2.2. Protocols

The H.323 Series of Recommendations evolved out of the ITU-T's work on video telephony and multimedia conferencing: after completing standardization on video telephony and video conferencing for ISDN at up to 2 Mbit/s in the H.320 series, the ITU-T took on work on similar multimedia communication over ATM networks (H.310, H.321), over the analog Public Switched Telephone Network (PSTN) using modem technology (H.324), and over the still-born Isochronous Ethernet (H.322). The most widely adopted and hence most promising network infrastructure - and the one bearing the largest difficulties to achieve well-defined Quality of Service - was addressed in the beginning of 1995 in H.323: Local Area Networks, with the focus on IP as network layer protocol. The primary goal was to interface multimedia communication equipment on LANs to the reasonably well-established base on circuit-switched networks.

The initial version of H.323 was approved by the ITU-T about one year later in June 1996, thereby providing a basis on which the industry could converge. The initial focus was clearly on local network environments, as QoS mechanisms for IP-based wide area networks such as the Internet were not well established at this point. In early 1996 Internet-wide deployment of H.323 was already explicitly included in the scope as was the aim to support voice-only applications and, thus, the foundations to use H.323 for IP Telephony were laid. H.323 has continuously evolved towards becoming a technically sound and functionally rich protocol platform for IP telephony applications, the first major additions to this end being included in H.323 version 2 approved by the ITU-T in January 1998. In September 1999, H.323 version 3 was approved by the ITU-T, incorporating numerous further functional and conceptual extensions to enable H.323 to serve as a basis for IP telephony on a global scale and to make it meet requirements in enterprise environments as well. Moreover, many new enhancements have been introduced into the H.323 protocol. Version 4 was approved November 17, 2000 and contains enhancements in a number of important areas, including reliability, scalability, and flexibility. New features help facilitate more scalable Gateway and MCU solutions to meet the growing market requirements. H.323 has been the undisputed leader in voice, video, and data conferencing on packet networks, and Version 4 makes strides to keep H.323 ahead of the competition.

As stated before, the scope of H.323 encompasses multimedia communication in IP-based networks, with significant consideration given to gatewaying to circuit-switched networks (particular to ISDN-based video telephony and to PSTN/ISDN/GSM for voice communication).

H.323 defines a number of functional / logical components as shown in figure Figure 2.1:

  • Terminal -- Terminals are H.323-capable endpoints, which may be implemented in software on workstations or as stand-alone devices (such as telephones). They are assigned to one or more aliases (e.g. a user's name / URI) and/or telephone number(s).
  • Gateway -- Gateways interconnect H.323 entities (such as endpoints, MCUs, or other gateways) to other network/protocol environments (such as the telephone network). They are also assigned one or more aliases and/or telephone number(s). The H.323 series of Recommendations provides detailed specifications for interfacing H.323 to H.320, ISDN/PSTN, and ATM based networks. Recent work also addresses control and media gateway specifications for telephony trunking networks such as SS7/ISUP.
  • Gatekeeper -- The gatekeeper is the core management entity in an H.323 environment. It is, among other things, responsible for access control, address resolution, and H.323 network (load) management and provides the central hook to implement any kind of utilization / access policies. An H.323 environment is subdivided into zones (which may, but need not, be congruent with the underlying network topology); each zone is controlled by one primary gatekeeper (with optional backup gatekeepers). Gatekeepers may also provide value-add, e.g. act as conferencing bridge or offer supplementary call services. H.323 Gatekeeper can be also equipped with the proxy feature. Such a feature enables the routing through the gatekeeper of the RTP traffic (audio and video) and the T.120 traffic (data) so no traffic is directly exchanged between endpoints. (it could be considered a kind of IP to IP gateway that can be used for security and QoS purposes).
  • Multipoint Controller (MC) -- A multipoint controller is a logical entity that interconnects call signaling and conference control channels of two or more H.323 entities in a star topology. MCs coordinate the (control aspects of) media exchange between all entities involved in a conference; they also provide the endpoints with participant lists, exercise floor control, etc. MCs may be embedded in any H.323 entity (terminals, gateways gatekeepers) or implemented as stand-alone entities. They can be cascaded to allow conferences spanning multiple MCs.
  • Multipoint Processor (MP) -- For multipoint conferences with H.323, an optional Multipoint Processor may be used that receives media streams from the individual endpoints, combines them through some mixing/switching technique, and transmits the resulting media streams back to the endpoints.
  • Multipoint Control Unit (MCU) -- In the H.323 world, an MCU simply is a combination of an MC and an MP in a single device. The term originates in the ISDN videoconferencing world where MCUs were needed to create multipoint conferences out of a set of point-to-point connections.

H.323 resides - similar to the IETF protocols discussed in the next subsection - on top of the basic Internet Protocols (IP, IP Multicast, TCP, UDP) and can make use of integrated and differentiated services along with resource reservation protocols.

