Tunneling Internet protocols inside QUIC
draft-piraux-quic-tunnel-00

• Status
• IESG evaluation record
• IESG writeups
• Email expansions
• History

• Versions
• 00

QUIC Working Group                                        M. Piraux, Ed.
Internet-Draft                                            O. Bonaventure
Intended status: Experimental                                  UCLouvain
Expires: May 7, 2020                                   November 04, 2019

                Tunneling Internet protocols inside QUIC
                      draft-piraux-quic-tunnel-00

Abstract

   This document specifies methods for tunneling Internet protocols such
   as TCP, UDP, IP and QUIC inside a QUIC connection.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on May 7, 2020.

Copyright Notice

   Copyright (c) 2019 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (https://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Piraux & Bonaventure       Expires May 7, 2020                  [Page 1]
Internet-Draft                 QUIC Tunnel                 November 2019

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
   2.  Conventions and Definitions . . . . . . . . . . . . . . . . .   3
   3.  Reference environment . . . . . . . . . . . . . . . . . . . .   4
   4.  The datagram mode . . . . . . . . . . . . . . . . . . . . . .   4
   5.  The stream mode . . . . . . . . . . . . . . . . . . . . . . .   5
   6.  Connection establishment  . . . . . . . . . . . . . . . . . .   6
   7.  Messages format . . . . . . . . . . . . . . . . . . . . . . .   7
     7.1.  QUIC tunnel stream TLVs . . . . . . . . . . . . . . . . .   7
       7.1.1.  TCP Connect TLV . . . . . . . . . . . . . . . . . . .   8
       7.1.2.  TCP Extended Connect TLV  . . . . . . . . . . . . . .   9
       7.1.3.  TCP Connect OK TLV  . . . . . . . . . . . . . . . . .  10
       7.1.4.  Error TLV . . . . . . . . . . . . . . . . . . . . . .  10
       7.1.5.  End TLV . . . . . . . . . . . . . . . . . . . . . . .  11
   8.  Example flows . . . . . . . . . . . . . . . . . . . . . . . .  11
   9.  Security Considerations . . . . . . . . . . . . . . . . . . .  12
     9.1.  Privacy . . . . . . . . . . . . . . . . . . . . . . . . .  12
     9.2.  Ingress Filtering . . . . . . . . . . . . . . . . . . . .  12
     9.3.  Denial of Service . . . . . . . . . . . . . . . . . . . .  13
   10. IANA Considerations . . . . . . . . . . . . . . . . . . . . .  13
     10.1.  Registration of QUIC tunnel Identification String  . . .  13
     10.2.  QUIC tunnel stream TLVs  . . . . . . . . . . . . . . . .  13
       10.2.1.  QUIC tunnel stream TLVs Types  . . . . . . . . . . .  13
       10.2.2.  QUIC tunnel streams TLVs Error Types . . . . . . . .  14
   11. References  . . . . . . . . . . . . . . . . . . . . . . . . .  14
     11.1.  Normative References . . . . . . . . . . . . . . . . . .  14
     11.2.  Informative References . . . . . . . . . . . . . . . . .  15
   Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . .  17
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  17

1.  Introduction

   Mobile devices such as laptops, smartphones or tablets have different
   requirements than the traditional fixed devices.  These mobile
   devices often change their network attachment.  They are often
   attached to trusted networks, but sometimes they need to be connected
   to untrusted networks where their communications can be eavesdropped,
   filtered or modified.  In these situations, the classical approach is
   to rely on VPN protocols such as DTLS, TLS or IPSec.  These VPN
   protocols provide the encryption and authentication functions to
   protect those mobile clients from malicious behaviors in untrusted
   networks.

   On the other hand, these devices are often multihomed and many expect
   to be able to perform seamless handovers from one access network to
   another without breaking the established VPN sessions.  In some