<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<!-- This template is for creating an Internet Draft using xml2rfc,
    which is available here: http://xml.resource.org. -->
<?xml-stylesheet type='text/xsl' href='rfc2629.xslt' ?>
<!-- used by XSLT processors -->
<!-- For a complete list and description of processing instructions (PIs), 
    please see http://xml.resource.org/authoring/README.html. -->
<!-- Below are generally applicable Processing Instructions (PIs) that most I-Ds might want to use.
    (Here they are set differently than their defaults in xml2rfc v1.32) -->
<?rfc strict="yes" ?>
<!-- give errors regarding ID-nits and DTD validation -->
<!-- control the table of contents (ToC) -->
<?rfc toc="yes"?>
<!-- generate a ToC -->
<?rfc tocdepth="4"?>
<!-- the number of levels of subsections in ToC. default: 3 -->
<!-- control references -->
<?rfc symrefs="yes"?>
<!-- use symbolic references tags, i.e, [RFC2119] instead of [1] -->
<?rfc sortrefs="yes" ?>
<!-- sort the reference entries alphabetically -->
<!-- control vertical white space 
    (using these PIs as follows is recommended by the RFC Editor) -->
<?rfc compact="yes" ?>
<!-- do not start each main section on a new page -->
<?rfc subcompact="no" ?>
<!-- keep one blank line between list items -->
<!-- end of list of popular I-D processing instructions -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" category="info" docName="draft-ietf-tsvwg-l4s-arch-11" ipr="trust200902" obsoletes="" updates="" submissionType="IETF" xml:lang="en" tocInclude="true" tocDepth="4" symRefs="true" sortRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.10.0 -->
  <!-- category values: std, bcp, info, exp, and historic
    ipr values: trust200902, noModificationTrust200902, noDerivativesTrust200902,
       or pre5378Trust200902
    you can add the attributes updates="NNNN" and obsoletes="NNNN" 
    they will automatically be output with "(if approved)" -->

  <!-- ***** FRONT MATTER ***** -->

  <front>
    <!-- The abbreviated title is used in the page header - it is only necessary if the 
       full title is longer than 39 characters -->

    <title abbrev="L4S Architecture">Low Latency, Low Loss, Scalable
    Throughput (L4S) Internet Service: Architecture</title>
    <seriesInfo name="Internet-Draft" value="draft-ietf-tsvwg-l4s-arch-11"/>
    <author fullname="Bob Briscoe" initials="B." role="editor" surname="Briscoe">
      <organization>Independent</organization>
      <address>
        <postal>
          <street/>
          <country>UK</country>
        </postal>
        <email>ietf@bobbriscoe.net</email>
        <uri>http://bobbriscoe.net/</uri>
      </address>
    </author>
    <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
      <organization>Nokia Bell Labs</organization>
      <address>
        <postal>
          <street/>
          <city>Antwerp</city>
          <country>Belgium</country>
        </postal>
        <email>koen.de_schepper@nokia.com</email>
        <uri>https://www.bell-labs.com/usr/koen.de_schepper</uri>
      </address>
    </author>
    <author fullname="Marcelo Bagnulo" initials="M." surname="Bagnulo Braun">
      <organization>Universidad Carlos III de Madrid</organization>
      <address>
        <postal>
          <street>Av. Universidad 30</street>
          <city>Leganes, Madrid 28911</city>
          <country>Spain</country>
        </postal>
        <phone>34 91 6249500</phone>
        <email>marcelo@it.uc3m.es</email>
        <uri>http://www.it.uc3m.es</uri>
      </address>
    </author>
    <author fullname="Greg White" initials="G." surname="White">
      <organization>CableLabs</organization>
      <address>
        <postal>
          <street/>
          <country>US</country>
        </postal>
        <email>G.White@CableLabs.com</email>
      </address>
    </author>
    <date month="" year=""/>
    <area>Transport</area>
    <workgroup>Transport Area Working Group</workgroup>
    <keyword>Internet-Draft</keyword>
    <keyword>I-D</keyword>
    <abstract>
      <t>This document describes the L4S architecture, which enables Internet
      applications to achieve Low queuing Latency, Low Loss, and Scalable
      throughput (L4S). The insight on which L4S is based is that the root
      cause of queuing delay is in the congestion controllers of senders, not
      in the queue itself. The L4S architecture is intended to enable <em>all</em> Internet applications to transition away from
      congestion control algorithms that cause queuing delay, to a new class
      of congestion controls that induce very little queuing, aided by
      explicit congestion signaling from the network. This new class of
      congestion control can provide low latency for capacity-seeking flows,
      so applications can achieve both high bandwidth and low latency.</t>
      <t>The architecture primarily concerns incremental deployment. It
      defines mechanisms that allow the new class of L4S congestion controls
      to coexist with 'Classic' congestion controls in a shared network. These
      mechanisms aim to ensure that the latency and throughput performance
      using an L4S-compliant congestion controller is usually much better (and
      never worse) than the performance would have been using a 'Classic'
      congestion controller, and that competing flows continuing to use
      'Classic' controllers are typically not impacted by the presence of L4S.
      These characteristics are important to encourage adoption of L4S
      congestion control algorithms and L4S compliant network elements.</t>
      <t>The L4S architecture consists of three components: network support to
      isolate L4S traffic from classic traffic; protocol features that allow
      network elements to identify L4S traffic; and host support for L4S
      congestion controls.</t>
    </abstract>
  </front>
  <middle>
    <section anchor="l4sps_intro" numbered="true" toc="default">
      <name>Introduction</name>
      <t>It is increasingly common for <em>all</em> of a
      user's applications at any one time to require low delay: interactive
      Web, Web services, voice, conversational video, interactive video,
      interactive remote presence, instant messaging, online gaming, remote
      desktop, cloud-based applications and video-assisted remote control of
      machinery and industrial processes. In the last decade or so, much has
      been done to reduce propagation delay by placing caches or servers
      closer to users. However, queuing remains a major, albeit intermittent,
      component of latency. For instance spikes of hundreds of milliseconds
      are common, even with state-of-the-art active queue management (AQM).
      During a long-running flow, queuing is typically configured to cause
      overall network delay to roughly double relative to expected base
      (unloaded) path delay. Low loss is also important because, for
      interactive applications, losses translate into even longer
      retransmission delays.</t>
      <t>It has been demonstrated that, once access network bit rates reach
      levels now common in the developed world, increasing capacity offers
      diminishing returns if latency (delay) is not addressed. Differentiated
      services (Diffserv) offers Expedited Forwarding (EF <xref target="RFC3246" format="default"/>) for some packets at the expense of others, but this
      is not sufficient when all (or most) of a user's applications require
      low latency.</t>
      <t>Therefore, the goal is an Internet service with very Low queueing
      Latency, very Low Loss and Scalable throughput (L4S). Very low queuing
      latency means less than 1 millisecond (ms) on average and less than
      about 2 ms at the 99th percentile. L4S is potentially for <em>all</em> traffic - a service for all traffic needs none
      of the configuration or management baggage (traffic policing, traffic
      contracts) associated with favouring some traffic over others. This
      document describes the L4S architecture for achieving these goals.</t>
      <t>It must be said that queuing delay only degrades performance
      infrequently <xref target="Hohlfeld14" format="default"/>. It only occurs when a
      large enough capacity-seeking (e.g. TCP) flow is running alongside
      the user's traffic in the bottleneck link, which is typically in the
      access network. Or when the low latency application is itself a large
      capacity-seeking or adaptive rate (e.g. interactive video) flow. At
      these times, the performance improvement from L4S must be sufficient
      that network operators will be motivated to deploy it.</t>
      <t>Active Queue Management (AQM) is part of the solution to queuing
      under load. AQM improves performance for all traffic, but there is a
      limit to how much queuing delay can be reduced by solely changing the
      network; without addressing the root of the problem.</t>
      <t>The root of the problem is the presence of standard TCP congestion
      control (Reno <xref target="RFC5681" format="default"/>) or compatible variants
      (e.g. TCP Cubic <xref target="RFC8312" format="default"/>). We shall use the
      term 'Classic' for these Reno-friendly congestion controls. Classic
      congestion controls induce relatively large saw-tooth-shaped excursions
      up the queue and down again, which have been growing as flow rate
      scales <xref target="RFC3649" format="default"/>. So if a network operator naively
      attempts to reduce queuing delay by configuring an AQM to operate at a
      shallower queue, a Classic congestion control will significantly
      underutilize the link at the bottom of every saw-tooth.</t>
      <t>It has been demonstrated that if the sending host replaces a Classic
      congestion control with a 'Scalable' alternative, when a suitable AQM is
      deployed in the network the performance under load of all the above
      interactive applications can be significantly improved. For instance,
      queuing delay under heavy load with the example DCTCP/DualQ solution
      cited below on a DSL or Ethernet link is roughly 1 to 2 milliseconds at
      the 99th percentile without losing link utilization <xref target="DualPI2Linux" format="default"/>, <xref target="DCttH15" format="default"/> (for other link types,
      see <xref target="l4sarch_link-specifics" format="default"/>). This compares with
      5-20 ms on <em>average</em> with a Classic
      congestion control and current state-of-the-art AQMs such as
      FQ-CoDel <xref target="RFC8290" format="default"/>, PIE <xref target="RFC8033" format="default"/> or DOCSIS PIE <xref target="RFC8034" format="default"/> and about
      20-30 ms at the 99th percentile <xref target="DualPI2Linux" format="default"/>.</t>
      <t>It has also been demonstrated <xref target="DCttH15" format="default"/>, <xref target="DualPI2Linux" format="default"/> that it is possible to deploy such an L4S
      service alongside the existing best efforts service so that all of a
      user's applications can shift to it when their stack is updated. Access
      networks are typically designed with one link as the bottleneck for each
      site (which might be a home, small enterprise or mobile device), so
      deployment at each end of this link should give nearly all the benefit
      in each direction. The L4S approach also requires component mechanisms
      at the endpoints to fulfill its goal. This document presents the L4S
      architecture, by describing the different components and how they
      interact to provide the scalable, low latency, low loss Internet
      service.</t>
    </section>
    <section numbered="true" toc="default">
      <name>L4S Architecture Overview</name>
      <t>There are three main components to the L4S architecture; the AQM in
      the network, the congestion control on the host, and the protocol
      between them:</t>
      <dl newline="false" spacing="normal">
        <dt>1) Network:</dt>
        <dd>L4S traffic needs to be isolated from the
          queuing latency of Classic traffic. One queue per application flow
          (FQ) is one way to achieve this, e.g. FQ-CoDel <xref target="RFC8290" format="default"/>. However, just two queues is sufficient and does
          not require inspection of transport layer headers in the network,
          which is not always possible (see <xref target="l4sps_why-not" format="default"/>).
          With just two queues, it might seem impossible to know how much
          capacity to schedule for each queue without inspecting how many
          flows at any one time are using each. And it would be undesirable to
          arbitrarily divide access network capacity into two partitions. The
          Dual Queue Coupled AQM was developed as a minimal complexity
          solution to this problem. It acts like a 'semi-permeable' membrane
          that partitions latency but not bandwidth. As such, the two queues
          are for transition from Classic to L4S behaviour, not bandwidth
          prioritization. <xref target="l4sps_components" format="default"/> gives a high level
          explanation of how FQ and DualQ solutions work, and <xref target="I-D.ietf-tsvwg-aqm-dualq-coupled" format="default"/> gives a full explanation
          of the DualQ Coupled AQM framework.<!--{ToDo: Add ref to Mohit's draft re L4S FQ, once available.}-->
        </dd>
        <dt>2) Protocol:</dt>
        <dd>A host needs to distinguish L4S and
          Classic packets with an identifier so that the network can classify
          them into their separate treatments. <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> concludes that all alternatives
          involve compromises, but the ECT(1) and CE codepoints of the ECN
          field represent a workable solution.</dd>
        <dt>3) Host:</dt>
        <dd>Scalable congestion controls already exist.
          They solve the scaling problem with Reno congestion control that was
          explained in <xref target="RFC3649" format="default"/>. The one used most widely (in
          controlled environments) is Data Center TCP (DCTCP <xref target="RFC8257" format="default"/>), which has been implemented and deployed in
          Windows Server Editions (since 2012), in Linux and in FreeBSD.
