idnits 2.17.1 draft-ietf-mmusic-sctp-sdp-21.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- -- The document has examples using IPv4 documentation addresses according to RFC6890, but does not use any IPv6 documentation addresses. Maybe there should be IPv6 examples, too? Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the IETF Trust and authors Copyright Line does not match the current year -- The document date (January 9, 2017) is 2657 days in the past. Is this intentional? Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- (See RFCs 3967 and 4897 for information about using normative references to lower-maturity documents in RFCs) == Missing Reference: 'Section 5' is mentioned on line 473, but not defined == Missing Reference: 'Section 6' is mentioned on line 582, but not defined == Missing Reference: 'Section 7' is mentioned on line 717, but not defined == Missing Reference: 'Section 8' is mentioned on line 720, but not defined == Missing Reference: 'RFCXXXX' is mentioned on line 811, but not defined ** Obsolete normative reference: RFC 4566 (Obsoleted by RFC 8866) ** Obsolete normative reference: RFC 4572 (Obsoleted by RFC 8122) ** Obsolete normative reference: RFC 4960 (Obsoleted by RFC 9260) ** Obsolete normative reference: RFC 5226 (Obsoleted by RFC 8126) ** Obsolete normative reference: RFC 6347 (Obsoleted by RFC 9147) == Outdated reference: A later version (-13) exists of draft-ietf-mmusic-4572-update-10 == Outdated reference: A later version (-32) exists of draft-ietf-mmusic-dtls-sdp-15 == Outdated reference: A later version (-19) exists of draft-ietf-mmusic-sdp-mux-attributes-16 -- Obsolete informational reference (is this intentional?): RFC 793 (Obsoleted by RFC 9293) -- Obsolete informational reference (is this intentional?): RFC 5245 (Obsoleted by RFC 8445, RFC 8839) == Outdated reference: A later version (-28) exists of draft-ietf-mmusic-data-channel-sdpneg-10 Summary: 5 errors (**), 0 flaws (~~), 10 warnings (==), 4 comments (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 MMUSIC C. Holmberg 3 Internet-Draft Ericsson 4 Intended status: Standards Track R. Shpount 5 Expires: July 13, 2017 TurboBridge 6 S. Loreto 7 G. Camarillo 8 Ericsson 9 January 9, 2017 11 Session Description Protocol (SDP) Offer/Answer Procedures For Stream 12 Control Transmission Protocol (SCTP) over Datagram Transport Layer 13 Security (DTLS) Transport. 14 draft-ietf-mmusic-sctp-sdp-21 16 Abstract 18 The Stream Control Transmission Protocol (SCTP) is a transport 19 protocol used to establish associations between two endpoints. 20 draft-ietf-tsvwg-sctp-dtls-encaps-09 specifies how SCTP can be used 21 on top of the Datagram Transport Layer Security (DTLS) protocol, 22 referred to as SCTP-over-DTLS. 24 This specification defines the following new Session Description 25 Protocol (SDP) protocol identifiers (proto values):'UDP/DTLS/SCTP' 26 and 'TCP/DTLS/SCTP'. This specification also specifies how to use 27 the new proto values with the SDP Offer/Answer mechanism for 28 negotiating SCTP-over-DTLS associations. 30 Status of This Memo 32 This Internet-Draft is submitted in full conformance with the 33 provisions of BCP 78 and BCP 79. 35 Internet-Drafts are working documents of the Internet Engineering 36 Task Force (IETF). Note that other groups may also distribute 37 working documents as Internet-Drafts. The list of current Internet- 38 Drafts is at http://datatracker.ietf.org/drafts/current/. 40 Internet-Drafts are draft documents valid for a maximum of six months 41 and may be updated, replaced, or obsoleted by other documents at any 42 time. It is inappropriate to use Internet-Drafts as reference 43 material or to cite them other than as "work in progress." 45 This Internet-Draft will expire on July 13, 2017. 47 Copyright Notice 49 Copyright (c) 2017 IETF Trust and the persons identified as the 50 document authors. All rights reserved. 52 This document is subject to BCP 78 and the IETF Trust's Legal 53 Provisions Relating to IETF Documents 54 (http://trustee.ietf.org/license-info) in effect on the date of 55 publication of this document. Please review these documents 56 carefully, as they describe your rights and restrictions with respect 57 to this document. Code Components extracted from this document must 58 include Simplified BSD License text as described in Section 4.e of 59 the Trust Legal Provisions and are provided without warranty as 60 described in the Simplified BSD License. 62 Table of Contents 64 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 65 2. Conventions . . . . . . . . . . . . . . . . . . . . . . . . . 4 66 3. SCTP Terminology . . . . . . . . . . . . . . . . . . . . . . 4 67 4. SDP Media Descriptions . . . . . . . . . . . . . . . . . . . 4 68 4.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 4 69 4.2. Protocol Identifiers . . . . . . . . . . . . . . . . . . 5 70 4.3. Media Format Management . . . . . . . . . . . . . . . . . 5 71 4.4. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 5 72 4.4.1. General . . . . . . . . . . . . . . . . . . . . . . . 6 73 4.4.2. SDP Media Description values . . . . . . . . . . . . 6 74 4.5. Example . . . . . . . . . . . . . . . . . . . . . . . . . 6 75 5. SDP 'sctp-port' Attribute . . . . . . . . . . . . . . . . . . 6 76 5.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 6 77 5.2. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 7 78 5.3. Mux Category . . . . . . . . . . . . . . . . . . . . . . 7 79 6. SDP 'max-message-size' Attribute . . . . . . . . . . . . . . 8 80 6.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 8 81 6.2. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 8 82 6.3. Mux Category . . . . . . . . . . . . . . . . . . . . . . 9 83 7. UDP/DTLS/SCTP Transport Realization . . . . . . . . . . . . . 