TOC 
Transport Area Working GroupM. Cotton
Internet-DraftICANN
Updates: 2780, 2782, 3828, 4340, L. Eggert
4960 (if approved)Nokia
Intended status: BCPJ. Touch
Expires: April 15, 2011USC/ISI
 M. Westerlund
 Ericsson
 S. Cheshire
 Apple
 October 12, 2010


Internet Assigned Numbers Authority (IANA) Procedures for the Management of the Service Name and Transport Protocol Port Number Registry
draft-ietf-tsvwg-iana-ports-07

Abstract

This document defines the procedures that the Internet Assigned Numbers Authority (IANA) uses when handling registration and other requests related to the Service Name and Transport Protocol Port Number Registry. It also discusses the rationale and principles behind these procedures and how they facilitate the long-term sustainability of the registry.

This document updates IANA's procedures by obsoleting Sections 8 and 9.1 of the IANA allocation guidelines [RFC2780], and it updates the IANA allocation procedures for UDP-Lite [RFC3828], DCCP [RFC4340] and SCTP [RFC4960]. It also updates the DNS SRV specification [RFC2782] to clarify what a service name is and how it is registered.

Status of this Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at http://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as “work in progress.”

This Internet-Draft will expire on April 15, 2011.

Copyright Notice

Copyright (c) 2010 IETF Trust and the persons identified as the document authors. All rights reserved.

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

This document may contain material from IETF Documents or IETF Contributions published or made publicly available before November 10, 2008. The person(s) controlling the copyright in some of this material may not have granted the IETF Trust the right to allow modifications of such material outside the IETF Standards Process. Without obtaining an adequate license from the person(s) controlling the copyright in such materials, this document may not be modified outside the IETF Standards Process, and derivative works of it may not be created outside the IETF Standards Process, except to format it for publication as an RFC or to translate it into languages other than English.



Table of Contents

1.  Introduction
2.  Motivation
3.  Background
4.  Conventions Used in this Document
5.  Service Names
    5.1.  Service Name Syntax
    5.2.  Service Name Usage in DNS SRV Records
6.  Port Number Ranges
    6.1.  Service names and Port Numbers for Experimentation
7.  Principles for Service Name and Transport Protocol Port Number Registry Management
    7.1.  Past Principles
    7.2.  Updated Principles
8.  IANA Procedures for Managing the Service Name and Transport Protocol Port Number Registry
    8.1.  Service Name and Port Number Registration
    8.2.  Service Name and Port Number De-Registration
    8.3.  Service Name and Port Number Re-Use
    8.4.  Service Name and Port Number Revocation
    8.5.  Service Name and Port Number Transfers
    8.6.  Maintenance Issues
    8.7.  Disagreements
9.  Security Considerations
10.  IANA Considerations
    10.1.  Service Name Consistency
    10.2.  Port Numbers for SCTP and DCCP Experimentation
    10.3.  Updates to DCCP Registries
11.  Contributors
12.  Acknowledgments
13.  References
    13.1.  Normative References
    13.2.  Informative References
§  Authors' Addresses




 TOC 

1.  Introduction

For many years, the allocation of new service names and port number values for use with the Transmission Control Protocol (TCP) [RFC0793] (Postel, J., “Transmission Control Protocol,” September 1981.) and the User Datagram Protocol (UDP) [RFC0768] (Postel, J., “User Datagram Protocol,” August 1980.) have had less than clear guidelines. New transport protocols have been added - the Stream Control Transmission Protocol (SCTP) [RFC4960] (Stewart, R., “Stream Control Transmission Protocol,” September 2007.) and the Datagram Congestion Control Protocol (DCCP) [RFC4342] (Floyd, S., Kohler, E., and J. Padhye, “Profile for Datagram Congestion Control Protocol (DCCP) Congestion Control ID 3: TCP-Friendly Rate Control (TFRC),” March 2006.) - and new mechanisms like DNS SRV records [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.) have been developed, each with separate registries and separate guidelines. The community also recognized the need for additional procedures beyond just assignment; notably modification, revocation, and release.

A key element of the procedural streamlining specified in this document is to establish identical assignment procedures for all IETF transport protocols. This document brings the IANA procedures for TCP and UDP in line with those for SCTP and DCCP, resulting in a single process that requesters and IANA follow for all requests for all transport protocols, including future protocols not yet defined.

In addition to detailing the IANA procedures for the initial assignment of service names and port numbers, this document also specifies post-assignment procedures that until now have been handled in an ad hoc manner. These include procedures to de-register a port number that is no longer in use, to re-use a port number allocated for one application that is no longer in use for another application, and the procedure by which IANA can unilaterally revoke a prior port number assignment. Section 8 (IANA Procedures for Managing the Service Name and Transport Protocol Port Number Registry) discusses the specifics of these procedures and processes that requesters and IANA follow for all requests for all current and future transport protocols.

IANA is the authority for assigning service names and port numbers. The registries that are created to store these registrations are maintained by IANA. For protocols developed by IETF working groups, IANA now also offers a method for the "early assignment" [RFC4020] (Kompella, K. and A. Zinin, “Early IANA Allocation of Standards Track Code Points,” February 2005.) of service names and port numbers, as described in Section 8.1 (Service Name and Port Number Registration).

This document updates IANA's procedures for UDP and TCP port numbers by obsoleting Sections 8 and 9.1 of the IANA allocation guidelines [RFC2780] (Bradner, S. and V. Paxson, “IANA Allocation Guidelines For Values In the Internet Protocol and Related Headers,” March 2000.). (Note that other sections of the IANA allocation guidelines, relating to the protocol field values in IPv4 header, were also updated in February 2008 [RFC5237] (Arkko, J. and S. Bradner, “IANA Allocation Guidelines for the Protocol Field,” February 2008.).) This document also updates the IANA allocation procedures for DCCP [RFC4340] (Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” March 2006.) and SCTP [RFC4960] (Stewart, R., “Stream Control Transmission Protocol,” September 2007.).

