behave-4----Page:8
1  2  3  4  5  6  7  8  9 

Doors / Lockdown (#4)
Was concept in previous versions of TURN
Initial allocation can ask for the “door” property. Creates a binding for first datagram/TCP SYN received at door, then closes the door.
still can’t run real server: can’t ask for specific port, can’t get well-known port, can’t add a door to existing binding/allocation
still allows additional explicit bindings with Send / Connect / OpenBinding
Why? Allows peers to optimize down to a single TURN relay in some cases (no forking). Also useful for interop with non-ICE peers
Issue: Port scanner can easily “lockout” the real peer, but with ICE, the client can still communicate through 2 TURN relays
Do we want this concept?
PPT Version