9 84 8. TCP/DTLS/SCTP Transport Realization . . . . . . . . . . . . . 10 85 9. Association And Connection Management . . . . . . . . . . . . 10 86 9.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 10 87 9.2. SDP sendrecv/sendonly/recvonly/inactive Attribute . . . . 10 88 9.3. SCTP Association . . . . . . . . . . . . . . . . . . . . 10 89 9.4. DTLS Association (UDP/DTLS/SCTP And TCP/DTLS/SCTP) . . . 11 90 9.5. TCP Connection (TCP/DTLS/SCTP) . . . . . . . . . . . . . 12 91 10. SDP Offer/Answer Procedures . . . . . . . . . . . . . . . . . 12 92 10.1. General . . . . . . . . . . . . . . . . . . . . . . . . 12 93 10.2. Generating the Initial SDP Offer . . . . . . . . . . . . 13 94 10.3. Generating the SDP Answer . . . . . . . . . . . . . . . 13 95 10.4. Offerer Processing of the SDP Answer . . . . . . . . . . 14 96 10.5. Modifying the Session . . . . . . . . . . . . . . . . . 15 97 11. Multihoming Considerations . . . . . . . . . . . . . . . . . 16 98 12. NAT Considerations . . . . . . . . . . . . . . . . . . . . . 16 99 12.1. General . . . . . . . . . . . . . . . . . . . . . . . . 16 100 12.2. ICE Considerations . . . . . . . . . . . . . . . . . . . 16 101 13. Examples . . . . . . . . . . . . . . . . . . . . . . . . . . 17 102 13.1. Establishment of UDP/DTLS/SCTP association . . . . . . . 17 103 14. Security Considerations . . . . . . . . . . . . . . . . . . . 18 104 15. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 18 105 15.1. New SDP proto values . . . . . . . . . . . . . . . . . . 18 106 15.2. New SDP Attributes . . . . . . . . . . . . . . . . . . . 18 107 15.2.1. sctp-port . . . . . . . . . . . . . . . . . . . . . 18 108 15.2.2. max-message-size . . . . . . . . . . . . . . . . . . 18 109 15.3. association-usage Name Registry . . . . . . . . . . . . 19 110 16. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 20 111 17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 112 18. References . . . . . . . . . . . . . . . . . . . . . . . . . 22 113 18.1. Normative References . . . . . . . . . . . . . . . . . . 22 114 18.2. Informative References . . . . . . . . . . . . . . . . . 24 115 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 24 117 1. Introduction 119 SDP (Session Description Protocol) [RFC4566] provides a general- 120 purpose format for describing multimedia sessions in announcements or 121 invitations. TCP-Based Media Transport in the Session Description 122 Protocol (SDP) [RFC4145] specifies a general mechanism for describing 123 and establishing TCP [RFC0793] streams. Connection-Oriented Media 124 Transport over the Transport Layer Security (TLS) Protocol in SDP 125 [RFC4572] extends RFC4145 [RFC4145] for describing TCP-based media 126 streams that are protected using TLS. 128 The Stream Control Transmission Protocol (SCTP) [RFC4960] is a 129 transport protocol used to establish associations between two 130 endpoints. 132 [I-D.ietf-tsvwg-sctp-dtls-encaps] specifies how SCTP can be used on 133 top of the Datagram Transport Layer Security (DTLS) protocol, 134 referred to as SCTP-over-DTLS. 136 This specification defines the following new Session Description 137 Protocol (SDP) [RFC4566] protocol identifiers (proto 138 values):'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP'. This specification also 139 specifies how to use the new proto values with the SDP Offer/Answer 140 mechanism [RFC3264] for negotiating SCTP-over-DTLS associations. 142 NOTE: Due to the characteristics of TCP, usage of 'TCP/DTLS/SCTP' 143 will always force ordered and reliable delivery of the SCTP packets, 144 which limits the usage of the SCTP options. Therefore, it is 145 strongly RECOMMENDED that TCP is only used in situations where UDP 146 traffic is blocked. 148 2. Conventions 150 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 151 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 152 document are to be interpreted as described in [RFC2119]. 154 3. SCTP Terminology 156 SCTP Association: A protocol relationship between SCTP endpoints, 157 composed of the two SCTP endpoints and protocol state information 158 including Verification Tags and the currently active set of 159 Transmission Sequence Numbers (TSNs), etc. An association can be 160 uniquely identified by the transport addresses used by the endpoints 161 in the association. 163 SCTP Stream: A unidirectional logical channel established from one to 164 another associated SCTP endpoint, within which all user messages are 165 delivered in sequence except for those submitted to the unordered 166 delivery service. 168 SCTP-over-DTLS: SCTP used on top of DTLS, as specified in 169 [I-D.ietf-tsvwg-sctp-dtls-encaps]. 171 4. SDP Media Descriptions 173 4.1. General 175 This section defines the following new SDP Media Description (m- 176 line) protocol identifiers (proto values) for describing an SCTP 177 association: 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP'. The section also 178 describes how an m- line, associated with the proto values, is 179 created. 181 The following is the format for an 'm' line, as specified in RFC4566 182 [RFC4566]: 184 m= ... 186 The 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto values are similar to 187 both the 'UDP' and 'TCP' proto values in that they only describe the 188 transport-layer protocol and not the upper-layer protocol. 190 NOTE: When the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto values are 191 used, the underlying transport protocol is respectively UDP and TCP; 192 SCTP is carried on top of DTLS which is on top of those transport- 193 layer protocols. 195 The m- line fmt value, identifying the application-layer protocol, 196 MUST be registered by IANA. 198 4.2. Protocol Identifiers 200 The new proto values are defined as below: 202 o The 'UDP/DTLS/SCTP' proto value describes an SCTP association on 203 top of a DTLS association on top of UDP, as defined in Section 7. 