The Lightweight User Datagram Protocol (UDP-Lite) [RFC5237] (Arkko, J. and S. Bradner, “IANA Allocation Guidelines for the Protocol Field,” February 2008.) shares the port space with UDP. The UDP-Lite specification says: "UDP-Lite uses the same set of port number values assigned by the IANA for use by UDP". Thus the update of UDP procedures result in an update also of the UDP-Lite procedures.

This document also clarifies what a service name is and how it is registered. This will impact the DNS SRV specification [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.), because that specification merely makes a brief mention that the symbolic names of services are defined in "Assigned Numbers" [RFC1700] (Reynolds, J. and J. Postel, “Assigned Numbers,” October 1994.), without stating to which section it refers within that 230-page document. The DNS SRV specification may have been referring to the list of Port Assignments (known as /etc/services on Unix), or to the "Protocol And Service Names" section, or to both, or to some other section. Furthermore, "Assigned Numbers" is now obsolete [RFC3232] (Reynolds, J., “Assigned Numbers: RFC 1700 is Replaced by an On-line Database,” January 2002.) and has been replaced by on-line registries [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .)[PROTSERVREG] (Internet Assigned Numbers Authority (IANA), “Protocol and Service Names Registry,” .).

The development of new transport protocols is a major effort that the IETF does not undertake very often. If a new transport protocol is standardized in the future, for consistency it is expected to follow as much as possible the guidelines and practices around using service names and port numbers.



 TOC 

2.  Motivation

Information about the registration procedures for the port registry has existed in three locations: the forms for requesting port number registrations on the IANA web site [SYSFORM] (Internet Assigned Numbers Authority (IANA), “Application for System (Well Known) Port Number,” .) [USRFORM] (Internet Assigned Numbers Authority (IANA), “Application for User (Registered) Port Number,” .), an introductory text section in the file listing the port number registrations themselves [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .), and two brief sections of the IANA Allocation Guidelines [RFC2780] (Bradner, S. and V. Paxson, “IANA Allocation Guidelines For Values In the Internet Protocol and Related Headers,” March 2000.).

Similarly, the procedures surrounding service names have been historically unclear. Service names were originally created as mnemonic identifiers for port numbers without a well-defined syntax, beyond the 14-character limit mentioned on the IANA website [SYSFORM] (Internet Assigned Numbers Authority (IANA), “Application for System (Well Known) Port Number,” .) [USRFORM] (Internet Assigned Numbers Authority (IANA), “Application for User (Registered) Port Number,” .). Even that length limit has not been consistently applied, and some assigned service names are 15 characters long. When service identification via DNS SRV Resource Records (RRs) was introduced, the requirement by IANA to only assign service names and port numbers in combination, led to the creation of an ad hoc service name registry outside of the control of IANA [SRVREG] (, “DNS SRV Service Types Registry,” .).

This document aggregates all this scattered information into a single reference that aligns and clearly defines the management procedures for both service names and port numbers. It gives more detailed guidance to prospective requesters of service names and ports than the existing documentation, and it streamlines the IANA procedures for the management of the registry, so that requests can be completed in a timely manner.

This document defines rules for registration of service names without associated port numbers, for such usages as DNS SRV records [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.), which was not possible under the previous IANA procedures. The document also merges service name registrations from the non-IANA ad hoc registry [SRVREG] (, “DNS SRV Service Types Registry,” .) and from the IANA "Protocol and Service Names" registry [PROTSERVREG] (Internet Assigned Numbers Authority (IANA), “Protocol and Service Names Registry,” .) into the IANA "Service Name and Transport Protocol Port Number" registry [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .), which from here on is the single authoritative registry for service names and port numbers.

An additional purpose of this document is to describe the principles that guide the IETF and IANA in their role as the long-term joint stewards of the service name and port number registry. TCP and UDP have had remarkable success over the last decades. Thousands of applications and application-level protocols have service names and ports assigned for their use, and there is every reason to believe that this trend will continue into the future. It is hence extremely important that management of the registry follow principles that ensure its long-term usefulness as a shared resource. Section 7 (Principles for Service Name and Transport Protocol Port Number Registry Management) discusses these principles in detail.



 TOC 

3.  Background

The Transmission Control Protocol (TCP) [RFC0793] (Postel, J., “Transmission Control Protocol,” September 1981.) and the User Datagram Protocol (UDP) [RFC0768] (Postel, J., “User Datagram Protocol,” August 1980.) have enjoyed a remarkable success over the decades as the two most widely used transport protocols on the Internet. They have relied on the concept of "ports" as logical entities for Internet communication. Ports serve two purposes: first, they provide a demultiplexing identifier to differentiate transport sessions between the same pair of endpoints, and second, they may also identify the application protocol and associated service to which processes bind. Newer transport protocols, such as the Stream Control Transmission Protocol (SCTP) [RFC4960] (Stewart, R., “Stream Control Transmission Protocol,” September 2007.) and the Datagram Congestion Control Protocol (DCCP) [RFC4342] (Floyd, S., Kohler, E., and J. Padhye, “Profile for Datagram Congestion Control Protocol (DCCP) Congestion Control ID 3: TCP-Friendly Rate Control (TFRC),” March 2006.) have also adopted the concept of ports for their communication sessions and use 16-bit port numbers in the same way as TCP and UDP (and UDP-Lite [RFC3828] (Larzon, L-A., Degermark, M., Pink, S., Jonsson, L-E., and G. Fairhurst, “The Lightweight User Datagram Protocol (UDP-Lite),” July 2004.), a variant of UDP).

Port numbers are the original and most widely used means for application and service identification on the Internet. Ports are 16-bit numbers, and the combination of source and destination port numbers together with the IP addresses of the communicating end systems uniquely identifies a session of a given transport protocol. Port numbers are also known by their associated service names such as "telnet" for port number 23 and "http" (as well as "www" and "www-http") for port number 80.