For basic call signaling and conference control interactions with H.323, the aforementioned components communicate using three control protocols:

A number of extensions to H.323 include mechanisms for more efficient call setup (H.323 Annex E) and reduction of protocol overhead e.g. for simple telephones (SETs, simple endpoint types, H.323 Annex F).

A H.323 endpoint usually registers with a gatekeeper that provides basic services like address resolution for calling the other endpoints. There are two possibilities for an endpoint to find its gatekeeper:

When trying to discover the gatekeeper via multicast an endpoint may request any gatekeeper or specify the request by adding a Gatekeeper identifier to the request. Only the gatekeeper that has the requested identifier may reply positively. (see figure Figure 2.3)

After the endpoint discovers the location of the gatekeeper it tries to register itself (RRQ). Such a registration includes (among other information):

The gatekeeper checks the requested registration information and confirms the (possibly modified) values (RCF). It may also reject a registration request because of e.g. invalid addresses. In case of a confirmation the gatekeeper assigns a unique identifier to the endpoint, which shall be used in subsequent requests to indicate that the endpoint is still registered.

The call signaling messages and the H.245 control messages may be exchanged either end-to-end between caller and called party or through a gatekeeper. Depending on the role the gatekeeper plays in the call signaling and in the H.245 signaling the H.323 specification foresees three different types of signaling models:

In the following sub-sections we are going to detail each signaling model. The figures reported in this section apply both to the use of a single Gatekeeper and to the use of a "Gatekeeper network". Since the signaling model is decided by the endpoint's Gatekeeper configuration and apply to all the messages such Gatekeeper handles, the extensions to the multiple Gatekeeper case is straightforward (simply apply the definition of the signaling model described in the itemized list above to each Gatekeeper involved) except for the location of zone external targets (described later in Locating zone external targets section); we decided not to report those message exchange in any of this section figures as it is intended to remain bounded in the ellipse where the H.323 Gatekeeper is depicted and it is described in the Locating zone external targets section. Please note that there is no indication about the call termination in each signaling model sub-section, please refer to Communication phases section for details.

The Direct signaling model is depicted in Figure 2.4. In this model the H.225.0 Call signaling and H.245 Conference control messages are exchanged directly between the call terminals. As shown in the figure, the communication starts with an ARQ (Admission ReQuest) message sent by the caller (which may be either a Terminal or a Gateway) to the Gatekeeper. The ARQ message is used by the endpoint to be allowed to access the packet-based network by the Gatekeeper, which either grants the request with an ACF (Admission ConFirm) or denies it with an ARJ (Admission ReJect), if an ARJ is issued the call is terminated. After this first step the Call signaling part of the call begins with the transmission of the SET UP message from the caller to the called party. The transport address of the SET UP message (and of all the H.225.0 Call signaling messages) is retrieved by the caller from the "destCallSignalAddress" field carried inside the ACF received, in the case of Direct signaling model it is the address of the destination endpoint. Upon receiving the SET UP message the called party starts its H.225.0 RAS procedure with the Gatekeeper, if successful a CONNECT message is sent back to the caller to indicate acceptance of the call. Before sending the CONNECT message, two other messages may be sent from the called party to the caller (those two messages are not depicted in the figure since we have reported only mandatory messages):

  • ALERTING message, this message may be sent by the called user to indicate that called user alerting has been initiated (in everyday terms, the "phone is ringing");
  • CALL PROCEEDING message, this message may be sent by the called user to indicate that requested call establishment has been initiated and no more call establishment information will be accepted.

The CONNECT message closes the H.225.0 Call signaling part of the call and make the Terminals starting the H.245 Conference control one. In such call model the H.245 Conference control messages are exchanged directly between the two endpoints (the correct "h245Address" was retrieved from the CONNECT message itself). The procedures started with the H.245 Conference control channel are used to:

Once the H.245 Conference control messages are exchanged the two endpoints have all the necessary information to open the media streams.

The Gatekeeper routed call signaling model is depicted in Figure 2.5. In this model the H.245 Conference control messages are exchanged directly between the call termination. As each call, the communication starts with an ARQ (Admission ReQuest) message sent by the caller to its Gatekeeper. The ARQ message is used by the endpoint to be allowed to access the packet-based network by the Gatekeeper, which either grants the request with an ACF (Admission ConFirm) or denies it with an ARJ (Admission ReJect). After this first step the Call signaling part of the call begins with the transmission of the SET UP message from the caller to its Gatekeeper. The transport address of the SET UP message (and of all the H.225.0 Call signaling messages) is retrieved by the caller from the "destCallSignalAddress" field carried inside the ACF received, in the case of Gatekeeper routed call signaling model it is the address of the Gatekeeper itself. The SET UP message is then forwarded by the Gatekeeper (or by the "Gatekeeper network") to the called endpoint. Upon receiving the SET UP message the called party starts its H.225.0 RAS procedure with its Gatekeeper, if successful a CONNECT message is sent to indicate acceptance of the call; because of the call model, also this message is sent to the called endpoint's Gatekeeper which is in charge of forwarding it to the caller endpoint (either directly or using the "Gatekeeper network"). Before sending the CONNECT message, two other messages may be sent from the called party to its Gatekeeper (those two messages are not depicted in the figure since we have reported only mandatory messages):

  • ALERTING message, this message may be sent by the called user to indicate that called user alerting has been initiated (in everyday terms, the "phone is ringing");
  • CALL PROCEEDING message, this message may be sent by the called user to indicate that requested call establishment has been initiated and no more call establishment information will be accepted.

The two optional messages listed above are then forwarded by the Gatekeeper (or by the "Gatekeeper network") to the caller. After receiving the CONNECT message, the caller starts the procedures H.245 Conference control channel procedures directly with the called party (the correct "h245Address" was retrieved from the CONNECT message itself). The H.245 Conference control channel procedure scopes are the same detailed above, please refer to Direct signaling model section for details.

The Gatekeeper routed H.245 control model is depicted in Figure 2.6. In this model only the media streams are exchanged directly between the call termination. As each call, the communication starts with an ARQ (Admission ReQuest) message sent by the caller to its Gatekeeper. The ARQ message is used by the endpoint to be allowed to access the packet-based network by the Gatekeeper, which either grants the request with an ACF (Admission ConFirm) or denies it with an ARJ (Admission ReJect). After this first step the Call signaling part of the call begins with the transmission of the SET UP message from the caller to its Gatekeeper. The transport address of the SET UP message (and of all the H.225.0 Call signaling messages) is retrieved by the caller from the "destCallSignalAddress" field carried inside the ACF received, in the case of Gatekeeper routed H.245 control model it is the address of the Gatekeeper itself. The SET UP message is then forwarded by the Gatekeeper (or by the "Gatekeeper network") to the called endpoint. Upon receiving the SET UP message the called party starts its H.225.0 RAS procedure with its Gatekeeper, if successful a CONNECT message is sent to indicate acceptance of the call; because of the call model, also this message is sent to the called endpoint's Gatekeeper which is in charge of forwarding it to the caller endpoint (either directly or using the "Gatekeeper network"). Before sending the CONNECT message, two other messages may be sent from the called party to its Gatekeeper (those two messages are not depicted in the figure since we have reported only mandatory messages):

  • ALERTING message, this message may be sent by the called user to indicate that called user alerting has been initiated (in everyday terms, the "phone is ringing");
  • CALL PROCEEDING message, this message may be sent by the called user to indicate that requested call establishment has been initiated and no more call establishment information will be accepted.

The two optional messages listed above are then forwarded by the Gatekeeper (or by the "Gatekeeper network") to the caller. After receiving the CONNECT message, the caller starts the H.245 Conference control channel procedures with its Gatekeeper (the correct "h245Address" was retrieved from the CONNECT message itself). All the H.245 channel messages are then exchanged by the endpoints with their Gatekeeper (or Gatekeepers), it is the Gatekeeper (or "Gatekeeper network") which takes care of forwarding them up to the remote endpoint as foreseen by the Gatekeeper routed H.245 control model. The H.245 Conference control channel procedure scopes are the same detailed above, please refer to Direct signaling model section for details.

In a H.323 communication may be identified 5 different phases:

Recommendation H.225.0 defines the Call set up messages and procedures here detailed. The recommendation foresees that requests for bandwidth reservation should take place at the earliest possible phase. Differently from other protocols, there is no explicit synchronization between two endpoints during the call setup procedure (two endpoints can send a Setup message each other at exactly the same time). Actions to be taken when problems of synchronization during SET UP message exchange arise are resolved by the application itself; applications not supporting multiple simultaneous calls should issue busy signal when they have an outstanding SET UP message, while applications supporting multiple simultaneous call should issue a busy signal only to the same endpoint to which they sent an outstanding SET UP message. Moreover, an endpoint shall be capable of sending the ALERTING messages. Alerting has the meaning that the called party has been alerted of an incoming call ("phone ringing" in the language of the old telephony). Only the ultimate called endpoint shall originate the ALERTING message and only when the application has already alerted the user. If a Gateway is involved, the Gateway shall send ALERTING when it receives a ring indication from the Switched Circuit Network (SCN). The sending of an ALERTING message is not required if an endpoint can respond to a SET UP message with a CONNECT, CALL PROCEEDING, or RELEASE COMPLETE within 4 seconds. After successfully sending a SET UP message an endpoint can expect to receive either an ALERTING, CONNECT, CALL PROCEEDING, or RELEASE COMPLETE message within 4 seconds after successful transmission. Finally, to maintain the consistency of the meaning of the CONNECT message between packet based networks and circuit switched networks, the CONNECT message should be sent only if it is certain that the capability exchange will successfully take place and a minimum level of communications can be performed.

The Call set up phase may have different realizations, basically we can identify different call set up:

After exchanging call setup messages, the endpoints shall, if they plan to use H.245, establish the H.245 Control Channel. The H.245 Control Channel is used for the capability exchange and to open the media channels. The H.245 Control channel procedures shall either not be started or closed if CONNECT does not arrive (an H.245 Control channel can be opened on reception of ALERTING or CALL PROCEEDING messages, too) or an endpoint sends RELEASE COMPLETE. H.323 endpoints shall support the capabilities exchange procedure of H.245. The H.245 TERMINALCAPABILITYSET message is used for endpoint system capabilities exchange. This message shall be the first H.245 message sent. Master-slave determination procedure of H.245 has to be supported by H.323 compliant endpoints as a must. In cases of multipoint conferencing (MC) capability is present in more than one endpoint, the master-slave determination is used for determining which MC will play an active role. The H.245 Control channel procedure also provides master-slave determination for opening bi-directional channels for data. After Terminal Capability Exchange has been initiated, master-slave determination procedure (consisting of either MASTERSLAVEDETERMINATION or MASTERSLAVEDETERMINATIONACK) has to be started as the first H.245 Conference control procedure. Upon failure of initial capability exchange or master-slave determination procedures a maximum of two retries shall be performed before the endpoint passes to the Call Termination phase. Normally, after successful completion of the requirements of this phase, the endpoints shall proceed directly to Establishment of audiovisual communication phase.

A call may be terminated either by both endpoint or by the Gatekeeper. Call termination is defined using the following procedure:

An endpoint receiving ENDSESSIONCOMMAND message does not need to receive it back again after replying to it in order to clear a call. Terminating a call within a conference does not mean the all conference needs to be terminated. In order to terminate a conference an H.245 message (DROPCONFERENCE) is used, then the MC should terminate the calls with the endpoint as described above.

A call may be terminated differently depending on the Gatekeeper presence and on the party issuing the call termination:

When calling an address that is registered at the same gatekeeper as the caller, the case - the gatekeeper just needs to look up its internal tables to resolve the target address. Complexity enters the picture if the destination address is registered with another gatekeeper. While Chapter 7 will cover this topic in more detail, the most basic mechanism H.323 provides shall be explained here.

A gatekeeper may explicitly request the resolution of an address from other gatekeepers. On receipt of an request to call an address that the gatekeeper has no registration, it can send out a location request (LRQ) to other gatekeepers (see figure Figure 2.9). The receiving gatekeeper - assuming it knows the address - will reply with the Transport Service Access Point (a combination of IP address and portnumber) of either the requested address or its own call signaling TSAP.

A location request can be sent via Unicast or Multicast. If sent via Multicast, only the gatekeeper that can resolve the address shall reply. If a gatekeeper receives a unicast LRQ, it shall either confirm or reject the request.

This mechanism can be used to have a list of peer gatekeeper to ask in parallel or sequentially. It is also possible to assign a domain suffix or number prefix to each peer so that an address with a matching number prefix of a neighbouring institution will result in a request to the gatekeeper of that institution. By defining default peers one could also build a hierarchy of gatekeepers (Again, see Chapter 7 for further details.)

Figure 2.10 depicts an example of an inter-zone call setup using H.323 with one gatekeeper (A) using direct signaling while the other uses routed signaling. The caller in zone A contacts its gatekeeper to ask for permission to call the called party in zone B (1). Gatekeeper of zone A confirms this request and provides the caller with the address of zone B's gatekeeper (2).1 The caller establishes a call signaling channel (and subsequently / in parallel the conference control channel) to the gatekeeper of zone B (3), who determines the location of the called party and forwards the request to the called party (4).

The called party explicitly confirms with its gatekeeper that it is allowed to accept the call (5, 6) and, if so, alerts the recipient of the call, returns an alerting indication and (once the receiving user picks up the call) eventually an indication of successful connection setup back to the caller (7, 8). In (parallel to) this exchange, capability negotiation and media stream configuration take place. When the setup has completed, both parties start sending media streams directly to each other.

It is well known from our daily interaction with PBXes, that telephony service comprises far more than just call setup and teardown: n-way conferencing and various supplementary services (such as call transfer, call waiting, etc.) are available. Similar features - at least the more commonly known and used ones - need to be provided by IP telephony systems as well to be accepted by customers. Additional call services in H.323 can be grouped into three categories:

Further extensions for supplementary services and other functional enhancements are on the way. In particular, an HTTP-based extension framework is being defined at the time of writing to enable rapid introduction of new services without the need for standardization.

SIP stands for Session Initiation Protocol. It is an application-layer control protocol which has been developed and designed within the IETF. The protocol has been designed with easy implementation, good scalability, and flexibility in mind.

The specification is available in form of several RFCs, the most important one is RFC3261 which contains the core protocol specification. The protocol is used for creating, modifying, and terminating sessions with one or more participants. By sessions we understand a set of senders and receivers that communicate and the state kept in those senders and receivers during the communication. Examples of a session can include Internet telephone calls, distribution of multimedia, multimedia conferences, distributed computer games, etc.

