Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples

Christer Holmberg <christer.holmberg@ericsson.com> Fri, 13 March 2015 11:02 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C1D81A011D for <rtcweb@ietfa.amsl.com>; Fri, 13 Mar 2015 04:02:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u-zB5Ryrv8Hb for <rtcweb@ietfa.amsl.com>; Fri, 13 Mar 2015 04:02:41 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 184C91A0115 for <rtcweb@ietf.org>; Fri, 13 Mar 2015 04:02:37 -0700 (PDT)
X-AuditID: c1b4fb3a-f79146d0000070a3-7b-5502c3cc10ca
Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id E1.2D.28835.CC3C2055; Fri, 13 Mar 2015 12:02:36 +0100 (CET)
Received: from ESESSMB209.ericsson.se ([169.254.9.214]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0210.002; Fri, 13 Mar 2015 12:02:35 +0100
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: Justin Uberti <juberti@google.com>
Thread-Topic: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples
Thread-Index: AQHQVqbHfYSbCv5RRE+VguSZdJaU4Z0MmygAgAACNQCAAB9EuP//8M8AgAASNNj//+/xAIAADFaAgAAlg8SAABtygIAAeWFLgAAf7wCAAAYfgIAAVgeAgAZK9ICAAInMAIACfsqQ///+kYAAAkFGAP//9aSA///silCAABmMAIAAEUGA//63n9CAAuI/gP/+sRLQ
Date: Fri, 13 Mar 2015 11:02:35 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B1D7395D9@ESESSMB209.ericsson.se>
References: <54F74B02.1070902@jive.com> <CAD5OKxs8JYG3-Vvndi59ZrdPE7UTj22ozD4tcWTHgzWrHv=q7Q@mail.gmail.com> <54F756B2.60408@jive.com> <7594FB04B1934943A5C02806D1A2204B1D726AD8@ESESSMB209.ericsson.se> <CAD5OKxu7py3HbrFjxTDZS5ECFzx7vd=wpjve-gT6gWwksjEu+g@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726B71@ESESSMB209.ericsson.se> <CABcZeBO1O6sA8MqvWkCDu3RPLz5-P2G65Us28i0baOavDnRT7Q@mail.gmail.com> <CAD5OKxuWCdgMR5Kxjv9BSwZ3Jm9kGXx9Pi-9FrfsnuQZ_91jAA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D726DC1@ESESSMB209.ericsson.se> <CALiegfkipJhsy7-40+=d9xMUf4RJGdn3_fABL3NN2KuFNvS2BA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D727570@ESESSMB209.ericsson.se> <CALiegfmfvz3NWSjcovGBytiOTbR6kFfyh0vx5cXoMJtytfGzRA@mail.gmail.com> <CAD5OKxsu3D0xHY-zYbDu1hyH_+4=3mWDvW2i98WCVZ+29BpKCw@mail.gmail.com> <CA5E97EE-99F8-44D8-B05B-C9EFDED1A9BB@vidyo.com> <2F467A7E-7A6C-4B1B-985A-0D9C089BE973@cisco.com> <CAOJ7v-1TjZOZ5G31vy_Gt73ADGLRay1RHVeMi=H6Q4=N1b6HLA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D7367A0@ESESSMB209.ericsson.se> <CALiegfmyp=v6thk4eLz7nL1BHh2Qj7jmC84tdG7ufg8HPXsVKA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D7369C9@ESESSMB209.ericsson.se> <CAD5OKxtCswToNzoZnnqJ5M66mjNjKJoA++WYNqN5155n+CWXsA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D736AC0@ESESSMB209.ericsson.se> <CAD5OKxs1grSqAG32mf__wtsjpo68jZmKonbd+EsJmYNsDHUbFQ@mail.gmail.com> <CAOJ7v-3YypG1s9KXOCA+Fo58SuVuUk5-thcSc0k3N2j=4ZmJoA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D737A76@ESESSMB209.ericsson.se> <CAOJ7v-1baW-jme7pApSFZc7aDXAmVm++p60-c9ZtjFxHSybf=g@mail.gmail.com>
In-Reply-To: <CAOJ7v-1baW-jme7pApSFZc7aDXAmVm++p60-c9ZtjFxHSybf=g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.19]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupgkeLIzCtJLcpLzFFi42KZGfG3RvfMYaZQgy0fpSw6JrNZ7F98ntli 61QhixkXpjJbrP3Xzu7A6jHl90ZWjwWbSj2WLPnJ5HFrSoFH27M77AGsUVw2Kak5mWWpRfp2 CVwZX/p/sRT08VcsONrC3sB4h6+LkZNDQsBE4vziBkYIW0ziwr31bF2MXBxCAkcYJV68mMIK 4SxhlLj7bDV7FyMHB5uAhUT3P22QBhEBNYmHs3aB1TALTGOUWLiunwUkISxgLPFt5hNGiCIT iY3PnzOBFIkIXGKUOL/hEjNIgkVAVaJx0SywBl4BX4lTP84yQ2x7wiNxuekiO0iCUyBQYt29 TWA2I9B930+tYQKxmQXEJW49mc8EcbeAxJI955khbFGJl4//sULYihLtT0F+4wCq15RYv0sf olVRYkr3Q3aIvYISJ2c+YZnAKDYLydRZCB2zkHTMQtKxgJFlFaNocWpxcW66kZFealFmcnFx fp5eXmrJJkZg1B3c8ttqB+PB546HGAU4GJV4eD90MYUKsSaWFVfmHmKU5mBREue1Mz4UIiSQ nliSmp2aWpBaFF9UmpNafIiRiYNTqoHRK3zmryULbv+JecYp7a//7cqM2xM4zNmXSV97/2W+ q4BlyA/jNN6ZlfNm7v1i89jbRdzTxKCatzz9p1uUsLTmjkBHL3fDoOWMbtfX7d2rOO3W3COu j4IdAidaVE/jdhC/dt5wm+H23OBVi27kJ1UrlXMHcCy7xWZZnF78V/zFc0fTRQUmrbxKLMUZ iYZazEXFiQCBH9domwIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/rtcweb/gEC1MxGn0wYDQnKT4W-hh9lUVPk>
Cc: Cullen Jennings <fluffy@cisco.com>, Jonathan Lennox <jonathan@vidyo.com>, "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] DTLS, DTLS-SRTP, and 5-tuples
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2015 11:02:43 -0000

