Re: [tram] Extend dual allocation to multiple in TURNbis

Brandon Williams <brandon.williams@akamai.com> Fri, 09 March 2018 21:14 UTC

Return-Path: <brandon.williams@akamai.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C8211270FC for <tram@ietfa.amsl.com>; Fri, 9 Mar 2018 13:14:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g7jVlyANqt4n for <tram@ietfa.amsl.com>; Fri, 9 Mar 2018 13:14:55 -0800 (PST)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75B6B124F57 for <tram@ietf.org>; Fri, 9 Mar 2018 13:14:55 -0800 (PST)
Received: from pps.filterd (m0122330.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w29LDHxs020538; Fri, 9 Mar 2018 21:14:53 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=subject : to : references : from : message-id : date : mime-version : in-reply-to : content-type : content-transfer-encoding; s=jan2016.eng; bh=XHVDb4QIet8rlLpVsxOsIfQbCp4JJSXu/QFqQbr4Vjo=; b=oDay3Wcx6679ICPuP0odhLZDkZvlea3VYq8gJDH6XIeuvpXxTRqqYx/zMmh7q1Rf1Wse J8WuouLh09sfhOQ5SdKqgQI1mYXZQhtySRVF4VppeCFQhghsLmY/JXYmicmtwPBixGT9 9fIw22qIz7byvH4eTgdlghG9nFYps73mS23Dy6XWA0KbvpxJD1f9QY1mc0zfcPbdLJP/ NIhZWFSR0pP9OsWC82ce+e0dyJXO7wExmNzdTludcmNWbdaxkGNVG6COZ2tJOF16yhxb dGYavTP7qnIJfdANK0zR5eJXRoaBrtTddq4uJ7xcyl0CE6QV1k8BmXTuXih6aiZ9j2gk ug==
Received: from prod-mail-ppoint3 ([96.6.114.86]) by mx0b-00190b01.pphosted.com with ESMTP id 2gkvnbgs32-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 09 Mar 2018 21:14:53 +0000
Received: from pps.filterd (prod-mail-ppoint3.akamai.com [127.0.0.1]) by prod-mail-ppoint3.akamai.com (8.16.0.21/8.16.0.21) with SMTP id w29LBHPS002106; Fri, 9 Mar 2018 16:14:52 -0500
Received: from prod-mail-relay14.akamai.com ([172.27.17.39]) by prod-mail-ppoint3.akamai.com with ESMTP id 2gfqx1hh12-1; Fri, 09 Mar 2018 16:14:52 -0500
Received: from [172.28.118.62] (bowill.kendall.corp.akamai.com [172.28.118.62]) by prod-mail-relay14.akamai.com (Postfix) with ESMTP id 0E12184693; Fri, 9 Mar 2018 21:14:52 +0000 (GMT)
To: Karl Stahl <karl.stahl@ingate.com>, "'Konda, Tirumaleswar Reddy'" <TirumaleswarReddy_Konda@McAfee.com>, 'Marc Petit-Huguenin' <petithug@acm.org>, tram@ietf.org
References: <65c75449-152c-1ce7-7c81-460ca589d9f0@acm.org> <DM5PR16MB17881ABD54B89E14F0291C56EA4C0@DM5PR16MB1788.namprd16.prod.outlook.com> <ea84bcf9-19b6-5492-383b-18e2bc5a93bf@acm.org> <DM5PR16MB178859E2018148DBAD51635EEAF20@DM5PR16MB1788.namprd16.prod.outlook.com> <46fdf931-eb0c-c4fe-9c01-4a066134abfb@acm.org> <025201d3b3db$0e182730$2a487590$@stahl@ingate.com> <BN6PR16MB1425C15E7BA5D10DB86AA41DEADA0@BN6PR16MB1425.namprd16.prod.outlook.com> <00a401d3b7a3$1785e700$4691b500$@stahl@ingate.com>
From: Brandon Williams <brandon.williams@akamai.com>
Message-ID: <30c7b7d7-554c-bf46-293e-bc9e71df026b@akamai.com>
Date: Fri, 09 Mar 2018 16:14:49 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
In-Reply-To: <00a401d3b7a3$1785e700$4691b500$@stahl@ingate.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-09_11:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803090251
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-09_11:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803090251
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/s772_Si7i-CViUcaTCLmQ3LSX_I>
Subject: Re: [tram] Extend dual allocation to multiple in TURNbis
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Mar 2018 21:14:57 -0000

I agree with Tiru that opening up turnbis for such a change at this 
stage is not the right approach. The WG has broad consensus already on 
the scope of turnbis, and multiple addresses of each family type is not 
part of that scope.

