RE: ECN in QUIC connection migration

Ingemar Johansson S <ingemar.s.johansson@ericsson.com> Mon, 12 February 2018 21:12 UTC

Return-Path: <ingemar.s.johansson@ericsson.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2207C12D94D for <quic@ietfa.amsl.com>; Mon, 12 Feb 2018 13:12:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.321
X-Spam-Level:
X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=ZjVf4t2I; dkim=pass (1024-bit key) header.d=ericsson.com header.b=A648h21w
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jJEnlkPC-M6y for <quic@ietfa.amsl.com>; Mon, 12 Feb 2018 13:12:01 -0800 (PST)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13825126FDC for <quic@ietf.org>; Mon, 12 Feb 2018 13:12:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1518469919; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=k4N+FTwF3dNDV+MaxFXbyy16Wnui2tdVpLP3GvdFhTg=; b=ZjVf4t2IVVDD0IzBv8feWMDm7YOg66IR+0bNzRhzCs/P4Zuoh1TRcUG54WopOxZF GLuvvtlSXmp9krtewjCnRevFBrjTiTmBqb2JqAO7k2RybEbImvS6piJAqT7Dqqgd 2pQJxJofpkTirMOMNJ92KwSwVvkrW8FDlzfF8oNT6NE=;
X-AuditID: c1b4fb30-399ff70000004778-a3-5a82031eba77
Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.183.36]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 54.FE.18296.E13028A5; Mon, 12 Feb 2018 22:11:59 +0100 (CET)
Received: from EUR02-VE1-obe.outbound.protection.outlook.com (153.88.183.145) by oa.msg.ericsson.com (153.88.183.36) with Microsoft SMTP Server (TLS) id 14.3.352.0; Mon, 12 Feb 2018 22:11:58 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=k4N+FTwF3dNDV+MaxFXbyy16Wnui2tdVpLP3GvdFhTg=; b=A648h21w60DRWeFE/ALkeXq5dN0QkAVdr3YKrhHt8bzauTCB3GIUnytwRqbDwsE9ZOgpmSTkgzQgrjh35y7HTpZ/lD8gsdRnRJ0uWserJNPlthIyVEjlNd4aPAkc4mjN62XruO8J+9/+fP+ljKP+tDW9txMlQaeE8S4EIg7lPhs=
Received: from HE1PR0702MB3625.eurprd07.prod.outlook.com (52.133.6.23) by HE1PR0702MB3705.eurprd07.prod.outlook.com (52.133.6.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.7; Mon, 12 Feb 2018 21:11:56 +0000
Received: from HE1PR0702MB3625.eurprd07.prod.outlook.com ([fe80::38e6:dea0:2f4f:715]) by HE1PR0702MB3625.eurprd07.prod.outlook.com ([fe80::38e6:dea0:2f4f:715%13]) with mapi id 15.20.0506.013; Mon, 12 Feb 2018 21:11:56 +0000
From: Ingemar Johansson S <ingemar.s.johansson@ericsson.com>
To: Mirja Kühlewind <mirja.kuehlewind@tik.ee.ethz.ch>
CC: "De Schepper, Koen (Nokia - BE/Antwerp)" <koen.de_schepper@nokia-bell-labs.com>, "ekinnear@apple.com" <ekinnear@apple.com>, "Lubashev, Igor" <ilubashe@akamai.com>, Ian Swett <ianswett@google.com>, QUIC WG <quic@ietf.org>, Christian Huitema <huitema@huitema.net>
Subject: RE: ECN in QUIC connection migration
Thread-Topic: ECN in QUIC connection migration
Thread-Index: AdObSzPyOy5d4GB2SeSGz4shYev25AAZWcAAAB/s3/ABUaWKkACnvEWAAAvBcBA=
Date: Mon, 12 Feb 2018 21:11:56 +0000
Message-ID: <HE1PR0702MB3625AF6F741A89D4BD68E7CCC2F70@HE1PR0702MB3625.eurprd07.prod.outlook.com>
References: <HE1PR0702MB36252D61A7A51B848B5DA9E7C2FA0@HE1PR0702MB3625.eurprd07.prod.outlook.com> <639A6936-34F2-4C27-973A-EEAE878677FA@apple.com> <VI1PR0701MB2126E79A17DB715F6C91EA05B9F90@VI1PR0701MB2126.eurprd07.prod.outlook.com> <HE1PR0702MB36256D92C008302CBD908DE9C2F20@HE1PR0702MB3625.eurprd07.prod.outlook.com> <EFA61DBC-1F6F-49C2-906C-D0054F2341C7@tik.ee.ethz.ch>
In-Reply-To: <EFA61DBC-1F6F-49C2-906C-D0054F2341C7@tik.ee.ethz.ch>
Accept-Language: sv-SE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ingemar.s.johansson@ericsson.com;