          Although DCTCP as-is 'works' well over the public Internet, most
          implementations lack certain safety features that will be necessary
          once it is used outside controlled environments like data centres
          (see <xref target="l4sarch_sec_non-l4s-neck" format="default"/> and <xref target="l4sarch_sec_standards" format="default"/>). Scalable congestion control will
          also need to be implemented in protocols other than TCP (QUIC, SCTP,
          RTP/RTCP, RMCAT, etc.). Indeed, between the present document being
          drafted and published, the following scalable congestion controls
          were implemented: TCP Prague <xref target="PragueLinux" format="default"/>, QUIC
          Prague, an L4S variant of the RMCAT SCReAM controller <xref target="SCReAM" format="default"/> and the L4S ECN part of BBRv2 <xref target="BBRv2" format="default"/> intended for TCP and QUIC transports.</dd>
      </dl>
    </section>
    <section anchor="l4sps_Terminology" numbered="true" toc="default">
      <name>Terminology</name>
      <t/>
      <dl newline="false" spacing="normal">
        <dt>Classic Congestion Control:</dt>
        <dd>A congestion control
          behaviour that can co-exist with standard Reno <xref target="RFC5681" format="default"/> without causing significantly negative impact on
          its flow rate <xref target="RFC5033" format="default"/>. With Classic congestion
          controls, such as Reno or Cubic, because flow rate has scaled since
          TCP congestion control was first designed in 1988, it now takes
          hundreds of round trips (and growing) to recover after a congestion
          signal (whether a loss or an ECN mark) as shown in the examples in
          <xref target="l4sps_why_primary_components" format="default"/> and <xref target="RFC3649" format="default"/>. Therefore control of queuing and utilization
          becomes very slack, and the slightest disturbances (e.g. from
          new flows starting) prevent a high rate from being attained.</dd>
        <dt>Scalable Congestion Control:</dt>
        <dd>A congestion control
          where the average time from one congestion signal to the next (the
          recovery time) remains invariant as the flow rate scales, all other
          factors being equal. This maintains the same degree of control over
          queueing and utilization whatever the flow rate, as well as ensuring
          that high throughput is more robust to disturbances. For instance,
          DCTCP averages 2 congestion signals per round-trip whatever the flow
          rate, as do other recently developed scalable congestion controls,
          e.g. Relentless TCP <xref target="Mathis09" format="default"/>, TCP
          Prague <xref target="I-D.briscoe-iccrg-prague-congestion-control" format="default"/>, <xref target="PragueLinux" format="default"/>, BBRv2 <xref target="BBRv2" format="default"/> and the L4S
          variant of SCReAM for real-time media <xref target="SCReAM" format="default"/>, <xref target="RFC8298" format="default"/>). See Section 4.3
          of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> for more
          explanation.</dd>
        <dt>Classic service:</dt>
        <dd>The Classic service is intended for
          all the congestion control behaviours that co-exist with
          Reno <xref target="RFC5681" format="default"/> (e.g. Reno itself,
          Cubic <xref target="RFC8312" format="default"/>, Compound <xref target="I-D.sridharan-tcpm-ctcp" format="default"/>, TFRC <xref target="RFC5348" format="default"/>). The term 'Classic queue' means a queue
          providing the Classic service.</dd>
        <dt>Low-Latency, Low-Loss Scalable throughput (L4S) service:</dt>
        <dd>
          <t>The
          'L4S' service is intended for traffic from scalable congestion
          control algorithms, such as the Prague congestion control <xref target="I-D.briscoe-iccrg-prague-congestion-control" format="default"/>, which was
          derived from DCTCP  <xref target="RFC8257" format="default"/>. The L4S service
          is for more general traffic than just TCP Prague--it allows the
          set of congestion controls with similar scaling properties to Prague
          to evolve, such as the examples listed above (Relentless, SCReAM).
          The term 'L4S queue' means a queue providing the L4S service.</t>
          <t>The terms Classic or L4S can also qualify other
          nouns, such as 'queue', 'codepoint', 'identifier', 'classification',
          'packet', 'flow'. For example: an L4S packet means a packet with an
          L4S identifier sent from an L4S congestion control.</t>
          <t>Both Classic and L4S services can cope with a
          proportion of unresponsive or less-responsive traffic as well, but
          in the L4S case its rate has to be smooth enough or low enough not
          build a queue (e.g. DNS, VoIP, game sync datagrams, etc).</t>
        </dd>
        <dt>Reno-friendly:</dt>
        <dd>The subset of Classic traffic that is
          friendly to the standard Reno congestion control defined for TCP in
          <xref target="RFC5681" format="default"/>. Reno-friendly is used in place of
          'TCP-friendly', given the latter has become imprecise, because the
          TCP protocol is now used with so many different congestion control
          behaviours, and Reno is used in non-TCP transports such as QUIC.</dd>
        <dt>Classic ECN:</dt>
        <dd>
          <t>The original Explicit Congestion
          Notification (ECN) protocol <xref target="RFC3168" format="default"/>, which
          requires ECN signals to be treated as equivalent to drops, both when
          generated in the network and when responded to by the sender.</t>
          <t>For L4S, the names used for the four codepoints of
          the 2-bit IP-ECN field are unchanged from those defined in <xref target="RFC3168" format="default"/>: Not ECT, ECT(0), ECT(1) and CE, where ECT stands
          for ECN-Capable Transport and CE stands for Congestion Experienced.
          A packet marked with the CE codepoint is termed 'ECN-marked' or
          sometimes just 'marked' where the context makes ECN obvious.</t>
        </dd>
        <dt>Site:</dt>
        <dd>A home, mobile device, small enterprise or
          campus, where the network bottleneck is typically the access link to
          the site. Not all network arrangements fit this model but it is a
          useful, widely applicable generalization.</dd>
      </dl>
    </section>
    <section anchor="l4sps_components" numbered="true" toc="default">
      <name>L4S Architecture Components</name>
      <t>The L4S architecture is composed of the elements in the following
      three subsections.</t>
      <section anchor="l4sps_protocol_components" numbered="true" toc="default">
        <name>Protocol Mechanisms</name>
        <t>The L4S architecture involves: a) unassignment of an identifier; b)
        reassignment of the same identifier; and c) optional further
        identifiers:</t>
        <ol spacing="normal" type="a"><li>
            <t>An essential aspect of a scalable congestion control is the use
            of explicit congestion signals. 'Classic' ECN <xref target="RFC3168" format="default"/> requires an ECN signal to be treated as
            equivalent to drop, both when it is generated in the network and
            when it is responded to by hosts. L4S needs networks and hosts to
            support a more fine-grained meaning for each ECN signal that is
            less severe than a drop, so that the L4S signals:</t>
            <ul spacing="normal">
              <li>can be much more frequent;</li>
              <li>can be signalled immediately, without the signficant delay
                required to smooth out fluctuations in the queue.</li>
            </ul>
            <t>To enable L4S, the standards track <xref target="RFC3168" format="default"/> has had to be updated to allow L4S packets to
            depart from the 'equivalent to drop' constraint. <xref target="RFC8311" format="default"/> is a standards track update to relax specific
            requirements in RFC 3168 (and certain other standards track RFCs),
            which clears the way for the experimental changes proposed for
            L4S. <xref target="RFC8311" format="default"/> also reclassifies the original
            experimental assignment of the ECT(1) codepoint as an ECN
            nonce <xref target="RFC3540" format="default"/> as historic.</t>
          </li>
          <li>
            <t><xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> recommends ECT(1) is
            used as the identifier to classify L4S packets into a separate
            treatment from Classic packets. This satisfies the requirements
            for identifying an alternative ECN treatment in <xref target="RFC4774" format="default"/>.</t>
            <t>The CE codepoint is
            used to indicate Congestion Experienced by both L4S and Classic
            treatments. This raises the concern that a Classic AQM earlier on
            the path might have marked some ECT(0) packets as CE. Then these
            packets will be erroneously classified into the L4S queue.
            Appendix B of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> explains
            why five unlikely eventualities all have to coincide for this to
            have any detrimental effect, which even then would only involve a
            vanishingly small likelihood of a spurious retransmission.</t>
          </li>
          <li>A network operator might wish to include certain unresponsive,
            non-L4S traffic in the L4S queue if it is deemed to be smoothly
            enough paced and low enough rate not to build a queue. For
            instance, VoIP, low rate datagrams to sync online games,
            relatively low rate application-limited traffic, DNS, LDAP, etc.
            This traffic would need to be tagged with specific identifiers,
            e.g. a low latency Diffserv Codepoint such as Expedited
            Forwarding (EF <xref target="RFC3246" format="default"/>), Non-Queue-Building
            (NQB <xref target="I-D.ietf-tsvwg-nqb" format="default"/>), or
            operator-specific identifiers.</li>
        </ol>
      </section>
      <section anchor="l4sps_network_components" numbered="true" toc="default">
        <name>Network Components</name>
        <t>The L4S architecture aims to provide low latency without the <em>need</em> for per-flow operations in network
        components. Nonetheless, the architecture does not preclude per-flow
        solutions--it encompasses the following combinations:</t>
        <ol spacing="normal" type="a"><li>
            <t>The Dual Queue Coupled AQM (illustrated in <xref target="l4sps_fig_components" format="default"/>) achieves the 'semi-permeable'
            membrane property mentioned earlier as follows. The obvious part
            is that using two separate queues isolates the queuing delay of
            one from the other. <!--Each has its own AQM with the L4S AQM configured for a very shallow (sub-millisecond) target delay, and the Classic AQM for 
5-15 ms, which is needed to absorb the larger saw-toothing pattern of Classic congestion controls (otherwise they under-utilize 
the link). -->The less obvious part is how the two queues act as if they are a
            single pool of bandwidth without the scheduler needing to decide
            between them. This is achieved by having the Classic AQM provide a
            congestion signal to both queues in a manner that ensures a
            consistent response from the two types of congestion control. In
            other words, the Classic AQM generates a drop/mark probability
            based on congestion in the Classic queue, uses this probability to
            drop/mark packets in that queue, and also uses this probability to
            affect the marking probability in the L4S queue. This coupling of
            the congestion signaling between the two queues makes the L4S
            flows slow down to leave the right amount of capacity for the
            Classic traffic (as they would if they were the same type of
            traffic sharing the same queue). Then the scheduler can serve the
            L4S queue with priority, because the L4S traffic isn't offering up
            enough traffic to use all the priority that it is given.
            Therefore, on short time-scales (sub-round-trip) the
            prioritization of the L4S queue protects its low latency by
            allowing bursts to dissipate quickly; but on longer time-scales
            (round-trip and longer) the Classic queue creates an equal and
            opposite pressure against the L4S traffic to ensure that neither
            has priority when it comes to bandwidth. The tension between
            prioritizing L4S and coupling the marking from the Classic AQM
            results in approximate per-flow fairness. To protect against
            unresponsive traffic in the L4S queue taking advantage of the
            prioritization and starving the Classic queue, it is advisable not
            to use strict priority, but instead to use a weighted scheduler
            (see Appendix A of <xref target="I-D.ietf-tsvwg-aqm-dualq-coupled" format="default"/>). </t>
            <t>When there is no Classic traffic, the L4S
            queue's AQM comes into play. It starts congestion marking
            with a very shallow queue, so L4S traffic maintains very low
            queuing delay.</t>
            <t>The Dual Queue Coupled AQM
            has been specified as generically as possible <xref target="I-D.ietf-tsvwg-aqm-dualq-coupled" format="default"/> without specifying the
            particular AQMs to use in the two queues so that designers are
            free to implement diverse ideas. Informational appendices in that
            draft give pseudocode examples of two different specific AQM
            approaches: one called DualPI2 (pronounced Dual PI
            Squared) <xref target="DualPI2Linux" format="default"/> that uses the PI2
            variant of PIE, and a zero-config variant of RED called Curvy RED.
            A DualQ Coupled AQM based on PIE has also been specified and
            implemented for Low Latency DOCSIS <xref target="DOCSIS3.1" format="default"/>.</t>
            <figure anchor="l4sps_fig_components">
              <name>Components of an L4S Solution: 1) Isolation in separate network queues; 2) Packet Identification Protocol; and 3) Scalable Sending Host</name>
              <artwork align="center" name="" type="" alt=""><![CDATA[                     (2)                     (1)
              .-------^------. .--------------^-------------------.
 ,-(3)-----.                                  ______
; ________  :            L4S   --------.     |      |
:|Scalable| :               _\        ||___\_| mark |
:| sender | :  __________  / /        ||   / |______|\   _________
:|________|\; |          |/    --------'         ^    \1|condit'nl|
 `---------'\_|  IP-ECN  |              Coupling :     \|priority |_\
  ________  / |Classifier|                       :     /|scheduler| /
 |Classic |/  |__________|\    --------.      ___:__  / |_________|
 | sender |                \_\  || | |||___\_| mark/|/
 |________|                  /  || | |||   / | drop |
                      Classic  --------'     |______|

]]></artwork>
            </figure>
          </li>
          <li>A scheduler with per-flow queues such as FQ-CoDel or FQ-PIE can
            be used for L4S. For instance within each queue of an FQ-CoDel
            system, as well as a CoDel AQM, there is typically also ECN
            marking at an immediate (unsmoothed) shallow threshold to support
            use in data centres (see Sec.5.2.7 of <xref target="RFC8290" format="default"/>).
            This can be modified so that the shallow threshold is solely
            applied to ECT(1) packets. Then if there is a flow of non-ECN or
            ECT(0) packets in the per-flow-queue, the Classic AQM (e.g. CoDel)
            is applied; while if there is a flow of ECT(1) packets in the
            queue, the shallower (typically sub-millisecond) threshold is
            applied. In addition, ECT(0) and not-ECT packets could potentially
            be classified into a separate flow-queue from ECT(1) and CE
            packets to avoid them mixing if they share a common
            flow-identifier (e.g. in a VPN).</li>
          <li>
            <t>It should also be possible to use dual queues for isolation,
            but with per-flow marking to control flow-rates (instead of the
            coupled per-queue marking of the Dual Queue Coupled AQM). One of
            the two queues would be for isolating L4S packets, which would be
            classified by the ECN codepoint. Flow rates could be controlled by
            flow-specific marking. The policy goal of the marking could be to
            differentiate flow rates (e.g. <xref target="Nadas20" format="default"/>,
            which requires additional signalling of a per-flow 'value'), or to
            equalize flow-rates (perhaps in a similar way to Approx Fair
            CoDel <xref target="AFCD" format="default"/>, <xref target="I-D.morton-tsvwg-codel-approx-fair" format="default"/>, but with two queues
            not one).</t>
            <t>Note that whenever the term
            'DualQ' is used loosely without saying whether marking is
            per-queue or per-flow, it means a dual queue AQM with per-queue
            marking.</t>
          </li>
        </ol>
      </section>
      <section anchor="l4sps_host_components" numbered="true" toc="default">
        <name>Host Mechanisms</name>
        <t>The L4S architecture includes two main mechanisms in the end host
        that we enumerate next:</t>
        <ol spacing="normal" type="a"><li>
            <t>Scalable Congestion Control at the sender: Data Center TCP is
            the most widely used example. It has been documented as an
            informational record of the protocol currently in use in
            controlled environments <xref target="RFC8257" format="default"/>. A draft
            list of safety and performance improvements for a scalable
            congestion control to be usable on the public Internet has been
            drawn up (the so-called 'Prague L4S requirements' in Appendix A of
            <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>). The subset that
            involve risk of harm to others have been captured as normative
            requirements in Section 4 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>. TCP Prague <xref target="I-D.briscoe-iccrg-prague-congestion-control" format="default"/> has been
            implemented in Linux as a reference implementation to address
            these requirements <xref target="PragueLinux" format="default"/>.</t>
            <t>Transport protocols other than TCP use various
            congestion controls that are designed to be friendly with Reno.
            Before they can use the L4S service, they will need to be updated
            to implement a scalable congestion response, which they will have
            to indicate by using the ECT(1) codepoint. Scalable variants are
            under consideration for more recent transport protocols,
            e.g. QUIC, and the L4S ECN part of BBRv2 <xref target="BBRv2" format="default"/> is a scalable congestion control intended for the
            TCP and QUIC transports, amongst others. Also an L4S variant of
            the RMCAT SCReAM controller <xref target="RFC8298" format="default"/> has been
            implemented <xref target="SCReAM" format="default"/> for media transported
            over RTP.</t>
          </li>
          <li>
            <t>The ECN feedback in some transport protocols is already
            sufficiently fine-grained for L4S (specifically DCCP <xref target="RFC4340" format="default"/> and QUIC <xref target="RFC9000" format="default"/>). But others
            either require update or are in the process of being updated:</t>
            <ul spacing="normal">
              <li>For the case of TCP, the feedback protocol for ECN embeds
                the assumption from Classic ECN <xref target="RFC3168" format="default"/>
                that an ECN mark is equivalent to a drop, making it unusable
                for a scalable TCP. Therefore, the implementation of TCP
                receivers will have to be upgraded <xref target="RFC7560" format="default"/>. Work to standardize and implement more
                accurate ECN feedback for TCP (AccECN) is in
                progress <xref target="I-D.ietf-tcpm-accurate-ecn" format="default"/>,
                <xref target="PragueLinux" format="default"/>.</li>
              <li>ECN feedback is only roughly sketched in an appendix of the
                SCTP specification <xref target="RFC4960" format="default"/>. A fuller
                specification has been proposed in a long-expired
                draft <xref target="I-D.stewart-tsvwg-sctpecn" format="default"/>, which
                would need to be implemented and deployed before SCTCP could
                support L4S.</li>
              <li>For RTP, sufficient ECN feedback was defined in <xref target="RFC6679" format="default"/>, but <xref target="RFC8888" format="default"/> defines the
                latest standards track improvements.</li>
            </ul>
          </li>
        </ol>
      </section>
    </section>
    <section anchor="l4sps_rationale" numbered="true" toc="default">
      <name>Rationale</name>
      <t/>
      <section anchor="l4sps_why_primary_components" numbered="true" toc="default">
        <name>Why These Primary Components?</name>
        <dl newline="false" spacing="normal">
          <dt>Explicit congestion signalling (protocol):</dt>
          <dd>
            <t>Explicit
            congestion signalling is a key part of the L4S approach. In
            contrast, use of drop as a congestion signal creates a tension
            because drop is both an impairment (less would be better) and a
            useful signal (more would be better):</t>
            <ul spacing="normal">
              <li>Explicit congestion signals can be used many times per
                round trip, to keep tight control, without any impairment.
                Under heavy load, even more explicit signals can be applied so
                the queue can be kept short whatever the load. In contrast,
                Classic AQMs have to introduce very high packet drop at high
                load to keep the queue short. By using ECN, an L4S congestion
                control's sawtooth reduction can be smaller and therefore
                return to the operating point more often, without worrying
                that more sawteeth will cause more signals. The consequent
                smaller amplitude sawteeth fit between an empty queue and a
                very shallow marking threshold (~1 ms in the public
                Internet), so queue delay variation can be very low, without
                risk of under-utilization.</li>
              <li>Explicit congestion signals can be emitted immediately to
                track fluctuations of the queue. L4S shifts smoothing from the
                network to the host. The network doesn't know the round trip
                times of all the flows. So if the network is responsible for
                smoothing (as in the Classic approach), it has to assume a
                worst case RTT, otherwise long RTT flows would become
                unstable. This delays Classic congestion signals by 100-200
                ms. In contrast, each host knows its own round trip time. So,
                in the L4S approach, the host can smooth each flow over its
                own RTT, introducing no more soothing delay than strictly
                necessary (usually only a few milliseconds). A host can also
                choose not to introduce any smoothing delay if appropriate,
                e.g. during flow start-up.</li>
            </ul>
            <t>Neither of the above are feasible if explicit congestion
            signalling has to be considered 'equivalent to drop' (as was
            required with Classic ECN <xref target="RFC3168" format="default"/>), because
            drop is an impairment as well as a signal. So drop cannot be
            excessively frequent, and drop cannot be immediate, otherwise too
            many drops would turn out to have been due to only a transient
            fluctuation in the queue that would not have warranted dropping a
            packet in hindsight. Therefore, in an L4S AQM, the L4S queue uses
            a new L4S variant of ECN that is not equivalent to drop (see
            section 5.2 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>), while
            the Classic queue uses either Classic ECN <xref target="RFC3168" format="default"/> or drop, which are equivalent to each
            other.</t>
            <t>Before Classic ECN was standardized,
            there were various proposals to give an ECN mark a different
            meaning from drop. However, there was no particular reason to
            agree on any one of the alternative meanings, so 'equivalent to
            drop' was the only compromise that could be reached. RFC 3168
            contains a statement that:</t>
            <ul empty="true" spacing="normal">
              <li>"An environment where all end nodes were ECN-Capable could
                allow new criteria to be developed for setting the CE
                codepoint, and new congestion control mechanisms for end-node
                reaction to CE packets. However, this is a research issue, and
                as such is not addressed in this document."</li>
            </ul>
          </dd>
          <dt>Latency isolation (network):</dt>
          <dd>L4S congestion controls
            keep queue delay low whereas Classic congestion controls need a
            queue of the order of the RTT to avoid under-utilization. One
            queue cannot have two lengths, therefore L4S traffic needs to be
            isolated in a separate queue (e.g. DualQ) or queues
            (e.g. FQ).</dd>
          <dt>Coupled congestion notification:</dt>
          <dd>Coupling the
            congestion notification between two queues as in the DualQ Coupled
            AQM is not necessarily essential, but it is a simple way to allow
            senders to determine their rate, packet by packet, rather than be
            overridden by a network scheduler. An alternative is for a network
            scheduler to control the rate of each application flow (see
            discussion in <xref target="l4sps_why-not" format="default"/>).</dd>
          <dt>L4S packet identifier (protocol):</dt>
          <dd>Once there are at
            least two treatments in the network, hosts need an identifier at
            the IP layer to distinguish which treatment they intend to
            use.</dd>
          <dt>Scalable congestion notification:</dt>
          <dd>A scalable
            congestion control in the host keeps the signalling frequency from
            the network high whatever the flow rate, so that queue delay
            variations can be small when conditions are stable, and rate can
            track variations in available capacity as rapidly as possible
            otherwise.</dd>
          <dt>Low loss:</dt>
          <dd>Latency is not the only concern of L4S.
            The 'Low Loss" part of the name denotes that L4S generally
            achieves zero congestion loss due to its use of ECN. Otherwise,
            loss would itself cause delay, particularly for short flows, due
            to retransmission delay <xref target="RFC2884" format="default"/>.</dd>
          <dt>Scalable throughput:</dt>
          <dd>
            <t>The "Scalable throughput" part
            of the name denotes that the per-flow throughput of scalable
            congestion controls should scale indefinitely, avoiding the
            imminent scaling problems with Reno-friendly congestion control
            algorithms <xref target="RFC3649" format="default"/>. It was known when TCP
            congestion avoidance was first developed in 1988 that it would not
            scale to high bandwidth-delay products (see footnote 6 in <xref target="TCP-CA" format="default"/>). Today, regular broadband flow rates over WAN
            distances are already beyond the scaling range of Classic Reno
            congestion control. So `less unscalable' Cubic <xref target="RFC8312" format="default"/> and Compound <xref target="I-D.sridharan-tcpm-ctcp" format="default"/> variants of TCP have been
            successfully deployed. However, these are now approaching their
            scaling limits. </t>
            <t>For instance, we will
            consider a scenario with a maximum RTT of 30 ms at the peak
            of each sawtooth. As Reno packet rate scales 8x from 1,250 to
            10,000 packet/s (from 15 to 120 Mb/s with 1500 B
            packets), the time to recover from a congestion event rises
            proportionately by 8x as well, from 422 ms to 3.38 s. It
            is clearly problematic for a congestion control to take multiple
            seconds to recover from each congestion event. Cubic <xref target="RFC8312" format="default"/> was developed to be less unscalable, but it is
            approaching its scaling limit; with the same max RTT of
            30 ms, at 120 Mb/s the Linux implementation of Cubic is
            still in its Reno-friendly mode, so it takes about 2.3 s to
            recover. However, once the flow rate scales by 8x again to
            960 Mb/s it enters true Cubic mode, with a recovery time of
            10.6 s. From then on, each further scaling by 8x doubles
            Cubic's recovery time (because the cube root of 8 is 2), e.g. at
            7.68 Gb/s the recovery time is 21.3 s. In contrast a
            scalable congestion control like DCTCP or TCP Prague induces 2
            congestion signals per round trip on average, which remains
            invariant for any flow rate, keeping dynamic control very
            tight.</t>
            <t>Although work on scaling congestion
            controls tends to start with TCP as the transport, the above is
            not intended to exclude other transports (e.g. SCTP, QUIC) or
            less elastic algorithms (e.g. RMCAT), which all tend to adopt
            the same or similar developments.</t>
          </dd>
        </dl>
      </section>
      <section anchor="l4sps_why-not" numbered="true" toc="default">
        <name>What L4S adds to Existing Approaches</name>
        <t>All the following approaches address some part of the same problem
        space as L4S. In each case, it is shown that L4S complements them or
        improves on them, rather than being a mutually exclusive
        alternative:</t>
        <dl newline="false" spacing="normal">
          <dt>Diffserv:</dt>
          <dd>
            <t>Diffserv addresses the problem of
            bandwidth apportionment for important traffic as well as queuing
            latency for delay-sensitive traffic. Of these, L4S solely
            addresses the problem of queuing latency. Diffserv will still be
            necessary where important traffic requires priority (e.g. for
            commercial reasons, or for protection of critical infrastructure
            traffic) - see <xref target="I-D.briscoe-tsvwg-l4s-diffserv" format="default"/>.