205 o The 'TCP/DTLS/SCTP' proto value describes an SCTP association on 206 top of a DTLS association on top of TCP, as defined in Section 8. 208 4.3. Media Format Management 210 [RFC4566] defines that specifications defining new proto values must 211 define the rules by which their media format (fmt) namespace is 212 managed. 214 An m- line with a proto value of 'UDP/DTLS/SCTP' or 'TCP/DTLS/SCTP' 215 always describes a single SCTP association. 217 In addition, such m- line MUST further indicate the application-layer 218 protocol using an 'fmt' identifier. There MUST be exactly one 'fmt' 219 value per m- line associated with the proto values defined in this 220 specification. The "fmt" namespace associated with those proto 221 values describes the generic application usage of the entire SCTP 222 association, including the associated SCTP streams. 224 Section 15.3 defines the IANA registry for the media format 225 namespace. 227 NOTE: A mechanism on how to describe, and manage, individual SCTP 228 streams within an SCTP association, is outside the scope of this 229 specification. [I-D.ietf-mmusic-data-channel-sdpneg] defines a 230 mechanism for negotiating individual SCTP streams used to realize 231 WebRTC data channels [I-D.ietf-rtcweb-data-channel]. 233 4.4. Syntax 234 4.4.1. General 236 This section defines the values that can be used within an SDP media 237 description ("m=" line) associated with an SCTP-over-DTLS 238 association. 240 This specification creates an IANA registry for 'association-usage' 241 values. 243 4.4.2. SDP Media Description values 245 m= line parameter parameter value(s) 246 ------------------------------------------------------------------ 247 : "application" 248 : "UDP/DTLS/SCTP" or "TCP/DTLS/SCTP" 249 : UDP port number (for "UDP/DTLS/SCTP") 250 TCP port number (for ""UDP/DTLS/SCTP") 251 : a string denoting the association-usage, 252 limited to the syntax of a 'token' as 253 defined in RFC4566. 255 4.5. Example 257 m=application 12345 UDP/DTLS/SCTP webrtc-datachannel 258 a=max-message-size:100000 260 NOTE: 'webrtc-datachannel' indicates the WebRTC Data Channel 261 Establishment Protocol defined in [I-D.ietf-rtcweb-data-protocol]. 263 5. SDP 'sctp-port' Attribute 265 5.1. General 267 This section defines a new SDP media-level attribute, 'sctp-port'. 268 The attribute can be associated with an SDP media description (m- 269 line) with a 'UDP/DTLS/SCTP' or a 'TCP/DTLS/SCTP' proto value. In 270 that case the m- line port value indicates the port of the underlying 271 transport layer protocol (UDP or TCP), and the 'sctp-port' value 272 indicates the SCTP port. 274 No default value is defined for the SDP sctp-port attribute. 275 Therefore, if the attribute is not present, the associated m- line 276 MUST be considered invalid. 278 NOTE: This specification only defines the usage of the SDP 'sctp- 279 port' attribute when associated with an m- line containing one of the 280 following proto values: 'UDP/DTLS/SCTP' or 'TCP/DTLS/SCTP'. Usage of 281 the attribute with other proto values needs to be defined in a 282 separate specification. 284 5.2. Syntax 286 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 287 document.] 289 The definition of the SDP 'sctp-port' attribute is: 291 Attribute name: sctp-port 292 Type of attribute: media 293 Mux category: SPECIAL 294 Subject to charset: No 295 Purpose: Indicate the SCTP port value associated with 296 the SDP Media Description. 297 Appropriate values: Integer 298 Contact name: Christer Holmberg 299 Contact e-mail: christer.holmberg@ericsson.com 300 Reference: RFCXXXX 302 Syntax: 304 sctp-port-value = 1*5 306 The SCTP port range is between 0 and 65535 (both included). 307 Leading zeroes MUST NOT be used. 309 Example: 311 a=sctp-port:5000 313 5.3. Mux Category 315 The mux category [I-D.ietf-mmusic-sdp-mux-attributes] for the SDP 316 'sctp-port' attribute is SPECIAL. 318 As the usage of multiple SCTP associations on top of a single DTLS 319 association is outside the scope of this specification, no mux rules 320 are specified for the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto 321 values. Future extensions, that define how to negotiate multiplexing 322 of multiple SCTP associations of top of a single DTLS association, 323 need to also define the mux rules for the attribute. 325 6. SDP 'max-message-size' Attribute 327 6.1. General 329 This section defines a new SDP media-level attribute, 'max-message- 330 size'. The attribute can be associated with an m- line to indicate 331 the maximum SCTP user message size (indicated in bytes) that an SCTP 332 endpoint is willing to receive on the SCTP association associated 333 with the m- line. Different attribute values can be used in each 334 direction. 336 An SCTP endpoint MUST assume that larger SCTP user message sizes will 337 be rejected by the peer SCTP endpoint. SCTP endpoints need to decide 338 on appropriate behavior in case a message needs to be sent in which 339 the SCTP user message size exceeds thevmaximum SCTP user message 340 size. 342 If the SDP 'max-message-size' attribute contains a maximum message 343 size value of zero, it indicates the SCTP endpoint will handle 344 messages of any size, subject to memory capacity etc. 346 If the SDP 'max-message-size' attribute is not present, the default 347 value is 64K. 349 NOTE: This specification only defines the usage of the SDP 'max- 350 message-size' attribute when associated with an m- line containing 351 one of the following proto values: 'UDP/DTLS/SCTP' or 'TCP/DTLS/ 352 SCTP'. Usage of the attribute with other proto values needs to be 353 defined in a separate specification. 