Stephen Strowes | Nokia 2008 Company Confidential

ICE, TURN and STUN for NAT Traversal

Stephen Strowes, stephen.strowes@nokia.com
Pia !alk
"#$%ct$2008
Stephen Strowes | Nokia 2008 Company Confidential
Pro&lem Space
N'!s are commonplace, &(t they destroy the end)to)
endianness of the *nternet, makin+ it diffic(lt for two peers to
talk to each other
,any protocols -e.+., S*P, S.P within S*P for media/ contain *P
addresses in the &ody of the messa+e
NAT Client NAT Client
INVITE
Send media to 192.168.1.2:4321
Stephen Strowes | Nokia 2008 Company Confidential
Pro&lem Space
N'! &eha0io(r is 0endor)specific -model)specific1/, &(t in
+eneral2
N'!s create transient mappin+s &etween pri0ate -ip2port/ and
p(&lic -ip2port/ &indin+s.
N'!s e3hi&it differin+ packet filterin+ r(les when mappin+ from
p(&lic to pri0ate address space.
Stephen Strowes | Nokia 2008 Company Confidential
Pro&lem Space
4osts ha0e pri0ate transport addresses, associated p(&lic
transport addresses, and possi&ly also restricti0e N'!s to
tra0erse
Stephen Strowes | Nokia 2008 Company Confidential
*C5
*nteracti0e Connecti0ity 5sta&lishment
*ntended to help two peers in diffic(lt network conditions
find the &est transport to comm(nicate
Stand)alone, &(t desi+ned with S*P$S.P in mind, allows
endpoints to descri&e a set of candidate addresses to
test for comm(nication
6ses S!6N and !67N as tools to +ather candidates...
Stephen Strowes | Nokia 2008 Company Confidential
S!6N
Session !ra0ersal 6tilities for N'!
.irt simple idea8 defines one method
Client
NAT
STUN Server
Stephen Strowes | Nokia 2008 Company Confidential
Session !ra0ersal 6tilities for N'!
.irt simple idea2
9hat:s my p(&lic *P1
S!6N
Client
NAT
STUN Server
Stephen Strowes | Nokia 2008 Company Confidential
Session !ra0ersal 6tilities for N'!
.irt simple idea2
9hat:s my p(&lic *P1
!4*S is yo(r p(&lic *P;
S!6N
STUN Server
NAT
Client
Stephen Strowes | Nokia 2008 Company Confidential
!67N
!ra0ersal 6sin+ 7elays aro(nd N'!
'llocate a relay on the p(&lic *nternet
TURN Server
NAT
Client
Stephen Strowes | Nokia 2008 Company Confidential
!ra0ersal 6sin+ 7elays aro(nd N'!
'llocate a relay on the p(&lic *nternet
'llocate an address1
!67N
TURN Server
NAT
Client
Stephen Strowes | Nokia 2008 Company Confidential
!ra0ersal 6sin+ 7elays aro(nd N'!
'llocate a relay on the p(&lic *nternet
'llocate an address1
!4*S is yo(r allocation;
!67N
TURN Server
NAT
Client
Stephen Strowes | Nokia 2008 Company Confidential
!ra0ersal 6sin+ 7elays aro(nd N'!
Client can then create permissions to
dictate who can send data to the
allocated relay address for forwardin+ to
the client...
!67N
TURN Server
NAT
Client
Stephen Strowes | Nokia 2008 Company Confidential
*C5
*nteracti0e Connecti0ity 5sta&lishment
*ntended to help two peers in diffic(lt network conditions
find the &est transport to comm(nicate
53tension to the offer$answer model, allows endpoints to
descri&e a set of candidate addresses for comm(nication
6ses S!6N and !67N to +ather candidates
.efines a process for pairin+ and checkin+ these
candidates
Stephen Strowes | Nokia 2008 Company Confidential
*C5
NAT
Alice Bob
TURN Server

Consider...
SIP
NAT
Stephen Strowes | Nokia 2008 Company Confidential
*C5

Candidate +atherin+...
NAT
Alice Bob
TURN Server
NAT
SIP
Host: 192.x...
Srflx: 212.x...
Relay: 130.x...
Host: 10.x...
Srflx: 102.x...
Relay: 103.x...
Stephen Strowes | Nokia 2008 Company Confidential
*C5

53chan+e candidate sets...

NAT
Alice Bob
TURN Server
NAT
SIP
Stephen Strowes | Nokia 2008 Company Confidential
*C5

Candidates are paired in order of decreasin+ priority and

tested

4ost candidates are +ood;

7elay candidates are &ad;

Stephen Strowes | Nokia 2008 Company Confidential
*C5
TURN Server
NAT
Alice Bob
TURN Server
NAT

Connecti0ity checks...
Stephen Strowes | Nokia 2008 Company Confidential
9hat don:t we know1

People are &(ildin+ software (sin+ these protocols, or similar

ideas, &(t we ha0e little <(antifia&le data on their real)life
&eha0io(r

S(ccess rates for *C5

4ow well does it act(ally work1 =(ality of chosen

candidates1

!hrottlin+ of connecti0ity checks1

... and then there:s the possi&ility of collectin+ information

on the type of N'!s widely deployed in the *nternet
Stephen Strowes | Nokia 2008 Company Confidential
9hat are we &(ildin+1
NAT Alice
Bob
STUN/TURN Server
NAT

,eas(rement platform
SIP
Apache
Symbian client
Stephen Strowes | Nokia 2008 Company Confidential
9e need yo(...

!here:s a lot of work here which

can &e done... >or starters2

9e& front)end

?in(3 client

9e wo(ld like to take on

interested st(dents for special

assi+nments to help (s implement
some of this work...
Stephen Strowes | Nokia 2008 Company Confidential
7eso(rces

*C52 http2$$tools.ietf.or+$html$draft)ietf)mm(sic)ice
@ S!6N2 http2$$tools.ietf.or+$html$draft)ietf)&eha0e)rfcAB8C&is

!67N2 http2$$tools.ietf.or+$html$draft)ietf)&eha0e)t(rn
=(estions1
stephen.strowes@nokia.com