Hi Justin,

>>>>>> New things can be defined in the future. When they do, they should treat ICE a virtual communication channel that
>>>>>> provides unreliable packet transport with no order guarantees which can span multiple 5-tuples.
>>>>>
>>>>> Then the scope of what we discuss now should not be "whatever protocol" - it should be the specific protocols we are discussing.
>>>>
>>>> I think ICE-bis should define protocol requirements for the protocols that can run on top of ICE, which includes:
>>>> 1. Ability to run over unreliable packet based transport with no order guarantees
>>>> 2. Ability to demux with STUN packets
>>>> 3. Not make any assumption about IP addresses, ports, or other transport level protocols attributes such as TOS. 
>>>
>>> I think these are good criteria. Note that TCP would meet these criteria, and I see no problem running TCP atop ICE (we used to do this in an old version of our data channel code).
>>
>> I don't think a TCP connection can span over multiple 5-tuples - each TCP connection will be bound to one 5-tuple.
>
> I don't agree. SCTP can be tunneled over UDP, as we know, so why not TCP? The ports in such a tunnel scenario are just as unnecessary as in SCTP over UDP. 

We need to be clear about what we mean.

When I say "TCP", I mean plain TCP :)

If we talk about TCP-over-UDP, we should say "TCP-over-UDP" :)

Regards,

Christer