Hosts running services, hosts accessing services on other hosts, and intermediate devices (such as firewalls and NATs) that restrict services need to agree on which service corresponds to a particular destination port. Although this is ultimately a local decision with meaning only between the endpoints of a connection, it is common for many services to have a default port upon which those servers usually listen, when possible, and these ports are recorded by the Internet Assigned Numbers Authority (IANA) through the service name and port number registry [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .).

Over time, the assumption that a particular port number necessarily implies a particular service may become less true. For example, multiple instances of the same service on the same host cannot generally listen on the same port, and multiple hosts behind the same NAT gateway cannot all have a mapping for the same port on the external side of the NAT gateway, whether using static port mappings configured by hand by the user, or dynamic port mappings configured automatically using a port mapping protocol like NAT Port Mapping Protocol (NAT-PMP) (Cheshire, S., “NAT Port Mapping Protocol (NAT-PMP),” April 2008.) [I‑D.cheshire‑nat‑pmp] or Internet Gateway Device (IGD) (UPnP Forum, “Internet Gateway Device (IGD) V 1.0,” November 2001.) [IGD].

Applications may use numeric port numbers directly, look up port numbers based on service names via system calls such as getservbyname() on UNIX, look up port numbers by performing queries for DNS SRV records [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.)[I‑D.cheshire‑dnsext‑dns‑sd] (Cheshire, S. and M. Krochmal, “DNS-Based Service Discovery,” March 2010.), or determine port numbers in a variety of other ways like the TCP Port Service Multiplexer (TCPMUX) [RFC1078] (Lottor, M., “TCP port service Multiplexer (TCPMUX),” November 1988.).

Designers of applications and application-level protocols may apply to IANA for an assigned service name and port number for a specific application, and may - after successful registration - assume that no other application will use that service name or port number for its communication sessions. Alternatively, application designers may also ask for only an assigned service name, if their application does not require a fixed port number. The latter alternative is encouraged when possible, in order to conserve the more limited port number space. This is applicable, for example, to applications that use DNS SRV records to look up port numbers at runtime.



 TOC 

4.  Conventions Used in this Document

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in "Key words for use in RFCs to Indicate Requirement Levels" [RFC2119] (Bradner, S., “Key words for use in RFCs to Indicate Requirement Levels,” March 1997.).



 TOC 

5.  Service Names

Service names are the unique key in the Service Name and Transport Protocol Port Number Registry. This unique symbolic name for a service may also be used for other purposes, such as in DNS SRV records (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.) [RFC2782]. Within the registry, this unique key ensures that different services can be unambiguously distinguished, thus preventing name collisions and avoiding confusion about who is the Registrant for a particular entry.

There may be more than one service name associated with a particular transport protocol and port. There are three ways that such service name overloading can occur:

For future assignments, applications will not be permitted that merely request a new name exactly duplicating an existing service. Having multiple names for the same service serves no purpose. Implementers are requested to inform IANA if they discover other cases where a single service has multiple names, so that one name may be recorded as the primary name for service discovery purposes.

Service names are assigned on a "first come, first served" basis, as described in Section 8.1 (Service Name and Port Number Registration). Names should be brief and informative, avoiding words or abbreviations that are redundant in the context of the registry (e.g., "port", "service", "protocol", etc.) Names referring to discovery services, e.g., using multicast or broadcast to identify endpoints capable of a given service, SHOULD use an easily identifiable suffix (e.g., "-disc").



 TOC 

5.1.  Service Name Syntax

Valid service names are hereby normatively defined as follows:

The reason for requiring at least one letter is to avoid service names like "23" (could be confused with a numeric port number) or "6000-6063" (could be confused with a numeric port number range). Although service names may contain both upper-case and lower-case letters, case is ignored for comparison purposes, so both "http" and "HTTP" denote the same service.

Service names are purely opaque identifiers, and no semantics are implied by any superficial structure that a given service name may appear to have. For example, a company called "Example" may choose to register service names "Example-Foo" and "Example-Bar" for its "Foo" and "Bar" products, but the "Example" company can't claim to "own" all service names beginning with "Example-", they can't prevent someone else registering "Example-Baz" for a different service, and they can't prevent other developers from using the "Example-Foo" and "Example-Bar" service types in order to interoperate with the "Foo" and "Bar" products. Technically speaking, in service discovery protocols, service names are merely a series of byte values on the wire; for the mnemonic convenience of human developers it can be convenient to interpret those byte values as human-readable ascii characters, but software should treat them as purely opaque identifiers and not attempt to parse them for any additional embedded meaning.

In approximately 98% of cases, the new "service name" is exactly the same as the old historic "short name" from the IANA web forms [SYSFORM] (Internet Assigned Numbers Authority (IANA), “Application for System (Well Known) Port Number,” .) [USRFORM] (Internet Assigned Numbers Authority (IANA), “Application for User (Registered) Port Number,” .). In approximately 2% of cases, the new "service name" is derived from the old historic "short name" as described below in Section 10.1 (Service Name Consistency).

The rules for valid service names, excepting the limit of 15 characters maximum, are also expressed below (as a non-normative convenience) using ABNF (Crocker, D. and P. Overell, “Augmented BNF for Syntax Specifications: ABNF,” January 2008.) [RFC5234].

   SRVNAME = (ALPHA / (1*DIGIT [HYPHEN] ALPHA)) *([HYPHEN] ALNUM)
   ALNUM   = ALPHA / DIGIT     ; A-Z, a-z, 0-9
   HYPHEN  = %x2d              ; "-"
   ALPHA   = %x41-5A / %x61-7A ; A-Z / a-z [RFC5234]
   DIGIT   = %x30-39           ; 0-9       [RFC5234]



 TOC 

5.2.  Service Name Usage in DNS SRV Records

The DNS SRV specification [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.) states that the Service Label part of the owner name of a DNS SRV record includes a "Service" element, described as "the symbolic name of the desired service", but as discussed above, it is not clear precisely what this means.

