SIPPING Working Group D. Willis, Ed. Internet-Draft Cisco Systems Intended status: Experimental D. Bryan Expires: February 2, 2007 P2PSIP.org and William and Mary Department of Computer Science P. Matthews Avaya E. Shim Panasonic Digital Networking Laboratory August 2006 Concepts and Terminology for Peer to Peer SIP draft-willis-p2psip-concepts-01 Status of this Memo By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on February 2, 2007. Copyright Notice Copyright (C) The Internet Society (2006). Willis, et al. Expires February 2, 2007 [Page 1] Internet-Draft P2PSIP Concepts and Terminology August 2006 Abstract This document defines concepts and terminology for use of the Session Initiation Protocol in a peer-to-peer environment where the traditional proxy-registrar function is replaced by a distributed mechanism that might be implemented using a distributed hash table or other distributed data mechanism with similar external properties. This document includes a high-level view of the functional relationships between the network elements defined herein, a conceptual model of operations, and an outline of the related open problems that might be addressed by an IETF working group. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [1]. Willis, et al. Expires February 2, 2007 [Page 2] Internet-Draft P2PSIP Concepts and Terminology August 2006 Table of Contents 1. Background . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 5 3. Discussion . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3.1. What Kinds of P2PSIP Overlay Peers and Clients Might Exist? . . . . . . . . . . . . . . . . . . . . . . . . . . 9 3.2. Reference Model . . . . . . . . . . . . . . . . . . . . . 10 3.3. Conceptual Outline of Operations . . . . . . . . . . . . . 12 3.3.1. Enrolling and Inserting an P2PSIP Overlay Peer . . . . 12 3.3.2. More on The Difference Between a Peer, Client, and User Agent . . . . . . . . . . . . . . . . . . . . . . 12 3.3.3. Enrolling a User and Inserting a P2PSIP Overlay User Agent . . . . . . . . . . . . . . . . . . . . . . 13 3.3.4. Placing a Call from a P2PSIP Overlay Client UA to a P2PSIP Overlay Client UA . . . . . . . . . . . . . . 14 3.3.5. Bootstrapping . . . . . . . . . . . . . . . . . . . . 14 4. Questions . . . . . . . . . . . . . . . . . . . . . . . . . . 15 4.1. Definition of P2PSIP Overlay Peer Enrollment . . . . . . . 15 4.2. PP2PSIP Overlay Peer Protocol . . . . . . . . . . . . . . 15 4.3. P2PSIP Overlay Client Protocol . . . . . . . . . . . . . . 15 4.4. Universal Routing: . . . . . . . . . . . . . . . . . . . . 15 4.5. How To Find Media Relays? . . . . . . . . . . . . . . . . 15 4.6. How Do We Find Gateways? . . . . . . . . . . . . . . . . . 16 4.7. NAT Traversal . . . . . . . . . . . . . . . . . . . . . . 16 4.8. Peer-Adjacency Through NATs . . . . . . . . . . . . . . . 16 4.9. Cryptotransparency . . . . . . . . . . . . . . . . . . . . 16 4.10. Record Formats . . . . . . . . . . . . . . . . . . . . . . 16 4.11. Peer and Client Enrollment Protocols . . . . . . . . . . . 16 4.12. Peer and User Credentials . . . . . . . . . . . . . . . . 16 4.13. Bootstrapping . . . . . . . . . . . . . . . . . . . . . . 17 4.14. Credential Recovery . . . . . . . . . . . . . . . . . . . 17 4.15. Overlapping Domains . . . . . . . . . . . . . . . . . . . 17 4.16. Hybrid Domains . . . . . . . . . . . . . . . . . . . . . . 17 4.17. Admissions Control . . . . . . . . . . . . . . . . . . . . 17 4.18. Users versus Resources . . . . . . . . . . . . . . . . . . 18 5. Security Considerations . . . . . . . . . . . . . . . . . . . 18 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 18 7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 18 8. References . . . . . . . . . . . . . . . . . . . . . . . . . . 18 8.1. Normative References . . . . . . . . . . . . . . . . . . . 18 Willis, et al. Expires February 2, 2007 [Page 3] Internet-Draft P2PSIP Concepts and Terminology August 2006 8.2. Informative References . . . . . . . . . . . . . . . . . . 19 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 19 Intellectual Property and Copyright Statements . . . . . . . . . . 21 Willis, et al. Expires February 2, 2007 [Page 4] Internet-Draft P2PSIP Concepts and Terminology August 2006 1. Background One of the fundamental problems in multimedia communications between Internet nodes is that of a discovering the IP address at which a given correspondent can be reached. Correspondents are frequently identified by distinguished names, perhaps represented in the form of a universal resource indicator (URI) [2]. The Session Initiation Protocol (SIP) [3] commonly addresses this task assuming that the domain part of the URI indicates an internet host address or internet domain name using the Domain Name System (DNS) [4]. SIP's location process [5] assumes that host part of the URI indicates either the target SIP user agent (UA), or a proxy that has knowledge of how to to reach the target UA, presumably gained through SIP's registration process. This approach, referred to herein as "Conventional SIP" or "Client/ Server SIP", assumes a relatively fixed hierarchy of SIP routing proxies (servers) and SIP user agents (clients). The routing proxies are typically resolvable using conventional Internet mechanisms with static IP addresses and associated DNS entries. This structure may not be ideal in all cases, including specifically ad-hoc, serverless, and reduced-administration scenarios. As an alternative, several authors [7] [8] [9] [10] have proposed using peer-to-peer (P2P) [11] approaches to solving the correspondent discovery problem. This document offers a consolidation of the more important terms and concepts from several of the above documents, presented in the context of a reference model for peer-to-peer SIP (P2PSIP). It is intended that this document serve as a starting point for describing the work needed to resolve a number of open questions such that an IETF working group could be chartered to do the work needed to resolve these questions and present a standard solution. The authors believe that this goal is roughly consistent with that of a Protocol Model as defined in [12]. 2. Definitions Defined terms include: Overlay Network: An overlay network is a computer network which is built on top of another network. Nodes in the overlay can be thought of as being connected by virtual or logical links, each of which corresponds to a path, perhaps through many physical links, in the underlying network. For example, many peer-to-peer networks are overlay networks because they run on top of the Internet. Dial-up Internet is an overlay upon the telephone Willis, et al. Expires February 2, 2007 [Page 5] Internet-Draft P2PSIP Concepts and Terminology August 2006 network. P2P Network: A peer-to-peer (or P2P) computer network is a network that relies primarily on the computing power and bandwidth of the participants in the network rather than concentrating it in a relatively low number of servers. P2P networks are typically used for connecting nodes via largely ad hoc connections. Such networks are useful for many purposes. Sharing content files (see file sharing [15]) containing audio, video, data or anything in digital format is very common, and realtime data, such as telephony traffic, is also passed using P2P technology. . A P2P Network may also be called a "P2P Overlay" or "P2P Overlay Network" or "P2P Network Overlay" , since its organization is not at the physical layer, but is instead "on top of" an existing Internet Protocol network. P2PSIP: A communications protocol related to the Session Initiation Protocol (sip) [3] that extends SIP by using peer-to-peer techniques for resolving the targets of SIP requests. P2PSIP Overlay: A P2PSIP Overlay is an association, collection, or federation of nodes that provides SIP registration, SIP request routing, and similar functions using a P2P organization, as defined by "P2P Network" above. Short form: overlay. P2PSIP Overlay Identifier: Information that identifies a specific P2PSIP Overlay. This is presumed in the general case to be scoped to a name within the DNS, but other scopes may apply, particularly in ad-hoc environments. Short forms: overlay identifier, overlay ID. P2PSIP Overlay Peer: A node participating in a P2PSIP Overlay that provides storage and routing services (fully participates in the P2P routing) to other nodes in that P2PSIP Overlay. Each P2PSIP Overlay Peer is presumed to have a unique identifier within the P2PSIP Overlay. Each P2PSIP Overlay Peer may or may not be coupled to one or more P2PSIP Overlay User Agents. Within the P2PSIP Overlay, the peer is capable of performing several different operations, including: joining and leaving the overlay, routing requests within the overlay, storing information on behalf of the overlay, putting information into the overlay, and getting information from the overlay. Short forms: overlay peer, supernode, P2PSIP peer, peer. Willis, et al. Expires February 2, 2007 [Page 6] Internet-Draft P2PSIP Concepts and Terminology August 2006 P2PSIP Overlay Peer Key: Information (perhaps a string, number or URI) that uniquely identifies each P2PSIP Overlay Peer within a given P2PSIP Overlay. These keys are completely independent of identifier of any user of a user agent coupled to a peer. Short forms: P2PSIP peer key, overlay peer key, peer key. P2PSIP Overlay Client: A node participating in a P2PSIP Overlay that provides neither routing nor route storage and retrieval functions to that P2PSIP Overlay. The P2PSIP Overlay Client interacts with the P2PSIP Overlay only to request the insertion of routing information (put in a Contact), request the retrieval of routing information (get a Contact), or to request the routing of a message to elsewhere in the P2PSIP Overlay. Unlike the P2PSIP Overlay Peer, the client is presumed not to have a unique identifier or "key" within the overlay. A P2PSIP Overlay Client may be coupled to one or more P2PSIP Overlay User Agents. Short forms: overlay client, P2PSIP client, client. P2PSIP Overlay User Agent: A SIP user agent that is coupled to a P2PSIP Overlay Peer or P2PSIP Overlay Client, such that the peer or client can assist the UA with registration (storage of a route to users of the UA) and/or routing of requests using the P2PSIP Overlay. A P2PSIP Overlay SUer Agent differs from a conventional SIP user agent in that it is coupled directly to a P2PSIP Overlay Peer or P2PSIP Overlay Client, and can therefore directly interact with a P2PSIP Overlay, which a conventional SIP UA cannot do. P2PSIP Overlay User Agents are presumed to have no distinguished name or identifier. Short forms: overlay UA, P2PSIP UA. P2PSIP Overlay User: An addressable user endpoint, entity, service, or function within a P2PSIP Overlay. Examples include but are not limited to humans, automata, bridges, mixers, media relays, gateways, and media storage. Short forms: overlay user, P2PSIP user. P2PSIP Overlay User Identifier: A distinguished name that identifies a specific P2PSIP Overlay User within a given P2PSIP Overlay. This is presumed to be a URI scoped to the P2PSIP Overlay Identifier. This is presumably the same as a SIP Address of Record, or AOR Short forms: overlay user identifier, P2PSIP user identifier, P2PSIP user-ID, P2PSIP AOR. P2PSIP Overlay User Record: A block of data, stored in the data mechanism of the P2PSIP Overlay, that includes information relevant to a specific user. We presume that there may be multiple types of user records. Some may describe routes to a client at which the user is presumed reachable (a "user routing record", like a SIP "Contact:"). Others might store presence Willis, et al. Expires February 2, 2007 [Page 7] Internet-Draft P2PSIP Concepts and Terminology August 2006 information. The types, usages, and formats of user records are a question for future study. P2PSIP Overlay Peer Protocol: The protocol spoken between P2P Overlay peers to share information and organize the P2P Overlay Network. Short form: peer protocol. P2PSIP Overlay Client Protocol: The protocol spoken between P2P Overlay Clients and the P2P Overlay Peer they use to place into or retrieve information from the P2P Overlay Network. This is presumably a functional subset of the P2P Overlay Peer Protocol, but may differ in syntax and protocol implementation (i.e., may not be syntactically related). Note that the precise relationship between the P2PSIP Overlay Peer Protocol and the P2PSIP Overlay Client Protocol remains an open question and is expected to be a principle topic of the detailed design work. Short form: client protocol. P2PSIP Overlay Neighbors: The set of P2P Overlay Peers that either a P2P Overlay Peer or P2P Overlay Client know of directly and can reach without further lookups. Short form: neighbor P2PSIP Overlay Bootstrap Server: A network node used by P2PSIP Overlay Peers or Clients who are attempting to enter to locate an entry into the P2P Overlay Network. It may return an entry point (address of a Peer) to the P2PSIP Overlay or act as one itself. This should be a quasi-stable and well known host, located using a configuration or discovered via , DNS, broadcast, or other mechanism. Example: a P2PSIP Overlay Peer that reboots and has no knowledge of other peers uses a P2PSIP Overlay Bootstrap Server to find other peers in the P2P Overlay Network and establish P2PSIP Overlay Peer Insertion. (Note: An overlay peer might or might not provide this functionality). Short forms: bootstrap server, boot server. P2PSIP Overlay Peer Insertion: The act of inserting a P2PSIP Overlay Peer into the current routing structure (presumably a distributed database or hash table) of a P2PSIP Overlay. In general, this routing structure maps the peer's P2PSIP Overlay Peer Key to the IP address or DNS name of the peer. During insertion, the peer discovers its P2PSIP Overlay neighbors. Following insertion, the peer will be able to store user records (such as routing information), query other peers for user records, and pass requests to route messages to other peers. Short form: peer insertion. Willis, et al. Expires February 2, 2007 [Page 8] Internet-Draft P2PSIP Concepts and Terminology August 2006 P2PSIP Overlay User Record Insertion: The act of inserting a record for a P2PSIP Overlay User into the data maintained by the P2PSIP Overlay Peers. Following insertion, the data stored at one or more peers will contain a record (such as a P2PSIP Overlay User Routing Record), keyed at least in part by a P2PSIP Overlay User Identifier. Short form: User record insertion. P2PSIP Overlay User Routing Record: A P2PSIP overlay user record that provides a routing vector that points to a P2PSIP UA where the user can presumably be reached. This is analogous to the combination of a SIP [3] "Contact:" and a "Path:" [6]. The P2PSIP equivalent of a SIP registration process would be the insertion of an overlay user routing record into the overlay. Short form: user route record or user route. P2PSIP Overlay Peer Enrollment: The initial one-time process a P2PSIP Overlay Peer follows to obtain an identifier and credentials, if any, within a P2PSIP Overlay. This is not performed each time the peer comes online, only the first time they do so, or following a loss of identifier or credentials by the peer. Short form: peer enrollment. P2PSIP Overlay User Enrollment: The initial one-time process a P2PSIP Overlay User follows to obtain a unique identifier within a P2PSIP Overlay. This is not performed each time the resource comes online, only the first time they do so, or following a loss of identifier or credentials by the client. Short form: user enrollment. 3. Discussion 3.1. What Kinds of P2PSIP Overlay Peers and Clients Might Exist? In general, P2PSIP nodes might have the same sorts of duties and profiles as traditional client-server SIP nodes. This includes but is not limited to: 1. User Agent: a phone, voice mail server, bridge, or other device that initiates or terminates session requests. 2. Media relay: a peer or client capable of relaying RTP sessions, as described in [13] 3. Gateway: a peer or client that converts from P2PSIP to some other protocol, such as PSTN. Willis, et al. Expires February 2, 2007 [Page 9] Internet-Draft P2PSIP Concepts and Terminology August 2006 4. Redirector or Location Server: a peer or client that, given a SIP (or other SIP request) to a P2PSIP overlay resource identifier, returns the route to a resource in a 302 or 305 response. 5. Registrar: A peer or client that processes SIP REGISTER requests, either storing or retrieving the contact information to/from the routing data of the P2PSIP Overlay. 6. Proxy: A peer or client that accepts SIP requests, resolves the next hop or hops using the routing information of the P2PSIP Overlay, and passes the request on towards the next hop. 3.2. Reference Model The following diagram depicts a reference or "boxes and arrows" model showing several of the above peer and client types, along with two conventional SIP user agents. Willis, et al. Expires February 2, 2007 [Page 10] Internet-Draft P2PSIP Concepts and Terminology August 2006 --->PSTN -----------/ | Gateway | ________ ----------| Peer |------------- | | | | | |Client Protocol | UA |\ | ----------- | GET/PUT | Peer |\\|N|----- | | |______| \|A| | | \__/ |T| ---- | v / \ Peer Protocol/ |---- / UA \ / P2PSIP Overlay | /Client\ |N|/ | |______| -------- /|A|------ Route Data | ^ | |//|T| ____|___ | | | UA |/ | | | | | Peer | | UA | | | -------- | Peer | | | |______| | | | | |SIP Peer Protocol | --------- --------- | | | | | | | | | ----| Proxy |----- --| Redir |----| | | Peer | | Peer | | | | | | | | --------- ---------- | / \ / / \ / \__/ / SIP SIP \ \__/ / /\ / \ /\ / / \/ \/ \/ / UA \ / UA \ /______\ /______\ SIP UA A SIP UA B Figure: Reference Model Here, the large rectangle represents the P2PSIP Overlay and its associated routing data. Around the periphery of the P2PSIP Overlay rectangle, we have several P2PSIP Overlay Peer nodes -- a PSTN gateway, a user-agent, a proxy, and a redirector. To the left we have two UA peers are behind network address translator. On the right side, we have a P2PSIP Overlay "UA client", which uses the P2PSIP Overlay Client Protocol to interact with the P2PSIP Overlay. Below, we have conventional SIP UA "A", which has used SIP to Willis, et al. Expires February 2, 2007 [Page 11] Internet-Draft P2PSIP Concepts and Terminology August 2006 interact with the Proxy Peer and establish a dialog with the UA peer, and SIP UA "B" which has been redirected by the Redirect Peer and set up a dialog with the UA Client. Note that the Proxy Peer and the UA Peer interact using the P2PSIP Overlay Peer Protocol, which is also presumably used on the keepalive links between the UA Peers and their neighbors. Both the "Proxy Peer" and "Redir Peer" serve as adapters between ordinary SIP devices and the the P2PSIP Overlay. Each accepts SIP requests and resolves the next-hop by using the P2PSIP overlay Peer Protocol to interact with the routing knowledge of the P2PSIP Overlay, then processes the SIP requests as appropriate (proxying or redirecting towards the next-hop). The Gateway Peer provides a similar sort of adaptation to and from the public switched telephone network (PSTN). However, there is a subtle distinction. The gateway function itself can be viewed as a "user" or within the P2PSIP overlay, and is addressed using a P2PSIP Overlay User Identifier. This gateway functionality could also be located in a P2PSIP Overlay Client, or even in a traditional SIP UA that is reached via P2P (using a P2P proxy or redirector) or conventional SIP mechanisms. 3.3. Conceptual Outline of Operations 3.3.1. Enrolling and Inserting an P2PSIP Overlay Peer Peers are the full-function "routing and storage" nodes of a P2PSIP Overlay. When a new peer is first created, it must enroll in the P2PSIP Overlay. We currently have no defined mechanism for this (do we need one?), but we know that once the process is complete, the new peer will have at least a P2PSIP Overlay Peer Key and a set of credentials. After enrollment, each time the peer connects to the overlay, it must insert itself. We don't have a defined protocol and process for this, and assume we need one. Presumably the inserting peer connects to one or more existing peers (possibly with the aid of a bootstrap server) presents its credentials, and ends up connected to the overlay, with some knowledge of neighbors (successor, precursor, finger tables, or whatever the distribution mechanism defines) and is able to store data on behalf of and route requests to other nodes in the P2PSIP overlay. 3.3.2. More on The Difference Between a Peer, Client, and User Agent P2PSIP Overlay Peers directly interact with and contain the routing and storage fabric of the overlay. P2PSIP Overlay Clients just use Willis, et al. Expires February 2, 2007 [Page 12] Internet-Draft P2PSIP Concepts and Terminology August 2006 the routing and storage facilities provided by the peers. The peers speak the P2PSIP Overlay Peer Protocol, which presumably has a full range of expressivity for the routing and storage facilities of the overlay. Clients speak the P2PSIP Overlay Client protocol, which is presumably a subset of the peer protocol, and is limited to storage insertion (put), storage retrieval (get), and message routing (send). Some peers and some clients may be coupled to SIP user agents, making them P2PSIP Overlay User Agents capable of both sending and receiving conventional SIP messages (as per a SIP UA) using conventional SIP resolution procedures and of using the resolution facilities provided by the overlay The mix and configuration of peers, clients, and P2PSIP UAs is expected to vary depending on the deployment scenario. For example, an ad-hoc scenario might deploy nothing but P2PSIP Overlay Peers, each of which is coupled to a P2PSIP User Agent, using a broadcast or multicast bootstrap mechanism. Another common scenario, the "self organizing proxy farm", might consist of P2PSIP Overlay Peers, each of which is coupled to a SIP proxy/registrar function. 3.3.3. Enrolling a User and Inserting a P2PSIP Overlay User Agent Clients and Peers are the "end points" or "user agents" of a P2PSIP Overlay. Users are the named entities that participate in a P2PSIP overlay using a client. To get started, users must be enrolled in the overlay. We do not have a process or protocol for this, nor are we certain we need a standardized mechanism. We presume that after enrollment, the user has a distinguished name within the overlay (example: sip:bob@example.com) and a set of credentials useful for authenticating its usage of the distinguished name. One possible mechanism for these credentials would be an x.509 certificate. It might also be possible to use a PGP key, a password, or some other mechanism. Presumably following enrollment, the user is also equipped with the information needed to connect to the overlay, such as the address of a bootstrap server. Whether this startup information is delivered as a part of enrollment of through some separate configuration process remains an open question. Once a user is enrolled, the user may exercise a P2PSIP Overlay User Agent to insert into the P2PSIP Overlay. We currently have no protocol for this, and need one. The P2PSIP UA exercises either a P2PSIP Overlay Peer or P2PSIP Overlay Client to execute the "registration" function and insert a route for the user into the P2PSIP overlay. This function is described as a "PUT" request, and results in the storage of an authenticated route-set for the user in Willis, et al. Expires February 2, 2007 [Page 13] Internet-Draft P2PSIP Concepts and Terminology August 2006 the P2PSIP overlay, such that the terminus of the route is the URI of the user at the P2PSIP UA. This is analogous to "registration" in a classic SIP environment, and might even be doable using the SIP REGISTER method. Presumably, the P2PSIP UA connects to a peer or client and uses the user's credentials to authenticate a route-set (Contact: plus Path:) to itself, and the peer or client stores the route-set into the overlay, using a key derived from the user's identity. 3.3.4. Placing a Call from a P2PSIP Overlay Client UA to a P2PSIP Overlay Client UA Assume we have two users, Alice and Bob, who have successfully enrolled and inserted themselves into a P2PSIP Overlay using clients. Alice wants to call Bob, and enters Bob's user identity (AOR) into her client. Alice's client does not have current knowledge of a route-set to Bob's client(s), so it needs to discover one. Alice's Client then does a GET operation on Bob's identity, using a previously-discovered peer, or using whatever procedures are needed (such as RFC 3263, a bootstrap server, etc.) to find a peer. Alice's client send the GET request to the selected peer. The peer transforms the requested identity into a key, presumably by hashing it, and determines the peer ID at which the resource (a route-set) is most likely stored. The first peer then asks the second peer to return the desired resource. The second peer may return the desired resource, return a pointer to another peer, or pass the request recursively on to another peer for resolution. Eventually, some peer returns a resource containing a route-set for Bob, and the first peer returns this to Alice's client. Alice then sends a SIP INVITE with a request-URI equal to Bob's user identity, and populated with a route from the returned route-set. Bob's client returns a SIP response, and we proceed with SIP as usual. 3.3.5. Bootstrapping If a client or peer is just starting up and has no knowledge of how to reach the other nodes of the overlay, it may exercise a bootstrap server to find one. Presumably it discovers the bootstrap server by some mechanism such as a DNS lookup, multicast, broadcast or configuration, then queries the bootstrap server and receives an address for a peer or set of peers that can be used to reach the overlay. Ideally, these target peers will be selected from a relatively large pool of peers that are currently online and reachable. Willis, et al. Expires February 2, 2007 [Page 14] Internet-Draft P2PSIP Concepts and Terminology August 2006 After discovering the address of a peer, the behavior of the starting node will vary depending on whether it is intending to be a peer or a client. If it is intending to be a peer, it goes into the P2PSIP Overlay Peer Insertion process, at the conclusion of which it is actively participating in the target overlay as a peer and is capable of routing requests and storing records on behalf of the P2PSIP overlay. If it is intending to be a client, it does not bother with insertion, but merely contacts the discovered peer in order to use the overlay. In the typical case, the peer or client coming up is also a P2PSIP Overlay User Agent with one or more associated P2PSIP Overlay User Identifiers. The next step then is to insert a P2PSIP Overlay User Routing Record (a Contact:) into the P2PSIP Overlay. 4. Questions 4.1. Definition of P2PSIP Overlay Peer Enrollment The definition for P2PSIP Overlay Peer Enrollment in the above section doesn't sound quite right. It predates a decision made to split off the UA from the Peer and Client nodes. What would a better definition look like? 4.2. PP2PSIP Overlay Peer Protocol This may or may not be SIP. What should it be? Alternatives include SIP, OpenDHT, or something else. Do we need to define a new protocol? 4.3. P2PSIP Overlay Client Protocol This may or may not be SIP. What should it be? It defines only GET/ PUT operations, which could be done using SIP REGISTER transactions. 4.4. Universal Routing: Do all P2PSIP Overlay Peers route requests? How about clients? 4.5. How To Find Media Relays? This needs to be net-path efficient. Is this possible? Is it enough just to construct a key with a "relay" identifier? What sorts of access controls do we need on media relays? Willis, et al. Expires February 2, 2007 [Page 15] Internet-Draft P2PSIP Concepts and Terminology August 2006 4.6. How Do We Find Gateways? This needs to be not only netpath efficient, but also embodies elements of the TRIP and SPEERMINT problems. 4.7. NAT Traversal Some peers or clients may be isolated by NATs from other peers or clients. How do we structure persistent keepalive connections to them? Is it enough to maintain links to left and right neighbors and construct dual routes? 4.8. Peer-Adjacency Through NATs We assume that some or even many peers will be behind NATs, and therefore reached through peer-to-peer routing. How do we keep alive the NAT-crossing peer bindings? Is some variant of "outbound" [14] usable? 4.9. Cryptotransparency When forwarding requests, are the bodies of the requests visible to peers? If so, this creates substantial security problems that the deployers of conventional SIP have been willing to mostly ignore. Can we make peers cryptotransparent (like HTTP proxies) when security is requested? 4.10. Record Formats Clearly we need user routing records stored into the p2PSIP overlay. Do we need other sorts of record? If so, what? How do we differentiate between or classify records? Do we end up with many records per user per client, or do we aggregate the per-client or per-user view using something like XML? 4.11. Peer and Client Enrollment Protocols We know that we need to enroll peer and client nodes into a P2PSIP Overlay. Do we define a protocol or process for this, assume it will happen externally, or just provide an existence-proof argument? 4.12. Peer and User Credentials We believe we need some sort of credentials for authenticating peers and users of each P2PSIP Overlay. What should we use for these credentials? Certificates? PGP keys? Passwords? If certificates, should these be signed by a CA associated with the overlay, or can self-signed certificates work in some or all cases? Do we need to Willis, et al. Expires February 2, 2007 [Page 16] Internet-Draft P2PSIP Concepts and Terminology August 2006 specify a standard credential format, or should we allow different implementations to use different credential formats? 4.13. Bootstrapping We know that sometimes peers or clients will start up without knowledge of how to find a peer for insertion. Do we need to define a bootstrap mechanism or mechanisms? Do we need to define supporting protocols? 4.14. Credential Recovery One reader suggested that we extend the definition of P2PSIP Overlay Peer Enrollment to cover the case where a previously-inserted peer has lost its credentials (through, perhaps, being moved to a different host) and wishes to recover them without necessarily creating a new P2PSIP Overlay Peer Key. The editors are inclined to believe that this is an operational issue, not a matter of definition, but would like to seek a broader consensus before concluding the topic. A similar question applies to user enrollment. 4.15. Overlapping Domains If the P2PSIP Overlay User Identifier is not scoped to a single DNS domain, this would appear to allow nodes from two or more apparent domains to share a single P2PSIP Overlay. What, if anything, do we need to say about this mode of operation? 4.16. Hybrid Domains It appears possible to have some hosts within a domain using conventional SIP and some using P2PSIP. This potentially raises a number of questions: 1) What should happen if we want to run a P2PSIP overlay in an existing SIP domain? 2) Do the existing redir/proxy servers need to be coupled with a peer layer? 