Re: iPhone/iPad/iPod and Facetime

["Julian Y. Koh" <kohster () NORTHWESTERN EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 4:22 PM -0600 3/4/11, Mark Rogowski wrote:
> I would like to hear what you are doing in terms of Apple i* products and
> Facetime with your Firewall(s) and wireless networks.  We currently
> subscribe to the "unhampered outbound but Firewalled inbound" rule.

FaceTime is built on some pretty standard protocols like SIP, STUN, RTP,
etc.  If you're having issues with providing FaceTime access, you're going
to have problems with any of those protocols.  So it's not really an
Apple/i*/FaceTime issue that you're dealing with - those are just the
products that are now being popularly used and thus exposing the issues
with the network design.

STUN/TURN/ICE should be able to deal with most firewall setups, whether
NAT/PAT is involved or not.

We don't have firewalls in front of most of our network, including our
wireless network, partly for this reason of avoiding problems with various
protocols.  Some firewalls can try to account for those protocols by
munging with traffic even more than they normally do, with varying levels
of success.



-----BEGIN PGP SIGNATURE-----
Version: 9.9.1.287

wj8DBQFNcWjbDlQHnMkeAWMRAliCAJ92U/mUPVxpkmj14sXRlTwVzeCV0QCggBqg
kw/Rd34JdUocx875sJaKtsE=
=5qqY
-----END PGP SIGNATURE-----

-- 
Julian Y. Koh                         <mailto:kohster () northwestern edu>
Manager, Network Transport                         <phone:847-467-5780>
Telecommunications and Network Services         Northwestern University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>