            Nonetheless, the L4S approach can provide low latency for <em>all</em> traffic within each Diffserv class
            (including the case where there is only the one default Diffserv
            class).</t>
            <t>Also, Diffserv only works for a
            small subset of the traffic on a link. As already explained, it is
            not applicable when all the applications in use at one time at a
            single site (home, small business or mobile device) require low
            latency. In contrast, because L4S is for all traffic, it needs
            none of the management baggage (traffic policing, traffic
            contracts) associated with favouring some packets over others.
            This baggage has probably held Diffserv back from widespread
            end-to-end deployment.</t>
            <t>In particular,
            because networks tend not to trust end systems to identify which
            packets should be favoured over others, where networks assign
            packets to Diffserv classes they often use packet inspection of
            application flow identifiers or deeper inspection of application
            signatures. Thus, nowadays, Diffserv doesn't always sit well with
            encryption of the layers above IP. So users have to choose between
            privacy and QoS.</t>
            <t>As with Diffserv, the L4S
            identifier is in the IP header. But, in contrast to Diffserv, the
            L4S identifier does not convey a want or a need for a certain
            level of quality. Rather, it promises a certain behaviour
            (scalable congestion response), which networks can objectively
            verify if they need to. This is because low delay depends on
            collective host behaviour, whereas bandwidth priority depends on
            network behaviour.</t>
          </dd>
          <dt>State-of-the-art AQMs:</dt>
          <dd>AQMs such as PIE and FQ-CoDel
            give a significant reduction in queuing delay relative to no AQM
            at all. L4S is intended to complement these AQMs, and should not
            distract from the need to deploy them as widely as possible.
            Nonetheless, AQMs alone cannot reduce queuing delay too far
            without significantly reducing link utilization, because the root
            cause of the problem is on the host - where Classic congestion
            controls use large saw-toothing rate variations. The L4S approach
            resolves this tension by ensuring hosts can minimize the size of
            their sawteeth without appearing so aggressive to Classic flows
            that they starve them.</dd>
          <dt>Per-flow queuing or marking:</dt>
          <dd>
            <t>Similarly, per-flow
            approaches such as FQ-CoDel or Approx Fair CoDel <xref target="AFCD" format="default"/> are not incompatible with the L4S approach.
            However, per-flow queuing alone is not enough - it only isolates
            the queuing of one flow from others; not from itself. Per-flow
            implementations still need to have support for scalable congestion
            control added, which has already been done in FQ-CoDel (see
            Sec.5.2.7 of <xref target="RFC8290" format="default"/>). Without this simple
            modification, per-flow AQMs like FQ-CoDel would still not be able
            to support applications that need both very low delay and high
            bandwidth, e.g. video-based control of remote procedures, or
            interactive cloud-based video (see Note <xref format="counter" target="l4sarch_note_app_shuffle"/>
            below).</t>
            <t>Although per-flow techniques are
            not incompatible with L4S, it is important to have the DualQ
            alternative. This is because handling end-to-end (layer 4) flows
            in the network (layer 3 or 2) precludes some important end-to-end
            functions. For instance:</t>
            <ol spacing="normal" type="a"><li>
                <t>Per-flow forms of L4S like FQ-CoDel are incompatible with
                full end-to-end encryption of transport layer identifiers for
                privacy and confidentiality (e.g. IPSec or encrypted VPN
                tunnels), because they require packet inspection to access the
                end-to-end transport flow identifiers. </t>
                <t>In contrast, the DualQ form of L4S requires no
                deeper inspection than the IP layer. So, as long as operators
                take the DualQ approach, their users can have both very low
                queuing delay and full end-to-end encryption <xref target="RFC8404" format="default"/>.</t>
              </li>
              <li>
                <t>With per-flow forms of L4S, the network takes over control
                of the relative rates of each application flow. Some see it as
                an advantage that the network will prevent some flows running
                faster than others. Others consider it an inherent part of the
                Internet's appeal that applications can control their rate
                while taking account of the needs of others via congestion
                signals. They maintain that this has allowed applications with
                interesting rate behaviours to evolve, for instance, variable
                bit-rate video that varies around an equal share rather than
                being forced to remain equal at every instant, or scavenger
                services that use less than an equal share of
                capacity <xref target="LEDBAT_AQM" format="default"/>.</t>
                <t>The L4S architecture does not require the IETF
                to commit to one approach over the other, because it supports
                both, so that the 'market' can decide. Nonetheless, in the
                spirit of 'Do one thing and do it well' <xref target="McIlroy78" format="default"/>, the DualQ option provides low delay
                without prejudging the issue of flow-rate control. Then, flow
                rate policing can be added separately if desired. This allows
                application control up to a point, but the network can still
                choose to set the point at which it intervenes to prevent one
                flow completely starving another.</t>
              </li>
              <!--                <t>fq prevents any one flow from consuming more than 1/N of
                the capacity at any instant, where N is the number of flows.
                This is fine if all flows are elastic, but it does not sit
                well with a variable bit rate real-time multimedia flow, which
                requires wriggle room to sometimes take more and other times
                less than a 1/N share.<vspace blankLines="1"/>It might seem
                that an fq scheduler offers the benefit that it prevents
                individual flows from hogging all the bandwidth. However, L4S
                has been deliberately designed so that policing of individual
                flows can be added as a policy choice, rather than requiring
                one specific policy choice as the mechanism itself. {ToDo:
                refer to paper on FQ+LEDBAT rather than explain it here - but
                we might end up removing this whole bullet} On the other other
                end of the spectrum, fq also prevent a flow from using less
                than 1/N (otherwise the flow would equally underutilize the
                link when N=1). In a shared queue, all flows get equal
                congestion signal feedback, which allows
                less-than-best-effort-flows to use a lower rate to probability
                ratio than Reno-friendly traffic. With fq, the capacity is
                split by N equal parts, and congestion feedback is only valid
                for the 1/N capacity partition ocupied by the less-than
                best-effort flow as if the flow is alone (N=1) and would then
                try to fully utilize the available capacity.{/ToDo} A
                scheduler (like fq) has to decide packet-by-packet which flow
                to schedule without knowing application intent. Whereas a
                separate policing function can be configured less strictly, so
                that senders can still control the instantaneous rate of each
                flow dependent on the needs of each application (e.g. variable
                rate video), giving more wriggle-room before a flow is deemed
                non-compliant. Also policing of queuing and of flow-rates can
                be applied independently.</t>
-->
            </ol>
            <t>Note: </t>
            <ol spacing="normal" type="1"><li anchor="l4sarch_note_app_shuffle">It might seem that
                self-inflicted queuing delay within a per-flow queue should
                not be counted, because if the delay wasn't in the network it
                would just shift to the sender. However, modern adaptive
                applications, e.g. HTTP/2 <xref target="RFC7540" format="default"/>
                or some interactive media applications (see <xref target="l4sarch_apps" format="default"/>), can keep low latency objects at the
                front of their local send queue by shuffling priorities of
                other objects dependent on the progress of other transfers.
                They cannot shuffle objects once they have released them into
                the network.</li>
            </ol>
          </dd>
          <dt>Alternative Back-off ECN (ABE):</dt>
          <dd>Here again, L4S is
            not an alternative to ABE but a complement that introduces much
            lower queuing delay. ABE <xref target="RFC8511" format="default"/> alters the
            host behaviour in response to ECN marking to utilize a link better
            and give ECN flows faster throughput. It uses ECT(0) and assumes
            the network still treats ECN and drop the same. Therefore ABE
            exploits any lower queuing delay that AQMs can provide. But as
            explained above, AQMs still cannot reduce queuing delay too far
            without losing link utilization (to allow for other, non-ABE,
            flows).</dd>
          <dt>BBR:</dt>
          <dd>
            <t>Bottleneck Bandwidth and Round-trip propagation
            time (BBR <xref target="I-D.cardwell-iccrg-bbr-congestion-control" format="default"/>) controls
            queuing delay end-to-end without needing any special logic in the
            network, such as an AQM. So it works pretty-much on any path
            (although it has not been without problems, particularly capacity
            sharing in BBRv1). BBR keeps queuing delay reasonably low, but
            perhaps not quite as low as with state-of-the-art AQMs such as PIE
            or FQ-CoDel, and certainly nowhere near as low as with L4S.