3) When would an overlay peer want to discover them as opposed to looking in the overlay? 4) Is better not to run conventional SIP with overlay SIP? 5) When conventional and P2PSIP are run together, shall the existing redir servers keep their local databases or switch to the overlay storage. 4.17. Admissions Control What do we need to say about admissions control with respect to the enrollment of peers and users? Do we need to discuss per-call admissions control in a P2P environment? Willis, et al. Expires February 2, 2007 [Page 17] Internet-Draft P2PSIP Concepts and Terminology August 2006 4.18. Users versus Resources This model presumes that all addressable elements, aka "users", are unique. Are their other classes of resources that need some sort of class-addressable identifier that does not refer to a unique user? 5. Security Considerations This specification probably has all sorts of security requirements that we just haven't gotten to. 6. IANA Considerations This document raises no IANA considerations. Yet. 7. Acknowledgements This document draws heavily from the contributions of many participants in the P2PSIP Mailing List but the authors are especially grateful for the support of Henning Schulzrinne and Cullen Jennings, both of whom spent many long pain-filled hours on the phone with us. 8. References 8.1. Normative References [1] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [2] Berners-Lee, T., Masinter, L., and M. McCahill, "Uniform Resource Locators (URL)", RFC 1738, December 1994. [3] Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A., Peterson, J., Sparks, R., Handley, M., and E. Schooler, "SIP: Session Initiation Protocol", RFC 3261, June 2002. [4] Mockapetris, P., "Domain names - concepts and facilities", STD 13, RFC 1034, November 1987. [5] Rosenberg, J. and H. Schulzrinne, "Session Initiation Protocol (SIP): Locating SIP Servers", RFC 3263, June 2002. [6] Willis, D. and B. Hoeneisen, "Session Initiation Protocol (SIP) Willis, et al. Expires February 2, 2007 [Page 18] Internet-Draft P2PSIP Concepts and Terminology August 2006 Extension Header Field for Registering Non-Adjacent Contacts", RFC 3327, December 2002. 8.2. Informative References [7] Bryan, D., "A P2P Approach to SIP Registration and Resource Location", draft-bryan-sipping-p2p-02 (work in progress), March 2006. [8] Shim, E., "An Architecture for Peer-to-Peer Session Initiation Protocol (P2P SIP)", draft-shim-sipping-p2p-arch-00 (work in progress), March 2006. [9] Sinnreich, H. and A. Johnston, "SIP, P2P, and Internet Communications", draft-johnston-sipping-p2p-ipcom-02 (work in progress), March 2006. [10] Matthews, P., "Industrial-Strength P2P SIP", draft-matthews-sipping-p2p-industrial-strength-00 (work in progress), February 2005. [11] Risson, J. and T. Moors, "Survey of Research towards Robust Peer-to-Peer Networks: Search Methods", draft-irtf-p2prg-survey-search-00 (work in progress), March 2006. [12] Rescorla, E. and IAB, "Writing Protocol Models", RFC 4101, June 2005. [13] Rosenberg, J., "Obtaining Relay Addresses from Simple Traversal Underneath NAT (STUN)", draft-ietf-behave-turn-02 (work in progress), October 2006. [14] Jennings, C. and R. Mahy, "Managing Client Initiated Connections in the Session Initiation Protocol (SIP)", draft-ietf-sip-outbound-04 (work in progress), June 2006. URIs [15] Willis, et al. Expires February 2, 2007 [Page 19] Internet-Draft P2PSIP Concepts and Terminology August 2006 Authors' Addresses Dean Willis (editor) Cisco Systems 3100 Independence Pkwy #311-164 Plano, Texas 75075 USA Phone: unlisted Email: dean.willis@softarmor.com David Bryan P2PSIP.org and William and Mary Department of Computer Science P.O. Box 6741 Williamsburg, Virginia 23188 USA Phone: unlisted Email: bryan@ethernot.org Philip Matthews Avaya 100 Innovation Drive Ottawa, Ontario K2K 3G7 Canada Phone: +1 613 592 4343 x224 Email: philip_matthews@magma.ca Eunsoo Shim Panasonic Digital Networking Laboratory Two Research Way, 3rd Floor Princeton, New Jersey 08540 USA Phone: unlisted Email: eunsoo@research.panasonic.com Willis, et al. Expires February 2, 2007 [Page 20] Internet-Draft P2PSIP Concepts and Terminology August 2006 Full Copyright Statement Copyright (C) The Internet Society (2006). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Acknowledgment Funding for the RFC Editor function is provided by the IETF Administrative Support Activity (IASA). Willis, et al. Expires February 2, 2007 [Page 21]