Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples

Roman Shpount <roman@telurix.com> Thu, 05 March 2015 14:02 UTC

Return-Path: <roman@telurix.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DE2E1B2CC2 for <rtcweb@ietfa.amsl.com>; Thu, 5 Mar 2015 06:02:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kvKscknhBTbE for <rtcweb@ietfa.amsl.com>; Thu, 5 Mar 2015 06:02:30 -0800 (PST)
Received: from mail-ie0-f180.google.com (mail-ie0-f180.google.com [209.85.223.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1CEF1B2D28 for <rtcweb@ietf.org>; Thu, 5 Mar 2015 05:58:12 -0800 (PST)
Received: by iecrd18 with SMTP id rd18so76436974iec.8 for <rtcweb@ietf.org>; Thu, 05 Mar 2015 05:58:11 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=U86XZ+otzmlWx898w/aGbhrg6mvfRoK2vnAhwk+4FZk=; b=NMb0WXaZ4Pk68leI/J4uNGhtMzD84LHcd79bIRFOuL6QHKe8F34HZOk0FBRPu/I6DG BGM4tdBtWSy9CvV2Fq5cPyP1B51IZibjW2ElL0YlvB3rMN846Xh56OTB7+VtU0JG05Uj mOwGFpgZzVvugB8UzCdk1G2mSquGgugueaZs+ysAoznAifKZ6sd2Jj1f9wsBbYJEHcHo sborVroAkUj9EBkT8YZE+JVEoK/7msEJDphVmihcDy+h1EA70Mgd9U9WE3K5oLGZwibq 3CYpzvBzg0Z2wGdsNGyUQi0oYOBThaiBbREEQGM80ydAl0EKXcUUY4IQeVoq4e8Msrmi sAyQ==
X-Gm-Message-State: ALoCoQlqJN6E/Cfb5f0tbv6pX2XEBgYqXc6JLrrryR22/uaD6q8bGrOSw82twzUgUK80HiE1W05U
X-Received: by 10.107.170.33 with SMTP id t33mr5928141ioe.7.1425563891791; Thu, 05 Mar 2015 05:58:11 -0800 (PST)
Received: from mail-ig0-f174.google.com (mail-ig0-f174.google.com. [209.85.213.174]) by mx.google.com with ESMTPSA id y5sm5048541ign.7.2015.03.05.05.58.10 for <rtcweb@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Mar 2015 05:58:10 -0800 (PST)
Received: by igbhn18 with SMTP id hn18so45974530igb.2 for <rtcweb@ietf.org>; Thu, 05 Mar 2015 05:58:09 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.107.155.13 with SMTP id d13mr19866354ioe.29.1425563889504; Thu, 05 Mar 2015 05:58:09 -0800 (PST)
Received: by 10.36.20.10 with HTTP; Thu, 5 Mar 2015 05:58:09 -0800 (PST)
In-Reply-To: <E1FE4C082A89A246A11D7F32A95A17828E726F9B@US70UWXCHMBA02.zam.alcatel-lucent.com>
References: <54F74B02.1070902@jive.com> <CAD5OKxs8JYG3-Vvndi59ZrdPE7UTj22ozD4tcWTHgzWrHv=q7Q@mail.gmail.com> <54F756B2.60408@jive.com> <7594FB04B1934943A5C02806D1A2204B1D726AD8@ESESSMB209.ericsson.se> <CAD5OKxu7py3HbrFjxTDZS5ECFzx7vd=wpjve-gT6gWwksjEu+g@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726B71@ESESSMB209.ericsson.se> <CABcZeBO1O6sA8MqvWkCDu3RPLz5-P2G65Us28i0baOavDnRT7Q@mail.gmail.com> <CAD5OKxuWCdgMR5Kxjv9BSwZ3Jm9kGXx9Pi-9FrfsnuQZ_91jAA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726DC1@ESESSMB209.ericsson.se> <CALiegfkipJhsy7-40+=d9xMUf4RJGdn3_fABL3NN2KuFNvS2BA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D727570@ESESSMB209.ericsson.se> <CALiegfmfvz3NWSjcovGBytiOTbR6kFfyh0vx5cXoMJtytfGzRA@mail.gmail.com> <CAD5OKxsu3D0xHY-zYbDu1hyH_+4=3mWDvW2i98WCVZ+29BpKCw@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D728297@ESESSMB209.ericsson.se> <CALiegf=uPN+g546Ucv9s89z14cUTEme55y7B1siXZe97yj7Lig@mail.gmail.com> <E1FE4C082A89A246A11D7F32A95A17828E726EEC@US70UWXCHMBA02.zam.alcatel-lucent.com> <CALiegf=oVWk-8UcbQE2Edh=QSXSRUnSC=X-WMyGpvHYQ9SD1yg@mail.gmail.com> <E1FE4C082A89A246A11D7F32A95A17828E726F9B@US70UWXCHMBA02.zam.alcatel-lucent.com>
Date: Thu, 05 Mar 2015 08:58:09 -0500
Message-ID: <CAD5OKxvY6mBz2PjFEwUOhuCuEXoC_8FFjZO-HMyGxkXfZx7g=A@mail.gmail.com>
From: Roman Shpount <roman@telurix.com>
To: "Makaraju, Maridi Raju (Raju)" <Raju.Makaraju@alcatel-lucent.com>
Content-Type: multipart/alternative; boundary="001a1141bd003d3c3c05108af5e5"
Archived-At: <http://mailarchive.ietf.org/arch/msg/rtcweb/FqIoK3N_lskhoRpBaA9bYoSiqd0>
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2015 14:02:34 -0000

On Thu, Mar 5, 2015 at 8:26 AM, Makaraju, Maridi Raju (Raju) <
Raju.Makaraju@alcatel-lucent.com> wrote:

> This is not allowed by http://tools.ietf.org/html/rfc5245#section-8.1.1.2
> , unless webrtc overrides it.
> A can only send DTLS once final nomination, which happens after all valid
> pairs are found, is done.
>

I think you are misreading
http://tools.ietf.org/html/rfc5245#section-8.1.1.2: An end point can start
sending media once a valid pair is discovered for each component (which is
actually one component in case of bundle, one component per m= line in case
of no bundle and rtcp-mux, and two components per m= line in case of
neither). New valid pairs can still be found when media is being sent and
media should be switched to the valid pair with the highest priority. When
all the pairs are checked the final nomination request is sent, but the
media will start flowing way before that. Alternative would be almost
unusable since pair of two private IPs for two end-point each behind NAT
will never get nominated and it will take a long time to time out,
preventing media from flowing long after call is connected.
_____________
Roman Shpount