Re: [tram] Éric Vyncke's No Objection on draft-ietf-tram-turnbis-27: (with COMMENT)

"Eric Vyncke (evyncke)" <evyncke@cisco.com> Mon, 08 July 2019 21:35 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BF06120342; Mon, 8 Jul 2019 14:35:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=G7Nkwjc8; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=BMPSzzkY
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UErTlEwxhrzM; Mon, 8 Jul 2019 14:35:21 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8323120347; Mon, 8 Jul 2019 14:35:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4512; q=dns/txt; s=iport; t=1562621721; x=1563831321; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=11KZ1lcwjVclig+hKA1t7PW7Ign5udjtF8kF0qb5HCY=; b=G7Nkwjc8HT5He6RSb4jXIdpmN71o4DDQ/PZxF4KnN4yVyzcquvHGPGOG XaP80ks9aDOeQC/fkZOuDzE4ScBdP+7P1dBgMJZ9aZwmNtytJ/eha4nPS R6Gp40JnBdal2LT9LfPrPMiC1Hrd7WQ3afZ01f4b08utFlis7BHUNpuH0 4=;
IronPort-PHdr: 9a23:wS5y8BSeen0x7+f0o7GbRMSoF9psv++ubAcI9poqja5Pea2//pPkeVbS/uhpkESXBdfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH15g640NmhA4RsuMCEn1NvnvOiEkDcJJV1JN9HCgOk8TE8H7NBXf
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AXAACytiNd/5tdJa1fBhsBAQEBAwEBAQcDAQEBgVMGAQEBCwGBQ1ADalUgBAsohByDRwOEUol2gjYll0aBLhSBEANUCQEBAQwBASMKAgEBhEACF4IhIzQJDgEDAQEEAQECAQVtijcMhUoBAQEBAgESEREMAQE3AQsEAgEIEQQBAQMCJgICAjAVBQMIAgQBDQUigwABgWoDDg8BAgyfOAKBOIhgcYEygnkBAQWBNgKDRRiCEgMGgQwoAYteF4FAP4ERJwwTgkw+gmEBAQIBgSImCA4HECOCUDKCJot6gnabZgkCgheGVo0uFAeCLIchjjGDJYoLh0CPfQIEAgQFAg4BAQWBUDiBWHAVZQGCQYJBCRoUgzqFFIU/cgEBAYEmjUQBAQ
X-IronPort-AV: E=Sophos;i="5.63,468,1557187200"; d="scan'208";a="579194422"
Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Jul 2019 21:35:18 +0000
Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x68LZIne020718 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 8 Jul 2019 21:35:19 GMT
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Jul 2019 16:35:18 -0500
Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Jul 2019 17:35:16 -0400
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 8 Jul 2019 16:35:16 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=11KZ1lcwjVclig+hKA1t7PW7Ign5udjtF8kF0qb5HCY=; b=BMPSzzkYu2sFJMHmJU7x2DzCzOEuPp23ZnDUje5xUP2KJaeVO4UepqluZplOKQExCTWfOaue5eA8G+6URZz9vCIrEyP+G+JyQ70EwuziKL1/fm9bpcpL2VuZfa/wV9tkWShV58kYM5glYTzt4N2HF9yBne6XzcvWEFGm1z9QWlA=
Received: from MN2PR11MB4144.namprd11.prod.outlook.com (20.179.150.210) by MN2PR11MB3903.namprd11.prod.outlook.com (10.255.180.78) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.19; Mon, 8 Jul 2019 21:19:27 +0000
Received: from MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::b179:dc88:3c29:4474]) by MN2PR11MB4144.namprd11.prod.outlook.com ([fe80::b179:dc88:3c29:4474%6]) with mapi id 15.20.2052.020; Mon, 8 Jul 2019 21:19:27 +0000
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>, The IESG <iesg@ietf.org>
CC: "tram-chairs@ietf.org" <tram-chairs@ietf.org>, "draft-ietf-tram-turnbis@ietf.org" <draft-ietf-tram-turnbis@ietf.org>, "tram@ietf.org" <tram@ietf.org>, "brandon.williams@akamai.com" <brandon.williams@akamai.com>
Thread-Topic: [tram] Éric Vyncke's No Objection on draft-ietf-tram-turnbis-27: (with COMMENT)
Thread-Index: AQHVNJyeoaZBM6SyTEC4IXgEbhm1HqbARDZggAEZuwA=
Date: Mon, 08 Jul 2019 21:19:27 +0000
Message-ID: <E3B79278-D304-4E0B-8807-350B1AB9D50F@cisco.com>
References: <156248752430.14312.15895119889558390147.idtracker@ietfa.amsl.com> <DM5PR16MB17053A7DCA0A23A09B9D3E88EAF60@DM5PR16MB1705.namprd16.prod.outlook.com>
In-Reply-To: <DM5PR16MB17053A7DCA0A23A09B9D3E88EAF60@DM5PR16MB1705.namprd16.prod.outlook.com>
Accept-Language: fr-BE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1a.0.190609
authentication-results: spf=none (sender IP is ) smtp.mailfrom=evyncke@cisco.com;
x-originating-ip: [2001:420:c0c0:1002::92]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: bb79f418-7042-4795-7896-08d703e9f569
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:MN2PR11MB3903;
x-ms-traffictypediagnostic: MN2PR11MB3903:
x-ms-exchange-purlcount: 4
x-microsoft-antispam-prvs: <MN2PR11MB39031B4472FAA8BB3216A464A9F60@MN2PR11MB3903.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 00922518D8
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(396003)(346002)(366004)(136003)(39860400002)(189003)(199004)(51914003)(13464003)(53546011)(102836004)(6506007)(86362001)(4326008)(99286004)(486006)(14454004)(446003)(11346002)(2616005)(25786009)(476003)(66446008)(91956017)(76116006)(66476007)(73956011)(7736002)(224303003)(5660300002)(66556008)(64756008)(36756003)(186003)(76176011)(33656002)(68736007)(316002)(8936002)(46003)(2906002)(6512007)(53936002)(6436002)(6306002)(81166006)(81156014)(305945005)(66946007)(14444005)(66574012)(256004)(6116002)(966005)(478600001)(54906003)(71200400001)(6486002)(58126008)(110136005)(6246003)(71190400001)(229853002); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3903; H:MN2PR11MB4144.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 5uCB/F4wz+5rT4ZhG5jrPy38yWi2m2+3PgAiXbfptTArxnzGO44T9BMkqM6Cenla7LDSNHxdBkRq79pATFE1ZoxtCQb8Go1Qxd2PjB2DMGUOlmomAmHAvOpQaa8myuQCeiqlpVaAZQ+fAtyQGl6OrXM6vhDvtqfhod8C/Dmz3/drVBjc9wZoEJodTuC/3FKtvsGGyvxTzaM2ajcKyObh+8+kVX5SJ9QBHd+DPzi+LYGP1XBg2jZEOJK/FY4+dgR0Xz/RGZrzc552cu5V60Rdphs2GUyd8UGHKXWSc5n8puxbOXxtZYGg0foS1VnDmrnb1ruEFMCcExl2e+lcs6R3FvhoRJEkFZJGnh2NGorZi37DylKLzY1PkdlxxJq/IBHHnG7H0kNx723oWQVi8ih/LzS/vPAkvbNMz5ziXxCgcIY=
Content-Type: text/plain; charset="utf-8"
Content-ID: <0DD28ED8891C3C4D90157E43B2B39767@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: bb79f418-7042-4795-7896-08d703e9f569
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 21:19:27.4538 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: evyncke@cisco.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3903
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.26, xch-aln-016.cisco.com
X-Outbound-Node: rcdn-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/2UhNdo1dD6maQdr0rU324115gTo>
Subject: Re: [tram] Éric Vyncke's No Objection on draft-ietf-tram-turnbis-27: (with COMMENT)
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jul 2019 21:35:37 -0000

