idnits 2.17.1 draft-ietf-mmusic-sctp-sdp-23.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the IETF Trust and authors Copyright Line does not match the current year -- The document date (February 10, 2017) is 2604 days in the past. Is this intentional? Checking references for intended status: Proposed Standard ---------------------------------------------------------------------------- (See RFCs 3967 and 4897 for information about using normative references to lower-maturity documents in RFCs) == Missing Reference: 'Section 5' is mentioned on line 472, but not defined == Missing Reference: 'Section 6' is mentioned on line 582, but not defined == Missing Reference: 'Section 7' is mentioned on line 717, but not defined == Missing Reference: 'Section 8' is mentioned on line 720, but not defined == Missing Reference: 'RFCXXXX' is mentioned on line 812, but not defined ** Obsolete normative reference: RFC 793 (Obsoleted by RFC 9293) ** Obsolete normative reference: RFC 4566 (Obsoleted by RFC 8866) ** Obsolete normative reference: RFC 4960 (Obsoleted by RFC 9260) ** Obsolete normative reference: RFC 5226 (Obsoleted by RFC 8126) ** Obsolete normative reference: RFC 6347 (Obsoleted by RFC 9147) == Outdated reference: A later version (-32) exists of draft-ietf-mmusic-dtls-sdp-18 == Outdated reference: A later version (-19) exists of draft-ietf-mmusic-sdp-mux-attributes-16 -- Obsolete informational reference (is this intentional?): RFC 5245 (Obsoleted by RFC 8445, RFC 8839) == Outdated reference: A later version (-28) exists of draft-ietf-mmusic-data-channel-sdpneg-11 Summary: 5 errors (**), 0 flaws (~~), 9 warnings (==), 2 comments (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 MMUSIC C. Holmberg 3 Internet-Draft Ericsson 4 Intended status: Standards Track R. Shpount 5 Expires: August 14, 2017 TurboBridge 6 S. Loreto 7 G. Camarillo 8 Ericsson 9 February 10, 2017 11 Session Description Protocol (SDP) Offer/Answer Procedures For Stream 12 Control Transmission Protocol (SCTP) over Datagram Transport Layer 13 Security (DTLS) Transport. 14 draft-ietf-mmusic-sctp-sdp-23 16 Abstract 18 The Stream Control Transmission Protocol (SCTP) is a transport 19 protocol used to establish associations between two endpoints. 20 draft-ietf-tsvwg-sctp-dtls-encaps-09 specifies how SCTP can be used 21 on top of the Datagram Transport Layer Security (DTLS) protocol, 22 referred to as SCTP-over-DTLS. 24 This specification defines the following new Session Description 25 Protocol (SDP) protocol identifiers (proto values):'UDP/DTLS/SCTP' 26 and 'TCP/DTLS/SCTP'. This specification also specifies how to use 27 the new proto values with the SDP Offer/Answer mechanism for 28 negotiating SCTP-over-DTLS associations. 30 Status of This Memo 32 This Internet-Draft is submitted in full conformance with the 33 provisions of BCP 78 and BCP 79. 35 Internet-Drafts are working documents of the Internet Engineering 36 Task Force (IETF). Note that other groups may also distribute 37 working documents as Internet-Drafts. The list of current Internet- 38 Drafts is at http://datatracker.ietf.org/drafts/current/. 40 Internet-Drafts are draft documents valid for a maximum of six months 41 and may be updated, replaced, or obsoleted by other documents at any 42 time. It is inappropriate to use Internet-Drafts as reference 43 material or to cite them other than as "work in progress." 45 This Internet-Draft will expire on August 14, 2017. 47 Copyright Notice 49 Copyright (c) 2017 IETF Trust and the persons identified as the 50 document authors. All rights reserved. 52 This document is subject to BCP 78 and the IETF Trust's Legal 53 Provisions Relating to IETF Documents 54 (http://trustee.ietf.org/license-info) in effect on the date of 55 publication of this document. Please review these documents 56 carefully, as they describe your rights and restrictions with respect 57 to this document. Code Components extracted from this document must 58 include Simplified BSD License text as described in Section 4.e of 59 the Trust Legal Provisions and are provided without warranty as 60 described in the Simplified BSD License. 62 Table of Contents 64 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 65 2. Conventions . . . . . . . . . . . . . . . . . . . . . . . . . 4 66 3. SCTP Terminology . . . . . . . . . . . . . . . . . . . . . . 4 67 4. SDP Media Descriptions . . . . . . . . . . . . . . . . . . . 4 68 4.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 4 69 4.2. Protocol Identifiers . . . . . . . . . . . . . . . . . . 5 70 4.3. Media Format Management . . . . . . . . . . . . . . . . . 5 71 4.4. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 5 72 4.4.1. General . . . . . . . . . . . . . . . . . . . . . . . 6 73 4.4.2. SDP Media Description values . . . . . . . . . . . . 6 74 4.5. Example . . . . . . . . . . . . . . . . . . . . . . . . . 6 75 5. SDP 'sctp-port' Attribute . . . . . . . . . . . . . . . . . . 6 76 5.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 6 77 5.2. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 7 78 5.3. Mux Category . . . . . . . . . . . . . . . . . . . . . . 7 79 6. SDP 'max-message-size' Attribute . . . . . . . . . . . . . . 8 80 6.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 8 81 6.2. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . 8 82 6.3. Mux Category . . . . . . . . . . . . . . . . . . . . . . 9 83 7. UDP/DTLS/SCTP Transport Realization . . . . . . . . . . . . . 9 84 8. TCP/DTLS/SCTP Transport Realization . . . . . . . . . . . . . 10 85 9. Association And Connection Management . . . . . . . . . . . . 10 86 9.1. General . . . . . . . . . . . . . . . . . . . . . . . . . 10 87 9.2. SDP sendrecv/sendonly/recvonly/inactive Attribute . . . . 10 88 9.3. SCTP Association . . . . . . . . . . . . . . . . . . . . 10 89 9.4. DTLS Association (UDP/DTLS/SCTP And TCP/DTLS/SCTP) . . . 11 90 9.5. TCP Connection (TCP/DTLS/SCTP) . . . . . . . . . . . . . 12 91 10. SDP Offer/Answer Procedures . . . . . . . . . . . . . . . . . 12 92 10.1. General . . . . . . . . . . . . . . . . . . . . . . . . 12 93 10.2. Generating the Initial SDP Offer . . . . . . . . . . . . 13 94 10.3. Generating the SDP Answer . . . . . . . . . . . . . . . 13 95 10.4. Offerer Processing of the SDP Answer . . . . . . . . . . 14 96 10.5. Modifying the Session . . . . . . . . . . . . . . . . . 15 97 11. Multihoming Considerations . . . . . . . . . . . . . . . . . 16 98 12. NAT Considerations . . . . . . . . . . . . . . . . . . . . . 16 99 12.1. General . . . . . . . . . . . . . . . . . . . . . . . . 16 100 12.2. ICE Considerations . . . . . . . . . . . . . . . . . . . 16 101 13. Examples . . . . . . . . . . . . . . . . . . . . . . . . . . 17 102 13.1. Establishment of UDP/DTLS/SCTP association . . . . . . . 17 103 14. Security Considerations . . . . . . . . . . . . . . . . . . . 18 104 15. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 18 105 15.1. New SDP proto values . . . . . . . . . . . . . . . . . . 18 106 15.2. New SDP Attributes . . . . . . . . . . . . . . . . . . . 18 107 15.2.1. sctp-port . . . . . . . . . . . . . . . . . . . . . 18 108 15.2.2. max-message-size . . . . . . . . . . . . . . . . . . 18 109 15.3. association-usage Name Registry . . . . . . . . . . . . 19 110 16. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 20 111 17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 112 18. References . . . . . . . . . . . . . . . . . . . . . . . . . 22 113 18.1. Normative References . . . . . . . . . . . . . . . . . . 22 114 18.2. Informative References . . . . . . . . . . . . . . . . . 24 115 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 24 117 1. Introduction 119 SDP (Session Description Protocol) [RFC4566] provides a general- 120 purpose format for describing multimedia sessions in announcements or 121 invitations. TCP-Based Media Transport in the Session Description 122 Protocol (SDP) [RFC4145] specifies a general mechanism for describing 123 and establishing TCP [RFC0793] streams. Connection-Oriented Media 124 Transport over the Transport Layer Security (TLS) Protocol in SDP 125 [I-D.ietf-mmusic-4572-update] extends RFC4145 [RFC4145] for 126 describing TCP-based media streams that are protected using TLS. 128 The Stream Control Transmission Protocol (SCTP) [RFC4960] is a 129 reliable transport protocol used to transport data between two 130 endpoints using SCTP associations. 132 [I-D.ietf-tsvwg-sctp-dtls-encaps] specifies how SCTP can be used on 133 top of the Datagram Transport Layer Security (DTLS) protocol, 134 referred to as SCTP-over-DTLS. 136 This specification defines the following new Session Description 137 Protocol (SDP) [RFC4566] protocol identifiers (proto 138 values):'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP'. This specification also 139 specifies how to use the new proto values with the SDP Offer/Answer 140 mechanism [RFC3264] for negotiating SCTP-over-DTLS associations. 142 NOTE: Due to the characteristics of TCP, while multiple SCTP streams 143 can still be used, usage of 'TCP/DTLS/SCTP' will always force ordered 144 and reliable delivery of the SCTP packets, which limits the usage of 145 the SCTP options. Therefore, it is RECOMMENDED that TCP is only used 146 in situations where UDP traffic is blocked. 148 2. Conventions 150 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 151 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 152 document are to be interpreted as described in [RFC2119]. 154 3. SCTP Terminology 156 SCTP Association: A protocol relationship between SCTP endpoints, 157 composed of the two SCTP endpoints and protocol state information 158 including Verification Tags and the currently active set of 159 Transmission Sequence Numbers (TSNs), etc. An association can be 160 uniquely identified by the transport addresses used by the endpoints 161 in the association. 163 SCTP Stream: A unidirectional logical channel established from one to 164 another associated SCTP endpoint, within which all user messages are 165 delivered in sequence except for those submitted to the unordered 166 delivery service. 168 SCTP-over-DTLS: SCTP used on top of DTLS, as specified in 169 [I-D.ietf-tsvwg-sctp-dtls-encaps]. 171 4. SDP Media Descriptions 173 4.1. General 175 This section defines the following new SDP Media Description (m- 176 line) protocol identifiers (proto values) for describing an SCTP 177 association: 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP'. The section also 178 describes how an m- line, associated with the proto values, is 179 created. 181 The following is the format for an m- line, as specified in RFC4566 182 [RFC4566]: 184 m= ... 186 The 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto values are similar to 187 both the 'UDP' and 'TCP' proto values in that they only describe the 188 transport-layer protocol and not the upper-layer protocol. 190 NOTE: When the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto values are 191 used, the underlying transport protocol is respectively UDP and TCP; 192 SCTP is carried on top of DTLS which is on top of those transport- 193 layer protocols. 195 4.2. Protocol Identifiers 197 The new proto values are defined as below: 199 o The 'UDP/DTLS/SCTP' proto value describes an SCTP association on 200 top of a DTLS association on top of UDP, as defined in Section 7. 202 o The 'TCP/DTLS/SCTP' proto value describes an SCTP association on 203 top of a DTLS association on top of TCP, as defined in Section 8. 205 4.3. Media Format Management 207 [RFC4566] defines that specifications defining new proto values must 208 define the rules by which their media format (fmt) namespace is 209 managed. 211 An m- line with a proto value of 'UDP/DTLS/SCTP' or 'TCP/DTLS/SCTP' 212 always describes a single SCTP association. 214 In addition, such m- line MUST further indicate the application-layer 215 protocol using an 'fmt' identifier. There MUST be exactly one fmt 216 value per m- line associated with the proto values defined in this 217 specification. The 'fmt' namespace associated with those proto 218 values describes the generic application usage of the entire SCTP 219 association, including the associated SCTP streams. 221 When the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto values, the m- 222 line fmt value, identifying the application-layer protocol, MUST be 223 registered by IANA. Section 15.3 defines the IANA registry for the 224 media format namespace. 226 NOTE: A mechanism on how to describe, and manage, individual SCTP 227 streams within an SCTP association, is outside the scope of this 228 specification. [I-D.ietf-mmusic-data-channel-sdpneg] defines a 229 mechanism for negotiating individual SCTP streams used to realize 230 WebRTC data channels [I-D.ietf-rtcweb-data-channel]. 232 4.4. Syntax 233 4.4.1. General 235 This section defines the values that can be used within an SDP media 236 description ("m=" line) associated with an SCTP-over-DTLS 237 association. 239 This specification creates an IANA registry for 'association-usage' 240 values. 242 4.4.2. SDP Media Description values 244 m= line parameter parameter value(s) 245 ------------------------------------------------------------------ 246 : 'application' 247 : 'UDP/DTLS/SCTP' or 'TCP/DTLS/SCTP' 248 : UDP port number (for 'UDP/DTLS/SCTP') 249 TCP port number (for 'TCP/DTLS/SCTP') 250 : a string denoting the association-usage, 251 limited to the syntax of a 'token' as 252 defined in RFC4566. 254 4.5. Example 256 m=application 12345 UDP/DTLS/SCTP webrtc-datachannel 257 a=sctp-port:5000 258 a=max-message-size:100000 260 NOTE: 'webrtc-datachannel' indicates the WebRTC Data Channel 261 Establishment Protocol defined in [I-D.ietf-rtcweb-data-protocol]. 263 5. SDP 'sctp-port' Attribute 265 5.1. General 267 This section defines a new SDP media-level attribute, 'sctp-port'. 268 The attribute can be associated with an SDP media description (m- 269 line) with a 'UDP/DTLS/SCTP' or a 'TCP/DTLS/SCTP' proto value. In 270 that case the m- line port value indicates the port of the underlying 271 transport layer protocol (UDP or TCP), and the 'sctp-port' value 272 indicates the SCTP port. 274 No default value is defined for the SDP sctp-port attribute. 275 Therefore, if the attribute is not present, the associated m- line 276 MUST be considered invalid. 278 NOTE: This specification only defines the usage of the SDP 'sctp- 279 port' attribute when associated with an m- line containing one of the 280 following proto values: 'UDP/DTLS/SCTP' or 'TCP/DTLS/SCTP'. Usage of 281 the attribute with other proto values needs to be defined in a 282 separate specification. 284 5.2. Syntax 286 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 287 document.] 289 The definition of the SDP 'sctp-port' attribute is: 291 Attribute name: sctp-port 292 Type of attribute: media 293 Mux category: CAUTION 294 Subject to charset: No 295 Purpose: Indicate the SCTP port value associated with 296 the SDP Media Description. 297 Appropriate values: Integer 298 Contact name: Christer Holmberg 299 Contact e-mail: christer.holmberg@ericsson.com 300 Reference: RFCXXXX 302 Syntax: 304 sctp-port-value = 1*5 306 The SCTP port range is between 0 and 65535 (both included). 307 Leading zeroes MUST NOT be used. 309 Example: 311 a=sctp-port:5000 313 5.3. Mux Category 315 The mux category [I-D.ietf-mmusic-sdp-mux-attributes] for the SDP 316 'sctp-port' attribute is CAUTION. 318 As the usage of multiple SCTP associations on top of a single DTLS 319 association is outside the scope of this specification, no mux rules 320 are specified for the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto 321 values. Future extensions, that define how to negotiate multiplexing 322 of multiple SCTP associations of top of a single DTLS association, 323 need to also define the mux rules for the attribute. 325 6. SDP 'max-message-size' Attribute 327 6.1. General 329 This section defines a new SDP media-level attribute, 'max-message- 330 size'. The attribute can be associated with an m- line to indicate 331 the maximum SCTP user message size (indicated in bytes) that an SCTP 332 endpoint is willing to receive on the SCTP association associated 333 with the m- line. Different attribute values can be used in each 334 direction. 336 An SCTP endpoint MUST NOT send a SCTP user message with a message 337 size that is larger than the maximum size indicated by the peer, as 338 it cannot be assumed that the peer would accept such message. 340 If the SDP 'max-message-size' attribute contains a maximum message 341 size value of zero, it indicates the SCTP endpoint will handle 342 messages of any size, subject to memory capacity etc. 344 If the SDP 'max-message-size' attribute is not present, the default 345 value is 64K. 347 NOTE: This specification only defines the usage of the SDP 'max- 348 message-size' attribute when associated with an m- line containing 349 one of the following proto values: 'UDP/DTLS/SCTP' or 'TCP/DTLS/ 350 SCTP'. Usage of the attribute with other proto values needs to be 351 defined in a separate specification. 353 6.2. Syntax 355 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 356 document.] 358 The definition of the SDP 'max-message-size' attribute is: 360 Attribute name: max-message-size 361 Type of attribute: media 362 Mux category: CAUTION 363 Subject to charset: No 364 Purpose: Indicate the maximum message size 365 (indicated in bytes) that an SCTP 366 endpoint is willing to receive on the 367 SCTP association associated with the SDP 368 Media Description. 369 Appropriate values: Integer 370 Contact name: Christer Holmberg 371 Contact e-mail: christer.holmberg@ericsson.com 372 Reference: RFCXXXX 374 Syntax: 376 max-message-size-value = 1* 378 Leading zeroes MUST NOT be used. 380 Example: 382 a=max-message-size:100000 384 6.3. Mux Category 386 The mux category for the SDP 'max-message-size' attribute is CAUTION. 388 As the usage of multiple SCTP associations on top of a single DTLS 389 association is outside the scope of this specification, no mux rules 390 are specified for the 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' proto 391 values. 393 7. UDP/DTLS/SCTP Transport Realization 395 The UDP/DTLS/SCTP transport is realized as described below: 397 o SCTP on top of DTLS is realized according to the procedures 398 defined in [I-D.ietf-tsvwg-sctp-dtls-encaps]; and 400 o DTLS on top of UDP is realized according to the procedures in 401 defined in [RFC6347]. 403 NOTE: While [I-D.ietf-tsvwg-sctp-dtls-encaps] allows multiple SCTP 404 associations on top of a single DTLS association, the procedures in 405 this specification only support the negotiation of a single SCTP 406 association on top of any given DTLS association. 408 8. TCP/DTLS/SCTP Transport Realization 410 The TCP/DTLS/SCTP transport is realized as described below: 412 o SCTP on top of DTLS is realized according to the procedures 413 defined in [I-D.ietf-tsvwg-sctp-dtls-encaps]; and 415 o DTLS on top of TCP is realized using the framing method defined in 416 [RFC4571], with DTLS packets being sent instead of RTP/RTCP 417 packets, and SDP signaling according to the procedures defined in 418 this specification. 420 NOTE: DTLS on top of TCP, without using the framing method defined in 421 [RFC4571] is outside the scope of this specification. A separate 422 proto value would need to be registered for such transport 423 realization. 425 9. Association And Connection Management 427 9.1. General 429 This section describes how to manage an SCTP association, DTLS 430 association and TCP connection using SDP attributes. 432 The SCTP association, the DTLS association and the TCP connection are 433 managed independently from each other. Each can be established and 434 closed without impacting others. 436 The detailed SDP Offer/Answer [RFC3264] procedures for the SDP 437 attributes are described in Section 10. 439 9.2. SDP sendrecv/sendonly/recvonly/inactive Attribute 441 This specification does not define semantics for the SDP direction 442 attributes [RFC4566]. Unless semantics of these attributes for an 443 SCTP association usage have been defined, SDP direction attributes 444 MUST be ignored if present. 446 9.3. SCTP Association 448 When an SCTP association is established, both SCTP endpoints MUST 449 initiate the SCTP association (i.e. both SCTP endpoints take the 450 'active' role), and MUST use the same SCTP port as client port and 451 server port (in order to prevent two separate SCTP associations from 452 being established). 454 As both SCTP endpoints take the 'active' role, the SDP 'setup' 455 attribute [RFC4145] does not apply to SCTP association establishment. 457 However the 'setup' attribute does apply to establishment of the 458 underlying DTLS association and TCP connection. 460 NOTE: The procedure above is different from TCP, where one endpoint 461 takes the 'active' role, the other endpoint takes the 'passive' role, 462 and only the 'active' endpoint initiates the TCP connection 463 [RFC4145]. 465 NOTE: When the SCTP association is established it is assumed that any 466 NAT traversal procedures for the underlying transport protocol (UDP 467 or TCP) have successfully been performed. 469 The SDP 'connection' attribute [RFC4145] does not apply to the SCTP 470 association. In order to trigger the closure of an existing SCTP 471 association, and establishment of a new SCTP association, the SDP 472 'sctp-port' attribute [Section 5] is used to indicate a new 473 (different than the ones currently used) SCTP port. The existing 474 SCTP association is closed, and the new SCTP association is 475 established, if one or both endpoints signal a new SCTP port. The 476 'connection' attribute does apply to establishment of underlying TCP 477 connections. 479 Alternatively, an SCTP association can be closed using the SDP 'sctp- 480 port' attribute with a zero attribute value. Later, a new SCTP 481 association can be established using the procedures in this section 482 for establishing an SCTP association. 484 SCTP associations might be closed without SDP signalling, e.g, in 485 case of a failure. The procedures in this section MUST be followed 486 to establish a new SCTP association. This requires a new SDP Offer/ 487 Answer exchange. New (different than the ones currently used) SCTP 488 ports MUST be used by both endpoints. 490 NOTE: Closing and establishing a new SCTP association using the SDP 491 'sctp-port' attribute will not affect the state of the underlying 492 DTLS association. 494 9.4. DTLS Association (UDP/DTLS/SCTP And TCP/DTLS/SCTP) 496 A DTLS association is managed according to the procedures in 497 [I-D.ietf-mmusic-dtls-sdp]. Hence, the SDP 'setup' attribute is used 498 to negotiate the (D)TLS roles ('client' and 'server') 499 [I-D.ietf-mmusic-4572-update]. 501 NOTE: The SDP 'setup' attribute is used to negotiate both the DTLS 502 roles and the TCP roles (Section 9.5). 504 NOTE: As described in [RFC5245], if the Interactive Connectivity 505 Establishment (ICE) mechanism [RFC5245] is used, all ICE candidates 506 associated with a DTLS association are considered part of the same 507 DTLS association. Thus, a switch from one candidate pair to another 508 candidate pair will not trigger the establishment of a new DTLS 509 association. 511 9.5. TCP Connection (TCP/DTLS/SCTP) 513 The TCP connection is managed according to the procedures in 514 [RFC4145]. Hence, the SDP 'setup' attribute is used to negotiate the 515 TCP roles ('active' and 'passive'), and the SDP 'connection' 516 attribute is used to indicate whether to use an existing TCP 517 connection, or create a new one. The SDP 'setup' attribute 518 'holdconn' value MUST NOT be used. 520 NOTE: A change of the TCP roles will also trigger a closure of the 521 DTLS association, and establishment of a new DTLS association, 522 according to the procedures in [I-D.ietf-mmusic-dtls-sdp]. 524 NOTE: As specified in [I-D.ietf-mmusic-dtls-sdp], usage of the SDP 525 'setup' attribute 'holdconn' value is not allowed. Therefore this 526 specification also forbids usage of the attribute value for TCP, as 527 DTLS is transported on top of TCP. 529 10. SDP Offer/Answer Procedures 531 10.1. General 533 This section defines the SDP Offer/Answer [RFC3264] procedures for 534 negotiating and establishing an SCTP-over-DTLS association. Unless 535 explicitly stated, the procedures apply to both the 'UDP/DTLS/SCTP' 536 and 'TCP/DTLS/SCTP' m- line proto values. 538 Each endpoint MUST associate one or more certificate fingerprints, 539 using the SDP 'fingerprint' attribute with the m- line, following the 540 procedures in [I-D.ietf-mmusic-4572-update]. 542 The authentication certificates are interpreted and validated as 543 defined in [I-D.ietf-mmusic-4572-update]. Self-signed certificates 544 can be used securely, provided that the integrity of the SDP 545 description is assured as defined in [I-D.ietf-mmusic-4572-update]. 547 Each endpoint MUST associate an SDP 'dtls-id' attribute with the m- 548 line, following the procedures in [I-D.ietf-mmusic-dtls-sdp]. 550 10.2. Generating the Initial SDP Offer 552 When the offerer creates an initial offer, the offerer: 554 o MUST associate an SDP setup attribute with the m- line; 556 o MUST associate an SDP 'sctp-port' attribute with the m- line; 558 o MUST, in the case of TCP/DTLS/SCTP, associate an SDP 'connection' 559 attribute, with a 'new' attribute value, with the m- line; and 561 o MAY associate an SDP 'max-message-size' attribute [Section 6] with 562 the m- line. 564 10.3. Generating the SDP Answer 566 When the answerer receives an offer, which contains an m- line 567 describing an SCTP-over-DTLS association, if the answerer accepts the 568 association, the answerer: 570 o MUST insert a corresponding m- line in the answer, with an m- line 571 proto value [RFC3264] identical to the value in the offer; 573 o MUST associate an SDP 'setup' attribute with the m- line; 575 o MUST associate an SDP 'sctp-port' attribute with the m- line. If 576 the offer contained a new (different than the one currently used) 577 SCTP port value the answerer MUST also associate a new SCTP port 578 value. If the offer contained a zero SCTP port value, or if the 579 answerer does not accept the SCTP association, the answerer MUST 580 also associate a zero SCTP port value; and 582 o MAY associate an SDP 'max-message-size' attribute [Section 6] with 583 the m- line. The attribute value in the answer is independent 584 from the value (if present) in the corresponding m- line of the 585 offer. 587 Once the answerer has sent the answer the answerer: 589 o MUST, in the case of TCP/DTLS/SCTP, if a TCP connection has not 590 yet been established, or if an existing TCP connection is to be 591 closed and replaced by a new TCP connection, follow the procedures 592 in [RFC4145] for closing and establishing a TCP connection; 594 o MUST, if a DTLS association has not yet been established, or if an 595 existing DTLS association is to be closed and replaced by a new 596 DTLS association, follow the procedures in 598 [I-D.ietf-mmusic-dtls-sdp] for closing the currently used, and 599 establishing a new, DTLS association; and 601 o MUST, if an SCTP association has not yet been established, or if 602 an existing SCTP association is to be closed and replaced by a new 603 SCTP association, initiate the closing of the existing SCTP 604 association (if applicable) and establishment of the SCTP 605 association. 607 If the SDP 'sctp-port' attribute in the answer contains a zero 608 attribute value, the answerer MUST NOT establish an SCTP association. 609 If an SCTP association exists, the offerer MUST close it. 611 If the answerer does not accept the m- line in the offer, it MUST 612 assign a zero port value to the corresponding m- line in the answer, 613 following the procedures in [RFC3264]. In addition, the answerer 614 MUST NOT initiate the establishment of a TCP connection, a DTLS 615 association or a DTLS association associated with the m- line. 617 10.4. Offerer Processing of the SDP Answer 619 Once the offerer has received the answer the offerer: 621 o MUST, in the case of TCP/DTLS/SCTP, if a TCP connection has not 622 yet been established, or if an existing TCP connection is to be 623 closed and replaced by a new TCP connection, follow the procedures 624 in [RFC4145] for closing and establishing a TCP connection; 626 o MUST, if a DTLS association has not yet been established, or if an 627 existing DTLS association is to be closed and replaced by a new 628 DTLS association, follow the procedures in 629 [I-D.ietf-mmusic-dtls-sdp] for closing and establishing a DTLS 630 association; and 632 o MUST, if an SCTP association has not yet been established, or if 633 an existing SCTP association is to be closed and replaced by a new 634 SCTP association, initiate the closing of the existing SCTP 635 association (if applicable) and establishment of the SCTP 636 association. 638 If the SDP 'sctp-port' attribute in the answer contains a zero 639 attribute value, the offerer MUST NOT establish an SCTP association. 640 If an SCTP association exists in that case, the offerer MUST close 641 it. 643 If the m- line in the answer contains a zero port value, the offerer 644 MUST NOT initiate the establishment a TCP connection, a DTLS 645 association or an SCTP association associated with the m- line. If a 646 TCP connection, or a DTLS association or an SCTP association exists 647 in that case, the offerer MUST close it. 649 10.5. Modifying the Session 651 When an offerer sends an updated offer, in order to modify a 652 previously established SCTP association, it follows the procedures in 653 Section 10.2, with the following exceptions: 655 o If the offerer wants to close an SCTP association, and immediately 656 establish a new SCTP association, the offerer MUST associate an 657 SDP 'sctp-port' attribute with a new (different than the one 658 currently used) attribute value. This will not impact the 659 underlying DTLS association (and TCP connection in case of 660 TCP/DTLS/SCTP). 662 o If the offerer wants to close an SCTP association, without 663 immediately establishing a new SCTP association, the offerer MUST 664 associate an SDP 'sctp-port' attribute with a zero attribute 665 value. This will not impact the underlying DTLS association (and 666 TCP connection in case of TCP/DTLS/SCTP). 668 o If the offerer wants to establish an SCTP association, and another 669 SCTP association was previously closed, the offerer MUST associate 670 an SDP 'sctp-port' attribute with a new attribute value (different 671 than the value associated with the previous SCTP association). If 672 the previous SCTP association was closed successfully following 673 use of an SDP 'sctp-port' attribute with a zero attribute value, 674 the offerer MAY use the same attribute value for the new SCTP 675 association that was used with the previous SCTP association 676 before it was closed. This will not impact the underlying DTLS 677 association (and TCP connection in case of TCP/DTLS/SCTP). 679 o If the offerer wants to close an existing SCTP association, and 680 the underlying DTLS association (and the underlying TCP connection 681 in case of TCP/DTLS/SCTP) it MUST assign a zero port value to the 682 m- line associated with the SCTP and DTLS associations (and TCP 683 connection in case of TCP/DTLS/SCTP), following the procedures in 684 [RFC3264]. 686 o NOTE: This specification does not define a mechanism for 687 explicitly closing a DTLS association while maintaining the 688 overlying SCTP association. However, if a DTLS association is 689 closed and replaced with a new DTLS association, as a result of 690 some other action [I-D.ietf-mmusic-dtls-sdp], the state of the 691 SCTP association is not affected. 693 The offer follows the procedures in [I-D.ietf-mmusic-dtls-sdp] 694 regarding the DTLS association impacts when modifying a session. 696 In the case of TCP/DTLS/SCTP, the offerer follows the procedures in 697 [RFC4145] regarding the TCP connection impacts when modifying a 698 session. 700 11. Multihoming Considerations 702 Multihoming is not supported when sending SCTP on top of DTLS, as 703 DTLS does not expose address management of the underlying transport 704 protocols (UDP or TCP) to its upper layer. 706 12. NAT Considerations 708 12.1. General 710 When SCTP-over-DTLS is used in NAT environment, it relies on the NAT 711 traversal procedures for the underlying transport protocol (UDP or 712 TCP). 714 12.2. ICE Considerations 716 When SCTP-over-DTLS is used with UDP based ICE candidates [RFC5245] 717 then the procedures for UDP/DTLS/SCTP [Section 7] are used. 719 When SCTP-over-DTLS is used with TCP based ICE candidates [RFC6544] 720 then the procedures for TCP/DTLS/SCTP [Section 8] are used. 722 Implementations MUST treat all ICE candidate pairs associated with an 723 SCTP association on top of a DTLS association as part of the same 724 DTLS association. Thus, there will only be one SCTP handshake and 725 one DTLS handshake even if there are multiple valid candidate pairs, 726 and shifting from one candidate pair to another will not impact the 727 SCTP or DTLS associations. If new candidates are added, they will 728 also be part of the same SCTP and DTLS associations. When 729 transitioning between candidate pairs, different candidate pairs can 730 be currently active in different directions and implementations MUST 731 be ready to receive data on any of the candidates, even if this means 732 sending and receiving data using UDP/DTLS/SCTP and TCP/DTLS/SCTP at 733 the same time in different directions. 735 When an SDP offer or answer is sent, the proto value MUST match the 736 transport protocol associated with the default candidate. Hence, if 737 UDP transport is used for the default candidate the 'UDP/DTLS/SCTP' 738 proto value MUST be used. If TCP transport is used for the default 739 candidate the 'TCP/DTLS/SCTP' proto value MUST be used. However, if 740 an endpoint switches between TCP-based and UDP-based candidates 741 during a session the endpoint is not required to send an SDP offer in 742 order to modify that proto value of the associated m- line. 744 NOTE: The text in the paragraph above only applies when the usage of 745 ICE has been negotiated. If ICE is not used, the proto value MUST 746 always reflect the transport protocol used at any given time. 748 13. Examples 750 13.1. Establishment of UDP/DTLS/SCTP association 752 SDP Offer: 754 m=application 54111 UDP/DTLS/SCTP webrtc-datachannel 755 c=IN IP6 2001:DB8::A8FD 756 a=dtls-id:abc3dl 757 a=setup:actpass 758 a=sctp-port:5000 759 a=max-message-size:100000 761 - The offerer indicates that the usage of the 762 UDP/DTLS/SCTP association will be as defined 763 for the 'webrtc-datachannel' format value. 