Re: [Tsv-art] [manet] Tsvart early review of draft-ietf-manet-dlep-credit-flow-control-09

"Black, David" <David.Black@dell.com> Tue, 27 February 2024 00:30 UTC

Return-Path: <prvs=1787bd1bcd=david.black@dell.com>
X-Original-To: tsv-art@ietfa.amsl.com
Delivered-To: tsv-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B512C157938; Mon, 26 Feb 2024 16:30:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.109
X-Spam-Level:
X-Spam-Status: No, score=-7.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=dell.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WT_x9We5HxRF; Mon, 26 Feb 2024 16:30:34 -0800 (PST)
Received: from mx0a-00154904.pphosted.com (mx0a-00154904.pphosted.com [148.163.133.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2416C165518; Mon, 26 Feb 2024 16:30:34 -0800 (PST)
Received: from pps.filterd (m0170391.ppops.net [127.0.0.1]) by mx0a-00154904.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 41QLrovY029184; Mon, 26 Feb 2024 19:30:33 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dell.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=smtpout1; bh=BhhXoK34t9FIkWIkCApn3eoXpPwjaiK/LtnT3ibD8nE=; b=mKOHYg9qUbXwcz7lVjGE19GLxclJZSJXDDpaMg0jxX0VB41rqgRonw1RmbArTw7SCf1Y 7izYRf7I0RjRn4IxdxtOe8Sp2OTVZjwj4N7ZnxRquJm3wbv91M1llHQBzzcqYMScIBf0 9l98aFLdjGfm3pv7eFyXzC3rcL9CY2fTohxV2+OOWUOQjkYS3YbJ3g4eAK5E5nJvX3NC /f1Nlb6LHXtiOqF6fTF1NMSfGCVnLj5Tfp/gTLUM04btDgz+xOhsPN5teIDo17YuWWmS WNeueaXV0cmtYCvVpybgKVjm16YjdKJPAdXgLOZ3FPF7yG00EU8Ev5fL5gMePCvi3KQd Gw==
Received: from mx0b-00154901.pphosted.com (mx0b-00154901.pphosted.com [67.231.157.37]) by mx0a-00154904.pphosted.com (PPS) with ESMTPS id 3wfcg49mkj-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 26 Feb 2024 19:30:33 -0500
Received: from pps.filterd (m0089483.ppops.net [127.0.0.1]) by mx0b-00154901.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 41R0KCAf005015; Mon, 26 Feb 2024 19:30:32 -0500
Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2169.outbound.protection.outlook.com [104.47.58.169]) by mx0b-00154901.pphosted.com (PPS) with ESMTPS id 3wgxyhe3pa-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 26 Feb 2024 19:30:31 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gXUsyIuDJEpXMEjAopVLGbXx3mfigDQIkugCwfMCUxgP5HattnBTUw3nTY1xzf5McBr1jdQcrd68zT7jlAXS8OF1zs7OWZFzsxjkhdvjxfFBi1ygsxMzjOhbEeejjeAtw04UTyQSCVzTaiaJeTrW8pLB60k8P0JhUcK1imKSjou+qvWpwNj0B28Aw3c21lSGkHJBDKQoVoZJ3nTe63hLhlSEzNsL6DPyQEE6iha4drhFQgTlEIBItHA9ZJdNy+3PiBCKn4Ueol/vRz5hwSU+OoBzlDWRH3SxTuaqyQac5A03PR9K2dVJCqrRd2J85S25Z2aFCSqegUrjQT63ECf+UA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BhhXoK34t9FIkWIkCApn3eoXpPwjaiK/LtnT3ibD8nE=; b=eIZ/vZ3NMfGzKH/AhZRIZzTlPT/ejfBPxECvRzh5EeoUsKlwEWy1kACNRv8SS+WndKrMKHFV/hx/r0yQlj0k1HZ7iANoTiDzesTAQWc+kYbpJ8++Gk1cEA+FjgjrU/dOPfj/eg1WgdoLeGfVBu5JhGis1pC1OB/rZGnAhjUl+70hE33xBApJ18xp0+28Oe/PgiNaeY8vPFN/JyUwoeOHdasUKX5oIqqJa7Nxu9kZQceibDbOAsK/Ge/buDayqkeQIL9G76sKAGyDdMy7lrj3PHDL5yO3y4KCqVKlGtUkJjlPRDRKmAc3K7YTgWvrYzDcQrfqu3hkqFyNLCivJyqJDA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=dell.com; dmarc=pass action=none header.from=dell.com; dkim=pass header.d=dell.com; arc=none
Received: from MN2PR19MB4045.namprd19.prod.outlook.com (2603:10b6:208:1e4::9) by SA1PR19MB8089.namprd19.prod.outlook.com (2603:10b6:806:377::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.31; Tue, 27 Feb 2024 00:30:28 +0000
Received: from MN2PR19MB4045.namprd19.prod.outlook.com ([fe80::daf9:ac37:e670:397f]) by MN2PR19MB4045.namprd19.prod.outlook.com ([fe80::daf9:ac37:e670:397f%3]) with mapi id 15.20.7316.035; Tue, 27 Feb 2024 00:30:28 +0000
From: "Black, David" <David.Black@dell.com>
To: Eric Kinzie <ekinzie@labn.net>
CC: Henning Rogge <hrogge@gmail.com>, "Black, David" <David.Black=40dell.com@dmarc.ietf.org>, Don Fedyk <dfedyk@labn.net>, "Velt, R. (Ronald) in 't" <Ronald.intVelt=40tno.nl@dmarc.ietf.org>, Lou Berger <lberger@labn.net>, "tsv-art@ietf.org" <tsv-art@ietf.org>, MANET IETF <manet@ietf.org>, "Black, David" <David.Black@dell.com>