This document clarifies that the Service Label MUST be a service name as defined herein. The service name SHOULD be registered with IANA and recorded in the Service Name and Transport Protocol Port Number Registry [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .).

The details of using Service Names in SRV Service Labels are specified in the DNS SRV specification [RFC2782] (Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” February 2000.). This document does not change that specification.



 TOC 

6.  Port Number Ranges

TCP, UDP, UDP-Lite, SCTP and DCCP use 16-bit namespaces for their port number registries. The port registries for all these transport protocols are subdivided into three ranges of numbers, and Section 8.1.1 (Variances for Specific Port Number Ranges) describes the IANA procedures for each range in detail:

Of the assignable port ranges (System Ports and User Ports, i.e., port numbers 0-49151), individual port numbers are in one of three states at any given time:

In order to keep the size of the registry manageable, IANA typically only records the Assigned and Reserved service names and port numbers in the registry. Unassigned values are typically not explicitly listed. (There are an near-infinite number of Unassigned service names and enumerating them all would not be practical.)

As a data point, when this document was written, approximately 76% of the TCP and UDP System Ports were assigned, and approximately 9% of the User Ports were assigned. (As noted, Dynamic Ports are never assigned.)



 TOC 

6.1.  Service names and Port Numbers for Experimentation

Of the System Ports, two TCP and UDP port numbers (1021 and 1022), together with their respective service names ("exp1" and "exp2"), have been assigned for experimentation with new applications and application-layer protocols that require a port number in the assigned ports ranges [RFC4727] (Fenner, B., “Experimental Values In IPv4, IPv6, ICMPv4, ICMPv6, UDP, and TCP Headers,” November 2006.).

Please refer to Sections 1 and 1.1 of "Assigning Experimental and Testing Numbers Considered Useful" [RFC3692] (Narten, T., “Assigning Experimental and Testing Numbers Considered Useful,” January 2004.) for how these experimental port numbers are to be used.

This document registers the same two service names and port numbers for experimentation with new application-layer protocols over SCTP and DCCP in Section 10.2 (Port Numbers for SCTP and DCCP Experimentation).

Unfortunately, it can be difficult to limit access to these ports. Users SHOULD take measures to ensure that experimental ports are connecting to the intended process. For example, users of these experimental ports might include a 64-bit nonce, once on each segment of a message-oriented channel (e.g., UDP), or once at the beginning of a byte-stream (e.g., TCP), which is used to confirm that the port is being used as intended. Such confirmation of intended use is especially important when these ports are associated with privileged (e.g., system or administrator) processes.



 TOC 

7.  Principles for Service Name and Transport Protocol Port Number Registry Management

Management procedures for the service name and transport protocol port number registry include allocation of service names and port numbers upon request, as well as management of information about existing allocations. The latter includes maintaining contact and description information about assignments, revoking abandoned assignments, and redefining assignments when needed. Of these procedures, careful port number allocation is most critical, in order to continue to conserve the remaining port numbers.

As noted earlier, only about 9% of the User Port space is currently assigned. The current rate of assignment is approximately 400 ports per year, and has remained steady for the past 8 years. At that rate, if similar conservation continues, this resource will sustain another 85 years of assignment - without the need to resort to reassignment of released values or revocation. The namespace available for service names is much larger, which allows for simpler management procedures.



 TOC 

7.1.  Past Principles

Before the publication of this document, the principles of service name and port number management followed a few mostly-undocumented guidelines. They are recorded here for historical purposes, and this document updates them in Section 7.2 (Updated Principles). These principles were:

This document clarifies and aligns these guidelines in order to more conservatively manage the limited remaining port number space and to enable and promote the use of service names for service identification without associated port numbers, where possible.



 TOC 

7.2.  Updated Principles

This section summarizes the basic principles by which IANA handles the Service Name and Transport Protocol Port Number Registry, and attempts to conserve the port number space. This description is intended to inform applicants requesting service names and port numbers. IANA are not required to be bound by these principles when handling requests; other factors may come into play, and exceptions may occur where deemed in the best interest of the Internet.

IANA will begin assigning service names that do not request an associated port number allocation under a simple "First Come, First Served" policy [RFC5226] (Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” May 2008.). IANA MAY, at its discretion, refer service name requests to "Expert Review" in cases of mass registrations or other situations where IANA believes expert review is advisable.

The basic principle of service name and port number registry management is to conserve use of the port space where possible. Extensions to support larger port number spaces would require changing many core protocols of the current Internet in a way that would not be backward compatible and interfere with both current and legacy applications. To help ensure this conservation the policy for any registration request for port number allocations uses the "Expert Review" policy [RFC5226] (Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” May 2008.).

Conservation of the port number space is required because this space is a limited resource, so applications are expected to participate in the traffic demultiplexing process where feasible. The port numbers are expected to encode as little information as possible that will still enable an application to perform further demultiplexing by itself. In particular:

Where possible, a given service is expected to demultiplex messages if necessary. For example, applications and protocols are expected to include in-band version information, so that future versions of the application or protocol can share the same allocated port. Applications and protocols are also expected to be able to efficiently use a single allocated port for multiple sessions, either by demultiplexing multiple streams within one port, or using the allocated port to coordinate using dynamic ports for subsequent exchanges (e.g., in the spirit of FTP [RFC0959] (Postel, J. and J. Reynolds, “File Transfer Protocol,” October 1985.)).

Ports are used in various ways, notably:

Both the process identifier and the protocol identifier uses suggest that anything a single process can demultiplex, or that can be encoded into a single protocol, should be. The firewall filtering use suggests that some uses that could be multiplexed or encoded could instead be separated to allow for easier firewall management. Note that this latter use is much less sound, because port numbers have meaning only for the two endpoints involved in a connection, and drawing conclusions about the service that generated a given flow based on observed port numbers is not always reliable. Further, previous separation of protocol variants based on security capabilities (e.g., HTTP on TCP port 80 vs. HTTPS on TCP port 443) is not recommended for new protocols, because all new protocols should be security-capable and capable of negotiating the use of security in-band.

