[MMUSIC] RFC 6544: DTLS over 4571 framing over TCP

Jonathan Lennox <jonathan@vidyo.com> Thu, 13 November 2014 19:32 UTC

From: Jonathan Lennox <jonathan@vidyo.com>
To: mmusic <mmusic@ietf.org>
Thread-Topic: RFC 6544: DTLS over 4571 framing over TCP
Thread-Index: AQHP/3iOolFwBA8/I0ak56FUZ4KvaQ==
Date: Thu, 13 Nov 2014 19:32:26 +0000
Message-ID: <44035890-A516-4D01-A679-A85032AA10ED@vidyo.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_44035890A5164D01A679A85032AA10EDvidyocom_"
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/mmusic/RKWHa3h1BAxevuE_GI17KkI-gGk
Subject: [MMUSIC] RFC 6544: DTLS over 4571 framing over TCP
Precedence: list

Here’s the citation from RFC 6544 for DTLS over RFC 4571 framing over TCP.

3.  Overview of Operation

   [...]

   ICE requires an agent to demultiplex STUN and application-layer
   traffic, since they appear on the same port.  This demultiplexing is
   described in [RFC5245<https://tools.ietf.org/html/rfc5245>] and is done using the magic cookie and other
   fields of the message.  Stream-oriented transports introduce another
   wrinkle, since they require a way to frame the connection so that the
   application and STUN packets can be extracted in order to
   differentiate STUN packets from application-layer traffic.  For this
   reason, TCP media streams utilizing ICE use the basic framing
   provided in RFC 4571<https://tools.ietf.org/html/rfc4571> [RFC4571<https://tools.ietf.org/html/rfc4571>], even if the application layer
   protocol is not RTP.

   When Transport Layer Security (TLS) or Datagram Transport Layer
   Security (DTLS) is used, they are also run over the RFC 4571<https://tools.ietf.org/html/rfc4571> framing
   shim, while STUN runs outside of the (D)TLS connection.  The
   resulting ICE TCP protocol stack is shown in Figure 1, with (D)TLS on
   the left side and without it on the right side.

                       +----------+
                       |          |
                       |    App   |
            +----------+----------+     +----------+----------+
            |          |          |     |          |          |
            |   STUN   |  (D)TLS  |     |   STUN   |    App   |
            +----------+----------+     +----------+----------+
            |                     |     |                     |
            |      RFC 4571<https://tools.ietf.org/html/rfc4571>       |     |      RFC 4571<https://tools.ietf.org/html/rfc4571>       |
            +---------------------+     +---------------------+
            |                     |     |                     |
            |         TCP         |     |         TCP         |
            +---------------------+     +---------------------+
            |                     |     |                     |
            |         IP          |     |         IP          |
            +---------------------+     +---------------------+

              Figure 1: ICE TCP Stack with and without (D)TLS

[MMUSIC] RFC 6544: DTLS over 4571 framing over TCP Jonathan Lennox
Re: [MMUSIC] RFC 6544: DTLS over 4571 framing ove… Justin Uberti
Re: [MMUSIC] RFC 6544: DTLS over 4571 framing ove… Harald Alvestrand
Re: [MMUSIC] RFC 6544: DTLS over 4571 framing ove… Makaraju, Maridi Raju (Raju)
Re: [MMUSIC] RFC 6544: DTLS over 4571 framing ove… Justin Uberti
Re: [MMUSIC] RFC 6544: DTLS over 4571 framing ove… Suhas Nandakumar