x-originating-ip: [83.226.2.151]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; HE1PR0702MB3705; 7:glbuz5qk8i5CH2iLzsPgzCJenehGTXExeLR63c+/eMjUawkHX+csYT1uyFSKYPe+JtW2mK92er98YPpllORNuCPtA+0YO/1f17X2ySMJOmgufcqFMkr3UPjj3o8AjQhn4cVQ9OpIOPy54esm/jBW7EgRzM9J9s2IN8H9Ds8Huh2MZHpN/DmIT08PosXnWRiMPPLZjyw8kBlIGMaYhoXJGKGtjHSCO7mOJ/d5V/mb07prknt103D24+GfuCVncUsQ
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: 7c96a01b-8481-44a0-eee5-08d5725d3f87
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:HE1PR0702MB3705;
x-ms-traffictypediagnostic: HE1PR0702MB3705:
x-microsoft-antispam-prvs: <HE1PR0702MB3705D205544C9A008A570E7BC2F70@HE1PR0702MB3705.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(166708455590820)(211936372134217)(100405760836317)(202460600054446)(153496737603132)(31960201722614);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231101)(2400082)(944501161)(93006095)(93001095)(6041288)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:HE1PR0702MB3705; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0702MB3705;
x-forefront-prvs: 0581B5AB35
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39860400002)(39380400002)(366004)(396003)(346002)(51914003)(189003)(199004)(13464003)(5660300001)(4326008)(7696005)(68736007)(106356001)(25786009)(5250100002)(478600001)(33656002)(93886005)(966005)(4743002)(105586002)(2900100001)(54906003)(99286004)(14454004)(316002)(3280700002)(3660700001)(26005)(102836004)(7736002)(305945005)(186003)(66066001)(76176011)(53546011)(6506007)(59450400001)(2906002)(53936002)(6246003)(15974865002)(97736004)(74316002)(6436002)(6306002)(9686003)(8666007)(55016002)(6916009)(81166006)(229853002)(2950100002)(8676002)(6116002)(86362001)(81156014)(3846002)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0702MB3705; H:HE1PR0702MB3625.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: v2K2OtXUuNE4jbZm8e2uQocxS2BlZdLbg+jt2LJaWmN6BoPZ4HMvHxYCmHZf3LUiJV++42AiTcLZsRjvC2j6VA==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 7c96a01b-8481-44a0-eee5-08d5725d3f87
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Feb 2018 21:11:56.4628 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3705
X-OriginatorOrg: ericsson.com
X-Brightmail-Tracker: H4sIAAAAAAAAA02SfUhTURjGO/fe7V6txXEpvn5hjay03EwUVlloJC2pKIhIJXLpRcVPNh1Z CGr1hx/5XbolOGuaqVgNdSmGaSFqmFpQaqmYWqhE6swPzGrbXdB/v/d9nue857wchhS28JyZ 2MQUVpEojxfxbSn1JcNub3cyK8yn0UhL8xZPSksy79PS9fFWnjQro5aUdq9UE9Kn9aWUNE+7 NZCWlbzWkrLm3jW+TKtPlY2W91EynW6dkGWtPODLuhd+8s/RYbYBUWx8rIpVSI5F2Ma8aFJT yX3h155NltMZqCI0B9kwgP2gac5ImVmIXyHQrhzOQbYm7kEw36BD5oLCSwSs1qzzOaWMgHld AcUVMwjmCu9a8nwcAI+7Vk0RhrHHIWBcOm/2kLiIAHVbO2327MBiGBqp55vZHktAPzhEcHwW Pnb3IDNT2ANql8YsZwpwBAyN1SFu2DoBy5pbloANPg71b0stjLAbTKyOWwIkdoTR6UqCexwG XfsAybEDzE795nH+SFgaucPj+jthrFhrZTd4V5lrGQa4hYBNY7Y1LIbmou+I4zOgX261mvoQ GNSfaE44AGtVVVZOgp6RfIIzVSKoHxzgcUUFCX0d2XzO5Qrjy7dRIZJo/ru6xrQ/EnvCkzZr exeU5k7SGss67KBXPU1pEVWHHJSs8mpCtK+vmFXERiqVSYniRDZFj0y/qbNpw+c5mv0W1IUw g0TbBAV/MsOEPLlKmZbQhYAhRfaCXzdNLUGUPO06q0i6okiNZ5VdyIWhRI6C3lOCMCGOlqew cSybzCr+qQRj45yB7p1u9L84nO7nkKappOc3quNfqvznA8UVDPTsCV4sex9h2DhRqE0vlnjq bxi21xTMHlLp3I9e3hzuv5B2xJ7nltn/aN+M+8JIgCoouG6L9xCVv9/o5bnXteHHlPCNwDn1 y0nJVGlInJOhJHzgw9ecTkef0FAPOyfDxGd/l46HE2UiShkjP+hFKpTyv4yTBoNJAwAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/VZvBGERS0nTidevuubqGuvwom1E>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Feb 2018 21:12:04 -0000

