RE: [Sip] draft-jennings-sip-dtls
"Francois Audet" <audet@nortel.com> Wed, 16 February 2005 20:35 UTC
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA20333 for <sip-web-archive@ietf.org>; Wed, 16 Feb 2005 15:35:48 -0500 (EST)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1D1WF5-00016U-Vq for sip-web-archive@ietf.org; Wed, 16 Feb 2005 15:57:52 -0500
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1Vdw-0006F7-G9; Wed, 16 Feb 2005 15:19:28 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1D1VGz-0006Xn-8S for sip@megatron.ietf.org; Wed, 16 Feb 2005 14:55:45 -0500
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA11733 for <sip@ietf.org>; Wed, 16 Feb 2005 14:55:43 -0500 (EST)
Received: from zcars04f.nortelnetworks.com ([47.129.242.57]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1D1VcI-0007Jb-H4 for sip@ietf.org; Wed, 16 Feb 2005 15:17:47 -0500
Received: from zrtpd0j7.us.nortel.com (zrtpd0j7.us.nortel.com [47.140.203.25]) by zcars04f.nortelnetworks.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id j1GJtAd19226; Wed, 16 Feb 2005 14:55:11 -0500 (EST)
Received: by zrtpd0j7.us.nortel.com with Internet Mail Service (5.5.2653.19) id <1J5A5ZN6>; Wed, 16 Feb 2005 14:55:09 -0500
Message-ID: <1ECE0EB50388174790F9694F77522CCF0186CD80@zrc2hxm0.corp.nortel.com>
From: Francois Audet <audet@nortel.com>
To: 'Cullen Jennings' <fluffy@cisco.com>, 'Jonathan Rosenberg' <jdrosen@cisco.com>
Subject: RE: [Sip] draft-jennings-sip-dtls
Date: Wed, 16 Feb 2005 14:54:59 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
X-Spam-Score: 0.6 (/)
X-Scan-Signature: 9af087f15dbdd4c64ae6bbcdbc5b1d44
Cc: "'sip@ietf.org'" <sip@ietf.org>
X-BeenThere: sip@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Session Initiation Protocol <sip.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:sip@ietf.org>
List-Help: <mailto:sip-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/sip>, <mailto:sip-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0489298902=="
Sender: sip-bounces@ietf.org
Errors-To: sip-bounces@ietf.org
X-Spam-Score: 0.6 (/)
X-Scan-Signature: 311e798ce51dbeacf5cdfcc8e9fda21b
I would agree with Jonathan. Yes, some implementations of SIP/TCP have performance issues compared to SIP/UDP, but not necessarily all of them. Also, if we need to address the other problems of UDP transport (like fragmentation, and others), then it is not clear to me that we are saving much in the first place by using UDP/DTLS instead of TCP/TLS. I'd like to see real data before we add yet another thing we'll have to implement... -----Original Message----- From: sip-bounces@ietf.org [mailto:sip-bounces@ietf.org] On Behalf Of Cullen Jennings Sent: Tuesday, February 15, 2005 20:08 To: Jonathan Rosenberg Cc: sip@ietf.org Subject: Re: [Sip] draft-jennings-sip-dtls Oops - I meant to put that.... There is pretty much one key thing. No one has build an single edge proxy that can terminate 100k to 1M connections to UAs using TLS. In theory it is possible, but in practice it seems hard. The argument is that this will be easier with DTLS. The issue is not the time it takes to do the crypto - session resumption deals with that nicely - it just the issues of dealing with half a million TCP connections to one box. Of course no one has done it with DTLS either :-) I believe the argument we made for SCTP was that adding an extensions for SCTP won't increase the complexity of things that don't support SCTP. I agree the UDP/TCP complexity made SIP more complicated and I agree that sip and sips made things more complicated. I'm not sure I buy that both TLS and TCP made things more complicated. On 2/15/05 7:15 PM, "Jonathan Rosenberg" <jdrosen@cisco.com> wrote: Cullen, What seems missing to me from this is requirements and problem statements. What is DTLS doing for us that we don't get from TLS? Though SIP can run over many different transport protocols, I think experience over time has shown that more choices here is not necessarily a good thing, as SIP has a fair bit of complexity as a result of dealing with the differences between UDP and TCP. As such, I don't think its a good idea to just add more transport protocols to SIP's list of supported ones unless there is a compelling problem that it is solving. Thanks, Jonathan R. Cullen Jennings wrote: > > Nagendra and I put together a draft on using DTLS with SIP. Until it > shows up in the archives you can find it at > > http://scm.sipfoundry.org/rep/ietf-drafts/fluffy/draft-jennings-sip-dtls-00. html <http://scm.sipfoundry.org/rep/ietf-drafts/fluffy/draft-jennings-sip-dtls-00 .html> > > (there is a .txt version too) > > > The abstract is: > > This draft specifies how to use Datagram Transport Layer Security > (DTLS) as a transport for SIP. DTLS is a new protocol for providing > TLS security over a datagram protocol. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Sip mailing list https://www1.ietf.org/mailman/listinfo/sip > This list is for NEW development of the core SIP Protocol > Use sip-implementors@cs.columbia.edu for questions on current sip > Use sipping@ietf.org for new developments on the application of sip
_______________________________________________ Sip mailing list https://www1.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use sip-implementors@cs.columbia.edu for questions on current sip Use sipping@ietf.org for new developments on the application of sip
- [Sip] draft-jennings-sip-dtls Cullen Jennings
- Re: [Sip] draft-jennings-sip-dtls Jonathan Rosenberg
- Re: [Sip] draft-jennings-sip-dtls Cullen Jennings
- RE: [Sip] draft-jennings-sip-dtls Francois Audet
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- Re: [Sip] draft-jennings-sip-dtls Vijay K. Gurbani
- Re: [Sip] draft-jennings-sip-dtls Vijay K. Gurbani
- RE: [Sip] draft-jennings-sip-dtls Tolga Asveren
- Re: [Sip] draft-jennings-sip-dtls Dean Willis
- RE: [Sip] draft-jennings-sip-dtls Christian Stredicke
- RE: [Sip] draft-jennings-sip-dtls Christian Stredicke