Thread-Topic: [manet] Tsvart early review of draft-ietf-manet-dlep-credit-flow-control-09
Thread-Index: AQHYPfXxdZzerdqXS0SnT9vNYLnce6zL9L8ggMoU7ICABVkQQIM3xJUAgCnWy4CABUOUcIAAecEAgAD2nBCAGQpRAIAE65pQ
Date: Tue, 27 Feb 2024 00:30:28 +0000
Message-ID: <MN2PR19MB4045B29C5533E91F17A5B57883592@MN2PR19MB4045.namprd19.prod.outlook.com>
References: <5d1bf77b-6391-65b2-8ca2-57d6736b0439@labn.net> <18399f51-73d3-25e6-c8e7-1acb7d30aace@labn.net> <MN2PR19MB4045DE0B35B5349A686465F183189@MN2PR19MB4045.namprd19.prod.outlook.com> <a13273b2-6cbe-00ff-25bd-df6c6c623dde@labn.net> <MN2PR19MB4045F38BCD91EB884D142BB7839A9@MN2PR19MB4045.namprd19.prod.outlook.com> <f255fd472a714dea95161209cd55dbb0@tno.nl> <PH7PR14MB53683A3705671E1D5DE87041BB412@PH7PR14MB5368.namprd14.prod.outlook.com> <MN2PR19MB4045C7EB432E61B258212FAF83452@MN2PR19MB4045.namprd19.prod.outlook.com> <CAGnRvuojopZsM0MsXuKQ0fEi+ntbAExvKtCFWuCjZOagLLGRDA@mail.gmail.com> <MN2PR19MB4045B0E04EC921E01B014E4C83452@MN2PR19MB4045.namprd19.prod.outlook.com> <ZdkIyvWnihSMS7r0@DESKTOP-P76AGAJ>
In-Reply-To: <ZdkIyvWnihSMS7r0@DESKTOP-P76AGAJ>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_ActionId=cc4e9456-0585-4d15-989c-04392c1f6831; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_ContentBits=0; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Enabled=true; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Method=Privileged; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Name=Public No Visual Label; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_SetDate=2024-02-27T00:30:20Z; MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_SiteId=945c199a-83a2-4e80-9f8c-5a91be5752dd;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MN2PR19MB4045:EE_|SA1PR19MB8089:EE_
x-ms-office365-filtering-correlation-id: 514fa9ce-6891-4b65-3d33-08dc372b4c67
x-exotenant: 2khUwGVqB6N9v58KS13ncyUmMJd8q4
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR19MB4045.namprd19.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(230273577357003)(38070700009); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: Dell.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR19MB4045.namprd19.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 514fa9ce-6891-4b65-3d33-08dc372b4c67
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2024 00:30:28.4589 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 945c199a-83a2-4e80-9f8c-5a91be5752dd
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CZJ4z18zmojno8jrDZPWwBAmNOCDf4FP/NbNrreueq8TJzna2UK1TbXohV3HriDmgkj5JGDFlEXBYMZ1y8PDHA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR19MB8089
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-02-26_11,2024-02-26_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 lowpriorityscore=0 suspectscore=0 bulkscore=0 priorityscore=1501 impostorscore=0 malwarescore=0 adultscore=0 phishscore=0 spamscore=0 mlxlogscore=999 clxscore=1011 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311290000 definitions=main-2402270002
X-Proofpoint-ORIG-GUID: -t89ykVOXkzJYwuwzFEeFS6TXq3GSAFc
X-Proofpoint-GUID: -t89ykVOXkzJYwuwzFEeFS6TXq3GSAFc
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 bulkscore=0 clxscore=1015 impostorscore=0 phishscore=0 priorityscore=1501 lowpriorityscore=0 spamscore=0 malwarescore=0 mlxscore=0 suspectscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311290000 definitions=main-2402270002
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsv-art/IT_-O0X_Gq84hFxUab2dLKmA5go>
Subject: Re: [Tsv-art] [manet] Tsvart early review of draft-ietf-manet-dlep-credit-flow-control-09
X-BeenThere: tsv-art@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Transport Area Review Team <tsv-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsv-art/>
List-Post: <mailto:tsv-art@ietf.org>
List-Help: <mailto:tsv-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Feb 2024 00:30:36 -0000

