Re: [tram] STUNBIS: Retransmissions over TCP

"Olle E. Johansson" <oej@edvina.net> Wed, 27 July 2016 07:23 UTC

Return-Path: <oej@edvina.net>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE43E12D5C2 for <tram@ietfa.amsl.com>; Wed, 27 Jul 2016 00:23:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j2-FV1-Z6gTH for <tram@ietfa.amsl.com>; Wed, 27 Jul 2016 00:23:21 -0700 (PDT)
Received: from smtp7.webway.se (smtp7.webway.se [212.3.14.205]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BAA5912D1DA for <tram@ietf.org>; Wed, 27 Jul 2016 00:23:20 -0700 (PDT)
Received: from [192.168.40.18] (h87-96-134-129.cust.se.alltele.net [87.96.134.129]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp7.webway.se (Postfix) with ESMTPSA id 146D8426A; Wed, 27 Jul 2016 09:23:17 +0200 (CEST)
Content-Type: multipart/alternative; boundary="Apple-Mail=_F7624833-D2AF-4CC7-9101-A2A5484E42F6"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "Olle E. Johansson" <oej@edvina.net>
In-Reply-To: <CAKz0y8wvRSLdxiTVs0_D5BqM3btcsD+bpvRjq9WjDW_3jTAu4w@mail.gmail.com>
Date: Wed, 27 Jul 2016 09:23:16 +0200
Message-Id: <C3B5A9EB-7297-400B-93B8-F8F7C5DDC50D@edvina.net>
References: <A088130D-4E99-4D04-9645-461BD40BCC54@edvina.net> <c5dae3ae-e661-f5df-9add-d8174248bd30@jive.com> <CAKz0y8wvRSLdxiTVs0_D5BqM3btcsD+bpvRjq9WjDW_3jTAu4w@mail.gmail.com>
To: Muthu Arul Mozhi Perumal <muthu.arul@gmail.com>
X-Mailer: Apple Mail (2.3124)
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/vLwmuCo2DWlzDtFh4X1_UaBsPNg>
Cc: Simon Perreault <sperreault@jive.com>, Olle E Johansson <oej@edvina.net>, "tram@ietf.org" <tram@ietf.org>
Subject: Re: [tram] STUNBIS: Retransmissions over TCP
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jul 2016 07:23:24 -0000

> On 26 Jul 2016, at 14:50, Muthu Arul Mozhi Perumal <muthu.arul@gmail.com> wrote:
> 
> The use cases I've heard are:
> 1. A (broken) middle box doing TCP<->UDP inter-working: If the message get lost on the UDP side and the transmissions are handled by the TCP stack (in the kernel), the middle box may not retransmit the message over UDP causing problem for endpoints.
> 2. Mobility: If the IP address changes, TCP may not know whether the message was sent or not.
> 
> These are what I've overheard, though I haven't come across the problem myself..
THank you for your feedback!

I think there is something here to explore for STUN and the various usages, but we may not
be ready to open up StunBIS for it. It is a middlebox problem we need to handle, and I think
that STUN is a tool developed to discover middleboxes - NAT was the first one. The STUN RTT
measurement come in handy here, as the report I referred to clearly sees different latencies
depending on direction indicating that a TCP proxy was in the path. Maybe the RTT draft needs
to consider one-way too in order to assist detection?

/O
> 
> Muthu
> 
> On Tue, Jul 26, 2016 at 5:39 PM, Simon Perreault <sperreault@jive.com <mailto:sperreault@jive.com>> wrote:
> Le 2016-07-26 à 05:23, Olle E. Johansson a écrit :
> > Section 6.2.2:
> >
> > "Reliability of STUN over TCP and TLS-over-TCP is handled by TCP
> >    itself, and there are no retransmissions at the STUN protocol level.”
> >
> > When using STUN over mobile networks, I think this is a bad assumption.
> > We’ve seen many times that TCP proxys cause TCP to fail and they don’t follow
> > the original intention of TCP. The SIP message fails, even though TCP confirmed
> > delivery. I’ve got confirmation from a few developers that they started to send UDP-style
> > retransmits over TCP to get around this.
> 
> I think this will be met with incredulity and responses along the lines
> of "pcap or GTFO". :)
> 
> I admit I'd like to see a more detailed description of the problem
> before we mandate such a profound change in the protocol. Would you be
> able to get one of those developers to come talk to us?
> 
> > As a discovery protocol, I think we need STUN to discover situations like this.
> > I know it’s not religiously correct, but retransmits over TCP unfortunately makes sense
> > in today’s broken network, especially for a protocol designed to discover middle boxes.
> 
> To be clear: you actually mean sending a second Binding request on the
> *same* TCP connection, right? Not opening a new one?
> 
> Simon
> 
> _______________________________________________
> tram mailing list
> tram@ietf.org <mailto:tram@ietf.org>
> https://www.ietf.org/mailman/listinfo/tram <https://www.ietf.org/mailman/listinfo/tram>
> 
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram