Re: [Sipping] Re: draft-rosenberg-sipping-overload-reqs recovery

Cullen Jennings <fluffy@cisco.com> Thu, 23 November 2006 17:55 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GnIn2-0001BW-9b; Thu, 23 Nov 2006 12:55:12 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GnIn0-0001BH-27 for sipping@ietf.org; Thu, 23 Nov 2006 12:55:10 -0500
Received: from sj-iport-5.cisco.com ([171.68.10.87]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GnImy-0008B1-FR for sipping@ietf.org; Thu, 23 Nov 2006 12:55:10 -0500
Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-5.cisco.com with ESMTP; 23 Nov 2006 09:55:08 -0800
Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id kANHt7wF021660; Thu, 23 Nov 2006 09:55:07 -0800
Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.12.10/8.12.6) with ESMTP id kANHt7W4029439; Thu, 23 Nov 2006 09:55:07 -0800 (PST)
Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 23 Nov 2006 09:55:06 -0800
Received: from [10.0.34.15] ([10.21.97.93]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 23 Nov 2006 09:55:06 -0800
In-Reply-To: <455A7C54.1070201@cisco.com>
References: <OFEB9D6EA2.9E95935A-ONC1257226.002709EE-C1257226.002882C2@netfr.alcatel.fr> <455A7C54.1070201@cisco.com>
Mime-Version: 1.0 (Apple Message framework v752.2)
Content-Type: text/plain; charset="US-ASCII"; delsp="yes"; format="flowed"
Message-Id: <28C739C9-4751-4E88-BC75-14B498B6C851@cisco.com>
Content-Transfer-Encoding: 7bit
From: Cullen Jennings <fluffy@cisco.com>
Subject: Re: [Sipping] Re: draft-rosenberg-sipping-overload-reqs recovery
Date: Thu, 23 Nov 2006 12:55:07 -0500
To: Jonathan Rosenberg <jdrosen@cisco.com>
X-Mailer: Apple Mail (2.752.2)
X-OriginalArrivalTime: 23 Nov 2006 17:55:06.0572 (UTC) FILETIME=[827D80C0:01C70F28]
DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=6291; t=1164304507; x=1165168507; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=fluffy@cisco.com; z=From:=20Cullen=20Jennings=20<fluffy@cisco.com> |Subject:=20Re=3A=20[Sipping]=20Re=3A=20draft-rosenberg-sipping-overload- reqs=20recovery |Sender:=20; bh=f3kvHOczuhzgqvCB9WfmjBXHOjtI1dBJ6VNLvMLOnsQ=; b=BEmcqMUtkz+Rb6jcYJhz2mE7LyVWCYCpWs7vxNFnH1BRtqeVo3EccrrINvBmxNTTfHWQ5L1O kVMXuqDZCzHATnSq0tgiMy4WtHghcQiK2v53QVpg3AiGIRvLWc6zhgEk;
Authentication-Results: sj-dkim-2; header.From=fluffy@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 29dc808194f5fb921c09d0040806d6eb
Cc: Volker Hilt <volkerh@bell-labs.com>, Albrecht.Schwarz@alcatel.de, sipping <sipping@ietf.org>
X-BeenThere: sipping@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "SIPPING Working Group \(applications of SIP\)" <sipping.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/sipping>, <mailto:sipping-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:sipping@ietf.org>
List-Help: <mailto:sipping-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/sipping>, <mailto:sipping-request@ietf.org?subject=subscribe>
Errors-To: sipping-bounces@ietf.org

That captures what I was trying to say - thanks. I can see how people  
would say this is an obvious implicit requirement and does not need  
mentioning but I have been involved with some, uh, systems that  
failed this requirement.

On Nov 14, 2006, at 9:32 PM, Jonathan Rosenberg wrote:

> I think its reasonable to make it an explicit requirement. How about:
>
> <t hangText="REQ 21:"> The overload mechanism should ensure that the
> system remains stable. When the offered load drops from above the
> overall capacity of the network to below the overall capacity, the
> throughput should stabilize and become equal to the offered load.
> </t>
>
>
> -Jonathan R.
>
> Albrecht.Schwarz@alcatel.de wrote:
>
>> Stability is an implicit requirement of every load control and  
>> overload
>> protection mechanism (for network elements and networks targeting  
>> high
>> system and/or service availability).
>> The rational behind is the fact that any overload control may be  
>> modeled (&
>> realized) as open or closed control loop. Any control arround  
>> signalling
>> protocols is typically realized as closed loop (e.g. due to realtime
>> background).
>> A well designed closed control requires a proof of stability for the
>> intended range of operation; stability is an implicit requirement  
>> from
>> control theory, particularly for load control with stochastic  
>> components as
>> in our case here.
>> - Albrecht
>>                                                                       
>>                                                                       
>>                     Volker  
>> Hilt                                                                  
>>                                                              
>> <volkerh@bell-la         To:      Cullen Jennings  
>> <fluffy@cisco.com>                                                    
>>                  bs.com>                  cc:      sipping  
>> <sipping@ietf.org>                                                    
>>                                                   Subject: Re:  
>> [Sipping] Re: draft-rosenberg-sipping-overload-reqs  
>> recovery                                      08.11.2006  
>> 17:18                                                                 
>>                                                                       
>>                                                                       
>>                                 I think that stability of overload  
>> control is an important requirement.
>> We certainly want to avoid building something that starts to  
>> oscillate
>> once it reaches overload state. It may be somehow implicit to REQ 1
>> since an unstable system will hardly be able to maintain the overall
>> useful throughput at a high level.
>> Volker
>> Cullen Jennings wrote:
>>> Clearly this was a long way from the text for a requirement but,  
>>> yes, I
>>> was proposing that this be added as one of the requirements. I don't
>>> feel strongly about this and if we can't figure out how to  
>>> express this
>>> as a requirement that is useful, I can certainly live with not  
>>> adding it.
>>>
>>> The reason I think it is a requirement is I can easily imagine  
>>> that the
>>> mechanism for doing overload push-back causes the systems to fail  
>>> in the
>>> way I described below (i.e. never recover back to steady state).
>>>
>>>
>>> On Nov 6, 2006, at 11:17 AM, Jonathan Rosenberg wrote:
>>>
>>>
>>>>
>>>> Cullen Jennings wrote:
>>>>
>>>>
>>>>> A possible additional requirement....
>>>>> Imagine a system (perhaps a single proxy) that could do 100cps. It
>>>>> is  in steady state doing 80cps with very few retransmission. Then
>>>>> for 5  minutes the incoming requests goes to 500cps then drops  
>>>>> back
>>>>> to an  incoming call rate of 80cps. The question is, how long  
>>>>> before
>>>>> the  system gets back to the state where it if is successfully
>>>>> processing  all the 80cps?
>>>>
>>>> As soon as it can. Are you suggesting a requirement here? Seems  
>>>> like
>>>> this is an implementation thing and wouldn't impact any protocol
>>>> mechanisms.
>>>>
>>>>
>>>>> I have seen systems that never recover - that is bad. I think  
>>>>> one of
>>>>> the design goals is that it is at least possible to build to  
>>>>> systems
>>>>> that recover back to steady state relatively quickly after an
>>>>> overload impulse.
>>>>
>>>> Sure; but I'm not sure I see the protocol requirement.
>>>>
>>>> -Jonathan R.
>>>>
>>>>
>>>>
>>>> --Jonathan D. Rosenberg, Ph.D.                   600 Lanidex Plaza
>>>> Cisco Fellow                                   Parsippany, NJ  
>>>> 07054-2711
>>>> Cisco Systems
>>>> jdrosen@cisco.com                              FAX:   (973)  
>>>> 952-5050
>>>> http://www.jdrosen.net                         PHONE: (973)  
>>>> 952-5000
>>>> http://www.cisco.com
>>>
>>> _______________________________________________
>>> Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
>>> This list is for NEW development of the application of SIP
>>> Use sip-implementors@cs.columbia.edu for questions on current sip
>>> Use sip@ietf.org for new developments of core SIP
>> _______________________________________________
>> Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
>> This list is for NEW development of the application of SIP
>> Use sip-implementors@cs.columbia.edu for questions on current sip
>> Use sip@ietf.org for new developments of core SIP
>> _______________________________________________
>> Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
>> This list is for NEW development of the application of SIP
>> Use sip-implementors@cs.columbia.edu for questions on current sip
>> Use sip@ietf.org for new developments of core SIP
>
> -- 
> Jonathan D. Rosenberg, Ph.D.                   600 Lanidex Plaza
> Cisco Fellow                                   Parsippany, NJ  
> 07054-2711
> Cisco Systems
> jdrosen@cisco.com                              FAX:   (973) 952-5050
> http://www.jdrosen.net                         PHONE: (973) 952-5000
> http://www.cisco.com
>

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sip@ietf.org for new developments of core SIP