@ietfa.amsl.com>; Fri, 25 Aug 2017 16:32:13 -0700 (PDT)
Received: from mail-wr0-x22b.google.com (mail-wr0-x22b.google.com [IPv6:2a00:1450:400c:c0c::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3EC3D13219C for <mmusic@ietf.org>; Fri, 25 Aug 2017 16:32:13 -0700 (PDT)
Received: by mail-wr0-x22b.google.com with SMTP id o76so3336155wrb.5 for <mmusic@ietf.org>; Fri, 25 Aug 2017 16:32:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=peyYtEAYOs4U/5AjLJIKBI587SK8XKDhdu7BuBvH+qg=; b=fi2O4ZRZ4Z/6Nf3lf8+IqwPD7abu5Z66GNEer8hsGACQ7KmNe7PPr7kzIVGF5s1reO XC+XBibj3Q0vBNS1iiH2CCce1hyBbuxp+tghqtYZqwxB7Jxh6zOkM5tHAOaVCs825iZH Sis0pee80Qen03Z1uKm0PZeW1X41U0VVgN7M0FhnS0w+h7Joi56PWRbIBoj8afgzEcQv G4q4dd+iiUuFo5brvNpq4R5rM6/znePctyg5q/HHzyE1fL86D1S8bZuyTmi1qBgsCa6M uvKoheAn2duzUYEL7Xezuj1u98GiyccT9YeEG9Lv7tnr0+eJ4QsO/lGZ8myrDZpJg2CA x08g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=peyYtEAYOs4U/5AjLJIKBI587SK8XKDhdu7BuBvH+qg=; b=oVzZMF+seHEmuQwLla6vkkK9J+tco8PqiJ344toxWRCgSutALhROAl8oaHPoHZuy+N U2gWFWKv9f3/J7D71bwD8vy9swU4qhpJ1FDUH9xlyRzJu5OklHymHNXrgNO/IDofIyla 6IUcjPObKJQWPtIUoGKZ5+JNEOSzlF4pMsRTcoKxkJW6KB0ScZb7mmrqBUBjC6U/GJvW rjFNAjaY5KK87zTR9QgxJRI5/txbX6+u0jAV50Fdlk/VGy3MoVu5+tOO5gWXeIF0BpiQ Wen8whhhf2xRthapIVompBgCcV4tRYPmiZLKvPHP9jVPna293STmTpMVSX6ON+g45CGq enBQ==
X-Gm-Message-State: AHYfb5jOuYEs3yjfnCIg5OrekCOK4f9QcV4DZWc1za16uqTURpTxTj9N fa0H8h8TYKwRF+To0ufl3B+EQV4tZ/Ls
X-Google-Smtp-Source: ADKCNb5vb0+7NuGVLeOPWc0f6UgB0I8rlb/f38klJMX7/7ldjK3Z87/wYbuo0kgXG/Aaz4rlNrpP3QiUkAhZQQdr8Ak=
X-Received: by 10.223.134.189 with SMTP id 58mr51127wrx.157.1503703931537; Fri, 25 Aug 2017 16:32:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.130.229 with HTTP; Fri, 25 Aug 2017 16:32:10 -0700 (PDT)
In-Reply-To: <cb7405da-5907-e600-c62b-c57531b36b00@nostrum.com>
References: <f353ad39-4ee5-4661-8e99-7fab6e394e91@nostrum.com> <CAD5OKxu3HCThdqTjJ=jz_ZsceX0bVXW+FoRWsEB-N-nbmjEC4g@mail.gmail.com> <3be5cdc3-b191-d3be-4097-2b17d5a78b7c@nostrum.com> <CAD5OKxtqJGYZJwiS=w1M+qRenoxqi7gDX3K6Tc-dMPXB_E3-Tw@mail.gmail.com> <cb7405da-5907-e600-c62b-c57531b36b00@nostrum.com>
From: Taylor Brandstetter <deadbeef@google.com>
Date: Fri, 25 Aug 2017 16:32:10 -0700
Message-ID: <CAK35n0YwXhaGcwRcrSO+_LGtSv_EzVcN6u85oF77KiSWWe23ag@mail.gmail.com>
To: Adam Roach <adam@nostrum.com>
Cc: Roman Shpount <roman@telurix.com>, "mmusic@ietf.org" <mmusic@ietf.org>
Content-Type: multipart/alternative; boundary="001a1146c5c6b02b0305579c5a62"
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/LTUJLp669-fvU-ovP3JkZUqyOp0>
Subject: Re: [MMUSIC] DTLS-SDP and JSEP Conflicts
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Aug 2017 23:32:15 -0000

I think I'm just echoing Roman at this point, but might as well send the
email since I already wrote it.


> (Issue 1c) The crux of the matter: does ICE restart cause DTLS to
> restart? The primary rationale outlined in RFC5245 for restarting ICE is
> changing the destination (IP address or port) of an ongoing media stream --
> which would commonly involve changing to a different physical device.


The purpose of section 4 is to describe what should happen for an "existing
implementation that has not been updated to support the 'tls-id'
attribute", correct? And existing WebRTC implementations do *not* create a
new DTLS association upon ICE restarts. In my experience, ICE restarts are
mostly used to restore connectivity when network interfaces change, not to
transfer a call to a new endpoint. So I'd say the "ICE ufrag value" bullet
in section 4 should be removed.

I hate to throw new engineering into the document at this point, but
> shouldn't it be possible to distinguish between these two circumstances by
> examining the candidates and determining whether they're completely new
> (versus having at least one in common with the existing connection)? This
> means that you won't know whether to restart DTLS until trickling has
> ended (for trickle), but you can solve that by not doing aggressive (or
> passive-aggressive) nomination -- just wait until you have all the
> candidates before you start connecting.
>
> Does that sound like it would work?


If I understand correctly, you're saying "wait until trickling has ended,
and use a new DTLS association if the list of candidates is completely new,
and old association if it contains an old candidate"? That doesn't work for
a couple reasons:

   1. The list may be completely new, but the endpoint may still want to
   use the existing DTLS association. This is what existing WebRTC
   implementations do. They continue sending media over the old candidate pair
   while they're doing an ICE restart, but they don't trickle the old
   candidate again.
   2. It could take a long time to tell that trickling ended, which would
   delay media. It would defeat a large part of the benefit of trickle ICE.


On Fri, Aug 25, 2017 at 4:28 PM, Adam Roach <adam@nostrum.com> wrote:

> On 8/25/17 6:23 PM, Roman Shpount wrote:
>
>> More importantly this is not how existing implementations work. They
>> simply do not start new DTLS association on ufrag change. This is for
>> legacy interop only, so we might as well do what legacy end points do and
>> ignore ufrag.
>>
>
>
> This seems pretty compelling, as arguments go.
>
> /a
>
> _______________________________________________
> mmusic mailing list
> mmusic@ietf.org
> https://www.ietf.org/mailman/listinfo/mmusic
>