RE: [Sip] draft-jennings-sip-dtls
"Christian Stredicke" <Christian.Stredicke@snom.de> Wed, 16 February 2005 22:16 UTC
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA03463 for <sip-web-archive@ietf.org>; Wed, 16 Feb 2005 17:16:37 -0500 (EST)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1D1Xoh-0004nC-3w for sip-web-archive@ietf.org; Wed, 16 Feb 2005 17:38:43 -0500
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1XIb-0008SR-LY; Wed, 16 Feb 2005 17:05:33 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1XGt-0007fn-8s for sip@megatron.ietf.org; Wed, 16 Feb 2005 17:03:47 -0500
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA02178 for <sip@ietf.org>; Wed, 16 Feb 2005 17:03:44 -0500 (EST)
Received: from natnoddy.rzone.de ([81.169.145.166]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1D1XcA-0004Qk-AQ for sip@ietf.org; Wed, 16 Feb 2005 17:25:49 -0500
Received: from snom.de (p54BFD2D3.dip.t-dialin.net [84.191.210.211]) by post.webmailer.de (8.13.1/8.13.1) with ESMTP id j1GM3Rw9013713; Wed, 16 Feb 2005 23:03:28 +0100 (MET)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: RE: [Sip] draft-jennings-sip-dtls
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Date: Wed, 16 Feb 2005 23:01:51 +0100
Message-ID: <B52FDDEC7CBE9D40B36FE900C9AD78B422A58A@merenge.intern.snom.de>
Thread-Topic: [Sip] draft-jennings-sip-dtls
thread-index: AcUUaJombtJckzk/QpC8F072BAkG5QACaA6A
From: Christian Stredicke <Christian.Stredicke@snom.de>
To: Francois Audet <audet@nortel.com>, Cullen Jennings <fluffy@cisco.com>, Jonathan Rosenberg <jdrosen@cisco.com>
X-Spam-Score: 0.7 (/)
X-Scan-Signature: 9e5c23589e6cce06555030c0194c9e2b
Cc: sip@ietf.org
X-BeenThere: sip@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Session Initiation Protocol <sip.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:sip@ietf.org>
List-Help: <mailto:sip-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0685188293=="
Sender: sip-bounces@ietf.org
Errors-To: sip-bounces@ietf.org
X-Spam-Score: 0.7 (/)
X-Scan-Signature: 1ba0ec39a747b7612d6a8ae66d1a873c
Today I would recommend SIP operators to avoid TCP (and that includes TLS) because the processes are simply running out of sockets (think about an ITSP with one million customers). The UDP/DTLS idea would make it reasonable simple to have much more connections and on top have security. And as far as I understood the dtls it finally does solve the fragmentation pain problem. That sounds like a great thing to me. I would vote for dtls! CS ________________________________ From: sip-bounces@ietf.org [mailto:sip-bounces@ietf.org] On Behalf Of Francois Audet Sent: Wednesday, February 16, 2005 9:47 PM To: 'Cullen Jennings'; 'Jonathan Rosenberg' Cc: sip@ietf.org Subject: RE: [Sip] draft-jennings-sip-dtls I would agree with Jonathan. Yes, some implementations of SIP/TCP have performance issues compared to SIP/UDP, but not necessarily all of them. Also, if we need to address the other problems of UDP transport (like fragmentation, and others), then it is not clear to me that we are saving much in the first place by using UDP/DTLS instead of TCP/TLS. I'd like to see real data before we add yet another thing we'll have to implement... -----Original Message----- From: sip-bounces@ietf.org [mailto:sip-bounces@ietf.org] On Behalf Of Cullen Jennings Sent: Tuesday, February 15, 2005 20:08 To: Jonathan Rosenberg Cc: sip@ietf.org Subject: Re: [Sip] draft-jennings-sip-dtls Oops - I meant to put that.... There is pretty much one key thing. No one has build an single edge proxy that can terminate 100k to 1M connections to UAs using TLS. In theory it is possible, but in practice it seems hard. The argument is that this will be easier with DTLS. The issue is not the time it takes to do the crypto - session resumption deals with that nicely - it just the issues of dealing with half a million TCP connections to one box. Of course no one has done it with DTLS either :-) I believe the argument we made for SCTP was that adding an extensions for SCTP won't increase the complexity of things that don't support SCTP. I agree the UDP/TCP complexity made SIP more complicated and I agree that sip and sips made things more complicated. I'm not sure I buy that both TLS and TCP made things more complicated. On 2/15/05 7:15 PM, "Jonathan Rosenberg" <jdrosen@cisco.com> wrote: Cullen, What seems missing to me from this is requirements and problem statements. What is DTLS doing for us that we don't get from TLS? Though SIP can run over many different transport protocols, I think experience over time has shown that more choices here is not necessarily a good thing, as SIP has a fair bit of complexity as a result of dealing with the differences between UDP and TCP. As such, I don't think its a good idea to just add more transport protocols to SIP's list of supported ones unless there is a compelling problem that it is solving. Thanks, Jonathan R. Cullen Jennings wrote: > > Nagendra and I put together a draft on using DTLS with SIP. Until it > shows up in the archives you can find it at > > http://scm.sipfoundry.org/rep/ietf-drafts/fluffy/draft-jennings-sip-dtls -00.html > > (there is a .txt version too) > > > The abstract is: > > This draft specifies how to use Datagram Transport Layer Security > (DTLS) as a transport for SIP. DTLS is a new protocol for providing > TLS security over a datagram protocol. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Sip mailing list https://www1.ietf.org/mailman/listinfo/sip > This list is for NEW development of the core SIP Protocol > Use sip-implementors@cs.columbia.edu for questions on current sip > Use sipping@ietf.org for new developments on the application of sip
_______________________________________________ Sip mailing list https://www1.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use sip-implementors@cs.columbia.edu for questions on current sip Use sipping@ietf.org for new developments on the application of sip
- [Sip] draft-jennings-sip-dtls Cullen Jennings
- Re: [Sip] draft-jennings-sip-dtls Jonathan Rosenberg
- Re: [Sip] draft-jennings-sip-dtls Cullen Jennings
- RE: [Sip] draft-jennings-sip-dtls Francois Audet
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- Re: [Sip] draft-jennings-sip-dtls Vijay K. Gurbani
- Re: [Sip] draft-jennings-sip-dtls Vijay K. Gurbani
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- Re: [Sip] draft-jennings-sip-dtls Dean Willis
- RE: [Sip] draft-jennings-sip-dtls Christian Stredicke
- RE: [Sip] draft-jennings-sip-dtls Christian Stredicke