Re: [MMUSIC] FQDN Support Final Vote

Flemming Andreasen <fandreas@cisco.com> Fri, 24 May 2019 13:23 UTC

Return-Path: <fandreas@cisco.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F048D1200F6 for <mmusic@ietfa.amsl.com>; Fri, 24 May 2019 06:23:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.509
X-Spam-Level:
X-Spam-Status: No, score=-14.509 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fHIbYNcGDJwI for <mmusic@ietfa.amsl.com>; Fri, 24 May 2019 06:23:46 -0700 (PDT)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53C9112017F for <mmusic@ietf.org>; Fri, 24 May 2019 06:23:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=36123; q=dns/txt; s=iport; t=1558704226; x=1559913826; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to; bh=SHBCISpo4unyKjGsL6d6Tr6m/+nv5e08vuxLeom/ZJE=; b=Hi/rBJx9OPho3mb0BSLh8+HMO9k9tx/SCefXGHuS6PFd6a0YQW8x95sd vj20Ip62DnlJ2mSlSatqyIbckhvSTlK537w94UDuk/p0Z6rU982Yylfzc HHW07sEIKLiOZPizF8NwWiMnD1zGz9+WGGpN/GiqjpLVh7VPYQ3S1DNc8 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BDAAAJ8Odc/5xdJa1lHAEBAQQBAQcEAQGBUQcBAQsBgQ6BAmmBBCiEE4gcjE8IJX6IQg6PCoF3BAkBAQEOGAEKDAEBg3pGAheCJyM0CQ4BAwEBBAEBAgEEbRwMhUoBAQEBAgEBASFLCwULCQIYIAEGAwICAh8GHxEGAQwGAgEBgx4BgWoDCQUPD4l7m2qBLx+FKII/DV2BRoE0AYssJheBQD+BEScMgio1PoIaRwEBA4IUglSCWASoCj0Jgg+GM4h8g10GG4IfZ4V8g1mJZoxohwCBWIlWg2eBTzgpgRkNCE0jFTuCbAmEFYQ3gj6FWyMDMI5KAQE
X-IronPort-AV: E=Sophos;i="5.60,507,1549929600"; d="scan'208,217";a="278312178"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 May 2019 13:23:45 +0000
Received: from [10.118.10.19] (rtp-fandreas-2-8812.cisco.com [10.118.10.19]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTP id x4ODNiAF005730; Fri, 24 May 2019 13:23:44 GMT
To: Christer Holmberg <christer.holmberg@ericsson.com>, Bernard Aboba <bernard.aboba@gmail.com>, Suhas Nandakumar <suhasietf@gmail.com>
Cc: mmusic WG <mmusic@ietf.org>
References: <CAMRcRGRnKRNL9t+c6AQ7L+vszaPrJvAuwVG6BhUuJovBRuc=NA@mail.gmail.com> <CAOW+2dtgBASYp7hbrj8rcC+bUWjmxQLxLfdYr0sMtdkTSsXo+w@mail.gmail.com> <5c44aa14-523d-a797-0002-7bf828585788@cisco.com> <B2BA676E-19D7-4C99-9059-0D0BAA256171@ericsson.com>
From: Flemming Andreasen <fandreas@cisco.com>
Message-ID: <20e7ae31-4633-4851-1ae2-d755dfb66acc@cisco.com>
Date: Fri, 24 May 2019 09:23:43 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.0
MIME-Version: 1.0
In-Reply-To: <B2BA676E-19D7-4C99-9059-0D0BAA256171@ericsson.com>
Content-Type: multipart/alternative; boundary="------------47A449BBF823171C038499CE"
Content-Language: en-US
X-Outbound-SMTP-Client: 10.118.10.19, rtp-fandreas-2-8812.cisco.com
X-Outbound-Node: rcdn-core-5.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/MupIMT86pzA5u6y31MdODeWnqcg>
Subject: Re: [MMUSIC] FQDN Support Final Vote
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 May 2019 13:23:49 -0000


On 5/24/19 9:08 AM, Christer Holmberg wrote:
>
> Hi,
>
> >I support that as well.
> >
> >Christer: I'm not clear on what your vote is right now.
>
> My vote is to **not** support FQDN candidates, and add whatever text 
> needed to explicitly indicate that.
>
If none of the 4 proposals work for you, can you please provide a 
concrete text suggestion we can take a look at.

