SlideShare una empresa de Scribd logo
1 de 20
0-RTT TCP Converters
draft-bonaventure-mptcp-converters-01
IETF99, July 2017
O. Bonaventure
M. Boucadair
B. Peirens
Motivation
• Instead of tuning MPTCP to cope with
middleboxes, can we design middleboxes that
would benefit to MPTCP ?
Some proposed solutions
Converter
• Motivation
– Far more MPTCP enabled clients than MPTCP
enabled servers
– Clients want to benefit from MPTCP at least on a
fraction of the end-to-end path
Key points of email discussion
• Using the converter should not significantly increase
the connection establishment delay
– 0-RTT
• Clients can decide to use a converter based on policies
• Clients should be able to bypass the converter when
the server supports MPTCP
• TFO must be used if data is placed in SYN
– For client-converter exchanges
– Clients using converter should still be able to use TFO with
servers
• The design should be extensible and future-proof…
• …and should avoid defining new TCP Options
A cleaner design
• Converter Protocol is an application-level
protocol listening on a specific TCP port
• Client commands and converter responses are
encoded as TLV messages
– Ensures extensibility
• Converter Protocol leverages TFO
– Commands and responses can be sent inside SYNs
• Clients can learn TCP options supported by
servers
– Allows clients to bypass the converter
A Simplified example
@c @s
@t
SYN
SYN+ACK
SYN+ACK [ ]
TLV message
in SYN payload
TCP Options
TFO cookie (t) from
converter
SYN (TFO:t) [Connect @s:p]
MPTCP connection through converter
@c @s
@t
SYN(MPC)
SYN+ACK (MPC(Ks))
SYN+ACK(MPC(Kc))
[ ExtTCPH(MPC(Ks)) ]
SYN (TFO:t,MPC)
[Connect @s:p]
Copy of the extended
TCP header returned
by server
TFO connection through the converter
@c @s
@t
SYN(TFO)
SYN+ACK (TFO:sc)
SYN+ACK [ ExtTCPH(TFO:sc) ]
SYN (TFO:t)
[Connect @s:p
TCPOpt:TFO]
Empty TFO option Server cookie: sc
Client learns
server cookie
Empty TFO
TFO connection through the converter
second connection to server
@c @s
@t
SYN(TFO:sc) Data
SYN+ACKSYN+ACK [ ]
SYN (TFO:t)
[Connect @s:p
TCPOpt:TFO:sc]
Data
Server recognises
cookie sc and
accepts data
About extensibility
• Two dimensions were considered in the design
– Extensibility of the Converter protocol
• Version number and TLV format ensure that the protocol can
be extended for different use cases
– Evolution of TCP
• Converter protocol is designed with MPTCP in mind, but
other TCP extensions could benefit from it as well
• Clients can detect which TCP options are supported by the
server and decide to bypass the converter
Criteria
Main criteria (email from Phil/Yoshi)
• No changes to MPTCP (RFC6824bis)
– Converter uses application layer protocol leveraging TFO
• Proxy is simple to operate and deploy
– Converter uses reserved service name/port
– Leverages on existing BCPs
• A session can be initiated from either end
• The set-up time is minimized
– 0-RTT leveraging TFO
• The design minimises the amount of overhead on data
– TLV messages appear only in SYN
– No encapsulation
• The solution works if end to end encryption is in use
Criteria
• Criteria specific to solutions for the single-ended proxy
scenario:
– the proxy is unlikely to be on both default paths
• No assumption is made about the location of the converter
– clarify whether the proxy simply forwards
• The Converter terminates TCP connections and maintains states as per
IETF BCPs
– allows hosts to have traffic that doesn’t get proxied
• Clients can bypass the converter (policies or if server supports)
– end host and proxy need to authenticate
• Other authentication and authorization schemes can be used such as
leveraging on the authentication required during network attachment
• Not in draft-00 but can be added as new TLV messages
Conclusion
• A NEW design which takes into account major
comments raised during email discussions
– Application level protocol
• Service name/port to be reserved by IANA
– Provides 0-RTT using TFO
– Client can bypass converter if server supports option
• We request WG adoption for charter item
– Finally, the working group will explore whether an
MPTCP-aware middlebox would be useful, where at
least one end host is MPTCP-enabled.
Backup slides
Fixed Header
• Sent by client and converter
Current version=1
Length of all
TLV messages in
blocks of 32 bits
The Connect TLV
IPv6 address
The Extended TCP Header TLV
Copy of the Extended
TCP header returned
by server in SYN+ACK
Bootstrap procedure
@c @s
@t
SYN+ACK (TFO:t) [ Supported TCP Options(MPTCP) ]
SYN (TFO)
[Bootstrap]
Empty TFO
TCP Extensions
supported by Converter
Converter
cookie
Bootstrap

