Re: [sipcore] Allowing "far" proxies in sip-push

Christer Holmberg <christer.holmberg@ericsson.com> Thu, 22 March 2018 05:22 UTC

Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48F6E12422F for <sipcore@ietfa.amsl.com>; Wed, 21 Mar 2018 22:22:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.302
X-Spam-Level:
X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sgsZO569cU74 for <sipcore@ietfa.amsl.com>; Wed, 21 Mar 2018 22:21:58 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E52D1201F8 for <sipcore@ietf.org>; Wed, 21 Mar 2018 22:21:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521696116; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=H9IBI/QzDzOrtRnbdWgOglMbCqshkPnLqKuJy2dHzCM=; b=TJszk0yZkh0lhUWovmkvQm2GCF+yOs3OQdsODcXCWrdSiMkqbBjSlpqLKUbr9UMu 4A3/yz/cxaBodxk5zhxX0KmydFtQaD68K3tLHY926Y26l6VunnAgZVT9wnb06y1U cxF1+ohBFjofzTqVcvpyo/EPQMarX3v6WM5ZbTSe3P8=;
X-AuditID: c1b4fb3a-a61ff70000003647-ae-5ab33d7482da
Received: from ESESSHC018.ericsson.se (Unknown_Domain [153.88.183.72]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 9F.E0.13895.47D33BA5; Thu, 22 Mar 2018 06:21:56 +0100 (CET)
Received: from ESESSMB102.ericsson.se ([169.254.2.50]) by ESESSHC018.ericsson.se ([153.88.183.72]) with mapi id 14.03.0382.000; Thu, 22 Mar 2018 06:21:55 +0100
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: "Dale R. Worley" <worley@ariadne.com>
CC: "sipcore@ietf.org" <sipcore@ietf.org>
Thread-Topic: [sipcore] Allowing "far" proxies in sip-push
Thread-Index: AQHTwY6hGhUC9DuUvUqlF78QsGKB3KPbrguA
Date: Thu, 22 Mar 2018 05:21:55 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B72DF84D9@ESESSMB102.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B72DF5CB7@ESESSMB102.ericsson.se> (christer.holmberg@ericsson.com) <87bmfgyea9.fsf@hobgoblin.ariadne.com>
In-Reply-To: <87bmfgyea9.fsf@hobgoblin.ariadne.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.169]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrFLMWRmVeSWpSXmKPExsUyM2K7h26J7eYog6WPlC2+/tjEZvHyRJkD k8fk/V+ZPZYs+ckUwBTFZZOSmpNZllqkb5fAlXH0ahdbwULZisOPdzA1MG4U72Lk5JAQMJH4 vnsPcxcjF4eQwGFGibWHDrBAOIsZJWY/+QCU4eBgE7CQ6P6nDWKKCGhKdCzIAellBjIf7dzL BGILC1hKzL51nRnEFhGwknjxcwYLRLmRRMtaL5Awi4CqxJSOA2wgNq+Ar8SbZ9eh1k5nlJg0 8RMjSIJTwFhi0dudrCA2o4CYxPdTa5ggdolL3HoynwniZgGJJXvOM0PYohIvH/9jhbCVJE52 b2aBqNeRWLD7ExuErS2xbOFrZojFghInZz5hmcAoOgvJ2FlIWmYhaZmFpGUBI8sqRtHi1OLi 3HQjI73Uoszk4uL8PL281JJNjMAYObjlt9UOxoPPHQ8xCnAwKvHwlmhujhJiTSwrrsw9xCjB wawkwnsIJMSbklhZlVqUH19UmpNafIhRmoNFSZzXKc0iSkggPbEkNTs1tSC1CCbLxMEp1cCY GXuQs6S2fZtjyDu+3IUyrz48yLO9w5P8uOeq8G6HlNKnpgsf73Zh/XXgZ8B5xuAW/iiR/IXu h9lcD0ou50xfaryw4uO/9MKeO/tXHJvnzWn5w2HHxqyT7p+dnacIGFr35QQx2fvePNLLWP4r 4cI9z0fpLxd5Kkd+l834kM5h4T/tr8jMiv9KLMUZiYZazEXFiQAXVtRGjQIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/sipcore/927-ZWZeosGn40QyFAyHxi5TN2U>
Subject: Re: [sipcore] Allowing "far" proxies in sip-push
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Mar 2018 05:22:00 -0000

Hi,

>> But, if we want to cover your proxy-out-of-path scenario, we can do 
>> that in a separate draft (similar to the Outbound case). Because, 
>> based on the text above, I think it requires a little more thinking 
>> than simply defining a new pn-aor parameter. As I said when this work 
>> started, there is an industry need for a solution now, the window for 
>> providing a standard solution is narrow, and the assumptions in the 
>> current version of the draft meet need.
>
> I intensely dislike the scenario of "The industry needs a solution now, and this is what the > industry has implemented, and so we must approve it."  This is a situation where the IETF > cannot maintain quality control over what it approves.

This is not what the industry has implemented yet - this is what we are trying to get the industry to implement, instead of all kind of different proprietary solutions that I have seen flying around.

My point is that this is not a new fancy feature that operators "may implement at some point in the future" - it is a feature that is needed now.

And, as you have said yourself, your suggested extension does not change the basic mechanism.
 
>In this particular case, my opinion is that the use of URI-parameters is architecturally >undesirable.  (Compare that in RFC 5626, reg-id and
>+sip.instance are header parameters.)  The *only* reason to make the URI
>parameters is scenarios where the implementing proxy is far enough from the registrar >that the only information it has in the incoming request is the contact URI.

A proxy can be "far" from the registrar even if it receives the REGISTER/re-REGISTER requests. 

Even in your suggestion the proxy needs to be aware of the registration status. The only extra seems to be that the proxy does not receive all REGISTER/re-REGISTER requests.

>> I am not aware of any case where the proxy (no matter whether it is 
>> "far" or "near") would not receive the REGISTER/re-REGISTER requests.
>
> OK, but I can easily construct such cases.

That is why I am suggestion we write it down in a separate draft. I think there would be a need for call flows showing your scenario(s), you were talking about extending the 'reg' event package etc...

>> Also, in your "Due to the network architecture..." sentence you seem 
>> to imply that the proxy would not receive the initial REGISTER (which 
>> is the reason pn-aor is needed), but it could receive the re-REGISTER 
>> requests. I have never heard about such use-case.
>
>The proxy must have received a register at some time in the past, or otherwise it would >not be receiving the incoming request now.  But if the proxy is any sort of "edge proxy", >there's no reason to assume that it must receive the re-REGISTER.

Even without push, I have never heard of about such scenarios. REGISTERs and re-REGISTERs always traverse the same path. Even with Outbound, REGISTERs/re-REGISTERs associated with a given flow traverse the same path.

>> Also, if the proxy does not receive the re-REGISTER request, there may 
>> be NAT issues when the proxy is trying to forward the request (since 
>> there is no re-REGISTER, Outbound keep-alive etc opening the pin 
>> hole).
>
> Ah, but if the proxy knows that the re-REGISTER has happened, then the NAT must have 
> been taken care of.  In that case, it can forward the request to the *new* contact URI.

Sure, but depending on the NAT that doesn't mean that requests from the proxy will be allowed through the binding - only request from the IP address of whoever received the re-REGISTER will.

Regards,

Christer