Re: [rtcweb] [tram] TURN permissions for private ips

Roman Shpount <roman@telurix.com> Thu, 06 August 2015 21:16 UTC

Return-Path: <roman@telurix.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D5421A8861 for <rtcweb@ietfa.amsl.com>; Thu, 6 Aug 2015 14:16:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nlkP6p8OQ0_K for <rtcweb@ietfa.amsl.com>; Thu, 6 Aug 2015 14:16:49 -0700 (PDT)
Received: from mail-ig0-f173.google.com (mail-ig0-f173.google.com [209.85.213.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A637A1A885C for <rtcweb@ietf.org>; Thu, 6 Aug 2015 14:16:47 -0700 (PDT)
Received: by igr7 with SMTP id 7so19612019igr.0 for <rtcweb@ietf.org>; Thu, 06 Aug 2015 14:16:47 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=I7fxBiddcNwivLcpjcwtDXtH9Ti8Uw2BkIO7Wn+j9eY=; b=Igb6aT7HHiDUJ6qUBAcBOUwUKgC18BLiVOYSx4NT5kfe3xMl5mN6IGJEW+eBGpFbyi ps7+/yPR83tP+r3BmNwhqN0qytamRNGnk2X0RHMMtHrhnC/d/U9l0+m/ZFNIaG6C8Yie YLeaVmTIKB1cST6IJINqpqtYIYajZODLVVF8i443t3Fz0bx3Vgu4MECarTmeWms+WgZ1 v0BjPlBn5tqY4KfMI47faLtvDmE7rU923WayBdsI0N0F76yIFIIjolsmSq9pa4dzJZYS 3xaIzIbukrGNqAiqj29RHtJeD+yi8vnwforHDGYmvyXg9DGQ8stSnDSR+L1yGw/w8FtV F0og==
X-Gm-Message-State: ALoCoQlBE2XI1IsjI9lnQPwYKcDHnqcTICiZcm1IjMuin1BjouVTGeOX/GzYuvqB122AM4i9Lflz
X-Received: by 10.50.132.39 with SMTP id or7mr6653730igb.90.1438895807061; Thu, 06 Aug 2015 14:16:47 -0700 (PDT)
Received: from mail-ig0-f182.google.com (mail-ig0-f182.google.com. [209.85.213.182]) by smtp.gmail.com with ESMTPSA id g123sm5363838iog.31.2015.08.06.14.16.46 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 06 Aug 2015 14:16:46 -0700 (PDT)
Received: by igk11 with SMTP id 11so19986834igk.1; Thu, 06 Aug 2015 14:16:45 -0700 (PDT)
MIME-Version: 1.0
X-Received: by 10.50.61.179 with SMTP id q19mr6532581igr.24.1438895805860; Thu, 06 Aug 2015 14:16:45 -0700 (PDT)
Received: by 10.36.89.70 with HTTP; Thu, 6 Aug 2015 14:16:45 -0700 (PDT)
In-Reply-To: <A200625B-5402-41A8-9940-988AE1774123@vidyo.com>
References: <20150805130607.20844.70680.idtracker@ietfa.amsl.com> <CABcZeBMWVU9a1_e_47qddA04WhXG55QYzFA=dTrYgi+DuLQhKA@mail.gmail.com> <55C24293.5000603@cs.tcd.ie> <55C24C09.8020404@goodadvice.pages.de> <55C256C8.80606@jive.com> <CAOJ7v-3hyFhHiFq4eujLznXtehkUSxZati8YZ23o-RPLH=J5zg@mail.gmail.com> <F144FF61-AAC6-4E0A-B08E-0E3F9B487F1B@vidyo.com> <CAOJ7v-0Z4fmWjVaeiAJh=rpYPjUsk_k8_=g8CrecAZQWtRG1AQ@mail.gmail.com> <CABkgnnXubczrXpR+YHeF1+zNrNoPNMH_XdB1+pCAGZ9LQn0UXw@mail.gmail.com> <A200625B-5402-41A8-9940-988AE1774123@vidyo.com>
Date: Thu, 06 Aug 2015 17:16:45 -0400
Message-ID: <CAD5OKxsK5BbaiF-6BqdWqBQiH+zNBgqVLwXTMDbZ7vfJ5yo6xQ@mail.gmail.com>
From: Roman Shpount <roman@telurix.com>
To: Jonathan Lennox <jonathan@vidyo.com>
Content-Type: multipart/alternative; boundary="047d7bdc109e609473051cab0986"
Archived-At: <http://mailarchive.ietf.org/arch/msg/rtcweb/TnFZMv6op9GN5uKqVtm4IhDo0bk>
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>, mmusic <mmusic@ietf.org>, "tram@ietf.org" <tram@ietf.org>
Subject: Re: [rtcweb] [tram] TURN permissions for private ips
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Aug 2015 21:16:50 -0000

On Thu, Aug 6, 2015 at 5:08 PM, Jonathan Lennox <jonathan@vidyo.com> wrote:

>
> I can certainly imagine corporate WebRTC applications with an
> application-configured TURN server in a DMZ.  Another example might be a
> cloud service which wants all its traffic to come in through a single port,
> so it configures all applications to connect to it through a TURN port and
> uses RFC 1918 addresses internally.
>

There are also countries like North Korea (not that a very popular place by
a long shot, but it still exists) which runs their entire country in RFC
1918 address space:
http://www.theregister.co.uk/2015/07/21/north_koreas_internet/
_____________
Roman Shpount