355 6.2. Syntax 357 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 358 document.] 360 The definition of the SDP 'max-message-size' attribute is: 362 Attribute name: max-message-size 363 Type of attribute: media 364 Mux category: SPECIAL 365 Subject to charset: No 366 Purpose: Indicate the maximum message size that 367 an SCTP endpoint is willing to receive 368 on the SCTP association associated 369 with the SDP Media Description. 370 Appropriate values: Integer 371 Contact name: Christer Holmberg 372 Contact e-mail: christer.holmberg@ericsson.com 373 Reference: RFCXXXX 375 Syntax: 377 max-message-size-value = 1* 379 Leading zeroes MUST NOT be used. 381 Example: 383 a=max-message-size:100000 385 6.3. Mux Category 387 The mux category for the SDP 'max-message-size' attribute is SPECIAL. 389 As the usage of multiple SCTP associations on top of a single DTLS 390 association is outside the scope of this specification, no mux rules 391 are specified for the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto 392 values. 394 7. UDP/DTLS/SCTP Transport Realization 396 The UDP/DTLS/SCTP transport is realized as described below: 398 o SCTP on top of DTLS is realized according to the procedures 399 defined in [I-D.ietf-tsvwg-sctp-dtls-encaps]; and 401 o DTLS on top of UDP is realized according to the procedures in 402 defined in [RFC6347]. 404 NOTE: While [I-D.ietf-tsvwg-sctp-dtls-encaps] allows multiple SCTP 405 associations on top of a single DTLS association, the procedures in 406 this specification only support the negotiation of a single SCTP 407 association on top of any given DTLS association. 409 8. TCP/DTLS/SCTP Transport Realization 411 The TCP/DTLS/SCTP transport is realized as described below: 413 o SCTP on top of DTLS is realized according to the procedures 414 defined in [I-D.ietf-tsvwg-sctp-dtls-encaps]; and 416 o DTLS on top of TCP is realized using the framing method defined in 417 [RFC4571], with DTLS packets being sent instead of RTP/RTCP 418 packets, and SDP signaling according to the procedures defined in 419 this specification. 421 NOTE: DTLS on top of TCP, without using the framing method defined in 422 [RFC4571] is outside the scope of this specification. A separate 423 proto value would need to be registered for such transport 424 realization. 426 9. Association And Connection Management 428 9.1. General 430 This section describes how to mange an SCTP association, DTLS 431 association and TCP connection using SDP attributes. 433 The SCTP association, the DTLS association and the TCP connection are 434 managed independently from each other. Each can be established and 435 closed without impacting others. 437 The detailed SDP Offer/Answer [RFC3264] procedures for the SDP 438 attributes are described in Section 10. 440 9.2. SDP sendrecv/sendonly/recvonly/inactive Attribute 442 This specification does not define semantics for the SDP direction 443 attributes [RFC4566]. Unless semantics of these attributes for an 444 SCTP association usage have been defined, SDP direction attributes 445 MUST be ignored if present. 447 9.3. SCTP Association 449 When an SCTP association is established, both SCTP endpoints MUST 450 initiate the SCTP association (i.e. both SCTP endpoints take the 451 'active' role), and MUST use the same SCTP port as client port and 452 server port (in order to prevent two separate SCTP associations from 453 being established). 455 As both SCTP endpoints take the 'active' role, the SDP 'setup' 456 attribute [RFC4145] does not apply to SCTP association establishment. 458 However the 'setup' attribute does apply to establishment of the 459 underlying DTLS association and TCP connection. 461 NOTE: The procedure above is different from TCP, where one endpoint 462 takes the 'active' role, the other endpoint takes the 'passive' role, 463 and only the 'active' endpoint initiates the TCP connection 464 [RFC4145]. 466 NOTE: When the SCTP association is established it is assumed that any 467 NAT traversal procedures for the underlying transport protocol (UDP 468 or TCP) have successfully been performed. 470 The SDP 'connection' attribute [RFC4145] does not apply to the SCTP 471 association. In order to trigger the closure of an existing SCTP 472 association, and establishment of a new SCTP association, the SDP 473 'sctp-port' attribute [Section 5] is used to indicate a new 474 (different than the ones currently used) SCTP port. The existing 475 SCTP association is closed, and the new SCTP association is 476 established, if one or both endpoints signal a new SCTP port. The 477 'connection' attribute does apply to establishment of underlying TCP 478 connections. 480 Alternatively, an SCTP association can be closed using the SDP 'sctp- 481 port' attribute with a zero attribute value. Later, a new SCTP 482 association can be established using the procedures in this section 483 for establishing an SCTP association. 485 SCTP associations might be closed without SDP signalling, e.g, in 486 case of a failure. The procedures in this section MUST be followed 487 to establish a new SCTP association. This requires a new SDP Offer/ 488 Answer exchange. New (different than the ones currently used) SCTP 489 ports MUST be used by both endpoints. 491 NOTE: Closing and establishing a new SCTP association using the SDP 492 'sctp-port' attribute will not impact the underlying DTLS 493 association. 495 9.4. DTLS Association (UDP/DTLS/SCTP And TCP/DTLS/SCTP) 497 A DTLS association is managed according to the procedures in 498 [I-D.ietf-mmusic-dtls-sdp]. Hence, the SDP 'setup' attribute is used 499 to negotiate the (D)TLS roles ('client' and 'server') [RFC4572]. 501 NOTE: The SDP 'setup' attribute is used to negotiate both the DTLS 502 roles and the TCP roles (Section 9.5). 