RE: [P2PSIP] Choice of STUN peer or TURN peer

"Dan Wing" <dwing@cisco.com> Fri, 25 January 2008 03:55 UTC

Return-path: <p2psip-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1JIFfW-00044s-Ea; Thu, 24 Jan 2008 22:55:54 -0500
Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1JIFfV-00044j-Tz for p2psip@ietf.org; Thu, 24 Jan 2008 22:55:53 -0500
Received: from sj-iport-6.cisco.com ([171.71.176.117]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1JIFfV-0006hb-Hm for p2psip@ietf.org; Thu, 24 Jan 2008 22:55:53 -0500
Received: from sj-dkim-4.cisco.com ([171.71.179.196]) by sj-iport-6.cisco.com with ESMTP; 24 Jan 2008 19:55:53 -0800
Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id m0P3tqpo025487; Thu, 24 Jan 2008 19:55:52 -0800
Received: from dwingwxp01 ([10.32.240.195]) by sj-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id m0P3to3V018475; Fri, 25 Jan 2008 03:55:51 GMT
From: Dan Wing <dwing@cisco.com>
To: 'JiangXingFeng' <jiang.x.f@huawei.com>, 'Jerry Yin' <jerry_yin@mitel.com>
References: <002501c85ed9$2cbfca60$44a36b80@cisco.com> <002c01c85ef7$ba1b3f20$2d09a40a@china.huawei.com>
Subject: RE: [P2PSIP] Choice of STUN peer or TURN peer
Date: Thu, 24 Jan 2008 19:55:50 -0800
Message-ID: <0deb01c85f06$2dc3d370$44a36b80@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcheunYyW4zdec+fSxm/JgJ4n7HZ7gAAYpXQAA7K4uAAA6nYQA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
In-Reply-To: <002c01c85ef7$ba1b3f20$2d09a40a@china.huawei.com>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1708; t=1201233352; x=1202097352; c=relaxed/simple; s=sjdkim4002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dwing@cisco.com; z=From:=20=22Dan=20Wing=22=20<dwing@cisco.com> |Subject:=20RE=3A=20[P2PSIP]=20Choice=20of=20STUN=20peer=20 or=20TURN=20peer |Sender:=20; bh=h6DhCDYb54B3sAF8B20YXf7Ag2/cOh4fQ2UUg+YNpZo=; b=n6+eZn4zqjGYBcOeiLk/l9viZCZkRO+Ni/z/BDcQ9k2xrhbzL7MqXNqAtK +UblvKoA+DoiPBoyDR5sNluHAvxTOJGmUS+hB+av1uYppsCF+gd9auSUyFEK l7aANFMetd;
Authentication-Results: sj-dkim-4; header.From=dwing@cisco.com; dkim=pass ( sig from cisco.com/sjdkim4002 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: cab78e1e39c4b328567edb48482b6a69
Cc: 'P2PSIP Mailing List' <p2psip@ietf.org>
X-BeenThere: p2psip@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Peer-to-Peer SIP working group discussion list <p2psip.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/p2psip>, <mailto:p2psip-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/p2psip>
List-Post: <mailto:p2psip@ietf.org>
List-Help: <mailto:p2psip-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/p2psip>, <mailto:p2psip-request@ietf.org?subject=subscribe>
Errors-To: p2psip-bounces@ietf.org

 

> -----Original Message-----
> From: JiangXingFeng [mailto:jiang.x.f@huawei.com] 
> Sent: Thursday, January 24, 2008 6:12 PM
> To: 'Dan Wing'; 'Jerry Yin'
> Cc: 'P2PSIP Mailing List'
> Subject: RE: [P2PSIP] Choice of STUN peer or TURN peer
> 
> > The p2p-sip TURN server, prior to those messages above,
> > determined its publicly-routable IP address and publicly-
> > routable UDP port.  It may have determined that via STUN
> > (or, if there is only one level of NAT, it might have
> > determined that via UPnP or NAT-PMP).
> > 
> > The p2p-sip TURN server also determines that it can receive
> > STUN requests from arbitrary STUN clients via that port; Bruce
> > I believe has written up how a TURN server makes that
> > determination.  Once the TURN server has made that determination,
> > it would register itself as a TURN server in the p2p overlay
> > network.
> 
> How do you assume the filtering behavior of the NAT which is 
> in the front of the TURN server?

You can test it, and hope your test accurately reflects the
NAT's filtering behavior when real traffic is attempting to
traverse the NAT.  

I am not aware of a better technique, unless you know you
are behind only one NAT (in which case you can use UPnP or
NAT-PMP, both of which require no filtering on the NAT).

> If it is not end-point independent 
> filtering, how could the
> TURN client's request reach the TURN peer behind the NAT? 

It wouldn't.  The p2p-sip TURN server needs to determine if 
it's behind that kind of NAT prior to declaring, to the 
p2p-sip network, that it is a TURN server.  That is part
of the qualification procedure the p2p-sip TURN server
needs to do.

-d


_______________________________________________
P2PSIP mailing list
P2PSIP@ietf.org
https://www1.ietf.org/mailman/listinfo/p2psip