Hi 

Please see inline

BR
Ingemar

> -----Original Message-----
> From: Mirja Kühlewind [mailto:mirja.kuehlewind@tik.ee.ethz.ch]
> Sent: den 12 februari 2018 16:26
> To: Ingemar Johansson S <ingemar.s.johansson@ericsson.com>
> Cc: De Schepper, Koen (Nokia - BE/Antwerp) <koen.de_schepper@nokia-
> bell-labs.com>; ekinnear@apple.com; Lubashev, Igor
> <ilubashe@akamai.com>; Ian Swett <ianswett@google.com>; QUIC WG
> <quic@ietf.org>; Christian Huitema <huitema@huitema.net>
> Subject: Re: ECN in QUIC connection migration
> 
> Hi Ingemar,
> 
> two points.
> 
> I think it would be good to be as explicit as possible here, therefore I would
> prefer if an endpoint that knows that it can not access the ECN IP bits
> indicates this directly in the handshake. In this case no further testing is
> needed.
<IJ> Yes, this was the original idea, we discussed this at the ECN QUIC side meeting though and afterwards and as far as I understand it, there was a consensus that it was unnecessarily complicated. So we selected a method where we just verify that the ECT(0),ECT(1),CE counters have reasonable values. If that is not the case, then it is an indication that either the path or the endpoints do not support ECN. </IJ>

> 
> Further, the path testing itself is independent of QUIC and can be used for
> any protocol. Moreover, it’s more complicated than just testing ECT. I guess
> the general advice here is to remember which codepoints were send and
> compare this to the feedback provided. If discrepancies are observed that
> indicate that a middlebox has changed these bits, all packets should be
> marked as no-ECT (while additional testing MAY be performed at any later
> point in time). However, how exactly this testing should look like, should not
> be specified in this doc (but more generally).
<IJ> It is possible that the actual path verification can be put as a separate document, not sure if that is accepted by the group or it is desired with a more elaborate description directly in the QUIC drafts. As regards to verification, I do believe that the proposed counters should be able to detect bleaching, accidental remarking from ECT(0) to ECT(1) and also cases where packets are not CE marked at all despite other signs of congestion </IJ>