504 NOTE: As described in [RFC5245], if the Interactive Connectivity 505 Establishment (ICE) mechanism [RFC5245] is used, all ICE candidates 506 associated with a DTLS association are considered part of the same 507 DTLS association. Thus, a switch from one candidate pair to another 508 candidate pair will not trigger the establishment of a new DTLS 509 association. 511 9.5. TCP Connection (TCP/DTLS/SCTP) 513 The TCP connection is managed according to the procedures in 514 [RFC4145]. Hence, the SDP 'setup' attribute is used to negotiate the 515 TCP roles ('active' and 'passive'), and the SDP 'connection' 516 attribute is used to indicate whether to use an existing TCP 517 connection, or create a new one. The SDP 'setup' attribute 518 'holdconn' value MUST NOT be used. 520 NOTE: A change of the TCP roles will also trigger a closure of the 521 DTLS association, and establishment of a new DTLS association, 522 according to the procedures in [I-D.ietf-mmusic-dtls-sdp]. 524 NOTE: As specified in [I-D.ietf-mmusic-dtls-sdp], usage of the SDP 525 'setup' attribute 'holdconn' value is not allowed. Therefore this 526 specification also forbids usage of the attribute value for TCP, as 527 DTLS is transported on top of TCP. 529 10. SDP Offer/Answer Procedures 531 10.1. General 533 This section defines the SDP Offer/Answer [RFC3264] procedures for 534 negotiating and establishing an SCTP-over-DTLS association. Unless 535 explicitly stated, the procedures apply to both the 'UDP/DTLS/SCTP' 536 and 'TCP/DTLS/SCTP' m- line proto values. 538 Each endpoint MUST associate one or more certificate fingerprints, 539 using the SDP 'fingerprint' attribute with the m- line, following the 540 procedures in [I-D.ietf-mmusic-4572-update]. 542 The authentication certificates are interpreted and validated as 543 defined in [I-D.ietf-mmusic-4572-update]. Self-signed certificates 544 can be used securely, provided that the integrity of the SDP 545 description is assured as defined in [I-D.ietf-mmusic-4572-update]. 547 Each endpoint MUST associate an SDP 'dtls-id' attribute with the m- 548 line, following the procedures in [I-D.ietf-mmusic-dtls-sdp]. 550 10.2. Generating the Initial SDP Offer 552 When the offerer creates an initial offer, the offerer: 554 o MUST associate an SDP setup attribute with the m- line; 556 o MUST associate an SDP 'sctp-port' attribute with the m- line; 558 o MUST, in the case of TCP/DTLS/SCTP, associate an SDP 'connection' 559 attribute, with a 'new' attribute value, with the m- line; and 561 o MAY associate an SDP 'max-message-size' attribute [Section 6] with 562 the m- line. 564 10.3. Generating the SDP Answer 566 When the answerer receives an offer, which contains an m- line 567 describing an SCTP-over-DTLS association, if the answerer accepts the 568 association, the answerer: 570 o MUST insert a corresponding m- line in the answer, with an 571 identical m- line proto value [RFC3264]; 573 o MUST associate an SDP 'setup' attribute with the m- line; 575 o MUST associate an SDP 'sctp-port' attribute with the m- line. If 576 the offer contained a new (different than the one currently used) 577 SCTP port value the answerer MUST also associate a new SCTP port 578 value. If the offer contained a zero SCTP port value, or if the 579 answerer does not accept the SCTP association, the answerer MUST 580 also associate a zero SCTP port value; and 582 o MAY associate an SDP 'max-message-size' attribute [Section 6] with 583 the m- line. The attribute value in the answer is independent 584 from the value (if present) in the corresponding m- line of the 585 offer. 587 Once the answerer has sent the answer the answerer: 589 o MUST, in the case of TCP/DTLS/SCTP, if a TCP connection has not 590 yet been established, or if an existing TCP connection is to be 591 closed and replaced by a new TCP connection, follow the procedures 592 in [RFC4145] for closing and establishing a TCP connection; 594 o MUST, if a DTLS association has not yet been established, or if an 595 existing DTLS association is to be closed and replaced by a new 596 DTLS association, follow the procedures in 598 [I-D.ietf-mmusic-dtls-sdp] for closing establishing a DTLS 599 association; and 601 o MUST, if an SCTP association has not yet been established, or if 602 an existing SCTP association is to be closed and replaced by a new 603 SCTP association, initiate the closing of the existing SCTP 604 association (if applicable) and establishment of the SCTP 605 association. 607 If the SDP 'sctp-port' attribute in the answer contains a zero 608 attribute value, the answerer MUST NOT establish an SCTP association. 609 If an SCTP association exists, the offerer MUST close it. 611 If the answerer does not accept the m- line in the offer, it MUST 612 assign a zero port value to the corresponding m- line in the answer, 613 following the procedures in [RFC3264]. In addition, the answerer 614 MUST NOT initiate the establishment of a TCP connection, a DTLS 615 association or a DTLS association associated with the m- line. 617 10.4. Offerer Processing of the SDP Answer 619 Once the offerer has received the answer the offerer: 621 o MUST, in the case of TCP/DTLS/SCTP, if a TCP connection has not 622 yet been established, or if an existing TCP connection is to be 623 closed and replaced by a new TCP connection, follow the procedures 624 in [RFC4145] for closing and establishing a TCP connection; 626 o MUST, if a DTLS association has not yet been established, or if an 627 existing DTLS association is to be closed and replaced by a new 628 DTLS association, follow the procedures in 629 [I-D.ietf-mmusic-dtls-sdp] for closing and establishing a DTLS 630 association; and 632 o MUST, if an SCTP association has not yet been established, or if 633 an existing SCTP association is to be closed and replaced by a new 634 SCTP association, initiate the closing of the existing SCTP 635 association (if applicable) and establishment of the SCTP 636 association. 