Más contenido relacionado

La actualidad más candente

Multipath TCP
Multipath TCPMultipath TCP
Multipath TCP
Olivier Bonaventure
 

La actualidad más candente (20)

Internet innovation with Multipath TCP
Internet innovation with Multipath TCPInternet innovation with Multipath TCP
Internet innovation with Multipath TCP
 
12 ethernet-wifi
12 ethernet-wifi12 ethernet-wifi
12 ethernet-wifi
 
TCPLS presentation @ietf 109
TCPLS presentation @ietf 109TCPLS presentation @ietf 109
TCPLS presentation @ietf 109
 
Part 9 : Congestion control and IPv6
Part 9 : Congestion control and IPv6Part 9 : Congestion control and IPv6
Part 9 : Congestion control and IPv6
 
Multipath TCP
Multipath TCPMultipath TCP
Multipath TCP
 
Building the Internet of Things with Thingsquare and Contiki - day 2 part 2
Building the Internet of Things with Thingsquare and Contiki - day 2 part 2Building the Internet of Things with Thingsquare and Contiki - day 2 part 2
Building the Internet of Things with Thingsquare and Contiki - day 2 part 2
 
Beyond TCP: The evolution of Internet transport protocols
Beyond TCP: The evolution of Internet transport protocolsBeyond TCP: The evolution of Internet transport protocols
Beyond TCP: The evolution of Internet transport protocols
 
Advanced Internet of Things firmware engineering with Thingsquare and Contiki...
Advanced Internet of Things firmware engineering with Thingsquare and Contiki...Advanced Internet of Things firmware engineering with Thingsquare and Contiki...
Advanced Internet of Things firmware engineering with Thingsquare and Contiki...
 
Sctp tutorial
Sctp tutorialSctp tutorial
Sctp tutorial
 
Beyond TCP: The evolution of Internet transport protocols
Beyond TCP: The evolution of Internet transport protocolsBeyond TCP: The evolution of Internet transport protocols
Beyond TCP: The evolution of Internet transport protocols
 
Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)
Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)
Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)
 
Part 11 : Interdomain routing with BGP
Part 11 : Interdomain routing with BGPPart 11 : Interdomain routing with BGP
Part 11 : Interdomain routing with BGP
 
ContikiMAC : Radio Duty Cycling Protocol
ContikiMAC : Radio Duty Cycling ProtocolContikiMAC : Radio Duty Cycling Protocol
ContikiMAC : Radio Duty Cycling Protocol
 
FreeRangeRouting - A new Quagga fork with more open development
FreeRangeRouting - A new Quagga fork with more open developmentFreeRangeRouting - A new Quagga fork with more open development
FreeRangeRouting - A new Quagga fork with more open development
 
BIRD Routing Daemon
BIRD Routing DaemonBIRD Routing Daemon
BIRD Routing Daemon
 
SEGMENT Routing
SEGMENT RoutingSEGMENT Routing
SEGMENT Routing
 
MPLS + BGP Presentation
MPLS + BGP PresentationMPLS + BGP Presentation
MPLS + BGP Presentation
 
BGP Overview
BGP OverviewBGP Overview
BGP Overview
 
Mpls
MplsMpls
Mpls
 
Quality of Service(Queuing Methods)
Quality of Service(Queuing Methods)Quality of Service(Queuing Methods)
Quality of Service(Queuing Methods)
 

Similar a 0-RTT TCP converters

ETE405-lec9.ppt
ETE405-lec9.pptETE405-lec9.ppt
ETE405-lec9.ppt
mashiur
 
ETE405-lec9.pdf
ETE405-lec9.pdfETE405-lec9.pdf
ETE405-lec9.pdf
mashiur
 

Similar a 0-RTT TCP converters (20)

0-RTT TCP Converters
0-RTT TCP Converters0-RTT TCP Converters
0-RTT TCP Converters
 