764 - The offerer UDP port value is 54111. 765 - The offerer SCTP port value is 5000. 766 - The offerer indicates that it can take either the 767 client or the server DTLS role. 769 SDP Answer: 771 m=application 64300 UDP/DTLS/SCTP webrtc-datachannel 772 c=IN IP6 2001:DB8::001D 773 a=dtls-id:ggr4rd 774 a=setup:passive 775 a=sctp-port:6000 776 a=max-message-size:100000 778 - The answerer UDP port value is 64300. 779 - The answerer SCTP port value is 6000. 780 - The answerer takes the server DTLS role. 782 14. Security Considerations 784 [RFC4566] defines general SDP security considerations, while 785 [RFC3264], [RFC4145] and [I-D.ietf-mmusic-4572-update] define 786 security considerations when using the SDP offer/answer mechanism to 787 negotiate media streams. 789 [RFC4960] defines general SCTP security considerations and 790 [I-D.ietf-tsvwg-sctp-dtls-encaps] defines security considerations 791 when using SCTP on top of DTLS. 793 This specification does not introduce new security considerations in 794 addition to those defined in the specifications listed above. 796 15. IANA Considerations 798 15.1. New SDP proto values 800 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 801 document.] 803 This document updates the "Session Description Protocol (SDP) 804 Parameters" registry, following the procedures in [RFC4566], by 805 adding the following values to the table in the SDP "proto" field 806 registry: 808 +-------+---------------+-----------+ 809 | Type | SDP Name | Reference | 810 +-------+---------------+-----------+ 811 | proto | UDP/DTLS/SCTP | [RFCXXXX] | 812 | proto | TCP/DTLS/SCTP | [RFCXXXX] | 813 +-------+---------------+-----------+ 815 Table 1: SDP "proto" field values 817 15.2. New SDP Attributes 819 15.2.1. sctp-port 821 This document defines a new SDP media-level attribute,'sctp-port'. 822 The details of the attribute are defined in Section 5.2. 824 15.2.2. max-message-size 826 This document defines a new SDP media-level attribute,'max-message- 827 size'. The details of the attribute are defined in Section 6.2. 829 15.3. association-usage Name Registry 831 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number of this 832 document.] 834 This specification creates a new IANA registry, following the 835 procedures in [RFC5226], for the namespace associated with the 836 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' protocol identifiers. Each fmt 837 value describes the usage of an entire SCTP association, including 838 all SCTP streams associated with the SCTP association. 840 NOTE: Usage indication of individual SCTP streams is outside the 841 scope of this specification. 843 The fmt value, "association-usage", used with these "proto" values is 844 required. It is defined in Section 4. 846 As part of this registry, IANA maintains the following information: 848 association-usage name: The identifier of the subprotocol, as will 849 be used as the fmt value. 851 association-usage reference: A reference to the document in which 852 the association-usage is defined. 854 association-usage names are to be subject to the "First Come First 855 Served" IANA registration policy [RFC5226]. 857 IANA is asked to add initial values to the registry. 859 |----------------------------------------------------------| 860 | name | Reference | 861 |----------------------------------------------------------| 862 | webrtc-datachannel | draft-ietf-rtcweb-data-protocol-xx, | 863 | | RFCXXX | 864 |----------------------------------------------------------| 866 [RFC EDITOR NOTE: Please hold the publication of this draft 867 until draft-ietf-rtcweb-data-protocol has been published as an RFC. 868 Then, replace the reference to draft-ietf-rtcweb-data-protocol 869 with the RFC number.] 871 [RFC EDITOR NOTE: Please replace RFCXXXX with the RFC number 872 of this document.] 874 Figure 1 876 16. Acknowledgments 878 The authors wish to thank Harald Alvestrand, Randell Jesup, Paul 879 Kyzivat, Michael Tuexen, Juergen Stoetzer-Bradler, Flemming Andreasen 880 and Ari Keranen for their comments and useful feedback. Ben Campbell 881 provided comments as part of his AD review. Brian Carpenter 882 performed the Gen-ART review. 884 17. 886 [RFC EDITOR NOTE: Please remove this section when publishing] 888 Changes from draft-ietf-mmusic-sctp-sdp-22 890 o Changes based on Gen-ART review by Brian Carpenter. 892 Changes from draft-ietf-mmusic-sctp-sdp-21 894 o Changes based on AD review by Ben Campbell. 896 Changes from draft-ietf-mmusic-sctp-sdp-20 898 o Informative reference to draft-ietf-rtcweb-data-protocol added. 900 Changes from draft-ietf-mmusic-sctp-sdp-19 902 o Changes based on WG chair comments from Flemming Andreasen. 904 Changes from draft-ietf-mmusic-sctp-sdp-18 906 o Changes based on WGLC comments from Paul Kyzivat. 908 Changes from draft-ietf-mmusic-sctp-sdp-17 910 o Removal of 'SCTP'. 912 o Document title changed. 914 o Disallow usage of SDP 'setup' attribute 'holdconn' value. 916 o Roman Shpount added as co-editor. 918 Changes from draft-ietf-mmusic-sctp-sdp-15 920 o Chapter about SCTP, DTLS and TCP association/connection management 921 modified. 923 o Removal of SCTP/DTLS. 925 Changes from draft-ietf-mmusic-sctp-sdp-14 927 o Changes based on WGLC comments from Magnus Westerlund. 929 o - ABNF clarification that token and port are defined in RFC4566. 931 o - Specify 40 as maximum digit character length for the SDP max- 932 message-size value. 934 o - Editorial clarification. 936 o Changes based on discussions at IETF#92. 938 o - Specify that all ICE candidate pairs belong to the same DTLS 939 association. 