638 If the SDP 'sctp-port' attribute in the answer contains a zero 639 attribute value, the offerer MUST NOT establish an SCTP association. 640 If an SCTP association exists in that case, the offerer MUST close 641 it. 643 If the m- line in the answer contains a zero port value, the offerer 644 MUST NOT initiate the establishment a TCP connection, a DTLS 645 association or an SCTP association associated with the m- line. If a 646 TCP connection, or a DTLS association or an SCTP association exists 647 in that case, the offerer MUST close it. 649 10.5. Modifying the Session 651 When an offerer sends an updated offer, in order to modify a 652 previously established SCTP association, it follows the procedures in 653 Section 10.2, with the following exceptions: 655 o If the offerer wants to close an SCTP association, and immediately 656 establish a new SCTP association, the offerer MUST associate an 657 SDP 'sctp-port' attribute with a new (different than the one 658 currently used) attribute value. This will not impact the 659 underlying DTLS association (and TCP connection in case of 660 TCP/DTLS/SCTP). 662 o If the offerer wants to close an SCTP association, without 663 immediately establishing a new SCTP association, the offerer MUST 664 associate an SDP 'sctp-port' attribute with a zero attribute 665 value. This will not impact the underlying DTLS association (and 666 TCP connection in case of TCP/DTLS/SCTP). 668 o If the offerer wants to establish an SCTP association, and another 669 SCTP association was previously closed, the offerer MUST associate 670 an SDP 'sctp-port' attribute with a new attribute value (different 671 than the value associated with the previous SCTP association). If 672 the previous SCTP association was closed successfully following 673 use of an SDP 'sctp-port' attribute with a zero attribute value, 674 the offerer MAY use the same attribute value for the new SCTP 675 association that was used with the previous SCTP association 676 before it was closed. This will not impact the underlying DTLS 677 association (and TCP connection in case of TCP/DTLS/SCTP). 679 o If the offerer wants to close an existing SCTP association, and 680 the underlying DTLS association (and the underlying TCP connection 681 in case of TCP/DTLS/SCTP) it MUST assign a zero port value to the 682 m- line associated with the SCTP and DTLS associations (and TCP 683 connection in case of TCP/DTLS/SCTP), following the procedures in 684 [RFC3264]. 686 o NOTE: This specification does not define a mechanism for 687 explicitly closing a DTLS association while maintaining the 688 overlying SCTP association. However, if a DTLS association is 689 closed and replaced with a new DTLS association, as a result of 690 some other action [I-D.ietf-mmusic-dtls-sdp], the SCTP association 691 is not affected. 693 The offer follows the procedures in [I-D.ietf-mmusic-dtls-sdp] 694 regarding the DTLS association impacts when modifying a session. 696 In the case of TCP/DTLS/SCTP, the offerer follows the procedures in 697 [RFC4145] regarding the TCP connection impacts when modifying a 698 session. 700 11. Multihoming Considerations 702 Multihoming is not supported when sending SCTP on top of DTLS, as 703 DTLS does not expose address management of the underlying transport 704 protocols (UDP or TCP) to its upper layer. 706 12. NAT Considerations 708 12.1. General 710 When SCTP-over-DTLS is used in NAT environment, it relies on the NAT 711 traversal procedures for the underlying transport protocol (UDP or 712 TCP). 714 12.2. ICE Considerations 716 When SCTP-over-DTLS is used with UDP based ICE candidates [RFC5245] 717 then the procedures for UDP/DTLS/SCTP [Section 7] are used. 719 When SCTP-over-DTLS is used with TCP based ICE candidates [RFC6544] 720 then the procedures for TCP/DTLS/SCTP [Section 8] are used. 722 Implementations MUST treat all ICE candidate pairs associated with an 723 SCTP association on top of a DTLS association as part of the same 724 DTLS association. Thus, there will only be one SCTP handshake and 725 one DTLS handshake even if there are multiple valid candidate pairs, 726 and shifting from one candidate pair to another will not impact the 727 SCTP or DTLS associations. If new candidates are added, they will 728 also be part of the same SCTP and DTLS associations. When 729 transitioning between candidate pairs, different candidate pairs can 730 be currently active in different directions and implementations MUST 731 be ready to receive data on any of the candidates, even if this means 732 sending and receiving data using UDP/DTLS/SCTP and TCP/DTLS/SCTP at 733 the same time in different directions. 735 When an SDP offer or answer is sent, the proto value MUST match the 736 transport protocol associated with the default candidate. Hence, if 737 UDP transport is used for the default candidate the 'UDP/DTLS/SCTP' 738 proto value MUST be used. If TCP transport is used for the default 739 candidate the 'TCP/DTLS/SCTP' proto value MUST be used. However, if 740 an endpoint switches between TCP-based and UDP-based candidates 741 during a session the endpoint is not required to send an SDP offer in 742 order to modify that proto value of the associated m- line. 744 NOTE: The text in the paragraph above only applies when the usage of 745 ICE has been negotiated. If ICE is not used, the proto value MUST 746 always reflect the transport protocol used at any given time. 748 13. Examples 750 13.1. Establishment of UDP/DTLS/SCTP association 752 SDP Offer: 754 m=application 54111 UDP/DTLS/SCTP webrtc-datachannel 755 c=IN IP4 192.0.2.1 756 a=dtls-id:abc3dl 757 a=setup:actpass 758 a=sctp-port:5000 759 a=max-message-size:100000 761 - The offerer indicates that the usage of the 762 UDP/DTLS/SCTP association will be as defined 763 for the 'webrtc-datachannel' format value. 