            Queuing delay is also not consistently low, due to BBR's regular
            bandwidth probing spikes and its aggressive flow start-up
            phase.</t>
            <t>L4S complements BBR. Indeed
            BBRv2 <xref target="BBRv2" format="default"/> uses L4S ECN and a scalable L4S
            congestion control behaviour in response to any ECN signalling
            from the path. The L4S ECN signal complements the delay based
            congestion control aspects of BBR with an explicit indication that
            hosts can use, both to converge on a fair rate and to keep below a
            shallow queue target set by the network. Without L4S ECN, both
            these aspects need to be assumed or estimated.</t>
          </dd>
        </dl>
      </section>
    </section>
    <section anchor="l4sarch_applicability" numbered="true" toc="default">
      <name>Applicability</name>
      <section anchor="l4sarch_apps" numbered="true" toc="default">
        <name>Applications</name>
        <t>A transport layer that solves the current latency issues will
        provide new service, product and application opportunities.</t>
        <t>With the L4S approach, the following existing applications also
        experience significantly better quality of experience under load:
        </t>
        <ul spacing="normal">
          <li>Gaming, including cloud based gaming;</li>
          <li>VoIP;</li>
          <li>Video conferencing;</li>
          <li>Web browsing;</li>
          <li>(Adaptive) video streaming;</li>
          <li>Instant messaging.</li>
        </ul>
        <t>The significantly lower queuing latency also enables some
        interactive application functions to be offloaded to the cloud that
        would hardly even be usable today: </t>
        <ul spacing="normal">
          <li>Cloud based interactive video;</li>
          <li>Cloud based virtual and augmented reality.</li>
        </ul>
        <t>The above two applications have been successfully demonstrated with
        L4S, both running together over a 40 Mb/s broadband access link
        loaded up with the numerous other latency sensitive applications in
        the previous list as well as numerous downloads - all sharing the same
        bottleneck queue simultaneously <xref target="L4Sdemo16" format="default"/>. For
        the former, a panoramic video of a football stadium could be swiped
        and pinched so that, on the fly, a proxy in the cloud could generate a
        sub-window of the match video under the finger-gesture control of each
        user. For the latter, a virtual reality headset displayed a viewport
        taken from a 360 degree camera in a racing car. The user's head
        movements controlled the viewport extracted by a cloud-based proxy. In
        both cases, with 7 ms end-to-end base delay, the additional
        queuing delay of roughly 1 ms was so low that it seemed the video
        was generated locally.</t>
        <t>Using a swiping finger gesture or head movement to pan a video are
        extremely latency-demanding actions--far more demanding than
        VoIP. Because human vision can detect extremely low delays of the
        order of single milliseconds when delay is translated into a visual
        lag between a video and a reference point (the finger or the
        orientation of the head sensed by the balance system in the inner ear
        --- the vestibular system).</t>
        <t>Without the low queuing delay of L4S, cloud-based applications like
        these would not be credible without significantly more access
        bandwidth (to deliver all possible video that might be viewed) and
        more local processing, which would increase the weight and power
        consumption of head-mounted displays. When all interactive processing
        can be done in the cloud, only the data to be rendered for the end
        user needs to be sent.</t>
        <t>Other low latency high bandwidth applications such as:</t>
        <ul spacing="normal">
          <li>Interactive remote presence;</li>
          <li>Video-assisted remote control of machinery or industrial
            processes.</li>
        </ul>
        <t>are not credible at all without very low queuing delay. No
        amount of extra access bandwidth or local processing can make up for
        lost time.</t>
      </section>
      <section numbered="true" toc="default">
        <name>Use Cases</name>
        <t>The following use-cases for L4S are being considered by various
        interested parties:</t>
        <ul spacing="normal">
          <li>Where the bottleneck is one of various types of access network:
            e.g. DSL, Passive Optical Networks (PON), DOCSIS cable,
            mobile, satellite (see <xref target="l4sarch_link-specifics" format="default"/> for
            some technology-specific details)</li>
          <li>
            <t>Private networks of heterogeneous data centres, where there is
            no single administrator that can arrange for all the simultaneous
            changes to senders, receivers and network needed to deploy
            DCTCP:</t>
            <ul spacing="normal">
              <li>a set of private data centres interconnected over a wide
                area with separate administrations, but within the same
                company</li>
              <li>a set of data centres operated by separate companies
                interconnected by a community of interest network
                (e.g. for the finance sector)</li>
              <li>multi-tenant (cloud) data centres where tenants choose
                their operating system stack (Infrastructure as a Service -
                IaaS)</li>
            </ul>
          </li>
          <li>
            <t>Different types of transport (or application) congestion
            control:</t>
            <ul spacing="normal">
              <li>elastic (TCP/SCTP);</li>
              <li>real-time (RTP, RMCAT);</li>
              <li>query (DNS/LDAP).</li>
            </ul>
          </li>
          <li>
            <t>Where low delay quality of service is required, but without
            inspecting or intervening above the IP layer <xref target="RFC8404" format="default"/>:</t>
            <ul spacing="normal">
              <li>mobile and other networks have tended to inspect higher
                layers in order to guess application QoS requirements.
                However, with growing demand for support of privacy and
                encryption, L4S offers an alternative. There is no need to
                select which traffic to favour for queuing, when L4S gives
                favourable queuing to all traffic.</li>
            </ul>
          </li>
          <li>If queuing delay is minimized, applications with a fixed delay
            budget can communicate over longer distances, or via a longer
            chain of service functions <xref target="RFC7665" format="default"/> or onion
            routers.</li>
          <li>If delay jitter is minimized, it is possible to reduce the
            dejitter buffers on the receive end of video streaming, which
            should improve the interactive experience</li>
        </ul>
      </section>
      <section anchor="l4sarch_link-specifics" numbered="true" toc="default">
        <name>Applicability with Specific Link Technologies</name>
        <t>Certain link technologies aggregate data from multiple packets into
        bursts, and buffer incoming packets while building each burst. WiFi,
        PON and cable all involve such packet aggregation, whereas fixed
        Ethernet and DSL do not. No sender, whether L4S or not, can do
        anything to reduce the buffering needed for packet aggregation. So an
        AQM should not count this buffering as part of the queue that it
        controls, given no amount of congestion signals will reduce it.</t>
        <t>Certain link technologies also add buffering for other reasons,
        specifically:</t>
        <ul spacing="normal">
          <li>Radio links (cellular, WiFi, satellite) that are distant from
            the source are particularly challenging. The radio link capacity
            can vary rapidly by orders of magnitude, so it is considered
            desirable to hold a standing queue that can utilize sudden
            increases of capacity;</li>
          <li>Cellular networks are further complicated by a perceived need
            to buffer in order to make hand-overs imperceptible;</li>
        </ul>
        <t>L4S cannot remove the need for all these different forms of
        buffering. However, by removing 'the longest pole in the tent'
        (buffering for the large sawteeth of Classic congestion controls), L4S
        exposes all these 'shorter poles' to greater scrutiny.</t>
        <t>Until now, the buffering needed for these additional reasons tended
        to be over-specified - with the excuse that none were 'the longest
        pole in the tent'. But having removed the 'longest pole', it becomes
        worthwhile to minimize them, for instance reducing packet aggregation
        burst sizes and MAC scheduling intervals.</t>
      </section>
      <section numbered="true" toc="default">
        <name>Deployment Considerations</name>
        <t>L4S AQMs, whether DualQ <xref target="I-D.ietf-tsvwg-aqm-dualq-coupled" format="default"/> or FQ, e.g. <xref target="RFC8290" format="default"/> are, in themselves, an incremental deployment
        mechanism for L4S - so that L4S traffic can coexist with existing
        Classic (Reno-friendly) traffic. <xref target="l4sarch_deploy_top" format="default"/>
        explains why only deploying an L4S AQM in one node at each end of the
        access link will realize nearly all the benefit of L4S.</t>
        <t>L4S involves both end systems and the network, so <xref target="l4s_arch_deploy_seq" format="default"/> suggests some typical sequences to
        deploy each part, and why there will be an immediate and significant
        benefit after deploying just one part.</t>
        <t><xref target="l4sarch_sec_non-l4s-neck" format="default"/> and <xref target="l4sarch_sec_classic-ecn-neck" format="default"/> describe the converse
        incremental deployment case where there is no L4S AQM at the network
        bottleneck, so any L4S flow traversing this bottleneck has to take
        care in case it is competing with Classic traffic.</t>
        <section anchor="l4sarch_deploy_top" numbered="true" toc="default">
          <name>Deployment Topology</name>
          <t>L4S AQMs will not have to be deployed throughout the Internet
          before L4S will work for anyone. Operators of public Internet access
          networks typically design their networks so that the bottleneck will
          nearly always occur at one known (logical) link. This confines the
          cost of queue management technology to one place.</t>
          <t>The case of mesh networks is different and will be discussed
          later in this section. But the known bottleneck case is generally
          true for Internet access to all sorts of different 'sites', where
          the word 'site' includes home networks, small- to medium-sized
          campus or enterprise networks and even cellular devices (<xref target="l4sarch_fig_access_topology" format="default"/>). Also, this known-bottleneck
          case tends to be applicable whatever the access link technology;
          whether xDSL, cable, PON, cellular, line of sight wireless or
          satellite.</t>
          <t>Therefore, the full benefit of the L4S service should be
          available in the downstream direction when an L4S AQM is deployed at
          the ingress to this bottleneck link. And similarly, the full
          upstream service will be available once an L4S AQM is deployed at
          the ingress into the upstream link. (Of course, multi-homed sites
          would only see the full benefit once all their access links were
          covered.)</t>
          <figure anchor="l4sarch_fig_access_topology">
            <name>Likely location of DualQ (DQ) Deployments in common access topologies</name>
            <artwork name="" type="" align="left" alt=""><![CDATA[                                         ______
                                        (      )
                      __          __  (          )
                     |DQ\________/DQ|( enterprise )
                 ___ |__/        \__| ( /campus  )
                (   )                   (______)
              (      )                           ___||_
+----+      (          )  __                 __ /      \
| DC |-----(    Core    )|DQ\_______________/DQ|| home |
+----+      (          ) |__/               \__||______|
               (_____) __       
                      |DQ\__/\        __ ,===.
                      |__/    \  ____/DQ||| ||mobile
                               \/    \__|||_||device
                                         | o |
                                         `---'

]]></artwork>
          </figure>
          <t>Deployment in mesh topologies depends on how over-booked the core
          is. If the core is non-blocking, or at least generously provisioned
          so that the edges are nearly always the bottlenecks, it would only
          be necessary to deploy an L4S AQM at the edge bottlenecks. For
          example, some data-centre networks are designed with the bottleneck
          in the hypervisor or host NICs, while others bottleneck at the
          top-of-rack switch (both the output ports facing hosts and those
          facing the core).</t>
          <t>An L4S AQM would eventually also need to be deployed at any other
          persistent bottlenecks such as network interconnections,
          e.g. some public Internet exchange points and the ingress and
          egress to WAN links interconnecting data-centres.</t>
        </section>
        <section anchor="l4s_arch_deploy_seq" numbered="true" toc="default">
          <name>Deployment Sequences</name>
          <t>For any one L4S flow to work, it requires 3 parts to have been
          deployed. This was the same deployment problem that ECN
          faced <xref target="RFC8170" format="default"/> so we have learned from that
          experience.</t>
          <t>Firstly, L4S deployment exploits the fact that DCTCP already
          exists on many Internet hosts (Windows, FreeBSD and Linux); both
          servers and clients. Therefore, just deploying an L4S AQM at a
          network bottleneck immediately gives a working deployment of all the
          L4S parts. DCTCP needs some safety concerns to be fixed for general
          use over the public Internet (see Section 4.3 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>), but DCTCP is not on by
          default, so these issues can be managed within controlled
          deployments or controlled trials.</t>
          <t>Secondly, the performance improvement with L4S is so significant
          that it enables new interactive services and products that were not
          previously possible. It is much easier for companies to initiate new
          work on deployment if there is budget for a new product trial. If,
          in contrast, there were only an incremental performance improvement
          (as with Classic ECN), spending on deployment tends to be much
          harder to justify.</t>
          <t>Thirdly, the L4S identifier is defined so that initially network
          operators can enable L4S exclusively for certain customers or
          certain applications. But this is carefully defined so that it does
          not compromise future evolution towards L4S as an Internet-wide
          service. This is because the L4S identifier is defined not only as
          the end-to-end ECN field, but it can also optionally be combined
          with any other packet header or some status of a customer or their
          access link (see section 5.4 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>). Operators could do this
          anyway, even if it were not blessed by the IETF. However, it is best
          for the IETF to specify that, if they use their own local
          identifier, it must be in combination with the IETF's identifier.
          Then, if an operator has opted for an exclusive local-use approach,
          later they only have to remove this extra rule to make the service
          work Internet-wide - it will already traverse middleboxes, peerings,
          etc. <!--{K: Review up to here}-->
          </t>
          <figure anchor="l4s_arch_fig_deploy_seq">
            <name>Example L4S Deployment Sequence</name>
            <artwork name="" type="" align="left" alt=""><![CDATA[+-+--------------------+----------------------+---------------------+
| | Servers or proxies |      Access link     |             Clients |
+-+--------------------+----------------------+---------------------+
|0| DCTCP (existing)   |                      |    DCTCP (existing) |
+-+--------------------+----------------------+---------------------+
|1|                    |Add L4S AQM downstream|                     |
| |       WORKS DOWNSTREAM FOR CONTROLLED DEPLOYMENTS/TRIALS        |
+-+--------------------+----------------------+---------------------+
|2| Upgrade DCTCP to   |                      |Replace DCTCP feedb'k|
| | TCP Prague         |                      |         with AccECN |
| |                 FULLY     WORKS     DOWNSTREAM                  |
+-+--------------------+----------------------+---------------------+
| |                    |                      |    Upgrade DCTCP to |
|3|                    | Add L4S AQM upstream |          TCP Prague |
| |                    |                      |                     |
| |              FULLY WORKS UPSTREAM AND DOWNSTREAM                |
+-+--------------------+----------------------+---------------------+

]]></artwork>
          </figure>
          <t><xref target="l4s_arch_fig_deploy_seq" format="default"/> illustrates some example
          sequences in which the parts of L4S might be deployed. It consists
          of the following stages:</t>
          <ol spacing="normal" type="1"><li>Here, the immediate benefit of a single AQM deployment can be
              seen, but limited to a controlled trial or controlled
              deployment. In this example downstream deployment is first, but
              in other scenarios the upstream might be deployed first. If no
              AQM at all was previously deployed for the downstream access, an
              L4S AQM greatly improves the Classic service (as well as adding
              the L4S service). If an AQM was already deployed, the Classic
              service will be unchanged (and L4S will add an improvement on
              top).</li>
            <li>
              <t>In this stage, the name 'TCP Prague' <xref target="I-D.briscoe-iccrg-prague-congestion-control" format="default"/> is used
              to represent a variant of DCTCP that is safe to use in a
              production Internet environment. If the application is primarily
              unidirectional, 'TCP Prague' at one end will provide all the
              benefit needed. For TCP transports, Accurate ECN feedback
              (AccECN) <xref target="I-D.ietf-tcpm-accurate-ecn" format="default"/> is
              needed at the other end, but it is a generic ECN feedback
              facility that is already planned to be deployed for other
              purposes, e.g. DCTCP, BBR. The two ends can be deployed in
              either order, because, in TCP, an L4S congestion control only
              enables itself if it has negotiated the use of AccECN feedback
              with the other end during the connection handshake. Thus,
              deployment of TCP Prague on a server enables L4S trials to move
              to a production service in one direction, wherever AccECN is
              deployed at the other end. This stage might be further motivated
              by the performance improvements of TCP Prague relative to DCTCP
              (see Appendix A.2 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>).</t>
              <t>Unlike TCP, from the outset, QUIC ECN
              feedback <xref target="RFC9000" format="default"/> has supported L4S.
