Re: [sipcore] RFC4028 : Very basic question in 8.1

Paul Kyzivat <pkyzivat@alum.mit.edu> Sat, 11 July 2020 20:15 UTC

Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E9373A00DF for <sipcore@ietfa.amsl.com>; Sat, 11 Jul 2020 13:15:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=alum.mit.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i3LjuGzryPxF for <sipcore@ietfa.amsl.com>; Sat, 11 Jul 2020 13:15:05 -0700 (PDT)
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12on2056.outbound.protection.outlook.com [40.107.244.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D00553A00C9 for <sipcore@ietf.org>; Sat, 11 Jul 2020 13:15:05 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BRpO1OcGIfckBkU1A6PFGyMJ9vOaUgJ8L7Jp3FoXw/nFU52kxR3//bXnTk18RfuI+AjvfeSru7F2EYy1r15LAZGvukpxzAszEphqdoU383Zo2AiOj/7JsvQ0o5B4NJIY4Fj8T1vJaNNO9NYXSJ5DPrMv7o2/vYFQA0EgkKWPo9lU/ep3PDb91neDcivY/LdtqZ5R/RE3RAzCNRRHdtD4Yoj+oDzRUvY2Ts7utQG+xYC76lZWaoxvJu3q0f0PYKD/n2lRilk3f54dcDft50INHRFv27Cs9dojR12o0nH6MmGtFYyO9VmNOoEjOamM/U/Mj4JuwdKFMkJ499yCsq1vbQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hUWyXKOV4IFU09EZ/rRbLx03TCqhDoBkjSyMgTejqP4=; b=kU9h/GmJVDm8l2XknQJ7VlsKcy3IruLAMO6gPi2wemXmdfbNNGOiYJQVW2AsSei4F0FUO2ckMNbjb8PW/Cw36iEaOf9KkbxgZ3XPE+EFcJl8NepucoKN8blhchdvjoiS+72I+NrDeCs0upv7yxbwv+TakMFL9AzfNAzXmjQJQrELQ72mCcRL0SxVLvtb+NGMfxyio2+Yq3NnVmv/zkarO/PlcCYAtkuRfw1tbwGzJcoXxO1KtfSYI8r0MuE6wJ5R47XzVWMmT3uy+fWOttHcy9rppukXAImbpWdUmcGzYwundyLXo8povDYejIRphblTGoZ7yip+fmJdjGL6Bn4Bhw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 18.7.68.33) smtp.rcpttodomain=gmail.com smtp.mailfrom=alum.mit.edu; dmarc=bestguesspass action=none header.from=alum.mit.edu; dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alum.mit.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hUWyXKOV4IFU09EZ/rRbLx03TCqhDoBkjSyMgTejqP4=; b=Ja/jxv8MbNWaRXqYtBJXl4dsBHMFAh2vZhdyPi/EP97TdXZ5khmPYkIkqvCdRgnhhPvqz0AeRoiMU6YdCGOSmCDXMaRGMC7Q/tfPUTMaFlIySMRi7L5oO45r2ZzjU4JmaiauuUkg7xCOnBT2SiAOZgCSutjZ/3Z1qKjg9KsTyxs=
Received: from SN4PR0501CA0047.namprd05.prod.outlook.com (2603:10b6:803:41::24) by DM6PR12MB4249.namprd12.prod.outlook.com (2603:10b6:5:223::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Sat, 11 Jul 2020 20:15:04 +0000
Received: from SN1NAM02FT044.eop-nam02.prod.protection.outlook.com (2603:10b6:803:41:cafe::ff) by SN4PR0501CA0047.outlook.office365.com (2603:10b6:803:41::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.9 via Frontend Transport; Sat, 11 Jul 2020 20:15:04 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 18.7.68.33) smtp.mailfrom=alum.mit.edu; gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=bestguesspass action=none header.from=alum.mit.edu;
Received-SPF: Pass (protection.outlook.com: domain of alum.mit.edu designates 18.7.68.33 as permitted sender) receiver=protection.outlook.com; client-ip=18.7.68.33; helo=outgoing-alum.mit.edu;
Received: from outgoing-alum.mit.edu (18.7.68.33) by SN1NAM02FT044.mail.protection.outlook.com (10.152.72.173) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.21 via Frontend Transport; Sat, 11 Jul 2020 20:15:04 +0000