764 - The offerer UDP port value is 54111. 765 - The offerer SCTP port value is 5000. 766 - The offerer indicates that it can take either the 767 client or the server DTLS role. 769 SDP Answer: 771 m=application 64300 UDP/DTLS/SCTP webrtc-datachannel 772 c=IN IP4 192.0.2.2 773 a=dtls-id:ggr4rd 774 a=setup:passive 775 a=sctp-port:6000 776 a=max-message-size:100000 778 - The answerer UDP port value is 64300. 779 - The answerer SCTP port value is 6000. 780 - The answerer takes the server DTLS role. 782 14. Security Considerations 784 [RFC4566] defines general SDP security considerations, while 785 [RFC3264], [RFC4145] and [RFC4572] define security considerations 786 when using the SDP offer/answer mechanism to negotiate media streams. 788 [RFC4960] defines general SCTP security considerations and 789 [I-D.ietf-tsvwg-sctp-dtls-encaps] defines security considerations 790 when using SCTP on top of DTLS. 792 This specification does not introduce new security considerations in 793 addition to those defined in the specifications listed above. 795 15. IANA Considerations 797 15.1. New SDP proto values 799 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 800 document.] 802 This document updates the "Session Description Protocol (SDP) 803 Parameters" registry, following the procedures in [RFC4566], by 804 adding the following values to the table in the SDP "proto" field 805 registry: 807 +-------+---------------+-----------+ 808 | Type | SDP Name | Reference | 809 +-------+---------------+-----------+ 810 | proto | UDP/DTLS/SCTP | [RFCXXXX] | 811 | proto | TCP/DTLS/SCTP | [RFCXXXX] | 812 +-------+---------------+-----------+ 814 Table 1: SDP "proto" field values 816 15.2. New SDP Attributes 818 15.2.1. sctp-port 820 This document defines a new SDP media-level attribute,'sctp-port'. 821 The details of the attribute are defined in Section 5.2. 823 15.2.2. max-message-size 825 This document defines a new SDP media-level attribute,'max-message- 826 size'. The details of the attribute are defined in Section 6.2. 828 15.3. association-usage Name Registry 830 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 831 document.] 833 This specification creates a new IANA registry, following the 834 procedures in [RFC5226], for the "fmt" namespace associated with the 835 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' protocol identifiers. Each "fmt" 836 value describes the usage of an entire SCTP association, including 837 all SCTP streams associated with the SCTP association. 839 NOTE: Usage indication of individual SCTP streams is outside the 840 scope of this specification. 842 The "fmt" value, "association-usage", used with these "proto" values 843 is required. It is defined in Section 4. 845 As part of this registry, IANA maintains the following information: 847 association-usage name: The identifier of the subprotocol, as will 848 be used as the "fmt" value. 850 association-usage reference: A reference to the document in which 851 the association-usage is defined. 853 association-usage names are to be subject to the "First Come First 854 Served" IANA registration policy [RFC5226]. 856 IANA is asked to add initial values to the registry. 858 |----------------------------------------------------------| 859 | name | Reference | 860 |----------------------------------------------------------| 861 | webrtc-datachannel | draft-ietf-rtcweb-data-protocol-xx, | 862 | | RFCXXX | 863 |----------------------------------------------------------| 865 [RFC EDITOR NOTE: Please hold the publication of this draft 866 until draft-ietf-rtcweb-data-protocol has been published as an RFC. 867 Then, replace the reference to draft-ietf-rtcweb-data-protocol 868 with the RFC number.] 870 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number 871 of this document.] 873 Figure 1 875 16. Acknowledgments 877 The authors wish to thank Harald Alvestrand, Randell Jesup, Paul 878 Kyzivat, Michael Tuexen, Juergen Stoetzer-Bradler, Flemming Andreasen 879 and Ari Keranen for their comments and useful feedback. 881 17. 883 [RFC EDITOR NOTE: Please remove this section when publishing] 885 Changes from draft-ietf-mmusic-sctp-sdp-20 887 o Informative reference to draft-ietf-rtcweb-data-protocol added. 889 Changes from draft-ietf-mmusic-sctp-sdp-19 891 o Changes based on WG chair comments from Flemming Andreasen. 893 Changes from draft-ietf-mmusic-sctp-sdp-18 895 o Changes based on WGLC comments from Paul Kyzivat. 897 Changes from draft-ietf-mmusic-sctp-sdp-17 899 o Removal of 'SCTP'. 901 o Document title changed. 903 o Disallow usage of SDP 'setup' attribute 'holdconn' value. 905 o Roman Shpount added as co-editor. 907 Changes from draft-ietf-mmusic-sctp-sdp-15 909 o Chapter about SCTP, DTLS and TCP association/connection management 910 modified. 912 o Removal of SCTP/DTLS. 914 Changes from draft-ietf-mmusic-sctp-sdp-14 916 o Changes based on WGLC comments from Magnus Westerlund. 918 o - ABNF clarification that token and port are defined in RFC4566. 920 o - Specify 40 as maximum digit character length for the SDP max- 921 message-size value. 923 o - Editorial clarification. 925 o Changes based on discussions at IETF#92. 927 o - Specify that all ICE candidate pairs belong to the same DTLS 928 association. 930 Changes from draft-ietf-mmusic-sctp-sdp-13 932 o Changes based on comments from Paul Kyzivat. 934 o - Text preventing usage of well-known ports removed. 936 o - Editorial clarification. 938 Changes from draft-ietf-mmusic-sctp-sdp-12 940 o Mux category rules added for new SDP attributes. 