IANA will begin assigning port numbers for only those transport protocols explicitly included in a registration request. This ends the long-standing practice of automatically assigning a port number to an application for both TCP and a UDP, even if the request is for only one of these transport protocols. The new allocation procedure conserves resources by allocating a port number to an application for only those transport protocols (TCP, UDP, SCTP and/or DCCP) it actually uses. The port number will be marked as Reserved - instead of Assigned - in the port number registries of the other transport protocols. When applications start supporting the use of some of those additional transport protocols, the Registrant for the registration MUST request IANA to convert the reservation into a proper assignment. An application MUST NOT assume that it can use a port number assigned to it for use with one transport protocol with another transport protocol without asking IANA to convert the reservation into an assignment.

When the available pool of unassigned numbers has run out in a ports range, it will be necessary for IANA to consider the Reserved ports for assignment. This is part of the motivation for not automatically assigning ports for transport protocols other than the requested one(s). This will allow more ports to be available for assignment when that time comes. To help conserve ports, application developers should register only the transport protocols that their application currently uses.

Conservation of port numbers is improved by procedures that allow previously allocated port numbers to become Unassigned, either through de-registration or through revocation, and by a procedure that lets application designers transfer an allocated but unused port number to a new application. Section 8 (IANA Procedures for Managing the Service Name and Transport Protocol Port Number Registry) describes these procedures, which until now were undocumented. Port number conservation is also improved by recommending that applications that do not require an allocated port should register only a service name without an associated port number.



 TOC 

8.  IANA Procedures for Managing the Service Name and Transport Protocol Port Number Registry

This section describes the process for handling requests associated with IANA's management of the Service Name and Transport Protocol Port Number Registry. Such requests include initial registration, de-registration, re-use, changes to the service name, and updates to the contact information or description associated with an assignment. Revocation is as additional process, initiated by IANA.



 TOC 

8.1.  Service Name and Port Number Registration

Registration refers to the allocation of service names or port numbers to applicants. All such registrations are made from service names or port numbers that are Unassigned or Reserved at the time of the allocation. Unassigned names and numbers are allocated according to the rules described in Section 8.1.1 (Variances for Specific Port Number Ranges) below. Reserved numbers and names are assigned only by Standards Action or IESG Approval, and MUST accompanied by a statement explaining the reason a Reserved number or name is appropriate for this action.

When a registration for one or more transport protocols is approved, the port number for any non-requested transport protocol(s) will be marked as Reserved. IANA SHOULD NOT assign that port number to any other application or service until no other port numbers remain Unassigned in the requested range. The current Registrant for a port number MAY register these Reserved port numbers for other transport protocols when needed.

A service name or port number registration request contains the following information. The service name is the unique identifier of a given service:

Service Name (REQUIRED)
Transport Protocol(s) (REQUIRED)
Registrant (REQUIRED)
Contact (REQUIRED)
Description (REQUIRED)
Reference (REQUIRED)
Port Number (OPTIONAL)
Service Code (REQUIRED for DCCP only)
Known Unauthorized Uses (OPTIONAL)
Assignment Notes (OPTIONAL)

If the registration request is for the addition of a new transport protocol to an already assigned service name, IANA needs to confirm with the Registrant for the existing assignment whether this addition is appropriate.

If the registration request is for a service name overloading a port number (see Section 5), IANA needs to confirm with the Registrant for the existing service name whether the registration of the overloading is appropriate.

When IANA receives a registration request - containing the above information - that is requesting a port number, IANA SHALL initiate an "Expert Review" [RFC5226] (Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” May 2008.) in order to determine whether an assignment should be made. For requests that are not requesting a port number, IANA SHOULD assign the service name under a simple "First Come First Served" policy [RFC5226] (Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” May 2008.).



 TOC 

8.1.1.  Variances for Specific Port Number Ranges

Section 6 (Port Number Ranges) describes the different port number ranges. It is important to note that IANA applies slightly different procedures when managing the different port ranges of the service name and port number registry:



 TOC 

8.2.  Service Name and Port Number De-Registration

The Registrant of a granted port number assignment can return the port number to IANA at any time if they no longer have a need for it. The port number will be de-registered and will be marked as Reserved. IANA should not re-assign port numbers that have been de-registered until all unassigned port numbers in the specific range have been assigned.

Before proceeding with a port number de-registration, IANA needs to reasonably establish that the value is actually no longer in use.

Because there is much less danger of exhausting the service name space compared to the port number space, it is RECOMMENDED that a given service name remain assigned even after all associated port number assignments have become de-registered. Under this policy, it will appear in the registry as if it had been created through a service name registration request that did not include any port numbers.

On rare occasions, it may still be useful to de-register a service name. In such cases, IANA will mark the service name as Reserved. IANA will involve their IESG-appointed expert in such cases.

IANA will include a comment in the registry when de-registration happens to indicate its historic usage.



 TOC 

8.3.  Service Name and Port Number Re-Use

If the Registrant of a granted port number assignment no longer have a need for the assigned number, but would like to re-use it for a different application, they can submit a request to IANA to do so.

Logically, port number re-use is to be thought of as a de-registration (Section 8.2 (Service Name and Port Number De-Registration)) followed by an immediate re-registration (Section 8.1 (Service Name and Port Number Registration)) of the same port number for a new application. Consequently, the information that needs to be provided about the proposed new use of the port number is identical to what would need to be provided for a new port number allocation for the specific ports range.

Because there is much less danger of exhausting the service name space compared to the port number space, it is RECOMMENDED that the original service name associated with the prior use of the port number remains assigned, and a new service be created and associated with the port number. This is again consistent with viewing a re-use request as a de-registration followed by an immediate re-registration. Re-using an assigned service name for a different application is NOT RECOMMENDED.

