Re: [tsvwg] Update to Position Statement on ECT(1)

"Holland, Jake" <jholland@akamai.com> Thu, 21 May 2020 12:51 UTC

Return-Path: <jholland@akamai.com>
X-Original-To: tsvwg@ietfa.amsl.com
Delivered-To: tsvwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 998E53A0C4A for <tsvwg@ietfa.amsl.com>; Thu, 21 May 2020 05:51:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5eOAPILxKSwY for <tsvwg@ietfa.amsl.com>; Thu, 21 May 2020 05:51:26 -0700 (PDT)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DCFC3A0C48 for <tsvwg@ietf.org>; Thu, 21 May 2020 05:51:26 -0700 (PDT)
Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id 04LCiVWx012427; Thu, 21 May 2020 13:50:36 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=l2sGx5Gpp7JOZ62Wkk02bYOADZ2z4hjNgD161XB3cmc=; b=NZvPipUHhCu5Xsdse9DfXDkFsj5eJ8FR7vWX+/6dYIZq6y7XihLhL3hxUn56B7X9BRw3 usO0TVfNdMM2SrUrg8QjS5ENuUpFNuHYaSOgqK9ILZXKDPGl3stA/ydtSBeKE/kvtI2u 3/dF11xAfNc3CmFSYpqZ+5JTLL/wA+93SnTAzDhwrsJGFb1IvfalUpFz7cqhN3XrE/pt KRy+pi7cMo/Bob/Lft2VIdjGrna4AIHPl5SDU/T9h6VvzQDMhSKMsVBa1ZKeeSq+2Cif EsRo4TUAJQ4whC6ZRqGljGL1rWfjHfuCFSvmcsfaoExdshqXYZ9HRolatvFHx82ecr9/ zQ==
Received: from prod-mail-ppoint1 (prod-mail-ppoint1.akamai.com [184.51.33.18] (may be forged)) by m0050096.ppops.net-00190b01. with ESMTP id 3128kg9kpd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 21 May 2020 13:50:36 +0100
Received: from pps.filterd (prod-mail-ppoint1.akamai.com [127.0.0.1]) by prod-mail-ppoint1.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 04LCm3q0014100; Thu, 21 May 2020 08:50:35 -0400
Received: from email.msg.corp.akamai.com ([172.27.123.31]) by prod-mail-ppoint1.akamai.com with ESMTP id 312bgvjma5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 21 May 2020 08:50:35 -0400
Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com (172.27.123.105) by usma1ex-dag3mb3.msg.corp.akamai.com (172.27.123.58) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 21 May 2020 08:50:34 -0400
Received: from usma1ex-dag1mb6.msg.corp.akamai.com (172.27.123.65) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 21 May 2020 08:50:34 -0400
Received: from usma1ex-dag1mb6.msg.corp.akamai.com ([172.27.123.65]) by usma1ex-dag1mb6.msg.corp.akamai.com ([172.27.123.65]) with mapi id 15.00.1497.006; Thu, 21 May 2020 08:50:34 -0400
From: "Holland, Jake" <jholland@akamai.com>
To: "ietf@bobbriscoe.net" <ietf@bobbriscoe.net>, TSVWG <tsvwg@ietf.org>
Thread-Topic: [tsvwg] Update to Position Statement on ECT(1)
Thread-Index: AQHWJXDCMj0HjdV7wk+M4pcr+ovB2aihqRUAgAAqnYCADOcbAIAA99CAgAAF3QCAAKdZAIAB/9WA
Date: Thu, 21 May 2020 12:50:34 +0000
Message-ID: <9539CFBB-5F07-4104-B30D-BFE323F20352@akamai.com>
References: <BE44EAE9-5CFB-4F5D-85B8-05AFA516C151@akamai.com> <CACL_3VEbUHB-Omwp1-g5Tq3G3J-kKj9N3jPZLcfruicw3X=AsA@mail.gmail.com> <2CBBD8CD-2088-4E41-B113-EED665853D3C@akamai.com> <CAM4esxSFCBcxXjz5JJJg1z6+wwfN3mTrtJ8bKiBsj2TeOmmFSw@mail.gmail.com> <93331803-e7db-95dc-a4ae-052c347c3c86@bobbriscoe.net> <MN2PR19MB4045568B4A794F1DCE6974BB83B90@MN2PR19MB4045.namprd19.prod.outlook.com> <42234fd1-6ee8-cbcc-408c-1ea2b2554f2b@bobbriscoe.net>
In-Reply-To: <42234fd1-6ee8-cbcc-408c-1ea2b2554f2b@bobbriscoe.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.37.20051002
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.19.119.102]
Content-Type: text/plain; charset="utf-8"
Content-ID: <80B9702DC643BF4BBCD892F602C618B2@akamai.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-21_07:2020-05-21, 2020-05-21 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2004280000 definitions=main-2005210094
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-21_07:2020-05-21, 2020-05-21 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 clxscore=1015 lowpriorityscore=0 priorityscore=1501 adultscore=0 mlxlogscore=999 mlxscore=0 suspectscore=0 malwarescore=0 cotscore=-2147483648 bulkscore=0 phishscore=0 impostorscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2005210094
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/THuFmguARLFQHWXG_VOyt0Wj5R8>
Subject: Re: [tsvwg] Update to Position Statement on ECT(1)
X-BeenThere: tsvwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Working Group <tsvwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg/>
List-Post: <mailto:tsvwg@ietf.org>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 May 2020 12:51:29 -0000

