diff --git a/xep-0288.xml b/xep-0288.xml new file mode 100644 index 00000000..4e80b2cc --- /dev/null +++ b/xep-0288.xml @@ -0,0 +1,206 @@ + + +%ents; +]> + + +
+ Bidirectional Server-to-Server Connections + This specification defines a protocol for using server-to-server connections in a bidirectional way such that stanzas are sent and received on the same TCP connection. + &LEGALNOTICE; + 0288 + Experimental + Standards Track + Standards + Council + + XMPP Core + XEP-0178 + XEP-0220 + + + + NOT_YET_ASSIGNED + + Philipp + Hancke + fippo@ve.symlynx.com + + + Dave + Cridland + dave.cridland@isode.com + dave.cridland@isode.com + + + 0.1 + 2010-10-04 + psa +

Initial published version.

 + + + 0.0.2 + 2010-09-13 + dwd + +

belated run-over pre-publication

+

Added notes on authentication

+ + + + 0.0.1 + 2010-04-12 + ph +

initial version

 + +
+ +

&rfc3920; restricts server-to-server communication in such a way that a server has to use on TCP connection for XML stanzas sent from the server to the peer and another TCP connection (initiated by the peer) for stanzas from the peer to the server, for a total of two TCP connections. &rfc3920bis; allows two servers to send stanzas in a bidirectional way, but does not define methods for explicitly signalling the usage thereof. This is accomplished in this specification.

+ + + + +

If a server supports bidirectional server-to-server streams, it should inform the connecting entity when returning stream features during the stream negotiation process (both before and after TLS negotiation). This is done by including a <bidi/> element qualified by the 'urn:xmpp:features:bidi' namespace.

+ + + + +]]> +

If the initiating entity chooses to use TLS, STARTTLS negotiation MUST be completed before enabling bidirectionality.

+ + +

To enable bidirectional communication, the connecting server sends a <bidi/> element qualified by the 'urn:xmpp:bidi' namespace. This SHOULD be done before either SASL negotiation or &xep0220;.

+ +]]> +

Note: Since there is no reply to the request, it is possible to pipeline it.

+

After enabling bidirectionality, the connecting server continues to authenticate via SASL or requests to send stanzas for a domain pair with Server Dialback. The receiving server MUST NOT send stanzas to the peer before it has authenticated via SASL, or the peer's identity has been verified via Server Dialback. Note that the receiving server MUST NOT attempt to verify a dialback key on the same connection where the corresponding request was issued.

+

Also note that the receiving server MUST only send stanzas for which it has been authenticated - in the case of TLS/SASL based authentication, this is the value of the stream's 'to' attribute, whereas in the case of &xep0220; this is the value of the 'to' attribute on any <db:result> element.

+

Finally, once bidirectionality is enabled, the receiving server MAY initiate &xep0220; authentications for other domains it hosts to any domain authenticated to be hosted by the connecting server.

+ + + +

This section shows two complete examples of bidirectional streams, the first example uses SASL EXTERNAL, the second uses Server Dialback.

+ +S: +S: + + + +C: +S: +C: +S: +S: + + EXTERNAL + + + +C: + + Y2FwdWxldC5saXQ= +S: +C: +S: +S: + +C: +S: +]]> + +S: +S: + + + +C: +S: +C: +S: +S: + + + + + + e3f5cf21f12749ef2cf59269bc0118f35bc46b26 + +S: +C: +S: +S: + 1bac3ef56fed987cfe098c9785c654a5476ed765 + +C: + +]]> + + +

This specification introduces no security considerations above and beyond those discussed in RFC 3920.

+ + + + +
    +
  • 'urn:xmpp:bidi'
    • +
+ + +
    +
  • 'urn:xmpp:features:bidi'
    • +
+ + + +

This document requires no interaction with &IANA;.

+ +