IANA needs to carefully review such requests before approving them. In some instances, the Expert Reviewer will determine that the application that the port number was assigned to has found usage beyond the original requester, or that there is a concern that it may have such users. This determination MUST be made quickly. A community call concerning revocation of a port number (see below) MAY be considered, if a broader use of the port number is suspected.



 TOC 

8.4.  Service Name and Port Number Revocation

A port number revocation can be thought of as an IANA-initiated de-registration (Section 8.2 (Service Name and Port Number De-Registration)), and has exactly the same effect on the registry.

Sometimes, it will be clear that a specific port number is no longer in use and that IANA can revoke it and mark it as Reserved. At other times, it may be unclear whether a given assigned port number is still in use somewhere in the Internet. In those cases, IANA must carefully consider the consequences of revoking the port number, and SHOULD only do so if there is an overwhelming need.

With the help of their IESG-appointed Expert Reviewer, IANA SHALL formulate a request to the IESG to issue a four-week community call concerning the pending port number revocation. The IESG and IANA, with the Expert Reviewer's support, SHALL determine promptly after the end of the community call whether revocation should proceed and then communicate their decision to the community. This procedure typically involves similar steps to de-registration except that it is initiated by IANA.

Because there is much less danger of exhausting the service name space compared to the port number space, revoking service names is NOT RECOMMENDED.



 TOC 

8.5.  Service Name and Port Number Transfers

The value of service names and port numbers is defined by their careful management as a shared Internet resource, whereas enabling transfer allows the potential for associated monetary exchanges. As a result, the IETF does not permit service name or port number assignments to be transferred between parties, even when they are mutually consenting.

The appropriate alternate procedure is a coordinated de-registration and registration: The new party requests the service name or port number via a registration and the previous party releases its assignment via the de-registration procedure outlined above.

With the help of their IESG-appointed Expert Reviewer, IANA SHALL carefully determine if there is a valid technical, operational or managerial reason to grant the requested new assignment.



 TOC 

8.6.  Maintenance Issues

In addition to the formal procedures described above, updates to the Description and Contact information are coordinated by IANA in an informal manner, and may be initiated by either the registrant or by IANA, e.g., by the latter requesting an update to current contact information. (Note that Registrant cannot be changed; see Section 8.5 (Service Name and Port Number Transfers) above.)



 TOC 

8.7.  Disagreements

In the case of disagreements around any request there is the possibility of appeal following the normal appelas process for IANA registrations as defined by Section 7 of "Guidelines for Writing an IANA Considerations Section in RFCs" (Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” May 2008.) [RFC5226].



 TOC 

9.  Security Considerations

The IANA guidelines described in this document do not change the security properties of UDP, TCP, SCTP, or DCCP.

Assignment of a service name or port number does not in any way imply an endorsement of an application or product, and the fact that network traffic is flowing to or from an assigned port number does not mean that it is "good" traffic, or even that it is used by the assigned service. Firewall and system administrators should choose how to configure their systems based on their knowledge of the traffic in question, not based on whether or not there is an assigned service name or port number.

Services are expected to include support for security, either as default or dynamically negotiated in-band. The use of separate service name or port number assignments for secure and insecure variants of the same service is to be avoided in order to discourage the deployment of insecure services.



 TOC 

10.  IANA Considerations

This document obsoletes Sections 8 and 9.1 of the March 2000 IANA Allocation Guidelines [RFC2780] (Bradner, S. and V. Paxson, “IANA Allocation Guidelines For Values In the Internet Protocol and Related Headers,” March 2000.).

Upon approval of this document, IANA is requested to contact Stuart Cheshire, maintainer of the independent service name registry [SRVREG] (, “DNS SRV Service Types Registry,” .), in order to merge the contents of that private registry into the official IANA registry. It is expected that the independent registry web page will be updated with pointers to the IANA registry and to this RFC.

IANA is instructed to create a new service name entry in the service name and port number registry [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .) for any entry in the "Protocol and Service Names" registry [PROTSERVREG] (Internet Assigned Numbers Authority (IANA), “Protocol and Service Names Registry,” .) that does not already have one assigned.

IANA is also instructed to indicate in the Assignment Notes for "www" and "www-http" that they are duplicate terms that refer to the "http" service, and should not be used for discovery purposes. For this conceptual service (human-readable web pages served over HTTP) the correct service name to use for service discovery purposes is "http" (see Section 5 (Service Names)).



 TOC 

10.1.  Service Name Consistency

Section 8.1 (Service Name and Port Number Registration) defines which character strings are well-formed service names, which until now had not been clearly defined. The definition in Section 8.1 (Service Name and Port Number Registration) was chosen to allow maximum compatibility of service names with current and future service discovery mechanisms.

As of August 5, 2009 approximately 98% of the so-called "Short Names" from existing port number registrations [PORTREG] (Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,” .) meet the rules for legal service names stated in Section 8.1 (Service Name and Port Number Registration), and hence for these services their service name will be exactly the same as their "Short Name".

The remaining approximately 2% of the exiting "Short Names" are not suitable to be used directly as well-formed service names because they contain illegal characters such as asterisks, dots, pluses, slashes, or underscores. All existing "Short Names" conform to the length requirement of 15 characters or fewer. For these unsuitable "Short Names", listed in the table below, the service name will be the Short Name with any illegal characters replaced by hyphens. IANA SHALL add an entry to the registry giving the new well-formed primary service name for the existing service, that otherwise duplicates the original assignment information. In the description field of this new entry giving the primary service name, IANA SHALL record that it assigns a well-formed service name for the previous service and reference the original assignment. In the Assignment Notes field of the original assignment, IANA SHALL add a note that this entry is an alias to the new well-formed service name, and that the old service name is historic, not usable for use with many common service discovery mechanisms.

