Re: [MMUSIC] FQDN Support Final Vote

Flemming Andreasen <fandreas@cisco.com> Fri, 24 May 2019 13:04 UTC

Return-Path: <fandreas@cisco.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98FA412003F for <mmusic@ietfa.amsl.com>; Fri, 24 May 2019 06:04:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.509
X-Spam-Level:
X-Spam-Status: No, score=-14.509 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJMtXZcH6CpK for <mmusic@ietfa.amsl.com>; Fri, 24 May 2019 06:04:44 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED70B120092 for <mmusic@ietf.org>; Fri, 24 May 2019 06:04:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23737; q=dns/txt; s=iport; t=1558703083; x=1559912683; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to; bh=KPAQ89llriq4CS45bgZMmKgqmNbppx9SbR05etzUYBw=; b=iZtnEBiV1p8+5fkKyNzN+FQ3m9SfVxrESk0lUESzi77B6HQNpESSkb4i DA6Ph8O5ok7Nl4h1GscaQrrW+C67u/QrFmlgwizMEGblxhhjru1s5nz/o VIWTIPZvKagbSnMUhlPQTg6T7cDTx024KyqTpGZBwrvMmEUQ78Bqp81P7 I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BDAAAJ6+dc/5JdJa1lHAEBAQQBAQcEAQGBUQcBAQsBgQ6BAmmBBCiEE4gcjE8IJX6IQg6PCoF7CQEBAQ4YAQoMAQGDekYCF4InIzQJDgEDAQEEAQECAQRtHAyFSwEBAQMBASFLCxALGCcDAgICHwYfEQYBDAYCAQGDHgGBagMJFA+lXYEvH4UogkANXYFGgTQBiywmF4FAP4ERJwyCKjU+ghpHAQEDghSCVIJYBJsIjQI9CYIPhjOIfINdBhuDBolViWaMaIcAgViJVoNngU84gUINCE0jFTuCbAmEFYQ3gj6FWyMDMI5KAQE
X-IronPort-AV: E=Sophos;i="5.60,507,1549929600"; d="scan'208,217";a="277702765"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 May 2019 13:04:42 +0000
Received: from [10.118.10.19] (rtp-fandreas-2-8812.cisco.com [10.118.10.19]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTP id x4OD4fGe030321; Fri, 24 May 2019 13:04:42 GMT
To: Bernard Aboba <bernard.aboba@gmail.com>, Suhas Nandakumar <suhasietf@gmail.com>
Cc: mmusic WG <mmusic@ietf.org>
References: <CAMRcRGRnKRNL9t+c6AQ7L+vszaPrJvAuwVG6BhUuJovBRuc=NA@mail.gmail.com> <CAOW+2dtgBASYp7hbrj8rcC+bUWjmxQLxLfdYr0sMtdkTSsXo+w@mail.gmail.com>
From: Flemming Andreasen <fandreas@cisco.com>
Message-ID: <5c44aa14-523d-a797-0002-7bf828585788@cisco.com>
Date: Fri, 24 May 2019 09:04:41 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.0
MIME-Version: 1.0
In-Reply-To: <CAOW+2dtgBASYp7hbrj8rcC+bUWjmxQLxLfdYr0sMtdkTSsXo+w@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------452421D80A391F90EC81EB56"
Content-Language: en-US
X-Outbound-SMTP-Client: 10.118.10.19, rtp-fandreas-2-8812.cisco.com
X-Outbound-Node: rcdn-core-10.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/RsTI4TdjoMO4ZMRNLYrROah6Gr4>
Subject: Re: [MMUSIC] FQDN Support Final Vote
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 May 2019 13:04:47 -0000

I support that as well.

Christer: I'm not clear on what your vote is right now.

Thanks

-- Flemming (as individual)