CCNA (R & S) Module 01 - Introduction to Networks - Chapter 9
CCNA (R & S) Module 01 - Introduction to Networks - Chapter 9CCNA (R & S) Module 01 - Introduction to Networks - Chapter 9
CCNA (R & S) Module 01 - Introduction to Networks - Chapter 9
 
CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09CCNA v6.0 ITN - Chapter 09
CCNA v6.0 ITN - Chapter 09
 
Rtp
RtpRtp
Rtp
 
Networking essentials lect3
Networking essentials lect3Networking essentials lect3
Networking essentials lect3
 
Transaction TCP
Transaction TCPTransaction TCP
Transaction TCP
 
Ctp
CtpCtp
Ctp
 
Deep Dive into the Pulsar Binary Protocol - Pulsar Virtual Summit Europe 2021
Deep Dive into the Pulsar Binary Protocol - Pulsar Virtual Summit Europe 2021Deep Dive into the Pulsar Binary Protocol - Pulsar Virtual Summit Europe 2021
Deep Dive into the Pulsar Binary Protocol - Pulsar Virtual Summit Europe 2021
 
Lecture set 7
Lecture set 7Lecture set 7
Lecture set 7
 
Unit 4-Transport Layer Protocols-3.pptx
Unit 4-Transport Layer Protocols-3.pptxUnit 4-Transport Layer Protocols-3.pptx
Unit 4-Transport Layer Protocols-3.pptx
 
Unit 4-Transport Layer Protocols.pptx
Unit 4-Transport Layer Protocols.pptxUnit 4-Transport Layer Protocols.pptx
Unit 4-Transport Layer Protocols.pptx
 
Unit 5.Transport Layer.pptx
Unit 5.Transport Layer.pptxUnit 5.Transport Layer.pptx
Unit 5.Transport Layer.pptx
 
Sania rtp
Sania rtpSania rtp
Sania rtp
 
ETE405-lec9.ppt
ETE405-lec9.pptETE405-lec9.ppt
ETE405-lec9.ppt
 
Datacom_Section_2_-_Protocols.ppt
Datacom_Section_2_-_Protocols.pptDatacom_Section_2_-_Protocols.ppt
Datacom_Section_2_-_Protocols.ppt
 
Unit-4 (1).pptx
Unit-4 (1).pptxUnit-4 (1).pptx
Unit-4 (1).pptx
 
ETE405-lec9.pdf
ETE405-lec9.pdfETE405-lec9.pdf
ETE405-lec9.pdf
 
Transport layer.pptx
Transport layer.pptxTransport layer.pptx
Transport layer.pptx
 
TCP /IP
TCP /IPTCP /IP
TCP /IP
 
User Datagram Protocol
User Datagram ProtocolUser Datagram Protocol
User Datagram Protocol
 

Más de Olivier Bonaventure

Más de Olivier Bonaventure (20)

Part3-reliable.pptx
Part3-reliable.pptxPart3-reliable.pptx
Part3-reliable.pptx
 
Part10-router.pptx
Part10-router.pptxPart10-router.pptx
Part10-router.pptx
 
Part1-Intro-Apps.pptx
Part1-Intro-Apps.pptxPart1-Intro-Apps.pptx
Part1-Intro-Apps.pptx
 
Part9-congestion.pptx
Part9-congestion.pptxPart9-congestion.pptx
Part9-congestion.pptx
 
Part2-Apps-Security.pptx
Part2-Apps-Security.pptxPart2-Apps-Security.pptx
Part2-Apps-Security.pptx
 
Part11-lan.pptx
Part11-lan.pptxPart11-lan.pptx
Part11-lan.pptx
 
Part5-tcp-improvements.pptx
Part5-tcp-improvements.pptxPart5-tcp-improvements.pptx
Part5-tcp-improvements.pptx
 
Part8-ibgp.pptx
Part8-ibgp.pptxPart8-ibgp.pptx
Part8-ibgp.pptx
 
Part4-reliable-tcp.pptx
Part4-reliable-tcp.pptxPart4-reliable-tcp.pptx
Part4-reliable-tcp.pptx
 
Part7-routing.pptx
Part7-routing.pptxPart7-routing.pptx
Part7-routing.pptx
 
Part6-network-routing.pptx
Part6-network-routing.pptxPart6-network-routing.pptx
Part6-network-routing.pptx
 
Part1-Intro-Apps.pptx
Part1-Intro-Apps.pptxPart1-Intro-Apps.pptx
Part1-Intro-Apps.pptx
 