Received: from Kokiri.localdomain (c-24-62-227-142.hsd1.ma.comcast.net [24.62.227.142]) (authenticated bits=0) (User authenticated as pkyzivat@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.14.7/8.12.4) with ESMTP id 06BKF1kK026199 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Sat, 11 Jul 2020 16:15:02 -0400
To: OKUMURA Shinji <ietf.shinji@gmail.com>, SIPCORE <sipcore@ietf.org>
Cc: Roman Shpount <roman@telurix.com>
References: <24d093f2-284f-a068-1cf1-8fb1b9310ff0@gmail.com> <CAD5OKxu1Ua79rEg-udgD-RxZjrfTmmyZMmDGvPQXp5xc1kzn1Q@mail.gmail.com> <8ab9ef7d-1df0-2adc-70fa-0473526442cb@gmail.com> <CAD5OKxuNsf1YDMZw6_KvONMafCE+vaHeNLEQoqCscp5wqHFHrA@mail.gmail.com> <7c1e3969-af88-80ca-96c4-7e6bb1d2a172@alum.mit.edu> <CAD5OKxvhoHhurMx==DLw8DWPYJ5XXoqcS1d1L2-Xp304egCeow@mail.gmail.com> <30d2b673-ed42-45f9-c8c7-58f99ae347af@alum.mit.edu> <1554aecb-fad1-436c-947c-088ddf71b5b5@gmail.com> <66b73776-1c57-33ac-09a9-d60b7e6996b7@alum.mit.edu> <36562af9-bb48-74b1-0ffa-a90c3ad45c5b@gmail.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <004e3388-9a73-376b-5b37-44799da1d0db@alum.mit.edu>
Date: Sat, 11 Jul 2020 16:15:01 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <36562af9-bb48-74b1-0ffa-a90c3ad45c5b@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report: CIP:18.7.68.33; CTRY:US; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:outgoing-alum.mit.edu; PTR:outgoing-alum.mit.edu; CAT:NONE; SFTY:; SFS:(396003)(136003)(346002)(376002)(39860400002)(46966005)(36906005)(31686004)(956004)(2616005)(31696002)(70586007)(336012)(70206006)(26005)(75432002)(7596003)(82310400002)(47076004)(356005)(8676002)(83380400001)(8936002)(82740400003)(86362001)(5660300002)(786003)(316002)(4326008)(110136005)(478600001)(53546011)(2906002)(186003)(43740500002); DIR:OUT; SFP:1101;
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 4ff42b90-00d1-49c9-101e-08d825d71927
X-MS-TrafficTypeDiagnostic: DM6PR12MB4249:
X-Microsoft-Antispam-PRVS: <DM6PR12MB424947A24B37212BC15AB7F5F9620@DM6PR12MB4249.namprd12.prod.outlook.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:10000;
X-Forefront-PRVS: 046164D5C4
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: Y3Ubd5bo4pN+AupUKN1vcrY0pSJrwvdkKQahDF+a9GVQG5H2LlJIhui1uVc7TroEub5BtUY+xIfvCcfKp1bgySeGEnGrQkoB+vMEm6ltWjcipPjv/+jzTR2JUEeMoq1B9cdcFxWGBWvFpyMaD9SDQ2PfSZ7zlz5lFHz2pVYQYImaNJaADcBNUUUD+dwJK8NWhMjkeSG3TTEhLZkzdWd2aqxoeKg86TEhKj2kfENTYC79bfJ9wCw+i2B4/1jxr1L5eK/UHNLIxE5duqXJazLoISSZhN1BNhGpoYz9p2zB64OJYrdT1HYtUhL/49kjpoqUJbTD759GdgHRXfqnZP9d0fCD5qxNtYhjJJIFaFFJTCrw5xoNjUY89tLYAZGEbSUCY0gpO2YB95yS902BRjvMF6Rs4GBkbWMzs0LQdyzOCi9aQdO0OVXh/kS3HBoa/dqq
X-OriginatorOrg: alum.mit.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jul 2020 20:15:04.0403 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4ff42b90-00d1-49c9-101e-08d825d71927
X-MS-Exchange-CrossTenant-Id: 3326b102-c043-408b-a990-b89e477d582f
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3326b102-c043-408b-a990-b89e477d582f; Ip=[18.7.68.33]; Helo=[outgoing-alum.mit.edu]
X-MS-Exchange-CrossTenant-AuthSource: SN1NAM02FT044.eop-nam02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR12MB4249
Archived-At: <https://mailarchive.ietf.org/arch/msg/sipcore/L6BEUjhueSdz3M6pZSNO0OXVKSg>
Subject: Re: [sipcore] RFC4028 : Very basic question in 8.1
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Jul 2020 20:15:08 -0000