942 o Reference to draft-ietf-mmusic-sdp-mux-attributes added. 944 o Changes based on comments from Roman Shpount: 946 o - Specify that fingerprint or setup roles must not be modified, 947 unless underlying transport protocol is also modified. 949 o Changes based on comments from Ari Keranen: 951 o - Editorial corrections. 953 o Changes based on comments from Flemming Andreasen: 955 o - Clarify that, if UDP/DTLS/SCTP or TCP/DTLS/SCTP is used, the 956 DTLS association is established before the SCTP association. 958 o - Clarify that max-message-size value is given in bytes, and that 959 different values can be used per direction. 961 o - Section on fmtp attribute removed. 963 o - Editorial corrections. 965 Changes from draft-ietf-mmusic-sctp-sdp-11 967 o Example added. 969 Changes from draft-ietf-mmusic-sctp-sdp-10 970 o SDP max-message-size attribute added to IANA considerations. 972 o Changes based on comments from Paul Kyzivat: 974 o - Text about max message size removed from fmtp attribute section. 976 Changes from draft-ietf-mmusic-sctp-sdp-09 978 o 'DTLS/SCTP' split into 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' 980 o Procedures for realizing UDP/DTLS/SCTP- and TCP/DTLS/SCTP 981 transports added. 983 Changes from draft-ietf-mmusic-sctp-sdp-08 985 o Default SCTP port removed: 987 o - Usage of SDP sctp-port attribute mandatory. 989 o SDP max-message-size attribute defined: 991 o - Attribute definition. 993 o - SDP Offer/Answer procedures. 995 o Text about SDP direction attributes added. 997 o Text about TLS role determination added. 999 18. References 1001 18.1. Normative References 1003 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate 1004 Requirement Levels", BCP 14, RFC 2119, 1005 DOI 10.17487/RFC2119, March 1997, 1006 . 1008 [RFC3264] Rosenberg, J. and H. Schulzrinne, "An Offer/Answer Model 1009 with Session Description Protocol (SDP)", RFC 3264, 1010 DOI 10.17487/RFC3264, June 2002, 1011 . 1013 [RFC4145] Yon, D. and G. Camarillo, "TCP-Based Media Transport in 1014 the Session Description Protocol (SDP)", RFC 4145, 1015 DOI 10.17487/RFC4145, September 2005, 1016 . 1018 [RFC4566] Handley, M., Jacobson, V., and C. Perkins, "SDP: Session 1019 Description Protocol", RFC 4566, DOI 10.17487/RFC4566, 1020 July 2006, . 1022 [RFC4571] Lazzaro, J., "Framing Real-time Transport Protocol (RTP) 1023 and RTP Control Protocol (RTCP) Packets over Connection- 1024 Oriented Transport", RFC 4571, DOI 10.17487/RFC4571, July 1025 2006, . 1027 [RFC4572] Lennox, J., "Connection-Oriented Media Transport over the 1028 Transport Layer Security (TLS) Protocol in the Session 1029 Description Protocol (SDP)", RFC 4572, 1030 DOI 10.17487/RFC4572, July 2006, 1031 . 1033 [RFC4960] Stewart, R., Ed., "Stream Control Transmission Protocol", 1034 RFC 4960, DOI 10.17487/RFC4960, September 2007, 1035 . 1037 [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an 1038 IANA Considerations Section in RFCs", BCP 26, RFC 5226, 1039 DOI 10.17487/RFC5226, May 2008, 1040 . 1042 [RFC6347] Rescorla, E. and N. Modadugu, "Datagram Transport Layer 1043 Security Version 1.2", RFC 6347, DOI 10.17487/RFC6347, 1044 January 2012, . 1046 [I-D.ietf-mmusic-4572-update] 1047 Lennox, J. and C. Holmberg, "Connection-Oriented Media 1048 Transport over TLS in SDP", draft-ietf-mmusic- 1049 4572-update-10 (work in progress), January 2017. 1051 [I-D.ietf-mmusic-dtls-sdp] 1052 Holmberg, C. and R. Shpount, "Using the SDP Offer/Answer 1053 Mechanism for DTLS", draft-ietf-mmusic-dtls-sdp-15 (work 1054 in progress), October 2016. 1056 [I-D.ietf-tsvwg-sctp-dtls-encaps] 1057 Tuexen, M., Stewart, R., Jesup, R., and S. Loreto, "DTLS 1058 Encapsulation of SCTP Packets", draft-ietf-tsvwg-sctp- 1059 dtls-encaps-09 (work in progress), January 2015. 1061 [I-D.ietf-mmusic-sdp-mux-attributes] 1062 Nandakumar, S., "A Framework for SDP Attributes when 1063 Multiplexing", draft-ietf-mmusic-sdp-mux-attributes-16 1064 (work in progress), December 2016. 1066 18.2. Informative References 1068 [RFC0793] Postel, J., "Transmission Control Protocol", STD 7, 1069 RFC 793, DOI 10.17487/RFC0793, September 1981, 1070 . 1072 [RFC5245] Rosenberg, J., "Interactive Connectivity Establishment 1073 (ICE): A Protocol for Network Address Translator (NAT) 1074 Traversal for Offer/Answer Protocols", RFC 5245, 1075 DOI 10.17487/RFC5245, April 2010, 1076 . 1078 [RFC6544] Rosenberg, J., Keranen, A., Lowekamp, B., and A. Roach, 1079 "TCP Candidates with Interactive Connectivity 1080 Establishment (ICE)", RFC 6544, DOI 10.17487/RFC6544, 1081 March 2012, . 1083 [I-D.ietf-rtcweb-data-channel] 1084 Jesup, R., Loreto, S., and M. Tuexen, "WebRTC Data 1085 Channels", draft-ietf-rtcweb-data-channel-13 (work in 1086 progress), January 2015. 1088 [I-D.ietf-mmusic-data-channel-sdpneg] 1089 Drage, K., Makaraju, M., Stoetzer-Bradler, J., Ejzak, R., 1090 and (. (Unknown), "SDP-based Data Channel Negotiation", 1091 draft-ietf-mmusic-data-channel-sdpneg-10 (work in 1092 progress), September 2016. 1094 [I-D.ietf-rtcweb-data-protocol] 1095 Jesup, R., Loreto, S., and M. Tuexen, "WebRTC Data Channel 1096 Establishment Protocol", draft-ietf-rtcweb-data- 1097 protocol-09 (work in progress), January 2015. 1099 Authors' Addresses 1101 Christer Holmberg 1102 Ericsson 1103 Hirsalantie 11 1104 Jorvas 02420 1105 Finland 1107 Email: christer.holmberg@ericsson.com 1108 Roman Shpount 1109 TurboBridge 1110 4905 Del Ray Avenue, Suite 300 1111 Bethesda, MD 20814 1112 USA 1114 Phone: +1 (240) 292-6632 1115 Email: rshpount@turbobridge.com 1117 Salvatore Loreto 1118 Ericsson 1119 Hirsalantie 11 1120 Jorvas 02420 1121 Finland 1123 Email: Salvatore.Loreto@ericsson.com 1125 Gonzalo Camarillo 1126 Ericsson 1127 Hirsalantie 11 1128 Jorvas 02420 1129 Finland 1131 Email: Gonzalo.Camarillo@ericsson.com