Part2-Apps-Security.pptx
Part2-Apps-Security.pptxPart2-Apps-Security.pptx
Part2-Apps-Security.pptx
 
Part4-reliable-tcp.pptx
Part4-reliable-tcp.pptxPart4-reliable-tcp.pptx
Part4-reliable-tcp.pptx
 
Part3-reliable.pptx
Part3-reliable.pptxPart3-reliable.pptx
Part3-reliable.pptx
 
A personal journey towards more reproducible networking research
A personal journey towards more reproducible networking researchA personal journey towards more reproducible networking research
A personal journey towards more reproducible networking research
 
Part 12 : Local Area Networks
Part 12 : Local Area Networks Part 12 : Local Area Networks
Part 12 : Local Area Networks
 
Part 10 : Routing in IP networks and interdomain routing with BGP
Part 10 : Routing in IP networks and interdomain routing with BGPPart 10 : Routing in IP networks and interdomain routing with BGP
Part 10 : Routing in IP networks and interdomain routing with BGP
 
Part 8 : TCP and Congestion control
Part 8 : TCP and Congestion controlPart 8 : TCP and Congestion control
Part 8 : TCP and Congestion control
 
Part 7 : HTTP/2, UDP and TCP
Part 7 : HTTP/2, UDP and TCPPart 7 : HTTP/2, UDP and TCP
Part 7 : HTTP/2, UDP and TCP
 

Último

原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
ydyuyu
 
一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理
F
 
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi EscortsIndian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Monica Sydney
 
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
ydyuyu
 
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
9953056974 Low Rate Call Girls In Saket, Delhi NCR
 
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdfpdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
JOHNBEBONYAP1
 
Abu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
Abu Dhabi Escorts Service 0508644382 Escorts in Abu DhabiAbu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
Abu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
Monica Sydney
 

Último (20)

Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrStory Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
 
Meaning of On page SEO & its process in detail.
Meaning of On page SEO & its process in detail.Meaning of On page SEO & its process in detail.
Meaning of On page SEO & its process in detail.
 
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
 
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
 
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
原版制作美国爱荷华大学毕业证(iowa毕业证书)学位证网上存档可查
 
Call girls Service in Ajman 0505086370 Ajman call girls
Call girls Service in Ajman 0505086370 Ajman call girlsCall girls Service in Ajman 0505086370 Ajman call girls
Call girls Service in Ajman 0505086370 Ajman call girls
 
一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理一比一原版奥兹学院毕业证如何办理
一比一原版奥兹学院毕业证如何办理
 
Local Call Girls in Seoni 9332606886 HOT & SEXY Models beautiful and charmin...
Local Call Girls in Seoni  9332606886 HOT & SEXY Models beautiful and charmin...Local Call Girls in Seoni  9332606886 HOT & SEXY Models beautiful and charmin...
Local Call Girls in Seoni 9332606886 HOT & SEXY Models beautiful and charmin...
 
Real Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirtReal Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirt
 
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi EscortsIndian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
 
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
 
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
 
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
 
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime NagercoilNagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
Nagercoil Escorts Service Girl ^ 9332606886, WhatsApp Anytime Nagercoil
 
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
call girls in Anand Vihar (delhi) call me [🔝9953056974🔝] escort service 24X7
 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
 
Ballia Escorts Service Girl ^ 9332606886, WhatsApp Anytime Ballia
Ballia Escorts Service Girl ^ 9332606886, WhatsApp Anytime BalliaBallia Escorts Service Girl ^ 9332606886, WhatsApp Anytime Ballia
Ballia Escorts Service Girl ^ 9332606886, WhatsApp Anytime Ballia
 
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdfpdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
 
Abu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
Abu Dhabi Escorts Service 0508644382 Escorts in Abu DhabiAbu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
Abu Dhabi Escorts Service 0508644382 Escorts in Abu Dhabi
 
Vip Firozabad Phone 8250092165 Escorts Service At 6k To 30k Along With Ac Room
Vip Firozabad Phone 8250092165 Escorts Service At 6k To 30k Along With Ac RoomVip Firozabad Phone 8250092165 Escorts Service At 6k To 30k Along With Ac Room
Vip Firozabad Phone 8250092165 Escorts Service At 6k To 30k Along With Ac Room
 