              Therefore, if the transport is QUIC, one-ended deployment of a
              Prague congestion control at this stage is simple and
              sufficient.</t>
            </li>
            <li>This is a two-move stage to enable L4S upstream. An L4S AQM
              or TCP Prague can be deployed in either order as already
              explained. To motivate the first of two independent moves, the
              deferred benefit of enabling new services after the second move
              has to be worth it to cover the first mover's investment risk.
              As explained already, the potential for new interactive services
              provides this motivation. An L4S AQM also improves the upstream
              Classic service - significantly if no other AQM has already been
              deployed.</li>
          </ol>
          <t>Note that other deployment sequences might occur. For
          instance: the upstream might be deployed first; a non-TCP protocol
          might be used end-to-end, e.g. QUIC, RTP; a body such as the
          3GPP might require L4S to be implemented in 5G user equipment, or
          other random acts of kindness.</t>
        </section>
        <section anchor="l4sarch_sec_non-l4s-neck" numbered="true" toc="default">
          <name>L4S Flow but Non-ECN Bottleneck</name>
          <t>If L4S is enabled between two hosts, the L4S sender is required
          to coexist safely with Reno in response to any drop (see Section 4.3
          of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>).</t>
          <t>Unfortunately, as well as protecting Classic traffic, this rule
          degrades the L4S service whenever there is any loss, even if the
          cause is not persistent congestion at a bottleneck, e.g.:</t>
          <ul spacing="normal">
            <li>congestion loss at other transient bottlenecks, e.g. due
              to bursts in shallower queues;</li>
            <li>transmission errors, e.g. due to electrical
              interference;</li>
            <li>rate policing.</li>
          </ul>
          <t>Three complementary approaches are in progress to address this
          issue, but they are all currently research:</t>
          <ul spacing="normal">
            <li>In Prague congestion control, ignore certain losses deemed
              unlikely to be due to congestion (using some ideas from
              BBR <xref target="I-D.cardwell-iccrg-bbr-congestion-control" format="default"/> regarding
              isolated losses). This could mask any of the above types of loss
              while still coexisting with drop-based congestion controls.</li>
            <li>A combination of RACK, L4S and link retransmission without
              resequencing could repair transmission errors without the head
              of line blocking delay usually associated with link-layer
              retransmission <xref target="UnorderedLTE" format="default"/>, <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>;</li>
            <li>Hybrid ECN/drop rate policers (see <xref target="l4s_arch_sec_policing" format="default"/>).</li>
          </ul>
          <t>L4S deployment scenarios that minimize these issues
          (e.g. over wireline networks) can proceed in parallel to this
          research, in the expectation that research success could continually
          widen L4S applicability.</t>
        </section>
        <section anchor="l4sarch_sec_classic-ecn-neck" numbered="true" toc="default">
          <name>L4S Flow but Classic ECN Bottleneck</name>
          <t>Classic ECN support is starting to materialize on the Internet as
          an increased level of CE marking. It is hard to detect whether this
          is all due to the addition of support for ECN in the Linux
          implementation of FQ-CoDel, which is not problematic, because FQ
          inherently forces the throughput of each flow to be equal
          irrespective of its aggressiveness. However, some of this Classic
          ECN marking might be due to single-queue ECN deployment. This case
          is discussed in Section 4.3 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>).</t>
        </section>
        <section numbered="true" toc="default">
          <name>L4S AQM Deployment within Tunnels</name>
          <t>An L4S AQM uses the ECN field to signal congestion. So, in common
          with Classic ECN, if the AQM is within a tunnel or at a lower layer,
          correct functioning of ECN signalling requires correct propagation
          of the ECN field up the layers <xref target="RFC6040" format="default"/>, <xref target="I-D.ietf-tsvwg-rfc6040update-shim" format="default"/>, <xref target="I-D.ietf-tsvwg-ecn-encap-guidelines" format="default"/>.</t>
        </section>
      </section>
    </section>
    <section anchor="l4sps_IANA" numbered="true" toc="default">
      <name>IANA Considerations (to be removed by RFC Editor)</name>
      <t>This specification contains no IANA considerations.</t>
    </section>
    <section anchor="l4sps_Security_Considerations" numbered="true" toc="default">
      <name>Security Considerations</name>
      <section numbered="true" toc="default">
        <name>Traffic Rate (Non-)Policing</name>
        <t>Because the L4S service can serve all traffic that is using the
        capacity of a link, it should not be necessary to rate-police access
        to the L4S service. In contrast, Diffserv only works if some packets
        get less favourable treatment than others. So Diffserv has to use
        traffic rate policers to limit how much traffic can be favoured. In
        turn, traffic policers require traffic contracts between users and
        networks as well as pairwise between networks. Because L4S will lack
        all this management complexity, it is more likely to work
        end-to-end.</t>
        <t>During early deployment (and perhaps always), some networks will
        not offer the L4S service. In general, these networks should not need
        to police L4S traffic - they are required not to change the L4S
        identifier, merely treating the traffic as best efforts traffic, as
        they already treat traffic with ECT(1) today. At a bottleneck, such
        networks will introduce some queuing and dropping. When a scalable
        congestion control detects a drop it will have to respond safely with
        respect to Classic congestion controls (as required in Section 4.3 of
        <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>). This will degrade the L4S
        service to be no better (but never worse) than Classic best efforts,
        whenever a non-ECN bottleneck is encountered on a path (see <xref target="l4sarch_sec_non-l4s-neck" format="default"/>).</t>
        <t>In some cases, networks that solely support Classic ECN <xref target="RFC3168" format="default"/> in a single queue bottleneck might opt to police
        L4S traffic in order to protect competing Classic ECN traffic.</t>
        <t>Certain network operators might choose to restrict access to the
        L4S class, perhaps only to selected premium customers as a value-added
        service. Their packet classifier (item 2 in <xref target="l4sps_fig_components" format="default"/>) could identify such customers against
        some other field (e.g. source address range) as well as ECN. If
        only the ECN L4S identifier matched, but not the source address (say),
        the classifier could direct these packets (from non-premium customers)
        into the Classic queue. Explaining clearly how operators can use an
        additional local classifiers (see section 5.4 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/>) is intended to remove any
        motivation to bleach the L4S identifier. Then at least the L4S ECN
        identifier will be more likely to survive end-to-end even though the
        service may not be supported at every hop. Such local arrangements
        would only require simple registered/not-registered packet
        classification, rather than the managed, application-specific traffic
        policing against customer-specific traffic contracts that Diffserv
        uses.</t>
      </section>
      <section numbered="true" toc="default">
        <name>'Latency Friendliness'</name>
        <t>Like the Classic service, the L4S service relies on self-constraint
        - limiting rate in response to congestion. In addition, the L4S
        service requires self-constraint in terms of limiting latency
        (burstiness). It is hoped that self-interest and guidance on dynamic
        behaviour (especially flow start-up, which might need to be
        standardized) will be sufficient to prevent transports from sending
        excessive bursts of L4S traffic, given the application's own latency
        will suffer most from such behaviour.</t>
        <t>Whether burst policing becomes necessary remains to be seen.
        Without it, there will be potential for attacks on the low latency of
        the L4S service.</t>
        <t>If needed, various arrangements could be used to address this
        concern:</t>
        <dl newline="false" spacing="normal">
          <dt>Local bottleneck queue protection:</dt>
          <dd>A per-flow
            (5-tuple) queue protection function <xref target="I-D.briscoe-docsis-q-protection" format="default"/> has been developed for
            the low latency queue in DOCSIS, which has adopted the DualQ L4S
            architecture. It protects the low latency service from any
            queue-building flows that accidentally or maliciously classify
            themselves into the low latency queue. It is designed to score
            flows based solely on their contribution to queuing (not flow rate
            in itself). Then, if the shared low latency queue is at risk of
            exceeding a threshold, the function redirects enough packets of
            the highest scoring flow(s) into the Classic queue to preserve low
            latency.</dd>
          <dt>Distributed traffic scrubbing:</dt>
          <dd>Rather than policing
            locally at each bottleneck, it may only be necessary to address
            problems reactively, e.g. punitively target any deployments
            of new bursty malware, in a similar way to how traffic from
            flooding attack sources is rerouted via scrubbing facilities.</dd>
          <dt>Local bottleneck per-flow scheduling:</dt>
          <dd>Per-flow
            scheduling should inherently isolate non-bursty flows from bursty
            (see <xref target="l4sps_why-not" format="default"/> for discussion of the merits
            of per-flow scheduling relative to per-flow policing).</dd>
          <dt>Distributed access subnet queue protection:</dt>
          <dd>Per-flow
            queue protection could be arranged for a queue structure
            distributed across a subnet inter-communicating using lower layer
            control messages (see Section 2.1.4 of <xref target="QDyn" format="default"/>). For
            instance, in a radio access network user equipment already sends
            regular buffer status reports to a radio network controller, which
            could use this information to remotely police individual
            flows.</dd>
          <dt>Distributed Congestion Exposure to Ingress Policers:</dt>
          <dd>The
            Congestion Exposure (ConEx) architecture <xref target="RFC7713" format="default"/> which uses egress audit to motivate senders to
            truthfully signal path congestion in-band where it can be used by
            ingress policers. An edge-to-edge variant of this architecture is
            also possible.</dd>
          <dt>Distributed Domain-edge traffic conditioning:</dt>
          <dd>An
            architecture similar to Diffserv <xref target="RFC2475" format="default"/> may
            be preferred, where traffic is proactively conditioned on entry to
            a domain, rather than reactively policed only if it is leads to
            queuing once combined with other traffic at a bottleneck.</dd>
          <dt>Distributed core network queue protection:</dt>
          <dd>The
            policing function could be divided between per-flow mechanisms at
            the network ingress that characterize the burstiness of each flow
            into a signal carried with the traffic, and per-class mechanisms
            at bottlenecks that act on these signals if queuing actually
            occurs once the traffic converges. This would be somewhat similar
            to the idea behind core stateless fair queuing, which is in turn
            similar to <xref target="Nadas20" format="default"/>.</dd>
        </dl>
        <t>None of these possible queue protection capabilities are considered
        a necessary part of the L4S architecture, which works without them (in
        a similar way to how the Internet works without per-flow rate
        policing). Indeed, under normal circumstances, latency policers would
        not intervene, and if operators found they were not necessary they
        could disable them. Part of the L4S experiment will be to see whether
        such a function is necessary, and which arrangements are most
        appropriate to the size of the problem.</t>
      </section>
      <section anchor="l4s_arch_sec_policing" numbered="true" toc="default">
        <name>Interaction between Rate Policing and L4S</name>
        <t>As mentioned in <xref target="l4sps_why-not" format="default"/>, L4S should remove
        the need for low latency Diffserv classes. However, those Diffserv
        classes that give certain applications or users priority over
        capacity, would still be applicable in certain scenarios
        (e.g. corporate networks). Then, within such Diffserv classes,
        L4S would often be applicable to give traffic low latency and low loss
        as well. Within such a Diffserv class, the bandwidth available to a
        user or application is often limited by a rate policer. Similarly, in
        the default Diffserv class, rate policers are used to partition shared
        capacity.</t>
        <t>A classic rate policer drops any packets exceeding a set rate,
        usually also giving a burst allowance (variants exist where the
        policer re-marks non-compliant traffic to a discard-eligible Diffserv
        codepoint, so they may be dropped elsewhere during contention).