On 7/11/20 12:11 AM, OKUMURA Shinji wrote:
> Hi,
> 
> On 2020/07/11 0:26, Paul Kyzivat wrote:
>> On 7/10/20 10:56 AM, OKUMURA Shinji wrote:
>>> On 2020/07/10 2:11, Paul Kyzivat wrote:
>>>>> What I am trying to avoid is ending up with a non-obvious set of 
>>>>> changes to an existing specification which will act as a barrier to 
>>>>> implementation. Letting proxies increase SE would be an example of 
>>>>> such change.
>>>>
>>>> Upon rereading 4028 I was surprised to discover that proxies MAY 
>>>> increase SE to the extent necessary to conform with an increased 
>>>> Min-SE! I hadn't remembered that part. But AFAIK that is the only 
>>>> case where it is allowed.
>>>
>>> In fact, proxy is conditionally allowed to increase SE directly 
>>> without renegotiation. And RFC does not specify the procedure to 
>>> reject if too large.
>>
>> Where do you find this in 4028.
> 
> P.13
>     If the value of the Session-Expires header field is lower
>     than the value of the Min-SE header field (possibly because the proxy
>     increased the value of the Min-SE header field, as described below),
>     the proxy MUST increase the value of the Session-Expires header field
>     to make it equal to Min-SE header field value.
> 
> Of course, negotiation with downstream proxies and UAS will occur.

OK. But that only allows increasing up to the value of Min-SE. It 
doesn't otherwise allow increasing SE.

>>> This is why I interpret the RFC does not attach importance to 
>>> increase of SE.
>>>
>>> And you said,
>>>> If the Min-SE and SE are higher than one of the proxies desires, 
>>>> then it is pretty much out of luck. In some sense this is futile for 
>>>> it to complain because the timer refreshes are only part of the 
>>>> traffic.
>>>
>>> So, I want to know why must a proxy not increase SE-value?
>>> I think this is a very basic and important premise of RFC, but there 
>>> is no specific explanation.
>>> I say again, this is not a suggestion, but a question.
>>
>> If proxies along the path (and the UAS) could both increase and 
>> decrease the value of SE, then you don't have a negotiation. Rather, 
>> those further along the path have priority over the earlier ones.
>>
>> By having both SE and Min-SE, with SE only being reduced and Min-SE 
>> only increased, everybody on the path has input into the final result.
> 
> I understand the basic policy, but when the UAC that received the 422 
> response retransmits the INVITE with a larger SE and MSE set, the proxy 
> cannot reduce the SE. I think the result will be the same as if the 
> proxy increased SE.

But this requires that the 422 be issued, and that the UAC be willing to 
retry with the values it contains. Until we get to this point everybody 
gets to have their vote counted.

The bottom line is that when there is a conflict, with some parties 
requiring that SE be larger and some requiring it to be smaller, the 
larger preference wins. This is effectively valuing efficiency of 
processing over cost of saving state longer, or if you prefer, valuing 
UAs over proxies.

But this tradeoff only occurs if there is no happy medium that all can 
live with.

	Thanks,
	Paul