Re: [aqm] Gaming ECN

Michael Welzl <michawe@ifi.uio.no> Sun, 22 March 2015 04:06 UTC

Return-Path: <michawe@ifi.uio.no>
X-Original-To: aqm@ietfa.amsl.com
Delivered-To: aqm@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C01DC1A0373 for <aqm@ietfa.amsl.com>; Sat, 21 Mar 2015 21:06:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qgJjG9tMqTm9 for <aqm@ietfa.amsl.com>; Sat, 21 Mar 2015 21:06:08 -0700 (PDT)
Received: from mail-out5.uio.no (mail-out5.uio.no [IPv6:2001:700:100:10::17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD2351A0141 for <aqm@ietf.org>; Sat, 21 Mar 2015 21:04:58 -0700 (PDT)
Received: from mail-mx6.uio.no ([129.240.10.40]) by mail-out5.uio.no with esmtp (Exim 4.80.1) (envelope-from <michawe@ifi.uio.no>) id 1YZX85-0003yM-5r; Sun, 22 Mar 2015 05:04:49 +0100
Received: from [38.96.210.190] (helo=[10.1.212.173]) by mail-mx6.uio.no with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) user michawe (Exim 4.80.1) (envelope-from <michawe@ifi.uio.no>) id 1YZX84-0001ql-AL; Sun, 22 Mar 2015 05:04:49 +0100
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\))
From: Michael Welzl <michawe@ifi.uio.no>
In-Reply-To: <alpine.DEB.2.02.1503211539090.22474@nftneq.ynat.uz>
Date: Sat, 21 Mar 2015 23:04:40 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <5F418C1B-269E-420B-8CB7-3DC659235418@ifi.uio.no>
References: <20150305121923.30314.56076.idtracker@ietfa.amsl.com> <alpine.DEB.2.02.1503201704130.22474@nftneq.ynat.uz> <20150321012329.GU39886@verdi> <alpine.DEB.2.02.1503211539090.22474@nftneq.ynat.uz>
To: David Lang <david@lang.hm>
X-Mailer: Apple Mail (2.2070.6)
X-UiO-SPF-Received:
X-UiO-Ratelimit-Test: rcpts/h 3 msgs/h 1 sum rcpts/h 7 sum msgs/h 2 total rcpts 26692 max rcpts/h 44 ratelimit 0
X-UiO-Spam-info: not spam, SpamAssassin (score=-5.0, required=5.0, autolearn=disabled, UIO_MAIL_IS_INTERNAL=-5, uiobl=NO, uiouri=NO)
X-UiO-Scanned: 49B20E6EE376EFC43D274FF0654A897D07189673
X-UiO-SPAM-Test: remote_host: 38.96.210.190 spam_score: -49 maxlevel 80 minaction 2 bait 0 mail/h: 1 total 2 max/h 1 blacklist 0 greylist 0 ratelimit 0
Archived-At: <http://mailarchive.ietf.org/arch/msg/aqm/Katg31p69tCekzoQBuA12LEY4SM>
Cc: John Leslie <john@jlc.net>, "aqm@ietf.org list" <aqm@ietf.org>
Subject: Re: [aqm] Gaming ECN
X-BeenThere: aqm@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Discussion list for active queue management and flow isolation." <aqm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/aqm>, <mailto:aqm-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/aqm/>
List-Post: <mailto:aqm@ietf.org>
List-Help: <mailto:aqm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/aqm>, <mailto:aqm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Mar 2015 04:06:12 -0000

> On 21. mar. 2015, at 17.47, David Lang <david@lang.hm>; wrote:
> 
> On Fri, 20 Mar 2015, John Leslie wrote:
> 
>>> If you do #2, then flows with ECN effectively get priority over flows
>>> without ECN
>> 
>>  It's not "priority". It's an occasional packet which gets through
>> instead of being dropped.
> 
> is it? or is it that in order to keep the link from being congeted, flows with ECN marked (but not honored) will consistantly get more packets through than ones wihtout ECN?
> 
> If it' just an occasional packet, it's not a big deal, but if the non-ECN flows get slowed more because the ECN-marked flows are getting more packet through, that's a priority difference, not just an occasional packet.

Let's consider two cases:

1) an attacker who does not care about congestion control and just wants to flood.

Such a sender can get more packets into the queue with ECN, but sending way too many will eventually create drops at the physical queue limit. In contrast, without ECN, the sender would get occasional drops before it reaches the hard queue limit. How "occasional" these drops are depends on how aggressively the AQM mechanism drops packets - the more aggressive it is, the closer it becomes to operating like the hard queue limit that is there anyway.

This doesn't strike me as a convincing scenario for ECN being truly harmful.


2) an application developer who wants to be better off than everyone else by ECN-enabling packets but ignoring ECN marks.

This application developer cares about network performance, and will therefore want to do some form of congestion control (as illustrated by various applications deliberately doing it: Skype, Adobe's RTMFP, QUIC, ...). Will ECN give this application a persistently better behavior then?

I don't have an answer for the case when the queue is shared with others (but if /  when / how often is not known to the app programmer beforehand). If we consider only flows by this application, and assume TCP-like congestion control, we have example graphs:
https://www.duo.uio.no/handle/10852/37381
see Figure 14.

=> because every ECN-capable packet enters the queue, it influences the dynamics of the AQM mechanism, and what then happens depends on how aggressive the AQM mechanism reacts. Note that these graphs vary quite a bit - they show a rather inconsistent behavior, and definitely do not show that TCP with ECN had persistently higher throughput. Also note that incorrect behavior might increase the delay, and clearly raw throughput is not the main metric of interest to all applications.

So that was ECN vs. no-ECN with TCP. What about applying a different congestion control mechanism to get a benefit?
Well - CUBIC is already more aggressive than standard TCP, with or without ECN, and will "win" against it because it increases faster and backs off by multiplying with 0.7, not 0.5. THIS gives you a higher priority - but you don't need ECN for that.


All in all, the "more throughput by gaming ECN" image seems to be blurry at best.


Cheers,
Michael