SIP is not the only protocol that the communicating devices will need. It is not meant to be a general purpose protocol. Purpose of SIP is just to make the communication possible, the communication itself must be achieved by another means (and possibly another protocol). Two protocols that are most often used along with SIP are RTP and SDP. RTP protocol is used to carry the real-time multimedia data (including audio, video, and text), the protocol makes it possible to encode and split the data into packets and transport such packets over the Internet. Another important protocol is SDP--Session Description Protocol, which is used to describe and encode capabilities of session participants. Such a description is then used to negotiate the characteristics of the session so that all the devices can participate (that includes, for example, negotiation of codecs used to encode media so all the participants will be able to decode it, negotiation of transport protocol used and so on).

SIP has been designed in conformance with the Internet model. It is an end-to-end oriented signaling protocol which means, that all the logic is stored in end devices (except routing of SIP messages). State is also stored in end-devices only, there is no single point of failure and networks designed this way scale well. The price that we have to pay for the distributiveness and scalability is higher message overhead, caused by the messages being sent end-to-end.

It is worth mentioning that the end-to-end concept of SIP is a significant divergence from regular PSTN (Public Switched Telephone Network) where all the state and logic is stored in the network and end devices (telephones) are very primitive. Aim of SIP is to provide the same functionality that the traditional PSTNs have, but the end-to-end design makes SIP networks much more powerful and open to the implementation of new services that can be hardly implemented in the traditional PSTNs.

SIP is based on HTTP protocol. The HTTP protocol inherited format of message headers from RFC822. HTTP is probably the most successful and widely used protocol in the Internet. SIP tries to combine the best of the both. In fact, HTTP can be classified as a signaling protocol too, because user agents use the protocol to tell a HTTP server in which documents they are interested in. SIP is used to carry the description of session parameters, the description is encoded into a document using SDP. Both protocols (HTTP and SIP) have inherited encoding of message headers from RFC822. The encoding has proven to be robust and flexible over the years.

Although in the simplest configuration it is possible to use just two user agents that send SIP messages directly to each other, a typical SIP network will contain more than one type of SIP elements. Basic SIP elements are user agents, proxies, registrars, and redirect servers. We will briefly describe them in this section.

Note that the elements, as presented in this section, are often only logical entities. It is often profitable to co-locate them together, for instance, to increase the speed of processing, but that depends on a particular implementation and configuration.

Internet end points that use SIP to find each other and to negotiate a session characteristics are called user agents. User agents usually, but not necessarily, reside on a user's computer in form of an application--this is currently the most widely used approach, but user agents can be also cellular phones, PSTN gateways, PDAs, automated IVR systems and so on.

User agents are often referred to as User Agent Server (UAS) and User Agent Client (UAC). UAS and UAC are logical entities only, each user agent contains a UAC and UAS. UAC is the part of the user agent that sends requests and receives responses. UAS is the part of the user agent that receives requests and sends responses.

Because a user agent contains both UAC and UAS, we often say that a user agent behaves like a UAC or UAS. For instance, caller's user agent behaves like UAC when it sends an INVITE requests and receives responses to the request. Called party's user agent behaves like a UAS when it receives the INVITE and sends responses.

But this situation changes when the called party decides to send a BYE and terminate the session. In this case the called party's user agent (sending BYE) behaves like UAC and the caller's user agent behaves like UAS.

Figure 2.11 shows three user agents and one stateful forking proxy. Each user agent contains UAC and UAS. The part of the proxy that receives the INVITE from the caller in fact acts as a UAS. When forwarding the request statefully the proxy creates two UACs, each of them is responsible for one branch.

In our example called party B picked up and later when he wants to tear down the call it sends a BYE. At this time the user agent that was previously UAS becomes a UAC and vice versa.

In addition to that SIP allows creation of an infrastructure of network hosts called proxy servers. User agents can send messages to a proxy server. Proxy servers are very important entities in the SIP infrastructure. They perform routing of a session invitations according to invitee's current location, authentication, accounting and many other important functions.

The most important task of a proxy server is to route session invitations “closer” to called party. The session invitation will usually traverse a set of proxies until it finds one which knows the actual location of the called party. Such a proxy will forward the session invitation directly to the called party and the called party will then accept or decline the session invitation.

There are two basic types of SIP proxy servers--stateless and stateful.

Stateless servers are simple message forwarders. They forward messages independently of each other. Although messages are usually arranged into transactions (see Section 2.2.2.4), stateless proxies do not take care of transactions.

Stateless proxies are simple, but faster than stateful proxy servers. They can be used as simple load balancers, message translators and routers. One of drawbacks of stateless proxies is that they are unable to absorb re-transmissions of messages and perform more advanced routing, for instance, forking or recursive traversal.

We mentioned that the SIP proxy at proxy.b.com knows current Bob's location but haven't mentioned yet how a proxy can learn current location of a user. Bob's user agent (SIP phone) must register with a registrar. The registrar is a special SIP entity that receives registrations from users, extracts information about their current location (IP address, port and username in this case) and stores the information into location database. Purpose of the location database is to map sip:bob@b.com to something like sip:bob@1.2.3.4:5060. The location database is then used by B's proxy server. When the proxy receives an invitation for sip:bob@b.com it will search the location database. It finds sip:bob@1.2.3.4:5060 and will send the invitation there. A registrar is very often a logical entity only. Because of their tight coupling with proxies, registrars are usually co-located with proxy servers.

