[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[MMUSIC] RTSP: Clarifying setup in Multicast
Hi,
This concerns the following issue:
https://sourceforge.net/support/tracker.php?aid=2105351
When sending SETUP request to a RTSP server it can either itself
indicate the multicast address to use or it can take a destination from
the client. The later has the normal DDOS security issues. However,
there need to be clarification on how one seperates the two.
I propose the following text to the Transport header section.
For Multicast there is several methods for specifying addresses but
they are different in how they work compared with unicast:
dest_addr with client picked address: The address and relevant
parameters like TTL (scope) for the actual multicast group to
deliver the media to. There are security implications
(Section 21) with this method that needs to be addressed if
using this method because a RTSP server can be used as a DoS
attacker on a existing multicast group.
dest_addr using Session Decription Information: The information
included in the transport header can all be comming from the
session description, e.g. the SDP c= and m= line. This
mitigates some of the security issues of the previous methods
as it is the session provider that picks the multicast group
and scope. The client SHALL include the information if it is
available in the session description.
No dest_addr: The lack of an explicit multicast group request the
server to decide the group address and its scope. For this to
work the server needs to have a context about what scope that
works. This method is currently under specified.
Cheers
Magnus Westerlund
IETF Transport Area Director & TSVWG Chair
----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM
----------------------------------------------------------------------
Ericsson AB | Phone +46 8 4048287
Färögatan 6 | Fax +46 8 7575550
S-164 80 Stockholm, Sweden | mailto: magnus.westerlund at ericsson.com
----------------------------------------------------------------------
_______________________________________________
mmusic mailing list
mmusic at ietf.org
https://www.ietf.org/mailman/listinfo/mmusic