Hi Bob,

For brevity and clarity, I've trimmed and reordered quotes to highlight
the relevant bits I'm responding to, leaving aside discussion on some
of the lower level details you raised to focus on a higher level point.
But for easier reference in case there's questions of context, the full
preceding message is here:
https://mailarchive.ietf.org/arch/msg/tsvwg/-uFazVf2tupkK011Y5ps83ENCvc/

> From: Bob Briscoe <ietf@bobbriscoe.net>
> Date: Tuesday, May 19, 2020 at 4:18 PM
...
> There are a hundred or so companies that have said they are planning to 
> deploy L4S, many with products imminent, but hanging on this IETF 
> decision. Under this proposal, they will then be expected to wait a few 
> years (probably more like a decade) until these tunnels are designed, 
> specified, implemented and deployed. Until then, L4S just doesn't work 
> at all over 60-70% of the Internet.
>
> This isn't going to happen. This is fantasy. Can you not see how this 
> will look? Actually, how it does look? It looks like you are trying to 
> give the IETF a reputation for shooting itself in both feet, then laying 
> land mines and blowing off both legs.

This sounds to me like “whoops, we have made a terrible mistake by
defining the tunnel semantics in such a way that only one wire signal
(CE) can be transported, and now we realized we would like to provide a
signal with a different meaning, and unfortunately are painted into a
corner, since CE’s meaning is defined and used in widely distributed
implementations that are currently engaged in a long-overdue rollout”.

If there is a "fantasy" here, it's this notion that we'll quickly just
breeze through a transition period before classic ECN is phased out, and
so the interoperability problems don't need a serious and long-term
solution, unless I'm misunderstanding the meaning of the "transition"
you've referred to with remarks like these:

(Sample "transition" remark 1):
  > So please be correct and precise and say that a CE response is needed 
  > for the possibility of encountering a single-queue RFC3168 AQM /during 
  > transition/.
  >
  > Beyond transition, a fixed 'back-stop'  response in addition to 1/p 
  > signalling would be completely redundant.

(Sample "transition" remark 2):
  > [BB] Again, see above - the second signal is purely for transition, so
  > no need to try to convince yourself that it's also a useful backstop in 
  > its own right. Extent-based congestion signalling inherently contains 
  > its own backstop.


What seems to be suggested here sounds like it requires a flag day, unless
the interoperability problems we've seen, which come as a direct consequence
of the proposed major change in the meaning of CE, have a robust solution.

> We need to focus on other ways of mitigating any problems with existing 
> single-queue RFC 3168 AQMs.

Perhaps the right choice is to deprecate classic ECN in shared queues and
have the flag day.  Put that to a consensus call, and if it's really such
a small footprint of people who would be affected, maybe it will fly.

But I do not think we can bless the deployment of something incompatible
without taking this step, and right now it looks like the L4S CE signal and
its associated response is fundamentally incompatible with the classic CE
signal, because of the effect it has on the classic queue.  (And while it's
great that FQ comes with a built-in partial mitigation for the non-compliant
traffic, the core problem here is the signaling incompatibility.)

To me it seems irresponsible to disregard the decades of work that is
now, finally, beginning to come to fruition from people turning on the
widely available and already deployed implementations that only need
a config update to enable, just in time to tell everybody they should
stop doing that and upgrade their hardware and endpoints to this new
idea.

I sincerely wish this problem had gotten more focus early enough for
the companies that have imminent products to realize this proposal
would have serious interoperability issues that now seem intractable.
But that doesn't make it OK to ship this stuff without either organizing
the flag day or finding a robust solution.

Nonetheless, there is some very promising work here, and some real value
looks like it can be salvaged, with time and effort.  That's what's
underpinning my efforts to discuss ways to get the new signal exported
in an incrementally deployable way that wouldn't suffer the interop
problems.

Upgrading the tunneling semantics to provide multiple signals could be
a step forward that could help solve this problem, and might make this
kind of thing possible to get to eventually without needing the flag
day.  It's not fast, but as you point out, the future is much bigger
than the present.

But attempting to wipe out the existing meaning of CE by fiat is a
disaster in the making.  It would wipe out vastly more value than the
unfortunate delay to the immediate plans of the early L4S adopters,
because it seems likely to result in bleaching of the classifier
codepoint that might never go away.

Best regards,
Jake