        Whenever L4S traffic encounters one of these rate policers, it will
        experience drops and the source will have to fall back to a Classic
        congestion control, thus losing the benefits of L4S (<xref target="l4sarch_sec_non-l4s-neck" format="default"/>). So, in networks that already use
        rate policers and plan to deploy L4S, it will be preferable to
        redesign these rate policers to be more friendly to the L4S
        service.</t>
        <t>L4S-friendly rate policing is currently a research area (note that
        this is not the same as latency policing). It might be achieved by
        setting a threshold where ECN marking is introduced, such that it is
        just under the policed rate or just under the burst allowance where
        drop is introduced. This could be applied to various types of rate
        policer, e.g. <xref target="RFC2697" format="default"/>, <xref target="RFC2698" format="default"/>
        or the 'local' (non-ConEx) variant of the ConEx congestion
        policer <xref target="I-D.briscoe-conex-policing" format="default"/>. It might
        also be possible to design scalable congestion controls to respond
        less catastrophically to loss that has not been preceded by a period
        of increasing delay.</t>
        <!--{ToDo: Be more specific about using a 2-rate 3-color marker to mark ECN at the first rate and drop at the second. Or refer to PCN threshold marking, 
and how to build such a policer using 2 leaky buckets (BT patented).}-->

        <t>The design of L4S-friendly rate policers will require a separate
        dedicated document. For further discussion of the interaction between
        L4S and Diffserv, see <xref target="I-D.briscoe-tsvwg-l4s-diffserv" format="default"/>.</t>
      </section>
      <section numbered="true" toc="default">
        <name>ECN Integrity</name>
        <t>Receiving hosts can fool a sender into downloading faster by
        suppressing feedback of ECN marks (or of losses if retransmissions are
        not necessary or available otherwise). Various ways to protect
        transport feedback integrity have been developed. For instance:</t>
        <ul spacing="normal">
          <li>The sender can test the integrity of the receiver's feedback by
            occasionally setting the IP-ECN field to the congestion
            experienced (CE) codepoint, which is normally only set by a
            congested link. Then the sender can test whether the receiver's
            feedback faithfully reports what it expects (see 2nd para of
            Section 20.2 of <xref target="RFC3168" format="default"/>).</li>
          <li>A network can enforce a congestion response to its ECN markings
            (or packet losses) by auditing congestion exposure
            (ConEx) <xref target="RFC7713" format="default"/>.</li>
          <li>The TCP authentication option (TCP-AO <xref target="RFC5925" format="default"/>) can be used to detect tampering with TCP
            congestion feedback.</li>
          <li>The ECN Nonce <xref target="RFC3540" format="default"/> was proposed to
            detect tampering with congestion feedback, but it has been
            reclassified as historic <xref target="RFC8311" format="default"/>.</li>
        </ul>
        <t>Appendix C.1 of <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> gives
        more details of these techniques including their applicability and
        pros and cons.</t>
      </section>
      <section numbered="true" toc="default">
        <name>Privacy Considerations</name>
        <t>As discussed in <xref target="l4sps_why-not" format="default"/>, the L4S
        architecture does not preclude approaches that inspect end-to-end
        transport layer identifiers. For instance it is simple to add L4S
        support to FQ-CoDel, which classifies by application flow ID in the
        network. However, the main innovation of L4S is the DualQ AQM
        framework that does not need to inspect any deeper than the outermost
        IP header, because the L4S identifier is in the IP-ECN field.</t>
        <t>Thus, the L4S architecture enables very low queuing delay without
        <em>requiring</em> inspection of information above
        the IP layer. This means that users who want to encrypt application
        flow identifiers, e.g. in IPSec or other encrypted VPN tunnels,
        don't have to sacrifice low delay <xref target="RFC8404" format="default"/>.</t>
        <t>Because L4S can provide low delay for a broad set of applications
        that choose to use it, there is no need for individual applications or
        classes within that broad set to be distinguishable in any way while
        traversing networks. This removes much of the ability to correlate
        between the delay requirements of traffic and other identifying
        features <xref target="RFC6973" format="default"/>. There may be some types of
        traffic that prefer not to use L4S, but the coarse binary
        categorization of traffic reveals very little that could be exploited
        to compromise privacy.</t>
      </section>
    </section>
    <section numbered="true" toc="default">
      <name>Acknowledgements</name>
      <t>Thanks to Richard Scheffenegger, Wes Eddy, Karen Nielsen, David
      Black, Jake Holland and Vidhi Goel for their useful review comments.</t>
      <t>Bob Briscoe and Koen De Schepper were part-funded by the European
      Community under its Seventh Framework Programme through the Reducing
      Internet Transport Latency (RITE) project (ICT-317700). Bob Briscoe was
      also part-funded by the Research Council of Norway through the TimeIn
      project, partly by CableLabs and partly by the Comcast Innovation Fund.
      The views expressed here are solely those of the authors.</t>
    </section>
  </middle>
  <!--  *****BACK MATTER ***** -->

  <back>
    <references>
      <name>Informative References</name>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2475.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2697.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2698.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2884.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.3168.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4774.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6679.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.3540.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.3246.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.3649.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4340.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4960.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5033.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5348.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5681.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5925.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6040.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.6973.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7560.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7665.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tcpm-accurate-ecn.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7713.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7540.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8033.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8034.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8170.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8257.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8290.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8298.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8311.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8312.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8404.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8511.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8888.xml"/>
      <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9000.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tsvwg-aqm-dualq-coupled.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tsvwg-ecn-l4s-id.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tsvwg-nqb.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-briscoe-conex-policing.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-stewart-tsvwg-sctpecn.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-sridharan-tcpm-ctcp.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tsvwg-rfc6040update-shim.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tsvwg-ecn-encap-guidelines.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-ietf-tcpm-generalized-ecn.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-briscoe-tsvwg-l4s-diffserv.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-briscoe-docsis-q-protection.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-cardwell-iccrg-bbr-congestion-control.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-briscoe-iccrg-prague-congestion-control.xml"/>
      <xi:include href="https://datatracker.ietf.org/doc/bibxml3/draft-morton-tsvwg-codel-approx-fair.xml"/>
      <reference anchor="Hohlfeld14" target="http://doi.acm.org/10.1145/2663716.2663730">
        <front>
          <title>A QoE Perspective on Sizing Network Buffers</title>
          <author fullname="Oliver Hohlfeld" initials="O." surname="Hohlfeld ">
            <organization/>
          </author>
          <author fullname="Enric Pujol" initials="E." surname="Pujol">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Florin Ciucu" initials="F." surname="Ciucu">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Anja Feldmann" initials="A." surname="Feldmann">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Paul Barford" initials="P." surname="Barford">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date month="November" year="2014"/>
        </front>
        <seriesInfo name="Proc. ACM Internet Measurement Conf (IMC'14)" value="hmm"/>
      </reference>
      <reference anchor="Mathis09" target="https://www.gdt.id.au/~gdt/presentations/2010-07-06-questnet-tcp/reference-materials/papers/mathis-relentless-congestion-control.pdf">
        <front>
          <title>Relentless Congestion Control</title>
          <author fullname="Matt Mathis" initials="M." surname="Mathis">
            <organization>PSC</organization>
          </author>
          <date month="May" year="2009"/>
        </front>
        <seriesInfo name="PFLDNeT'09" value=""/>
      </reference>
      <!--{ToDo: DCttH ref will need to be updated, once stable}-->

      <reference anchor="DCttH15" target="http://riteproject.eu/publications/">
        <front>
          <title>`Data Centre to the Home': Ultra-Low Latency for All</title>
          <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
            <organization>Nokia Bell Labs</organization>
          </author>
          <author fullname="Olga Bondarenko" initials="O." surname="Bondarenko">
            <organization>Simula Research Lab</organization>
          </author>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>BT</organization>
          </author>
          <author fullname="Ing-jyh Tsang" initials="I." surname="Tsang">
            <organization>Nokia Bell Labs</organization>
          </author>
          <date year="2015"/>
        </front>
        <seriesInfo name="RITE project Technical Report" value=""/>
        <format target="https://riteproject.files.wordpress.com/2019/06/dctth_preprint.pdf" type="PDF"/>
      </reference>
      <reference anchor="TCP-sub-mss-w" target="http://www.bobbriscoe.net/projects/latency/sub-mss-w.pdf">
        <front>
          <title>Scaling TCP's Congestion Window for Small Round Trip
          Times</title>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>BT</organization>
          </author>
          <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
            <organization>Bell Labs</organization>
          </author>
          <date month="May" year="2015"/>
        </front>
        <seriesInfo name="BT Technical Report" value="TR-TUB8-2015-002"/>
      </reference>
      <reference anchor="NewCC_Proc" target="https://www.ietf.org/iesg/statement/congestion-control.html">
        <front>
          <title>Experimental Specification of New Congestion Control
          Algorithms</title>
          <author fullname="Lars Eggert" initials="L." surname="Eggert">
            <organization>Nokia Research Centre</organization>
          </author>
          <date month="July" year="2007"/>
        </front>
        <seriesInfo name="IETF Operational Note" value="ion-tsv-alt-cc"/>
      </reference>
      <reference anchor="L4Sdemo16" target="http://dl.acm.org/citation.cfm?doid=2910017.2910633 (videos of demos: https://riteproject.eu/dctth/#1511dispatchwg )">
        <front>
          <title>Ultra-Low Delay for All: Live Experience, Live
          Analysis</title>
          <author fullname="Olga Bondarenko" initials="O." surname="Bondarenko">
            <organization>Simula Research Lab</organization>
          </author>
          <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
            <organization>Bell Labs</organization>
          </author>
          <author fullname="Ing-jyh Tsang" initials="I." surname="Tsang">
            <organization>Bell Labs</organization>
          </author>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>BT</organization>
          </author>
          <date month="May" year="2016"/>
        </front>
        <seriesInfo name="Proc. MMSYS'16" value="pp33:1--33:4"/>
        <format target="http://dl.acm.org/citation.cfm?doid=2910017.2910633" type="PDF"/>
      </reference>
      <reference anchor="TCP-CA" target="http://ee.lbl.gov/papers/congavoid.pdf">
        <front>
          <title>Congestion Avoidance and Control</title>
          <author fullname="Van Jacobson" initials="V." surname="Jacobson">
            <organization/>
          </author>
          <author fullname="Michael J. Karels" initials="M.J." surname="Karels">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date month="November" year="1988"/>
        </front>
        <seriesInfo name="Laurence Berkeley Labs Technical Report" value=""/>
      </reference>
      <reference anchor="UnorderedLTE">
        <front>
          <title>Implementing immediate forwarding for 4G in a network
          simulator</title>
          <author fullname="Magnus Vevik Austrheim" initials="M.V." surname="Austrheim">
            <organization/>
          </author>
          <date month="June" year="2019"/>
        </front>
        <seriesInfo name="Masters Thesis, Uni Oslo" value=""/>
      </reference>
      <reference anchor="PragueLinux" target="https://www.netdevconf.org/0x13/session.html?talk-tcp-prague-l4s">
        <front>
          <title>Implementing the `TCP Prague' Requirements for Low Latency
          Low Loss Scalable Throughput (L4S)</title>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>Independent</organization>
          </author>