Figure 2.13 shows a typical SIP registration. A REGISTER message containing Address of Record sip:jan@iptel.org and contact address sip:jan@1.2.3.4:5060 where 1.2.3.4 is IP address of the phone, is sent to the registrar. The registrar extracts this information and stores it into the location database. If everything went well then the registrar sends a 200 OK response to the phone and the process of registration is finished.

Each registration has a limited life span. Expires header field or expires parameter of Contact header field determines for how long is the registration valid. The user agent must refresh the registration within the life span otherwise it will expire and the user will become unavailable.

Communication using SIP (often called signaling) comprises of series of messages. Messages can be transported independently by the network. Usually they are transported in a separate UDP datagram each. Each message consist of “first line”, message header, and message body. The first line identifies type of the message. There are two types of messages--requests and responses. Requests are usually used to initiate some action or inform recipient of the request of something. Replies are used to confirm that a request was received and processed and contain the status of the processing.

A typical SIP request looks like this:

INVITE sip:7170@iptel.org SIP/2.0
Via: SIP/2.0/UDP 195.37.77.100:5040;rport
Max-Forwards: 10
From: "jiri" <sip:jiri@iptel.org>;tag=76ff7a07-c091-4192-84a0-d56e91fe104f
To: <sip:jiri@bat.iptel.org>
Call-ID: d10815e0-bf17-4afa-8412-d9130a793d96@213.20.128.35
CSeq: 2 INVITE
Contact: <sip:213.20.128.35:9315>
User-Agent: Windows RTC/1.0
Proxy-Authorization: Digest username="jiri", realm="iptel.org", 
  algorithm="MD5", uri="sip:jiri@bat.iptel.org", 
  nonce="3cef753900000001771328f5ae1b8b7f0d742da1feb5753c", 
  response="53fe98db10e1074
b03b3e06438bda70f"
Content-Type: application/sdp
Content-Length: 451

v=0
o=jku2 0 0 IN IP4 213.20.128.35
s=session
c=IN IP4 213.20.128.35
b=CT:1000
t=0 0
m=audio 54742 RTP/AVP 97 111 112 6 0 8 4 5 3 101
a=rtpmap:97 red/8000
a=rtpmap:111 SIREN/16000
a=fmtp:111 bitrate=16000
a=rtpmap:112 G7221/16000
a=fmtp:112 bitrate=24000
a=rtpmap:6 DVI4/16000
a=rtpmap:0 PCMU/8000
a=rtpmap:4 G723/8000
a=rtpmap: 3 GSM/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16

The first line tells us that this is INVITE message which is used to establish a session. The URI on the first line--sip:7170@iptel.org is called Request URI and contains URI of the next hop of the message. In this case it will be host iptel.org.

A SIP request can contain one or more Via header fields which are used to record path of the request. They are later used to route SIP responses exactly the same way. The INVITE message contains just one Via header field which was created by the user agent that sent the request. From the Via field we can tell that the user agent is running on host 195.37.77.100 and port 5060.

From and To header fields identify initiator (caller) and recipient (called party) of the invitation (just like in SMTP where they identify sender and recipient of a message). From header field contains a tag parameter which serves as a dialog identifier and will be described in Section 2.2.2.5.

Call-ID header field is a dialog identifier and its purpose is to identify messages belonging to the same call. Such messages have the same Call-ID identifier. CSeq is used to maintain order of requests. Because requests can be sent over an unreliable transport that can re-order messages, a sequence number must be present in the messages so that recipient can identify re-transmissions and out of order requests.

Contact header field contains IP address and port on which the sender is awaiting further requests sent by called party. Other header fields are not important and will be not described here.

Message header is delimited from message body by an empty line. Message body of the INVITE request contains a description of the media type accepted by the sender and encoded in SDP.

We have described what an INVITE request looks like and said that the request is used to invite a called party to a session. Other important requests are:

The listed requests usually have no message body because it is not needed in most situations (but can have one). In addition to that many other request types have been defined but their description is out of the scope of this document.

When a user agent or proxy server receives a request it sends a reply. Each request must be replied to except ACK requests which trigger no replies.

A typical reply looks like this:

SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.1.30:5060;received=66.87.48.68
From: sip:sip2@iptel.org
To: sip:sip2@iptel.org;tag=794fe65c16edfdf45da4fc39a5d2867c.b713
Call-ID: 2443936363@192.168.1.30
CSeq: 63629 REGISTER
Contact: <sip:sip2@66.87.48.68:5060;transport=udp>;q=0.00;expires=120
Server: Sip EXpress router (0.8.11pre21xrc (i386/linux))
Content-Length: 0
Warning: 392 195.37.77.101:5060 "Noisy feedback tells:  
    pid=5110 req_src_ip=66.87.48.68 req_src_port=5060 in_uri=sip:iptel.org 
    out_uri=sip:iptel.org via_cnt==1"

As we can see, responses are very similar to the requests, except for the first line. The first line of response contains protocol version (SIP/2.0), reply code, and reason phrase.