> 
> Mirja
> 
> 
> > Am 09.02.2018 um 08:34 schrieb Ingemar Johansson S
> <ingemar.s.johansson@ericsson.com>:
> >
> > Hi Eric, Koen + others
> >
> > Thanks for the comments and the update. A question to the rest of the
> audience, does the presented text explain sufficiently enough how ECN
> works with connection migration ?
> > https://github.com/quicwg/base-drafts/wiki/ECN-in-QUIC#transport-
> draft-connection-migration
> >
> >
> > /Ingemar
> >
> >
> > From: De Schepper, Koen (Nokia - BE/Antwerp)
> [mailto:koen.de_schepper@nokia-bell-labs.com]
> > Sent: den 2 februari 2018 15:44
> > To: ekinnear@apple.com; Ingemar Johansson S
> <ingemar.s.johansson@ericsson.com>
> > Cc: QUIC WG <quic@ietf.org>; Ian Swett <ianswett@google.com>;
> Lubashev, Igor <ilubashe@akamai.com>; Christian Huitema
> <huitema@huitema.net>
> > Subject: RE: ECN in QUIC connection migration
> >
> > Hi Ingemar,
> >
> > I also read again through the document, and had following comments:
> >
> > I replaced:
> > “The ACK_ECN frame is used to convey ACKs when the ECN capability
> exchange concludes that ECN should be used for the given connection.”
> > Originally it sounds as if the counters are not echoed anymore if the ECN
> capability check fails. I assume this was not the intention, but if it is: First, we
> don’t have a protocol or decision point defined when that condition is met
> (sender should let the receiver know in the next packet), and second, I
> would always send the echo, as we might “try again later (with another
> ECT?)”, or might decide to use the ECN bits differently later.
> >
> > I also changed the text around the connection migration, I think before Eric
> reviewed it. I made it such that every new path creates a new connection
> state with an initialized congestion control state and ECN counters (at least
> ECN counters reset to 0s). Not sure if this matches with the other sections in
> the QUIC draft.
> >
> > I also had the thought whether it was really needed to have the 2 cases. I
> agree we should simplify, by just starting over and doing the check
> unconditionally whether it was successful or not in a previous path.
> >
> > Regards,
> > Koen.
> >
> > From: ekinnear@apple.com [mailto:ekinnear@apple.com]
> > Sent: Friday, February 2, 2018 12:02 AM
> > To: Ingemar Johansson S <ingemar.s.johansson@ericsson.com>
> > Cc: QUIC WG <quic@ietf.org>; Ian Swett <ianswett@google.com>;
> Lubashev, Igor <ilubashe@akamai.com>; Christian Huitema
> <huitema@huitema.net>; De Schepper, Koen (Nokia - BE/Antwerp)
> <koen.de_schepper@nokia-bell-labs.com>
> > Subject: Re: ECN in QUIC connection migration
> >
> > Hi Ingemar,
> >
> > This generally looks good to me!
> > A few questions and observations:
> >
> > There are two unique cases:
> >
> >                 • ECN capability check successful at initial connection setup
> >                 • ECN capability check failed at initial connection setup
> >
> > Are these actually any different in terms of action taken by an endpoint?
> > It seems like on the new network path the endpoint would go through the
> same process of: (a) verify ECN capability and if successful to whatever
> degree then (b) run the rest of the ECN machinery as appropriate.
> >
> > In other words, as long as you allow people to start using ECN upon
> migration (in other words, to allow starting it after the initial connection
> establishment), then the specifics for ECN with migration is essentially one
> statement, which is “do the ECN process on each new network path that you
> use”.
> >
> > Connection migration has impact on the number of reported CE marked
> packets. A new connection state with new congestion control state and ECN
> counters is instantiated at the sender and receiver. The ECN counters MUST
> start from zero again.
> >
> > This seems fine to me, it’s inline with the rest of the congestion
> control/loss recovery state that also needs to be reset for the new path.
> >
> > Given that each migration requires at least one exchange of packets at the
> beginning (at the very least for address validation from the side of the
> endpoint that didn’t migrate), it seems like that’s an excellent moment to
> mark the packets and perform the ECN capability detection. Those packets
> are also likely padded, etc. similar to initial packets since they’re on a
> previously unused network path.
> >
> > I think the current proposed requirement of just using the “first” packets
> and marking those is sufficient (and good to avoid any requirement as to
> which frames are contained in those packets), since we are always
> exchanging packets in both directions immediately after migration.
> >
> > This has the added benefit such that any endpoint “probing” possible
> network paths could include the bits necessary to detect ECN capability on
> the path being probed, so it could even know before migrating whether or
> not it would be able to use ECN on that new path.
> >
> > Thanks,
> > Eric
> >
> >
> >
> >
> > On Feb 1, 2018, at 3:07 AM, Ingemar Johansson S
> <ingemar.s.johansson@ericsson.com> wrote:
> >
> > Hi
> > I have written up different aspects of connection migration and how it
> plays with ECN.
> > https://github.com/quicwg/base-drafts/wiki/ECN-in-QUIC#transport-
> draft-connection-migration
> >
> > A caveat.. I am a bit unsure about the definition of connection migration .
> My interpretation is that a client moves to a new IP address due to e.g. a NAT
> rebind or switch from WiFi to cellular, right ?. Is a new connection
> instantiated at a connection migration ?
> >
> > /Ingemar
> >
> > ==================================
> > Ingemar Johansson  M.Sc.
> > Master Researcher
> >
> > Ericsson Research
> > Network Protocols & E2E Performance
> > Labratoriegränd 11
> > 971 28, Luleå, Sweden
> > Phone +46-1071 43042
> > SMS/MMS +46-73 078 3289
> > ingemar.s.johansson@ericsson.com
> > www.ericsson.com
> >
> >                  You can't start a fire
> >   Worrying 'bout your little world falling apart
> >                Bruce Springsteen
> > ==================================