0-RTT TCP converters

  • 1. 0-RTT TCP Converters draft-bonaventure-mptcp-converters-01 IETF99, July 2017 O. Bonaventure M. Boucadair B. Peirens
  • 2. Motivation • Instead of tuning MPTCP to cope with middleboxes, can we design middleboxes that would benefit to MPTCP ?
  • 4. Converter • Motivation – Far more MPTCP enabled clients than MPTCP enabled servers – Clients want to benefit from MPTCP at least on a fraction of the end-to-end path
  • 5. Key points of email discussion • Using the converter should not significantly increase the connection establishment delay – 0-RTT • Clients can decide to use a converter based on policies • Clients should be able to bypass the converter when the server supports MPTCP • TFO must be used if data is placed in SYN – For client-converter exchanges – Clients using converter should still be able to use TFO with servers • The design should be extensible and future-proof… • …and should avoid defining new TCP Options
  • 6. A cleaner design • Converter Protocol is an application-level protocol listening on a specific TCP port • Client commands and converter responses are encoded as TLV messages – Ensures extensibility • Converter Protocol leverages TFO – Commands and responses can be sent inside SYNs • Clients can learn TCP options supported by servers – Allows clients to bypass the converter
  • 7. A Simplified example @c @s @t SYN SYN+ACK SYN+ACK [ ] TLV message in SYN payload TCP Options TFO cookie (t) from converter SYN (TFO:t) [Connect @s:p]
  • 8. MPTCP connection through converter @c @s @t SYN(MPC) SYN+ACK (MPC(Ks)) SYN+ACK(MPC(Kc)) [ ExtTCPH(MPC(Ks)) ] SYN (TFO:t,MPC) [Connect @s:p] Copy of the extended TCP header returned by server
  • 9. TFO connection through the converter @c @s @t SYN(TFO) SYN+ACK (TFO:sc) SYN+ACK [ ExtTCPH(TFO:sc) ] SYN (TFO:t) [Connect @s:p TCPOpt:TFO] Empty TFO option Server cookie: sc Client learns server cookie Empty TFO
  • 10. TFO connection through the converter second connection to server @c @s @t SYN(TFO:sc) Data SYN+ACKSYN+ACK [ ] SYN (TFO:t) [Connect @s:p TCPOpt:TFO:sc] Data Server recognises cookie sc and accepts data
  • 11. About extensibility • Two dimensions were considered in the design – Extensibility of the Converter protocol • Version number and TLV format ensure that the protocol can be extended for different use cases – Evolution of TCP • Converter protocol is designed with MPTCP in mind, but other TCP extensions could benefit from it as well • Clients can detect which TCP options are supported by the server and decide to bypass the converter
  • 12. Criteria Main criteria (email from Phil/Yoshi) • No changes to MPTCP (RFC6824bis) – Converter uses application layer protocol leveraging TFO • Proxy is simple to operate and deploy – Converter uses reserved service name/port – Leverages on existing BCPs • A session can be initiated from either end • The set-up time is minimized – 0-RTT leveraging TFO • The design minimises the amount of overhead on data – TLV messages appear only in SYN – No encapsulation • The solution works if end to end encryption is in use
  • 13. Criteria • Criteria specific to solutions for the single-ended proxy scenario: – the proxy is unlikely to be on both default paths • No assumption is made about the location of the converter – clarify whether the proxy simply forwards • The Converter terminates TCP connections and maintains states as per IETF BCPs – allows hosts to have traffic that doesn’t get proxied • Clients can bypass the converter (policies or if server supports) – end host and proxy need to authenticate • Other authentication and authorization schemes can be used such as leveraging on the authentication required during network attachment • Not in draft-00 but can be added as new TLV messages
  • 14. Conclusion • A NEW design which takes into account major comments raised during email discussions – Application level protocol • Service name/port to be reserved by IANA – Provides 0-RTT using TFO – Client can bypass converter if server supports option • We request WG adoption for charter item – Finally, the working group will explore whether an MPTCP-aware middlebox would be useful, where at least one end host is MPTCP-enabled.
  • 16. Fixed Header • Sent by client and converter Current version=1 Length of all TLV messages in blocks of 32 bits
  • 18. The Extended TCP Header TLV Copy of the Extended TCP header returned by server in SYN+ACK
  • 19. Bootstrap procedure @c @s @t SYN+ACK (TFO:t) [ Supported TCP Options(MPTCP) ] SYN (TFO) [Bootstrap] Empty TFO TCP Extensions supported by Converter Converter cookie