Hi Eric,

Thanks for jumping in ...

> I think it should be possible to have a "graceful" reduction in the Credit Window with something along the lines of:
Ok ...

> "The modem MAY, at its discretion, after sending the Session Update Message with one or more Credit Window Initialization Data Items
> that decrease the Credit Window Max Size, continue processing received packets that match the indicated FIDs with an unmodified
> Credit Window Max Size that arrive before the modem receives the corresponding Session Update Response Message.  However,
> during this time no additional credits for those FIDs are issued.  After the router's Session Update Response Message is received,
> the modem waits for each affected window to drain until it reaches the new Credit Window Max Size.
> At this point the modem resumes issuing credits for that FID, limited by the new Credit Window Max Size."
> 
> Misbehaving routers that send packets in the absence of credits will still result in those packets being dropped.
> But, otherwise, we avoid dropping packets at the receiver simply as a side effect of the change.

If that's the desired effect, then "MAY, at its discretion" is entirely too weak. The new text needs to begin with
"The modem SHOULD ..." and would benefit from a little rearrangement, e.g.:

   After sending the Session Update Message with one or more Credit Window Initialization Data Items that decrease
   the Credit Window Max Size, the modem SHOULD continue processing received packets that match the indicated FIDs,
   fit within the window for the unmodified Credit Window Max Size and arrive before the modem receives the corresponding
   Session Update Response Message. 

The rest of the text assumes that the window size won't decrease to or below the new max size before the response
message arrives.  While that's certainly the likely behavior, it won't always be the case.  So instead of:

   However,   during this time no additional credits for those FIDs are issued.  After the router's Session Update Response Message is received,
   the modem waits for each affected window to drain until it reaches the new Credit Window Max Size.
   At this point the modem resumes issuing credits for that FID, limited by the new Credit Window Max Size."

I'd suggest:

   The modem SHOULD NOT issue additional credits for each affected FID until the associated affected
   Window has drained to be less than the new Credit Window Max Size, regardless of whether sufficient
   draining occurs before or after the modem receives that corresponding Session Update Response Message.

I think that one sentence covers both cases and using "SHOULD NOT" makes the point clearer.