Thanks

-- Flemming

> Regards,
>
> Christer
>
> On 5/21/19 1:59 PM, Bernard Aboba wrote:
>
>     Personally, I like the suggested text from Christer and Roman
>     because it explicitly states that if FQDNs are not supported then
>     the candidates must be ignored.
>
>     On Tue, May 21, 2019 at 8:26 AM Suhas Nandakumar
>     <suhasietf@gmail.com <mailto:suhasietf@gmail.com>> wrote:
>
>         Hi All
>
>           Below i have included 4 flavors of suggested text for FQDN
>         support in ice-sip-sdp. Let's agree on one and go with it
>         (even it doesn't make us entirely happy)..
>
>         *RFC5245 Version *
>
>         "<connection-address>: is taken from RFC 4566
>         <https://tools.ietf.org/html/rfc4566>[RFC4566
>         <https://tools.ietf.org/html/rfc4566>]. It is the
>
>               IP address of the candidate, allowing for IPv4
>         addresses, IPv6 addresses, and fully qualified domain names
>         (FQDNs).  When parsing this field, an agent can differentiate
>         an IPv4 address and an IPv6 address by presence of a colon in
>         its value - the presence of a colon indicates IPv6.  An agent
>         MUST ignore candidate lines that include candidates with IP
>         address versions that are not supported or recognized.  An IP
>         address SHOULD be used, but an FQDN MAY be used in place of an
>         IP address.  In that case, when receiving an offer or answer
>         containing an FQDN in an a=candidate attribute, the FQDN is
>         looked up in the DNS first using an AAAA record (assuming the
>         agent supports IPv6), and if no result is found or the agent
>         only supports IPv4, using an A.  If the DNS query returns more
>         than one IP address, one is chosen, and then used for the
>         remainder of ICE processing.
>
>         *ice-sip-sdp pre-22 version1*
>
>         **
>
>         <connection-address>:is taken from RFC 4566 [RFC4566].It is
>         the IP address of the candidate.When parsing this field, an
>         agent can differentiate an IPv4 address and an IPv6 address by
>         presence of a colon in its value -- the presence of a colon
>         indicates IPv6. An agent MUST ignore candidate lines that
>         include candidates withIP address versions that are not
>         supported or recognized.An IP address SHOULD be used, but an
>         FQDN MAY be used in place of an IP address.In that case, when
>         receiving an offer or answer containing an FQDN in an
>         a=candidate attribute, the FQDN is lookedup in the DNS first
>         using an AAAA record (assuming the agent supports IPv6), and
>         if no result is found or the agent only supports IPv4, using
>         an A record.The rules from section 6 of [RFC6724] is followed
>         by fixing the source address to be one from the candidate pair
>         to be matched against destination addresses
>
>         reported by FQDN, in cases where the DNS query returns more
>         than one IP address.
>
>         *ice-sip-sdp current version*
>
>         <connection-address>:  is taken from RFC 4566 [RFC4566].  It
>         is the
>
>               IP address of the candidate.  When parsing this field,
>         an agent
>
>               can differentiate an IPv4 address and an IPv6 address by
>         presence
>
>               of a colon in its value -- the presence of a colon
>         indicates IPv6.
>
>               An agent MUST ignore candidate lines that include
>         candidates with
>
>               IP address versions that are not supported or
>         recognized.  An IP
>
>               address SHOULD be used, but an FQDN MAY be used in place
>         of an IP
>
>               address.  In that case, when receiving an offer or answer
>
>               containing an FQDN in an a=candidate attribute, the FQDN
>         is looked
>
>               up in the DNS first using an AAAA record (assuming the agent
>
>               supports IPv6), and if no result is found or the agent only
>
>               supports IPv4, using an A record.  If a FQDN returns
>         multiple IP
>
>               addresses an agent MUST only use one of them throughout the
>
>               duration of the ICE session.  Since an agent does not
>         know whether
>
>               the peer listens to the chosen IP address and port, it is
>
>               RECOMMENDED to not use FQDNs that will resolve into
>         multiple IP
>
>               addresses.
>
>         *Roman-Christer Version *
>
>         <connection-address>: :: is taken from RFC 4566 <<RFC4566>>..
>         It is the IP address of the candidate, allowing for IPv4
>         addresses, IPv6 addresses,
>
>         and fully qualified domain names (FQDNs).  When parsing this
>         field, an agent can differentiate  an IPv4 address and an IPv6
>         address by presence
>
>         of a colon in its value - the presence of a colon indicates
>         IPv6. *An agent processing remote candidates MUST ignore
>         candidate lines that include*
>
>         *candidates with FQDN or IP address versions that are not
>         supported or recognized.. The procedures for handling FQDN
>         candidates, and for agents*
>
>         *to indicate support of such procedures, need to be specified
>         in an extension specification.* If candidate with FQDN
>         <connection-address> is the
>
>         default destination/candidate, the "c=" address type MUST be
>         set the IP address family for the FQDN DNS resolution result
>         and the "c=" connection
>
>         address MUST be set to FQDN. Differences in the "c=" line
>         address family and type with FQDN resolution result MUST not
>         cause ICE support verification failure.
>
>         *My vote is on current version since it is backward compatible
>         with a warning that using FQDN is not recommended since it MAY
>         lead to failure.*
>
>         _______________________________________________
>         mmusic mailing list
>         mmusic@ietf.org <mailto:mmusic@ietf.org>
>         https://www.ietf.org/mailman/listinfo/mmusic
>
>
>
>     _______________________________________________
>
>     mmusic mailing list
>
>     mmusic@ietf.org  <mailto:mmusic@ietf.org>
>
>     https://www.ietf.org/mailman/listinfo/mmusic
>
>
>
>
> _______________________________________________
> mmusic mailing list
> mmusic@ietf.org
> https://www.ietf.org/mailman/listinfo/mmusic