941 Changes from draft-ietf-mmusic-sctp-sdp-13 943 o Changes based on comments from Paul Kyzivat. 945 o - Text preventing usage of well-known ports removed. 947 o - Editorial clarification. 949 Changes from draft-ietf-mmusic-sctp-sdp-12 951 o Mux category rules added for new SDP attributes. 953 o Reference to draft-ietf-mmusic-sdp-mux-attributes added. 955 o Changes based on comments from Roman Shpount: 957 o - Specify that fingerprint or setup roles must not be modified, 958 unless underlying transport protocol is also modified. 960 o Changes based on comments from Ari Keranen: 962 o - Editorial corrections. 964 o Changes based on comments from Flemming Andreasen: 966 o - Clarify that, if UDP/DTLS/SCTP or TCP/DTLS/SCTP is used, the 967 DTLS association is established before the SCTP association. 969 o - Clarify that max-message-size value is given in bytes, and that 970 different values can be used per direction. 972 o - Section on fmtp attribute removed. 974 o - Editorial corrections. 976 Changes from draft-ietf-mmusic-sctp-sdp-11 978 o Example added. 980 Changes from draft-ietf-mmusic-sctp-sdp-10 982 o SDP max-message-size attribute added to IANA considerations. 984 o Changes based on comments from Paul Kyzivat: 986 o - Text about max message size removed from fmtp attribute section. 988 Changes from draft-ietf-mmusic-sctp-sdp-09 990 o 'DTLS/SCTP' split into 'UDP/DTLS/SCTP' and 'TCP/DTLS/SCTP' 992 o Procedures for realizing UDP/DTLS/SCTP- and TCP/DTLS/SCTP 993 transports added. 995 Changes from draft-ietf-mmusic-sctp-sdp-08 997 o Default SCTP port removed: 999 o - Usage of SDP sctp-port attribute mandatory. 1001 o SDP max-message-size attribute defined: 1003 o - Attribute definition. 1005 o - SDP Offer/Answer procedures. 1007 o Text about SDP direction attributes added. 1009 o Text about TLS role determination added. 1011 18. References 1013 18.1. Normative References 1015 [RFC0793] Postel, J., "Transmission Control Protocol", STD 7, 1016 RFC 793, DOI 10.17487/RFC0793, September 1981, 1017 . 1019 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate 1020 Requirement Levels", BCP 14, RFC 2119, 1021 DOI 10.17487/RFC2119, March 1997, 1022 . 1024 [RFC3264] Rosenberg, J. and H. Schulzrinne, "An Offer/Answer Model 1025 with Session Description Protocol (SDP)", RFC 3264, 1026 DOI 10.17487/RFC3264, June 2002, 1027 . 1029 [RFC4145] Yon, D. and G. Camarillo, "TCP-Based Media Transport in 1030 the Session Description Protocol (SDP)", RFC 4145, 1031 DOI 10.17487/RFC4145, September 2005, 1032 . 1034 [RFC4566] Handley, M., Jacobson, V., and C. Perkins, "SDP: Session 1035 Description Protocol", RFC 4566, DOI 10.17487/RFC4566, 1036 July 2006, . 1038 [RFC4571] Lazzaro, J., "Framing Real-time Transport Protocol (RTP) 1039 and RTP Control Protocol (RTCP) Packets over Connection- 1040 Oriented Transport", RFC 4571, DOI 10.17487/RFC4571, July 1041 2006, . 1043 [RFC4960] Stewart, R., Ed., "Stream Control Transmission Protocol", 1044 RFC 4960, DOI 10.17487/RFC4960, September 2007, 1045 . 1047 [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an 1048 IANA Considerations Section in RFCs", BCP 26, RFC 5226, 1049 DOI 10.17487/RFC5226, May 2008, 1050 . 1052 [RFC6347] Rescorla, E. and N. Modadugu, "Datagram Transport Layer 1053 Security Version 1.2", RFC 6347, DOI 10.17487/RFC6347, 1054 January 2012, . 1056 [RFC6544] Rosenberg, J., Keranen, A., Lowekamp, B., and A. Roach, 1057 "TCP Candidates with Interactive Connectivity 1058 Establishment (ICE)", RFC 6544, DOI 10.17487/RFC6544, 1059 March 2012, . 1061 [I-D.ietf-mmusic-4572-update] 1062 Lennox, J. and C. Holmberg, "Connection-Oriented Media 1063 Transport over TLS in SDP", draft-ietf-mmusic- 1064 4572-update-13 (work in progress), February 2017. 1066 [I-D.ietf-mmusic-dtls-sdp] 1067 Holmberg, C. and R. Shpount, "Using the SDP Offer/Answer 1068 Mechanism for DTLS", draft-ietf-mmusic-dtls-sdp-18 (work 1069 in progress), January 2017. 1071 [I-D.ietf-tsvwg-sctp-dtls-encaps] 1072 Tuexen, M., Stewart, R., Jesup, R., and S. Loreto, "DTLS 1073 Encapsulation of SCTP Packets", draft-ietf-tsvwg-sctp- 1074 dtls-encaps-09 (work in progress), January 2015. 1076 [I-D.ietf-mmusic-sdp-mux-attributes] 1077 Nandakumar, S., "A Framework for SDP Attributes when 1078 Multiplexing", draft-ietf-mmusic-sdp-mux-attributes-16 1079 (work in progress), December 2016. 1081 18.2. Informative References 1083 [RFC5245] Rosenberg, J., "Interactive Connectivity Establishment 1084 (ICE): A Protocol for Network Address Translator (NAT) 1085 Traversal for Offer/Answer Protocols", RFC 5245, 1086 DOI 10.17487/RFC5245, April 2010, 1087 . 1089 [I-D.ietf-rtcweb-data-channel] 1090 Jesup, R., Loreto, S., and M. Tuexen, "WebRTC Data 1091 Channels", draft-ietf-rtcweb-data-channel-13 (work in 1092 progress), January 2015. 1094 [I-D.ietf-mmusic-data-channel-sdpneg] 1095 Drage, K., Makaraju, M., Stoetzer-Bradler, J., Ejzak, R., 1096 and J. Marcon, "SDP-based Data Channel Negotiation", 1097 draft-ietf-mmusic-data-channel-sdpneg-11 (work in 1098 progress), January 2017. 1100 [I-D.ietf-rtcweb-data-protocol] 1101 Jesup, R., Loreto, S., and M. Tuexen, "WebRTC Data Channel 1102 Establishment Protocol", draft-ietf-rtcweb-data- 1103 protocol-09 (work in progress), January 2015. 1105 Authors' Addresses 1107 Christer Holmberg 1108 Ericsson 1109 Hirsalantie 11 1110 Jorvas 02420 1111 Finland 1113 Email: christer.holmberg@ericsson.com 1114 Roman Shpount 1115 TurboBridge 1116 4905 Del Ray Avenue, Suite 300 1117 Bethesda, MD 20814 1118 USA 1120 Phone: +1 (240) 292-6632 1121 Email: rshpount@turbobridge.com 1123 Salvatore Loreto 1124 Ericsson 1125 Hirsalantie 11 1126 Jorvas 02420 1127 Finland 1129 Email: Salvatore.Loreto@ericsson.com 1131 Gonzalo Camarillo 1132 Ericsson 1133 Hirsalantie 11 1134 Jorvas 02420 1135 Finland 1137 Email: Gonzalo.Camarillo@ericsson.com