Tiru

Thank you for your reply and your comments and actions.

Please see remaining points inline for lines starting with EV>

Regards

-éric

On 08/07/2019, 15:55, "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> wrote:

    Hi Eric,
    
    Thanks for the review. Please see inline 
    
    > -----Original Message-----
    > From: tram <tram-bounces@ietf.org> On Behalf Of Éric Vyncke via
    > Datatracker
    > Sent: Sunday, July 7, 2019 1:49 PM
    > To: The IESG <iesg@ietf.org>
    > Cc: tram-chairs@ietf.org; draft-ietf-tram-turnbis@ietf.org; tram@ietf.org;
    > brandon.williams@akamai.com
    > Subject: [tram] Éric Vyncke's No Objection on draft-ietf-tram-turnbis-27:
    > (with COMMENT)
    > 
    
    > For my own curiosity, isn't TURN scope broader than plain NAT: can it also be
    > useful in the absence of NAT if inbound 'connection' are blocked by security
    > policy ?
    
    Interactive Connectivity Establishment (ICE) helps solve the above problem by performing connectivity checks, but direct UDP connection will not be possible even with ICE if both endpoints are behind NATs that perform address and port dependent mapping. In addition, Enterprise firewall may block direct UDP connections but allow UDP traffic relayed through an Enterprise TURN server (please see https://tools.ietf.org/html/rfc7478#section-2.3.5.1). 
  
EV> I am familiar with ICE __ and your last sentence is exactly what my initial comment was about: please goes beyond the NAT typical/common use case of TURN and also cite the firewall blocking inbound UDP. Just to improve understanding by the readers.
  
    > 
    > == COMMENTS ==
> 
    > -- Section 3.1 --
    > 
    > Is there any reason why MPTCP is not specified for the communication
    > between TURN client and TURN server? There is a very short explanation in
    > section 15 "TCP multi-path is not used by both SIP and WebRTC protocols
    > [RFC7478] for media and non-media data" but it does not address the use of
    > MPTCP between TURN client/server.
    
    TURN is typically used by SIP and WebRTC protocols to relay media streams, but RTP assumes a single path and make decisions based on the measured characteristics of this single path (with the exception of Multipath RTP discussed in https://tools.ietf.org/html/draft-ietf-avtcore-mprtp-03).
   
EV> suggest to add an informative reference to the I-D
 
    > 
    > -- Section 3.7 --
    > 
    > The 500 bytes guideline to avoid fragmentation, is there any data backing the
    > sentence "...will generally avoid IP fragmentation." ?
    
    Yes, If the PMTU is not known, and on legacy or otherwise unusual networks the guideline should work (see https://tools.ietf.org/html/rfc7252#section-4.6 and https://tools.ietf.org/html/draft-ietf-tsvwg-datagram-plpmtud-08).
    
EV> RFC 7252 is about CoAP and is not "a guideline" per se but a reference to the IPv4 'assumed' MTU of 576. I would prefer a reference to RFC 7252 with 576 for IPv4 and 1280 for IPv6 for MTU. I am afraid that giving the number "500" is kind of misleading the reader. At the bare minimum, I suggest to add the reference to COAP, and use the number from CoAP if you want to specify numbers.