Sign in
Version 5.13.0, 2015-03-25
Report a bug

STUN Extensions for Authenticated Firewall Traversal

Document type: Expired Internet-Draft (individual)
Document stream: No stream defined
Last updated: 2013-01-09 (latest revision 2012-07-08)
Intended RFC status: Unknown
Other versions: (expired, archived): plain text, pdf, html

Stream State:No stream defined
Document shepherd: No shepherd assigned

IESG State: Expired
Responsible AD: (None)
Send notices to: No addresses provided

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found here:


Some networks deploy firewalls configured to block UDP traffic. When SIP user agents or WebRTC endpoints are deployed behind such firewalls, media cannot be sent over UDP across the firewall, but must be sent using TCP (which causes a different user experience) or through a session border controller. This draft describes an alternate model wherein extensions to ICE connectivity checks can be examined by the firewall to permit outgoing UDP flows across the firewall.


Tirumaleswar Reddy <>
Muthu Perumal <>
Dan Wing <>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)