Thanks, --David

-----Original Message-----
From: Eric Kinzie <ekinzie@labn.net> 
Sent: Friday, February 23, 2024 4:06 PM
To: Black, David <David.Black@dell.com>
Cc: Henning Rogge <hrogge@gmail.com>; Black, David <David.Black=40dell.com@dmarc.ietf.org>; Don Fedyk <dfedyk@labn.net>; Velt, R. (Ronald) in 't <Ronald.intVelt=40tno.nl@dmarc.ietf.org>; Lou Berger <lberger@labn.net>; tsv-art@ietf.org; MANET IETF <manet@ietf.org>
Subject: Re: [manet] Tsvart early review of draft-ietf-manet-dlep-credit-flow-control-09


[EXTERNAL EMAIL] 

I hope you don't mind me jumping into the middle of this.  Lou Berger pointed out this draft to me.  I have one comment about this, below.

On Wed Feb 07 23:22:39 +0000 2024, Black, David wrote:
> > The feature here is that the radio can be "sure" that the router has 
> > done something stupid so it's easy to decide "just drop it and maybe 
> > log a local error".
> 
> I'm not thrilled about taking a bad situation and making it worse -  this is not quite attempting to make a "right" out of "two wrongs" but it is still not good.
> 
> In looking back on this, I may not have correctly understood how Credit Window Initialize works.   Going back to the problem scenario described in my review:
> 
> >> E.g., suppose we
> >>  have a very slow modem with a 1kbyte queue and there could be 512 
> >> bytes in flight  between router and modem.  If the Credit Window 
> >> Status arrives with 512 bytes in  flight behind it, and the modem 
> >> immediately does a Credit Window Initialization to 1k,  the router 
> >> can then send another 1k for a total of 1.5k which overruns the 1k modem  queue by 50% (oops).
> 
> This example assumes that Credit Window Initialization sets the Credit Window Max Size to 1k and applies 1k in credits.  That's not a good assumption - those are separate values in Credit Window Initialize that don't have to be the same - if only 512 bytes of credits are applied because the Max Window Size is only increasing by 512 bytes, then the 1k modem queue is not overrun.  That would be much better - it does require that "applied" mean "added" in the following text in section 2.3.1:
> 
> Credit Value:
>     A 64-bit unsigned integer representing the credits, in octets, to be applied to the Credit Window. This value includes MAC headers as seen on the link between the modem and router. 
> 
> Is that change (applied -> added) reasonable?
> 
> In the reverse direction, there's "no free lunch" - if the Window size has to be dramatically decreased (e.g., radio conditions suddenly went seriously downhill), the number of outstanding credits has to be decreased, and scenarios are possible in which there's no choice but to drop traffic that was sent using credits that (in effect) no longer exist.  The suggestion for section 2.3.4 is a starting point to address this:
> 
> > I would suggest adding a sentence to the last paragraph of section 
> > 2.3.4., Credit Window Status, to clarify this re-synchronization 
> > process, e.g., "The modem MAY, at its discretion, after sending the Session Update Message with one or more Credit Window Initialization Data Items, discard any further packets matching the indicated FIDs until it receives a Session Update Response Message from the router." Thoughts?
> 
> Perhaps: "The modem MAY, at its discretion, after sending the Session 
> Update Message with one or more Credit Window Initialization Data 
> Items that decrease the Credit Window Max Size, discard packets that
> - match the indicated FIDs, cause outstanding traffic for that FID at the modem to exceed the corresponding new Credit Window Max Size, and arrive before the modem receives a corresponding Session Update Response Message from the router.
> 
> In the last bullet, the change from "until" to "arrive before" is subtle - once that message arrives, the router will be operating with the correct credit window parameters, so it's better to drop traffic that arrived earlier (when the router may not have been operating with the correct window parameters) even if that traffic is queued in the modem and is not dropped until after that message arrives.

I think it should be possible to have a "graceful" reduction in the Credit Window with somthing along the lines of:

"The modem MAY, at its discretion, after sending the Session Update Message with one or more Credit Window Initialization Data Items that decrease the Credit Window Max Size, continue processing received packets that match the indicated FIDs with an unmodified Credit Window Max Size that arrive before the modem receives the corresponding Session Update Response Message.  However, during this time no additional credits for those FIDs are issued.  After the router's Session Update Response Message is received, the modem waits for each affected window to drain until it reaches the new Credit Window Max Size.  At this point the modem resumes issuing credits for that FID, limited by the new Credit Window Max Size."

Misbehaving routers that send packets in the absence of credits will still result in those packets being dropped.  But, otherwise, we avoid dropping packets at the receiver simply as a side effect of the change.

Eric