On 5/21/19 1:59 PM, Bernard Aboba wrote:
> Personally, I like the suggested text from Christer and Roman because 
> it explicitly states that if FQDNs are not supported then the 
> candidates must be ignored.
>
> On Tue, May 21, 2019 at 8:26 AM Suhas Nandakumar <suhasietf@gmail.com 
> <mailto:suhasietf@gmail.com>> wrote:
>
>     Hi All
>
>       Below i have included 4 flavors of suggested text for FQDN
>     support in ice-sip-sdp.  Let's agree on one and go with it (even
>     it doesn't make us entirely happy)..
>
>
>     *RFC5245 Version *
>     "<connection-address>: is taken from RFC 4566
>     <https://tools.ietf.org/html/rfc4566>[RFC4566
>     <https://tools.ietf.org/html/rfc4566>]. It is the
>
>            IP address of the candidate, allowing for IPv4 addresses, IPv6 addresses, and fully qualified domain names (FQDNs).  When parsing this field, an agent can differentiate an IPv4 address and an IPv6 address by presence of a colon in its value - the presence of a colon indicates IPv6.  An agent MUST ignore candidate lines that include candidates with IP address versions that are not supported or recognized.  An IP address SHOULD be used, but an FQDN MAY be used in place of an IP address.  In that case, when receiving an offer or answer containing an FQDN in an a=candidate attribute, the FQDN is looked up in the DNS first using an AAAA record (assuming the agent supports IPv6), and if no result is found or the agent only supports IPv4, using an A.  If the DNS query returns more than one IP address, one is chosen, and then used for the remainder of ICE processing.
>
>     *ice-sip-sdp pre-22 version1*
>
>     **
>
>     <connection-address>:is taken from RFC 4566 [RFC4566].It is the IP
>     address of the candidate.When parsing this field, an agent can
>     differentiate an IPv4 address and an IPv6 address by presence of a
>     colon in its value -- the presence of a colon indicates IPv6. An
>     agent MUST ignore candidate lines that include candidates withIP
>     address versions that are not supported or recognized.An IP
>     address SHOULD be used, but an FQDN MAY be used in place of an IP
>     address.In that case, when receiving an offer or answer containing
>     an FQDN in an a=candidate attribute, the FQDN is lookedup in the
>     DNS first using an AAAA record (assuming the agent supports IPv6),
>     and if no result is found or the agent only supports IPv4, using
>     an A record.The rules from section 6 of [RFC6724] is followed by
>     fixing the source address to be one from the candidate pair to be
>     matched against destination addresses
>
>     reported by FQDN, in cases where the DNS query returns more than
>     one IP address.
>
>     *ice-sip-sdp current version*
>
>     <connection-address>:  is taken from RFC 4566 [RFC4566].  It is the
>            IP address of the candidate.  When parsing this field, an agent
>            can differentiate an IPv4 address and an IPv6 address by presence
>            of a colon in its value -- the presence of a colon indicates IPv6.
>            An agent MUST ignore candidate lines that include candidates with
>            IP address versions that are not supported or recognized.  An IP
>            address SHOULD be used, but an FQDN MAY be used in place of an IP
>            address.  In that case, when receiving an offer or answer
>            containing an FQDN in an a=candidate attribute, the FQDN is looked
>            up in the DNS first using an AAAA record (assuming the agent
>            supports IPv6), and if no result is found or the agent only
>            supports IPv4, using an A record.  If a FQDN returns multiple IP
>            addresses an agent MUST only use one of them throughout the
>            duration of the ICE session.  Since an agent does not know whether
>            the peer listens to the chosen IP address and port, it is
>            RECOMMENDED to not use FQDNs that will resolve into multiple IP
>            addresses.
>
>
>     *Roman-Christer Version *
>
>     <connection-address>: :: is taken from RFC 4566 <<RFC4566>>.. It
>     is the IP address of the candidate, allowing for IPv4 addresses,
>     IPv6 addresses,
>
>     and fully qualified domain names (FQDNs).  When parsing this
>     field, an agent can differentiate  an IPv4 address and an IPv6
>     address by presence
>
>     of a colon in its value - the presence of a colon indicates IPv6.
>     *An agent processing remote candidates MUST ignore candidate lines
>     that include*
>
>     *candidates with FQDN or IP address versions that are not
>     supported or recognized..  The procedures for handling FQDN
>     candidates, and for agents*
>
>     *to indicate support of such procedures, need to be specified in
>     an extension specification.* If candidate with FQDN
>     <connection-address> is the
>
>     default destination/candidate, the "c=" address type MUST be set
>     the IP address family for the FQDN DNS resolution result and the
>     "c=" connection
>
>     address MUST be set to FQDN. Differences in the "c=" line address
>     family and type with FQDN resolution result MUST not cause ICE
>     support verification failure.
>
>
>
>
>     *My vote is on current version since it is backward compatible
>     with a warning that using FQDN is not recommended since it MAY
>     lead to failure.*
>
>     _______________________________________________
>     mmusic mailing list
>     mmusic@ietf.org <mailto:mmusic@ietf.org>
>     https://www.ietf.org/mailman/listinfo/mmusic
>
>
> _______________________________________________
> mmusic mailing list
> mmusic@ietf.org
> https://www.ietf.org/mailman/listinfo/mmusic