Re: [MMUSIC] ICE candidate address selection update draft

"Dan Wing" <dwing@cisco.com> Tue, 07 August 2012 07:15 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1CD321F85A8 for <mmusic@ietfa.amsl.com>; Tue, 7 Aug 2012 00:15:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.493
X-Spam-Level:
X-Spam-Status: No, score=-110.493 tagged_above=-999 required=5 tests=[AWL=0.106, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xbWY9FQyy3U8 for <mmusic@ietfa.amsl.com>; Tue, 7 Aug 2012 00:15:15 -0700 (PDT)
Received: from mtv-iport-4.cisco.com (mtv-iport-4.cisco.com [173.36.130.15]) by ietfa.amsl.com (Postfix) with ESMTP id A8ADC21F8585 for <mmusic@ietf.org>; Tue, 7 Aug 2012 00:15:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=dwing@cisco.com; l=3380; q=dns/txt; s=iport; t=1344323715; x=1345533315; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=msqRwngj8tHUogurObbV6OjY00GPFVyc8eUTS+eLfEQ=; b=WFkE3DLg+u1+s3abgrj99pGdoQbV+dzTj78ngZ/Yaz7TGcIGF7vB3ho/ nR6rWX5y413Ooia2TqXQnnuEUoJ+f3zg8IaoT6N9NOHHN5DFhCm+QIceY MaSvYU6oTVo+ddWstSX02DIkCmzhxLSxpO8E3C3MsVGBKMXUUWOAc3Z6D g=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhUKACm/IFCrRDoI/2dsb2JhbABFqh+OKwQDfoEHgiABAQEDAQEBAQUKARcQNAsFBwEDAgkPAgQBAQEnBxkOFQoJCAEBBAESCxMEh2UFDJsEoDsEi0qGbQOITYUNlhWBZoJ/gTYj
X-IronPort-AV: E=Sophos;i="4.77,725,1336348800"; d="scan'208";a="54221366"
Received: from mtv-core-3.cisco.com ([171.68.58.8]) by mtv-iport-4.cisco.com with ESMTP; 07 Aug 2012 07:15:15 +0000
Received: from dwingWS (sjc-vpn4-1372.cisco.com [10.21.85.91]) by mtv-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id q777F4GO017627; Tue, 7 Aug 2012 07:15:05 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Jonathan Lennox' <jonathan@vidyo.com>, 'Ari Keranen' <ari.keranen@nomadiclab.com>
References: <5019BD3A.6020907@nomadiclab.com> <5019C1AB.1030709@viagenie.ca> <5019DF32.80603@nomadiclab.com> <501A08F4.9050609@viagenie.ca> <501C1F38.8050307@nomadiclab.com> <501C208C.1060207@viagenie.ca> <501C2639.60000@nomadiclab.com> <EF7F16D1-4BAB-49CA-9052-E5FE87B03271@vidyo.com> <501FDD75.3090506@nomadiclab.com> <C3759687E4991243A1A0BD44EAC823034DF5B10A45@BE235.mail.lan>
In-Reply-To: <C3759687E4991243A1A0BD44EAC823034DF5B10A45@BE235.mail.lan>
Date: Tue, 07 Aug 2012 00:15:04 -0700
Message-ID: <092c01cd746c$5e7c8040$1b7580c0$@com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac1z5QogRY98fn1HRDmwrq9QryRpKAAXA1fwAAq4i+A=
Content-Language: en-us
Cc: mmusic@ietf.org
Subject: Re: [MMUSIC] ICE candidate address selection update draft
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Aug 2012 07:15:16 -0000

> -----Original Message-----
> From: mmusic-bounces@ietf.org [mailto:mmusic-bounces@ietf.org] On
> Behalf Of Jonathan Lennox
> Sent: Monday, August 06, 2012 7:08 PM
> To: Ari Keranen
> Cc: mmusic@ietf.org
> Subject: Re: [MMUSIC] ICE candidate address selection update draft
> 
> On Monday, August 6 2012, Ari Keranen wrote:
> 
> > You have a good point. My main concern is that when you have a long
> list
> > of different kind of IPv6 addresses for each interface (global,
> > link-local, ULA, some temporary addresses, etc.), you will end up
> with a
> > huge checklist of host-host candidates (which have the highest
> > priority). If you have broken v6 connectivity, it's gonna take ages
> > before you move to v4 candidates that work.
> >
> > That being said, perhaps we should keep matching ULAs to globals but
> > just give that combination a lower priority than other host-host
> > candidate pairs. Link-locals we should still match only to link-
> locals
> > (right?).
> 
> I understand the problem, and I agree it'll be an issue.
> 
> Furthermore, if you need to fall back to v4, it's not enough to just
> prioritize all the weird cases below the other host-host pairs -- the
> v4
> address that works will probably be server-reflexive, which you'd
> prefer.
> 
> (If hosts really treat link-local as link-local -- i.e. you'll never
> have a
> router for link-local, and trying to send from link-local to non-link-
> local
> is a black hole or socket error at the sender -- then yes, there's no
> point
> in pairing them with non-link-local addresses.  That's the case I was
> thinking of as "impossible")
> 
> > > That said, if there were a well-defined algorithm to prioritize
> > > sensible checks over absurd ones, that'd be fine.
> >
> > This is the tricky part. Right now the candidates use same priority
> > regardless of the other candidate's type. What we'd like to say is
> "for
> > ULA candidate with ULA pair you need priority X and with other types
> > priority Y". Then another question is what's the sensible trade-off
> > between complexity of prioritization and making these corner cases
> work..
> 
> My quick-and-dirty idea would be to take all the candidate pairs that
> the
> current draft lists as "MUST NOT" combine, and put them in a secondary
> ("stupid") check list which follows all the other checks.  Within the
> secondary list, checks are in the standard ICE priority order.

Mine would be to take the list of IPv6 and IPv4 addresses and try them
in the order described by ICE (which currently recommends following
the OS's default, which is sometimes hard to get depending on the
OS).  But if the first IPv6 candidate didn't return a connectivity
checks quickly (let's say, 150ms), initiate a connectivity check
on the highest priority IPv4 address next.  In that 150ms, based
on ICE's pacing, many IPv6 addresses will have been tried.  150ms
gives plenty of time for IPv6 to 'win', before using an IPv4
resource that is likely shared with IPv4-only devices.

-d

> One question would be what the relative priority of weird v6
> combinations
> vs. v4 relays should be.
> 
> --
> Jonathan Lennox
> jonathan@vidyo.com
> 
> _______________________________________________
> mmusic mailing list
> mmusic@ietf.org
> https://www.ietf.org/mailman/listinfo/mmusic