The reply code is an integer number from 100 to 699 and indicates type of the response. There are 6 classes of responses:

In addition to the response class the first line also contains reason phrase. The code number is intended to be processed by machines. It is not very human-friendly but it is very easy to parse and understand by machines. The reason phrase usually contains a human-readable message describing the result of the processing. A user agent should render the reason phrase to the user.

The request to which a particular response belongs is identified using the CSeq header field. In addition to the sequence number this header field also contains method of corresponding request. In our example it was REGISTER request.

Although we said that SIP messages are sent independently over the network, they are usually arranged into transactions by user agents and certain types of proxy servers. Therefore SIP is said to be a transactional protocol.

A transaction is a sequence of SIP messages exchanged between SIP network elements. A transaction consists of one request and all responses to that request. That includes zero or more provisional responses and one or more final responses (remember that an INVITE might be answered by more than one final response when a proxy server forks the request).

If a transaction was initiated by an INVITE request then the same transaction also includes ACK, but only if the final response was not a 2xx response. If the final response was a 2xx response then the ACK is not considered part of the transaction.

As we can see this is quite asymmetric behavior--ACK is part of transactions with a negative final response but is not part of transactions with positive final responses. The reason for this separation is the importance of delivery of all 200 OK messages. Not only that they establish a session, but also 200 OK can be generated by multiple entities when a proxy server forks the request and all of them must be delivered to the calling user agent. Therefore user agents take responsibility in this case and retransmit 200 OK responses until they receive an ACK. Also note that only responses to INVITE are retransmitted !

SIP entities that have notion of transactions are called stateful. Such entities usually create a state associated with a transaction that is kept in the memory for the duration of the transaction. When a request or response comes, a stateful entity tries to associate the request (or response) to existing transactions. To be able to do it it must extract a unique transaction identifier from the message and compare it to identifiers of all existing transactions. If such a transaction exists then its state gets updated from the message.

In the previous SIP RFC2543 the transaction identifier was calculated as hash of all important message header fields (that included To, From, Request-URI and CSeq). This proved to be very slow and complex, during interoperability tests such transaction identifiers used to be a common source of problems.

In the new RFC3261 the way of calculating transaction identifiers was completely changed. Instead of complicated hashing of important header fields a SIP message now includes the identifier directly. Branch parameter of Via header fields contains directly the transaction identifier. This is significant simplification, but there still exist old implementations that don't support the new way of calculating of transaction identifier so even new implementations have to support the old way. They must be backwards compatible.

Figure 2.15 shows what messages belong to what transactions during a conversation of two user agents.

We have shown what transactions are, that one transaction includes INVITE and it's responses and another transaction includes BYE and its responses when a session is being torn down. But we feel that those two transactions should be somehow related--both of them belong to the same dialog. A dialog represents a peer-to-peer SIP relationship between two user agents. A dialog persists for some time and it is very important concept for user agents. Dialogs facilitate proper sequencing and routing of messages between SIP endpoints.

Dialogs are identified using Call-ID, From tag, and To tag. Messages that belong to the same dialog must have these fields equal. We have shown that CSeq header field is used to order messages, in fact it is used to order messages within a dialog. The number must be monotonically increased for each message sent within a dialog otherwise the peer will handle it as out of order request or retransmission. In fact, the CSeq number identifies a transaction within a dialog because we have said that requests and associated responses are called transaction. This means that only one transaction in each direction can be active within a dialog. One could also say that a dialog is a sequence of transactions. Figure 2.16 extends Figure 2.15 to show which messages belong to the same dialog.

Some messages establish a dialog and some do not. This is used to explicitly express the relationship of messages and also to send messages that are not related to other messages outside a dialog. That is easier to implement because user agent don't have to keep the dialog state.

For instance, INVITE message establishes a dialog, because it will be later followed by BYE request which will tear down the session established by the INVITE. This BYE is sent within the dialog established by the INVITE.

But if a user agent sends a MESSAGE request, such a request does not establish any dialog. Any subsequent messages (even MESSAGE) will be sent independently of the previous one.

We have said that dialogs are also used to route the messages between user agents, let's describe this a little bit.

Let's suppose that user sip:bob@a.com wants to talk to user sip:pete@b.com. He knows SIP address of the called party (sip:pete@b.com) but this address does not say anything about current location of the user--i.e. the caller does not know to which host to send the request. Therefore the INVITE request will be sent to a proxy server.

The request will be sent from proxy to proxy until it reaches one that knows current location of the called party. This process is called routing. Once the request reaches the called party, the called party's user agent will create a response that will be sent back to the caller. called party's user agent will also put Contact header field into the response which will contain the current location of the user. The original request also contained Contact header field which means that both user agents know the current location of the peer.

Because the user agents know location of each other, it is not necessary to send further requests to any proxy--they can be sent directly from user agent to user agent. That's exactly how dialogs facilitate routing.