          <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
            <organization>Nokia Bell Labs</organization>
          </author>
          <author fullname="Olga Albisser" initials="O." surname="Albisser">
            <organization>Simula Research Lab</organization>
          </author>
          <author fullname="Joakim Misund" initials="J." surname="Misund">
            <organization>Simula Research Lab</organization>
          </author>
          <author fullname="Olivier Tilmans" initials="O." surname="Tilmans">
            <organization>Nokia Bell Labs</organization>
          </author>
          <author fullname="Mirja Kühlewind" initials="M." surname="Kühlewind">
            <organization>ETH Zurich</organization>
          </author>
          <author fullname="Asad Sajjad Ahmed" initials="A.S." surname="Ahmed">
            <organization>Simula Research Lab</organization>
          </author>
          <date month="March" year="2019"/>
        </front>
        <seriesInfo name="Proc. Linux Netdev 0x13" value=""/>
        <format target="https://www.files.netdevconf.org/f/4d6939d5f1fb404fafd1/?dl=1" type="PDF"/>
      </reference>
      <reference anchor="DualPI2Linux" target="https://www.netdevconf.org/0x13/session.html?talk-DUALPI2-AQM">
        <front>
          <title>DUALPI2 - Low Latency, Low Loss and Scalable (L4S)
          AQM</title>
          <author fullname="Olga Albisser" initials="O." surname="Albisser">
            <organization>Simula Research Lab</organization>
          </author>
          <author fullname="Koen De Schepper" initials="K." surname="De Schepper">
            <organization>Nokia Bell Labs</organization>
          </author>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>Independent</organization>
          </author>
          <author fullname="Olivier Tilmans" initials="O." surname="Tilmans">
            <organization>Nokia Bell Labs</organization>
          </author>
          <author fullname="Henrik Steen" initials="H." surname="Steen">
            <organization>Simula Research Lab</organization>
          </author>
          <date month="March" year="2019"/>
        </front>
        <seriesInfo name="Proc. Linux Netdev 0x13" value=""/>
        <format target="https://www.files.netdevconf.org/f/febbe8c6a05b4ceab641/?dl=1" type="PDF"/>
      </reference>
      <reference anchor="DOCSIS3.1" target="https://specification-search.cablelabs.com/CM-SP-MULPIv3.1">
        <front>
          <title>MAC and Upper Layer Protocols Interface (MULPI)
          Specification, CM-SP-MULPIv3.1</title>
          <author fullname="" surname="">
            <organization>CableLabs</organization>
          </author>
          <date day="21" month="January" year="2019"/>
        </front>
        <seriesInfo name="Data-Over-Cable Service Interface Specifications DOCSIS® 3.1" value="Version i17 or later"/>
      </reference>
      <reference anchor="AFCD" target="https://doi.org/10.1016/j.jnca.2016.03.021">
        <front>
          <title>Towards fair and low latency next generation high speed
          networks: AFCD queuing</title>
          <author fullname="Lin Xue" initials="L." surname="Xue">
            <organization/>
          </author>
          <author fullname="Suman Kumar" initials="S." surname="Kumar">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Cheng Cui" initials="C." surname="Cui">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Praveenkumar Kondikoppa" initials="P." surname="Kondikoppa">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Chui-Hui Chiu" initials="C-H." surname="Chiu">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Seung-Jong Park" initials="S-J." surname="Park">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date month="July" year="2016"/>
        </front>
        <seriesInfo name="Journal of Network and Computer Applications" value="70:183--193"/>
      </reference>
      <reference anchor="Nadas20" target="https://doi.org/10.1145/3404868.3406669">
        <front>
          <title>A Congestion Control Independent L4S Scheduler</title>
          <author fullname="Szilveszter Nádas" initials="S." surname="Nádas">
            <organization/>
          </author>
          <author fullname="Gergo Gombos" initials="G." surname="Gombos">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Ferenc Fejes" initials="F." surname="Fejes">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Sándor Laki" initials="S." surname="Laki">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date month="July" year="2020"/>
        </front>
        <seriesInfo name="Proc. Applied Networking Research Workshop (ANRW '20)" value="45--51"/>
      </reference>
      <reference anchor="QDyn" target="https://arxiv.org/abs/1904.07044">
        <front>
          <title>Rapid Signalling of Queue Dynamics</title>
          <author fullname="Bob Briscoe" initials="B." surname="Briscoe">
            <organization>bobbriscoe.net Ltd</organization>
          </author>
          <date month="September" year="2017"/>
        </front>
        <seriesInfo name="bobbriscoe.net Technical Report" value="TR-BB-2017-001; arXiv:1904.07044 [cs.NI]"/>
        <format target="https://arxiv.org/pdf/1904.07044" type="PDF"/>
      </reference>
      <reference anchor="McIlroy78" target="https://archive.org/details/bstj57-6-1899">
        <front>
          <title>UNIX Time-Sharing System: Foreword</title>
          <author fullname="Doug McIlroy" initials="M.D." surname="McIlroy">
            <organization/>
          </author>
          <author initials="E. N." surname="Pinson">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author initials="B. A." surname="Tague">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date month="July" year="1978"/>
        </front>
        <seriesInfo name="The Bell System Technical Journal" value="57:6(1902--1903)"/>
      </reference>
      <reference anchor="LEDBAT_AQM" target="https://ieeexplore.ieee.org/document/8109367">
        <front>
          <title>Characterising LEDBAT Performance Through Bottlenecks Using
          PIE, FQ-CoDel and FQ-PIE Active Queue Management</title>
          <author fullname="Rasool Al-Saadi" initials="R." surname="Al-Saadi">
            <organization/>
          </author>
          <author fullname="Grenville Armitage" initials="G." surname="Armitage">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <author fullname="Jason But" initials="J." surname="But">
            <organization/>
            <address>
              <postal>
                <street/>
                <city/>
                <region/>
                <code/>
                <country/>
              </postal>
              <phone/>
              <email/>
              <uri/>
            </address>
          </author>
          <date year="2017"/>
        </front>
        <seriesInfo name="Proc. IEEE 42nd Conference on Local Computer Networks (LCN)" value="278--285"/>
      </reference>
      <reference anchor="BBRv2" target="https://github.com/google/bbr/blob/v2alpha/README.md">
        <front>
          <title>TCP BBR v2 Alpha/Preview Release</title>
          <author fullname="Neal Cardwell" initials="N" surname="Cardwell">
            <organization/>
          </author>
          <date/>
        </front>
        <seriesInfo name="github repository;" value="Linux congestion control module"/>
      </reference>
      <reference anchor="SCReAM" target="https://github.com/EricssonResearch/scream/blob/master/README.md">
        <front>
          <title>SCReAM</title>
          <author fullname="Ingemar Johansson" initials="I" surname="Johansson">
            <organization/>
          </author>
          <date/>
        </front>
        <seriesInfo name="github repository;" value=""/>
        <format target="https://github.com/google/bbr/blob/v2alpha/README.md" type="Source code"/>
      </reference>
    </references>
    <section anchor="l4sarch_sec_standards" numbered="true" toc="default">
      <name>Standardization items</name>
      <t>The following table includes all the items that will need to be
      standardized to provide a full L4S architecture.</t>
      <t>The table is too wide for the ASCII draft format, so it has been
      split into two, with a common column of row index numbers on the
      left.</t>
      <t>The columns in the second part of the table have the following
      meanings:</t>
      <dl newline="false" spacing="normal">
        <dt>WG:</dt>
        <dd>The IETF WG most relevant to this requirement. The
          "tcpm/iccrg" combination refers to the procedure typically used for
          congestion control changes, where tcpm owns the approval decision,
          but uses the iccrg for expert review <xref target="NewCC_Proc" format="default"/>;</dd>
        <dt>TCP:</dt>
        <dd>Applicable to all forms of TCP congestion
          control;</dd>
        <dt>DCTCP:</dt>
        <dd>Applicable to Data Center TCP as currently used
          (in controlled environments);</dd>
        <dt>DCTCP bis:</dt>
        <dd>Applicable to any future Data Center TCP
          congestion control intended for controlled environments;</dd>
        <dt>XXX Prague:</dt>
        <dd>Applicable to a Scalable variant of XXX
          (TCP/SCTP/RMCAT) congestion control.</dd>
      </dl>
      <table align="center">
        <thead>
          <tr>
            <th align="left">Req #</th>
            <th align="left">Requirement</th>
            <th align="left">Reference</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">0</td>
            <td align="left">ARCHITECTURE</td>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">1</td>
            <td align="left">L4S IDENTIFIER</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> S.3</td>
          </tr>
          <tr>
            <td align="left">2</td>
            <td align="left">DUAL QUEUE AQM</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-aqm-dualq-coupled" format="default"/></td>
          </tr>
          <tr>
            <td align="left">3</td>
            <td align="left">Suitable ECN Feedback</td>
            <td align="left">
              <xref target="I-D.ietf-tcpm-accurate-ecn" format="default"/> S.4.2, <xref target="I-D.stewart-tsvwg-sctpecn" format="default"/>.</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left">SCALABLE TRANSPORT - SAFETY ADDITIONS</td>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-1</td>
            <td align="left">Fall back to Reno/Cubic on loss</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> S.4.3, <xref target="RFC8257" format="default"/></td>
          </tr>
          <tr>
            <td align="left">4-2</td>
            <td align="left">Fall back to Reno/Cubic if classic ECN bottleneck detected</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> S.4.3</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-3</td>
            <td align="left">Reduce RTT-dependence</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> S.4.3</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-4</td>
            <td align="left">Scaling TCP's Congestion Window for Small Round Trip Times</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> S.4.3, <xref target="TCP-sub-mss-w" format="default"/></td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left">SCALABLE TRANSPORT - PERFORMANCE ENHANCEMENTS</td>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">5-1</td>
            <td align="left">Setting ECT in TCP Control Packets and Retransmissions</td>
            <td align="left">
              <xref target="I-D.ietf-tcpm-generalized-ecn" format="default"/></td>
          </tr>
          <tr>
            <td align="left">5-2</td>
            <td align="left">Faster-than-additive increase</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> (Appx A.2.2)</td>
          </tr>
          <tr>
            <td align="left">5-3</td>
            <td align="left">Faster Convergence at Flow Start</td>
            <td align="left">
              <xref target="I-D.ietf-tsvwg-ecn-l4s-id" format="default"/> (Appx A.2.2)</td>
          </tr>
        </tbody>
      </table>
      <table align="center">
        <thead>
          <tr>
            <th align="left">#</th>
            <th align="left">WG</th>
            <th align="left">TCP</th>
            <th align="left">DCTCP</th>
            <th align="left">DCTCP-bis</th>
            <th align="left">TCP Prague</th>
            <th align="left">SCTP Prague</th>
            <th align="left">RMCAT Prague</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">0</td>
            <td align="left">tsvwg</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
          </tr>
          <tr>
            <td align="left">1</td>
            <td align="left">tsvwg</td>
            <td align="left"/>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
          </tr>
          <tr>
            <td align="left">2</td>
            <td align="left">tsvwg</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">3</td>
            <td align="left">tcpm</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-1</td>
            <td align="left">tcpm</td>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-2</td>
            <td align="left">tcpm/ iccrg?</td>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">?</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">4-3</td>
            <td align="left">tcpm/ iccrg?</td>
            <td align="left"/>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">?</td>
          </tr>
          <tr>
            <td align="left">4-4</td>
            <td align="left">tcpm</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">?</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">5-1</td>
            <td align="left">tcpm</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">n/a</td>
            <td align="left">n/a</td>
          </tr>
          <tr>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
            <td align="left"/>
          </tr>
          <tr>
            <td align="left">5-2</td>
            <td align="left">tcpm/ iccrg?</td>
            <td align="left"/>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">?</td>
          </tr>
          <tr>
            <td align="left">5-3</td>
            <td align="left">tcpm/ iccrg?</td>
            <td align="left"/>
            <td align="left"/>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">Y</td>
            <td align="left">?</td>
          </tr>
        </tbody>
      </table>
    </section>
    <!--    <section title="Change Log (to be Deleted before Publication)">
      <t>A detailed version history can be accessed at
      &lt;http://datatracker.ietf.org/doc/draft-briscoe-aqm-ecn-roadmap/history/&gt;</t>

      <t><list style="hanging">
          <t hangText="From briscoe-...-00 to briscoe-...-01:">Technical
          changes:<list style="symbols">
              <t/>
            </list>Editorial changes:<list style="symbols">
              <t/>
            </list></t>
        </list></t>
    </section>
-->
  </back>
</rfc>