--Brandon

On 03/09/2018 07:35 AM, Karl Stahl wrote:
> Allowing a turn allocation to return multiple relayed transport addresses, beyond ONE IPv4 and ONE IPv6 (which may sit on the same or on different interfaces/network segments), seems like very small step now when the dual allocation was put in place in this draft. We certainly need it (some reasons below) if TURN is going to be used where needed and we cannot wait for any additional draft.
> 
> Seems like it is sufficient to extent this table (found in draft 14) with 3 new values (as shown):
> 
> 16.  STUN Attributes
> 
>     This STUN extension defines the following attributes:
> 
>       0x000C: CHANNEL-NUMBER
>       0x000D: LIFETIME
>       0x0010: Reserved (was BANDWIDTH)
>       0x0012: XOR-PEER-ADDRESS
>       0x0013: DATA
>       0x0016: XOR-RELAYED-ADDRESS
>       0x0017: REQUESTED-ADDRESS-FAMILY
>       0x0018: EVEN-PORT
>       0x0019: REQUESTED-TRANSPORT
>       0x001A: DONT-FRAGMENT
>       0x0021: Reserved (was TIMER-VAL)
>       0x0022: RESERVATION-TOKEN
>       TBD-CA: ADDITIONAL-ADDRESS-FAMILY
> ADDITIONAL-ADDRESS-ALL
> ADDITIONAL-ADDRESS-ALLV4
> ADDITIONAL-ADDRESS-ALLV6
>       TBD-CA: ADDRESS-ERROR-CODE
>       TBD-CA: ICMP
> 
> Actually, browsing through the draft for ADDITIONAL-ADDRESS-FAMILY, very little text seems to be added for generalization to  ADDITIONAL-ADDRESS-xxx. Almost everything applies to ADDITIONAL-ADDRESS-xxx and can be reused.
> 
> ADDITIONAL-ADDRESS-ALL should be the default for any modern TURN client.
> 
> Check! - We need this now.
> 
> Thanks,
> Karl
> 
> 
> -----Ursprungligt meddelande-----
> Från: Konda, Tirumaleswar Reddy [mailto:TirumaleswarReddy_Konda@McAfee.com]
> Skickat: den 5 mars 2018 11:47
> Till: Karl Stahl; 'Marc Petit-Huguenin'; tram@ietf.org
> Ämne: RE: [tram] Review of dual allocation in TURNbis-11
> 
> ...
> 
> WG has discussed and agreed only on dual allocation and your proposal to return multiple relayed transport addresses of the same family is new work and the need for this enhancement needs to be discussed and agreed in the WG.
> A new draft looks more suitable to discuss this enhancement.
> 
> -Tiru
> 
>> -----Original Message-----
>> From: Karl Stahl [mailto:karl.stahl@ingate.com]
>> Sent: Sunday, March 4, 2018 10:36 PM
>> To: 'Marc Petit-Huguenin' <petithug@acm.org>; Konda, Tirumaleswar Reddy
>> <TirumaleswarReddy_Konda@McAfee.com>; tram@ietf.org
>> Subject: SV: [tram] Review of dual allocation in TURNbis-11
>>
>> Hi,
>>
>> When we now have "dual allocation" into this draft (I see on page 26: "If the
>> client wishes to obtain one IPv6 and one IPv4 relayed transport address then
>> it includes an ADDITIONAL-ADDRESS-FAMILY transport address then it") can
>> we not generalize that further and allow MORE THAN ONE relayed transport
>> address (of any family) in response to an allocation?
>>
>> I mean that a TURN server could have several relay interfaces at different IP-
>> addresses into different networks - not just the Internet, but also a VoIP
>> (higher quality) network e.g. by some triple play service provider, an IMS
>> network or some branch office network.
>>
>> I think this is specifically important for network provided/auto discovered
>> turn servers (application provided turn servers could instead just list several
>> turn servers).
>>
>> I saw someone snipped this about "SINGLE relayed transport address per
>> allocation request"
>>>> https://tools.ietf.org/html/rfc6156#section-3
>>>> <snip>
>>>>
>>>>     TURN servers allocate a single relayed transport address per
>>>>     allocation request.  Therefore, Allocate requests cannot carry more
>>>>     than one REQUESTED-ADDRESS-FAMILY attribute.  Consequently, a
>> client
>>>>     that wishes to allocate more than one relayed transport address at a
>>>>     TURN server (e.g., an IPv4 and an IPv6 address) needs to perform
>>>>     several allocation requests (one allocation request per relayed
>>>>     transport address).
>>>> </snip>
>>
>> but if that is remedied now, it seems like a small step to generalize so we can
>> get multiple relayed transport addresses from one allocate request?
>>
>> /Karl
> 
> 
> 
> **** Left a few clips from "[tram] Review of dual allocation in TURNbis-11" thread
>>>
>>> If the server does not support dual allocation but supports both IPv6 and
>> IPv4 allocations, it will only allocate the IPv4 relayed address and not will not
>> return ADDRESS-ERROR-CODE in the response, the client will know the
>> server does not understand the ADDITIONAL-ADDRESS-FAMILY attribute
>> (ADDITIONAL-ADDRESS-FAMILY is a comprehension-optional attribute).
> 
> 
>>>> Using two different warnings permits to know if the second allocation
>>>> will succeed or not.
>>>>
> 
> 
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram
>