Names containing illegal characters to be replaced by hyphens:

914c/g acmaint_dbd acmaint_transd
atex_elmd avanti_cdp badm_priv
badm_pub bdir_priv bdir_pub
bmc_ctd_ldap bmc_patroldb boks_clntd
boks_servc boks_servm broker_service
bues_service canit_store cedros_fds
cl/1 contamac_icm corel_vncadmin
csc_proxy cvc_hostd dbcontrol_agent
dec_dlm dl_agent documentum_s
dsmeter_iatc dsx_monitor elpro_tunnel
elvin_client elvin_server encrypted_admin
erunbook_agent erunbook_server esri_sde
EtherNet/IP-1 EtherNet/IP-2 event_listener
flr_agent gds_db ibm_wrless_lan
iceedcp_rx iceedcp_tx iclcnet_svinfo
idig_mux ife_icorp instl_bootc
instl_boots intel_rci interhdl_elmd
lan900_remote LiebDevMgmt_A LiebDevMgmt_C
LiebDevMgmt_DM mapper-ws_ethd matrix_vnet
mdbs_daemon menandmice_noh msl_lmd
nburn_id ncr_ccl nds_sso
netmap_lm nms_topo_serv notify_srvr
novell-lu6.2 nuts_bootp nuts_dem
ocs_amu ocs_cmu pipe_server
pra_elmd printer_agent redstorm_diag
redstorm_find redstorm_info redstorm_join
resource_mgr rmonitor_secure rsvp_tunnel
sai_sentlm sge_execd sge_qmaster
shiva_confsrvr sql*net srvc_registry
stm_pproc subntbcst_tftp udt_os
universe_suite veritas_pbx vision_elmd
vision_server wrs_registry z39.50

Following the example set by the "application/whoispp-query" MIME Content-Type [RFC2957] (Daigle, L. and P. Faltstrom, “The application/whoispp-query Content-Type,” October 2000.), the service name for "whois++" will be "whoispp".



 TOC 

10.2.  Port Numbers for SCTP and DCCP Experimentation

Two System UDP and TCP ports, 1021 and 1022, have been reserved for experimental use [RFC4727] (Fenner, B., “Experimental Values In IPv4, IPv6, ICMPv4, ICMPv6, UDP, and TCP Headers,” November 2006.). This document assigns the same port numbers for SCTP and DCCP, updates the TCP and UDP registrations, and also instructs IANA to automatically assign these two port numbers for any future transport protocol with a similar 16-bit port number namespace.

Note that these port numbers are meant for temporary experimentation and development in controlled environments. Before using these port numbers, carefully consider the advice in Section 6.1 (Service names and Port Numbers for Experimentation) in this document, as well as in Sections 1 and 1.1 of "Assigning Experimental and Testing Numbers Considered Useful" [RFC3692] (Narten, T., “Assigning Experimental and Testing Numbers Considered Useful,” January 2004.). Most importantly, application developers must request a permanent port number assignment from IANA as described in Section 8.1 (Service Name and Port Number Registration) before any kind of non-experimental deployment.

Registrant IETF <iesg@ietf.org>
Contact IESG <iesg@ietf.org>
Service Name exp1
Port Number 1021
Transport Protocol DCCP, SCTP, TCP, UDP
Description RFC3692-style Experiment 1
Reference [RFCyyyy],RFC 4727]

Registrant IETF <iesg@ietf.org>
Contact IESG <iesg@ietf.org>
Service Name exp2
Port Number 1022
Transport Protocol DCCP, SCTP, TCP, UDP
Description RFC3692-style Experiment 2
Reference [RFCyyyy], [RFC4727]

[RFC Editor Note: Please change "yyyy" to the RFC number allocated to this document before publication.]



 TOC 

10.3.  Updates to DCCP Registries

This document updates the IANA allocation procedures for the DCCP Port Number and DCCP Service Codes Registries [RFC4340] (Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” March 2006.).



 TOC 

10.3.1.  DCCP Service Code Registry

Service Codes are allocated first-come-first-served according to Section 19.8 of the DCCP specification [RFC4340] (Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” March 2006.). This document updates that section by extending the guidelines given there in the following ways:



 TOC 

10.3.2.  DCCP Port Numbers Registry

The DCCP ports registry is defined by Section 19.9 of the DCCP specification [RFC4340] (Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” March 2006.). Allocations in this registry require prior allocation of a Service Code. Not all Service Codes require IANA-assigned ports. This document updates that section by extending the guidelines given there in the following way:

The DCCP specification [RFC4340] (Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” March 2006.) notes that a short port name MUST be associated with each DCCP server port that has been assigned. This document clarifies that this short port name is the Service Name as defined here, and this name MUST be unique.



 TOC 

11.  Contributors

Alfred Hoenes (ah@tr-sys.de) and Allison Mankin (mankin@psg.com) have contributed text and ideas to this document.



 TOC 

12.  Acknowledgments

The text in Section 10.3 (Updates to DCCP Registries) is based on a suggestion originally proposed as a part of the DCCP Service Codes document[RFC5595] (Fairhurst, G., “The Datagram Congestion Control Protocol (DCCP) Service Codes,” September 2009.) by Gorry Fairhurst.

Lars Eggert is partly funded by the Trilogy Project [TRILOGY] (, “Trilogy Project,” .), a research project supported by the European Commission under its Seventh Framework Program.