Further messages within a dialog are sent directly from user agent to user agent. This is a significant performance improvement because proxies do not see all the messages within a dialog, they are used to route just the first request that establishes the dialog. The direct messages are also delivered with much smaller latency because a typical proxy usually implements complex routing logic. Figure 2.17 contains an example of a message within a dialog (BYE) that bypasses the proxies.

This section gives a brief overview of typical SIP scenarios that usually make up the SIP traffic.

In a traditional telephone network, the infrastructure consists of large telephone switches which interconnect with each other to create the backbone network and which also connect to customer premise equipment (PBXs, telephones). While the internal network today is based upon digital communication, links to customers may be either analog (PSTN) or digital (ISDN). The links to customers are shared between call signaling (for dialing, invocation of supplementary services, etc.) and carriage of voice/data. In the backbone, dedicated (virtual) links interconnecting switches are reserved for call signaling (de-facto creating a dedicated network of its own) whereas voice/data traffic is carried on separate links. The Signaling System No. 7 (SS7) or variants of it are used as the call signaling protocol between switches; this protocol is used to route voice/data channels across the backbone network by instructing each switch on the way which incoming "line" is to be forwarded to which outgoing "line" and which other processing (such as simple voice compression, in-band signaling detection to customer premise equipment, etc.) is to be applied. Voice/data channels themselves are plain bit pipes identified by roughly a trunk and line identifier at each switch.

A similar construction is now considered by a number of telcos for IP-based backbone networks that may successively replace parts of their overall switched network infrastructure, as depicted in figure 3.7. Instead of voice switches, IP routers are used to build up a backbone network - which employs IP routing, possibly MPLS, and, most likely, some explicit form of QoS support to carry voice and data packets from any point in the network to any other. In contrast to voice switches, this does not require explicit configuration of the individual routers per voice connection; rather, only the entry and exit points need to be configured with each others' addresses so that they know where to send their voice/data packets to. Two types of gateways are used at the edges of the IP network to connect to the conventional telephone network: signaling gateways to convert SS7 signaling into IP-based call control (which may make use of H.323 or SIP or simply provide a transport to carry SS7 signaling in IP packets [SIGTRAN]) and media gateways that perform voice transcoding.1 Some central entity (actually, probably a number of co-operating entities) forms the intelligent core of the backbone: the Media Gateway Controller(s). They interpret call signaling and decide how to route calls, provide supplementary services, etc. Having decided on how a call is to be established, they inform the (largely passive and "dumb") media gateways at the edges (ingress and egress gateways) how and where to transmit the voice packets. The Media Gateway Controllers also re-configure the Gateways in case of any changes in the call, invocation of supplementary services, etc. The media gateways may be capable of detecting invocation of control features in the media channel (e.g. through DTMF tones) and notify the Media Gateway Controller(s) which then initiate the appropriate actions.

A number of protocols have been defined for communication between Media Gateway Controllers and media gateways: initial versions were developed by multiple camps, some of which merged to create the Media Gateway Control Protocol (MGCP), the only one of the proprietary protocols that is documented as an Informational RFC (RFC 2705). An effort was launched to make the two remaining camps cooperate and develop a single protocol to be standardized which resulted in work groups in the ITU-T (rooted in Study Group 16, Q.14) and in the IETF (Media Gateway Control, MEGACO WG). The protocol being jointly developed is referred to as H.248 in the ITU-T and as MEGACO in the IETF.

One particular protocol extension currently discussed in the IETF is the definition of a protocol for communication with an IP telephone at the customer premises that fits seamlessly with the Media Gateway Control architecture. Such a telephone would be a rather simple entity essentially capable of transmitting and receiving events and reacting to them while the call services are provided directly by the network infrastructure.

RTP and RTCP are the transport protocols used for IP telephony media streams. Both of them were defined in RFC1889; the former as a protocol to carry data that has real-time properties, the latter to monitor the quality of service and to convey information about the participants in on-going session. The services provided by the RTP protocol are:

  • identification of the carried information (audio and video codecs);
  • checking packet in-order delivery and, if necessary, re-ordering the out-of-sequence blocks;
  • transport of the coder/decoder synchronization information;
  • monitoring of the information delivery.

The RTP protocol uses the underlying User Datagram Protocol (UDP) to manage multiple connections between two entities and to check for data integrity (checksum). An important point to stress is that RTP neither provides any mean to have a guaranteed QoS nor assumes the underlying network delivers ordered packets.

The RTCP protocol uses the same protocols as RTP to periodically send control packets to all session participants. Every RTP channel using port number N has its own RTCP protocol channel with port number equal to N+1. The services provided by the RTCP are:

  • giving a feedback on the data quality distribution, feedback used to keep control of the active codecs;
  • transporting a constant identifier for the RTP source (CNAME), used by the receiver to link a SSRC identifier and its source to synchronize audio and video data;
  • advertising the number of session participants, number used to adjust the RTP data transmission rate;
  • carrying session control information, used to identify the session participants.

In the next two subsection we are going to describe the RTP and RTCP header and the different types of packet those two protocol use.