Re: [rtcweb] Consent Freshness: Connection liveness/heartbeats

Christer Holmberg <christer.holmberg@ericsson.com> Tue, 14 October 2014 08:34 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB65E1A0125 for <rtcweb@ietfa.amsl.com>; Tue, 14 Oct 2014 01:34:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6WWgEejCiuib for <rtcweb@ietfa.amsl.com>; Tue, 14 Oct 2014 01:34:12 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFCD61A00E8 for <rtcweb@ietf.org>; Tue, 14 Oct 2014 01:34:10 -0700 (PDT)
X-AuditID: c1b4fb25-f791c6d00000617b-fd-543ce0004a0d
Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id CF.8C.24955.000EC345; Tue, 14 Oct 2014 10:34:09 +0200 (CEST)
Received: from ESESSMB209.ericsson.se ([169.254.9.136]) by ESESSHC016.ericsson.se ([153.88.183.66]) with mapi id 14.03.0174.001; Tue, 14 Oct 2014 10:34:08 +0200
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Muthu Arul Mozhi Perumal <muthu.arul@gmail.com>
Thread-Topic: [rtcweb] Consent Freshness: Connection liveness/heartbeats
Thread-Index: Ac/khDonWu2om5LnTYiCouL4O3PwFQC9Nuyg////GwD//95FoA==
Date: Tue, 14 Oct 2014 08:34:07 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B1D47B97B@ESESSMB209.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B1D474980@ESESSMB209.ericsson.se> <7594FB04B1934943A5C02806D1A2204B1D47B520@ESESSMB209.ericsson.se> <CAKz0y8zsKN0cJtR2_9b55rSvYs-RFRyn3mh=jOQpUceed7Goxw@mail.gmail.com>
In-Reply-To: <CAKz0y8zsKN0cJtR2_9b55rSvYs-RFRyn3mh=jOQpUceed7Goxw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.146]
Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B1D47B97BESESSMB209erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmkeLIzCtJLcpLzFFi42KZGfG3RpfxgU2IwaUfwhZ/NvtZrP3Xzu7A 5LFz1l12jyVLfjIFMEVx2aSk5mSWpRbp2yVwZbz4/5+14Mp7xooZVw4zNzCuecnYxcjBISFg IrHxaHYXIyeQKSZx4d56NhBbSOAoo8T/jUpdjFxA9hJGiXnP5zGB1LMJWEh0/9MGqRERMJbY 0vKLFcRmFlCXuLP4HDuILSzgLvGpdycbSLmIgIfEjfmOEOVOEvMnLmQCsVkEVCWm33jPCGLz CvhK3P60gxVi1Q1Gief/14EVcQoEShxt2sIMYjMC3fb91BomiF3iEreezGeCuFlAYsme88wQ tqjEy8f/WCFsJYkfGy6xQNTnS5x6uYUJYpmgxMmZT1gmMIrOQjJqFpKyWUjKZgG9wCygKbF+ lz5EiaLElO6H7BC2hkTrnLnsyOILGNlXMYoWpxYn5aYbGeulFmUmFxfn5+nlpZZsYgTG2sEt v1V3MF5+43iIUYCDUYmHd0GzTYgQa2JZcWXuIUZpDhYlcd6F5+YFCwmkJ5akZqemFqQWxReV 5qQWH2Jk4uCUamDsdp1xPPWfZf2+7LiXd6yutfjKv3i294yGis17n5+vyj6lHrmx0F4m/ulB 8TNpHAGx/3R4o3Lu3p8XvDP2XsCBOVFnvwlcaG1ge+j97/VRu9v8DczJz5S/3b5x/cHsn99l cvYFBq7eZSAT+UUz5+TPs2Gv9Dd/zcp8snVTf5hF2/Sr8c/bnysbKbEUZyQaajEXFScCAGqH lZiWAgAA
Archived-At: http://mailarchive.ietf.org/arch/msg/rtcweb/0HFdU-f3wTacQHN8jceOWngIu_w
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] Consent Freshness: Connection liveness/heartbeats
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Oct 2014 08:34:14 -0000

+1 for option 2 :)

Regards,

Christer

From: Muthu Arul Mozhi Perumal [mailto:muthu.arul@gmail.com]
Sent: 14. lokakuuta 2014 11:33
To: Christer Holmberg
Cc: rtcweb@ietf.org
Subject: Re: [rtcweb] Consent Freshness: Connection liveness/heartbeats

Here are my thoughts:
- Liveness was originally included in the document as a value added feature; the same messages used for consent can be used to also determine liveness and notify the application so that is can take some action before consent expires. In a sense it is not liveness per se, rather an early warning to the application before the doomsday.
- The application is free to choose its liveness interval (of course, choosing an interval greater than the consent period isn't really useful). If a valid STUN binding response corresponding to one of the STUN requests sent in that interval has not been received, the browser notifies the application. This doesn't require new STUN requests to be sent or a change to how often they are sent for consent (and hence doesn't impact consent in any way).

I see two options that wouldn't delay this work further:
1. Retain this simple functionality and fix the text, if we think this is useful/sufficient for applications.
2. Remove liveness entirely from the document, if we need a full-fledged liveness functionality. There are different ways of determining liveness depending on the use case (RTCP, DTLS heartbeat, TCP keepalive etc), so we could spin off a new doc and start with the problem/requirements.

Feedback from the WG would help (either way works for me, though).

Muthu

On Tue, Oct 14, 2014 at 12:09 PM, Christer Holmberg <christer.holmberg@ericsson.com<mailto:christer.holmberg@ericsson.com>> wrote:
Hi,

I suggest that we REMOVE the liveness/heartbeats feature from the consent refresh draft. As I said earlier, I see no need for sending additional consent requests in addition to those already sent every 5th second.

Regards,

Christer

From: rtcweb [mailto:rtcweb-bounces@ietf.org<mailto:rtcweb-bounces@ietf.org>] On Behalf Of Christer Holmberg
Sent: 10 October 2014 15:23
To: rtcweb@ietf.org<mailto:rtcweb@ietf.org>
Subject: [rtcweb] Consent Freshness: Connection liveness/heartbeats

Hi,

I have some questions on the connection liveness/heartbeat section of the draft.


Q1:
===

The text says:

        “Similarly, if packets haven't been received within a certain period,
        an application can request a consent check (heartbeat) be generated.”

BUT, if an endpoint is anyway sending consent requests every 5th second, why aren’t the those enough as hearbeats? As long as the endpoint receives responses, it knows the remote endpoint is alive (the text even says that an endpoint is considered alive as long as some data is received from it).

And, if the endpoint does NOT receive responses to the consent requests, consent will expire anyway.

I DO understand that an ICE lite may want to send a heartbeat request if it does not receive any data, as it doesn’t send consent requests.


Q2:
===

The text says:


        “Sending consent checks (heartbeats) at a high rate could allow a

        malicious application to generate congestion, so applications MUST

        NOT be able to send heartbeats at an average rate of more than 1 per

        second.”



I don’t think applications should be alowed to generate heartbeats this often, and I see no need for it.


Q3:
===

The spec is unclear on what happens is a response to a heartbeat request is not received. I guess that is an application decision, but I think the spec should be clear that it does NOT have any impact on consent – the “real” consent requests are used to determine.


Regards,

Christer

_______________________________________________
rtcweb mailing list
rtcweb@ietf.org<mailto:rtcweb@ietf.org>
https://www.ietf.org/mailman/listinfo/rtcweb