 TOC 

13.  References



 TOC 

13.1. Normative References

[ANSI.X3-4.1986] American National Standards Institute, “Coded Character Set - 7-bit American Standard Code for Information Interchange,” ANSI X3.4, 1986.
[RFC0768] Postel, J., “User Datagram Protocol,” STD 6, RFC 768, August 1980 (TXT).
[RFC0793] Postel, J., “Transmission Control Protocol,” STD 7, RFC 793, September 1981 (TXT).
[RFC2119] Bradner, S., “Key words for use in RFCs to Indicate Requirement Levels,” BCP 14, RFC 2119, March 1997 (TXT, HTML, XML).
[RFC2780] Bradner, S. and V. Paxson, “IANA Allocation Guidelines For Values In the Internet Protocol and Related Headers,” BCP 37, RFC 2780, March 2000 (TXT).
[RFC3828] Larzon, L-A., Degermark, M., Pink, S., Jonsson, L-E., and G. Fairhurst, “The Lightweight User Datagram Protocol (UDP-Lite),” RFC 3828, July 2004 (TXT).
[RFC4020] Kompella, K. and A. Zinin, “Early IANA Allocation of Standards Track Code Points,” BCP 100, RFC 4020, February 2005 (TXT).
[RFC4340] Kohler, E., Handley, M., and S. Floyd, “Datagram Congestion Control Protocol (DCCP),” RFC 4340, March 2006 (TXT).
[RFC4727] Fenner, B., “Experimental Values In IPv4, IPv6, ICMPv4, ICMPv6, UDP, and TCP Headers,” RFC 4727, November 2006 (TXT).
[RFC5226] Narten, T. and H. Alvestrand, “Guidelines for Writing an IANA Considerations Section in RFCs,” BCP 26, RFC 5226, May 2008 (TXT).
[RFC5234] Crocker, D. and P. Overell, “Augmented BNF for Syntax Specifications: ABNF,” STD 68, RFC 5234, January 2008 (TXT).


 TOC 

13.2. Informative References

[I-D.cheshire-dnsext-dns-sd] Cheshire, S. and M. Krochmal, “DNS-Based Service Discovery,” draft-cheshire-dnsext-dns-sd-06 (work in progress), March 2010 (TXT).
[I-D.cheshire-nat-pmp] Cheshire, S., “NAT Port Mapping Protocol (NAT-PMP),” draft-cheshire-nat-pmp-03 (work in progress), April 2008 (TXT).
[IGD] UPnP Forum, “Internet Gateway Device (IGD) V 1.0,” November 2001.
[PORTREG] Internet Assigned Numbers Authority (IANA), “Service Name and Transport Protocol Port Number Registry,”  http://www.iana.org/assignments/port-numbers.
[PROTSERVREG] Internet Assigned Numbers Authority (IANA), “Protocol and Service Names Registry,”  http://www.iana.org/assignments/service-names.
[RFC0959] Postel, J. and J. Reynolds, “File Transfer Protocol,” STD 9, RFC 959, October 1985 (TXT).
[RFC1078] Lottor, M., “TCP port service Multiplexer (TCPMUX),” RFC 1078, November 1988 (TXT).
[RFC1700] Reynolds, J. and J. Postel, “Assigned Numbers,” RFC 1700, October 1994 (TXT).
[RFC2782] Gulbrandsen, A., Vixie, P., and L. Esibov, “A DNS RR for specifying the location of services (DNS SRV),” RFC 2782, February 2000 (TXT).
[RFC2957] Daigle, L. and P. Faltstrom, “The application/whoispp-query Content-Type,” RFC 2957, October 2000 (TXT).
[RFC3232] Reynolds, J., “Assigned Numbers: RFC 1700 is Replaced by an On-line Database,” RFC 3232, January 2002 (TXT).
[RFC3692] Narten, T., “Assigning Experimental and Testing Numbers Considered Useful,” BCP 82, RFC 3692, January 2004 (TXT).
[RFC4342] Floyd, S., Kohler, E., and J. Padhye, “Profile for Datagram Congestion Control Protocol (DCCP) Congestion Control ID 3: TCP-Friendly Rate Control (TFRC),” RFC 4342, March 2006 (TXT).
[RFC4960] Stewart, R., “Stream Control Transmission Protocol,” RFC 4960, September 2007 (TXT).
[RFC5237] Arkko, J. and S. Bradner, “IANA Allocation Guidelines for the Protocol Field,” BCP 37, RFC 5237, February 2008 (TXT).
[RFC5389] Rosenberg, J., Mahy, R., Matthews, P., and D. Wing, “Session Traversal Utilities for NAT (STUN),” RFC 5389, October 2008 (TXT).
[RFC5595] Fairhurst, G., “The Datagram Congestion Control Protocol (DCCP) Service Codes,” RFC 5595, September 2009 (TXT).
[RFC5766] Mahy, R., Matthews, P., and J. Rosenberg, “Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN),” RFC 5766, April 2010 (TXT).
[SRVREG] “DNS SRV Service Types Registry,”  http://www.dns-sd.org/ServiceTypes.html.
[SYSFORM] Internet Assigned Numbers Authority (IANA), “Application for System (Well Known) Port Number,”  http://www.iana.org/cgi-bin/sys-port-number.pl.
[TRILOGY] “Trilogy Project,”  http://www.trilogy-project.org/.
[USRFORM] Internet Assigned Numbers Authority (IANA), “Application for User (Registered) Port Number,”  http://www.iana.org/cgi-bin/usr-port-number.pl.


 TOC 

Authors' Addresses

  Michelle Cotton
  Internet Corporation for Assigned Names and Numbers
  4676 Admiralty Way, Suite 330
  Marina del Rey, CA 90292
  USA
Phone:  +1 310 823 9358
Email:  michelle.cotton@icann.org
URI:  http://www.iana.org/
  
  Lars Eggert
  Nokia Research Center
  P.O. Box 407
  Nokia Group 00045
  Finland
Phone:  +358 50 48 24461
Email:  lars.eggert@nokia.com
URI:  http://research.nokia.com/people/lars_eggert/
  
  Joe Touch
  USC/ISI
  4676 Admiralty Way
  Marina del Rey, CA 90292
  USA
Phone:  +1 310 448 9151
Email:  touch@isi.edu
URI:  http://www.isi.edu/touch
  
  Magnus Westerlund
  Ericsson
  Farogatan 6
  Stockholm 164 80
  Sweden
Phone:  +46 8 719 0000
Email:  magnus.westerlund@ericsson.com
  
  Stuart Cheshire
  Apple Inc.
  1 Infinite Loop
  Cupertino, CA 95014
  USA
Phone:  +1 408 974 3207
Email:  cheshire@apple.com