RFC 8896: Application-Layer Traffic Optimization (ALTO) Cost Calendar
- S. Randriamasy,
- R. Yang,
- Q. Wu,
- L. Deng,
- N. Schwan
Abstract
This document is an extension to the base Application
Status of This Memo
This is an Internet Standards Track document.¶
This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841.¶
Information about the current status of this document, any
errata, and how to provide feedback on it may be obtained at
https://
Copyright Notice
Copyright (c) 2020 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://
1. Introduction
The base Application
The ALTO protocol in [RFC7285]
specifies a network map that defines groupings of endpoints in
provider
In case the ALTO cost value changes are predictable over a certain period of time and the application does not require immediate data transfer, it can save time to get the whole set of cost values over this period in one single ALTO response. Using this set to schedule data transfers allows optimizing the network resources usage and QoE. ALTO Clients and Servers can also minimize their workload by reducing and accordingly scheduling their data exchanges.¶
This document extends [RFC7285] to allow an ALTO Server to provide network costs for a given duration of time. A sequence of network costs across a time span for a given pair of network locations is named an "ALTO Cost Calendar". The Filtered Cost Map Service and Endpoint Cost Service are extended to provide Cost Calendars. In addition to this functional ALTO enhancement, we expect to further save network and storage resources by gathering multiple cost values for one cost type into one single ALTO Server response.¶
In this document, an "ALTO Cost Calendar" is specified in terms of information resource capabilities that are applicable to time-sensitive ALTO metrics. An ALTO Cost Calendar exposes ALTO cost values in JSON arrays, see [RFC8259], where each value corresponds to a given time interval. The time intervals, as well as other Calendar attributes, are specified in the Information Resources Directory (IRD) and in the Server response to allow the ALTO Client to interpret the received ALTO values. Last, the extensions for ALTO Calendars are applicable to any cost mode, and they ensure backwards compatibility with legacy ALTO Clients -- those that only support [RFC7285].¶
In the rest of this document, Section 3 provides the design characteristics
1.1. Some Recent Known Uses
A potential use case is implementing smart network services that
allow applications to dynamically build end-to-end, virtual networks
to satisfy given demands with no manual intervention. For example,
data-transfer automation applications may need a network service to
determine the availability of bandwidth resources to decide when
to transfer their data sets. The SENSE project [SENSE] supports such
applications by requiring that a network provides services such as the
Time
The need of future scheduling of large-scale traffic that can be addressed by the ALTO protocol is also motivated by Unicorn, a unified resource orchestration framework for multi-domain, geo-distributed data analytics, see [UNICORN-FGCS].¶
1.2. Terminology
- ALTO transaction:
- A request
/response exchange between an ALTO Client and an ALTO Server.¶ - Client:
- When used with a capital "C", this term refers to an ALTO Client.¶
- Calendar, Cost Calendar, ALTO Calendar:
- When used with capitalized words, these terms refer to an ALTO Cost Calendar.¶
- Calendared:
- This adjective qualifies information resources providing Cost Calendars and information on costs that are provided in the form of a Cost Calendar.¶
- Endpoint (EP):
- An endpoint is defined as in Section 2.1 of [RFC7285]. It can be, for example, a peer,
a CDN storage location, a physical server involved in a virtual
server
-supported application, a party in a resource -sharing swarm such as a computation grid, or an online multi-party game.¶ - ECM:
- An abbreviation for Endpoint Cost Map.¶
- FCM:
- An abbreviation for Filtered Cost Map.¶
- Server:
- When used with a capital "S", this term refers to an ALTO Server.¶
2. Requirements Language
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.¶
When the words appear in lower case, they are to be interpreted with their natural language meanings.¶
3. Overview of ALTO Cost Calendars and Terminology
This section gives a high-level overview of the design. It assumes the reader is familiar with the ALTO protocol [RFC7285] and its Multi-Cost ALTO extension [RFC8189].¶
3.1. ALTO Cost Calendar Overview
An ALTO Cost Calendar provided by the ALTO Server provides 2 information items:¶
An ALTO Cost Calendar can be used like a "time table" to figure out
the best time to schedule data transfers and also to proactively
manage application traffic given predictable events, such as an expected
spike in traffic due to crowd gathering (concerts, sports, etc.),
traffic
Most likely, the ALTO Cost Calendar would be used for the Endpoint Cost Service, assuming that a limited set of feasible endpoints for a non-real time application is already identified, and that those endpoints do not need to be accessed immediately and that their access can be scheduled within a given time period. The Filtered Cost Map Service is also applicable as long as the size of the Map allows it.¶
3.2. ALTO Cost Calendar Information Features
The Calendar attributes are provided in the Information Resources Directory (IRD) and in ALTO Server responses. The IRD announces attributes without date values in its information resources capabilities, whereas attributes with time-dependent values are provided in the "meta" section of Server responses. The ALTO Cost Calendar attributes provide the following information:¶
Attribute "repeated" may take a very high value if a Calendar represents a cyclic value pattern that the Server considers valid for a long period. In this case, the Server will only update the Calendar values once this period has elapsed or if an unexpected event occurs on the network. See Section 8 for more discussion.¶
3.3. ALTO Calendar Design Characteristics
The present document uses the notations defined in "Notation" (Section 8.2 of [RFC7285]).¶
The extensions in this document encode requests and responses using JSON [RFC8259].¶
In the base protocol [RFC7285], an ALTO cost is specified as a generic JSONValue [RFC8259] to allow extensions. However, that section (Section 11.2.3.6 of [RFC7285]) states:¶
An implementation of the protocol in this document SHOULD assume that the cost is a JSONNumber and fail to parse if it is not, unless the implementation is using an extension to this document that indicates when and how costs of other data types are signaled.¶
The present document extends the definition of a legacy cost map given in [RFC7285] to allow a cost entry to be an array of values, with one value per time interval, instead of being just one number, when the Cost Calendar functionality is activated on this cost. Therefore, the implementor of this extension MUST consider that a cost entry is an array of values if this cost has been queried as a Calendar.¶
Specifically, an implementation of this extension
MUST parse the "number
To realize an ALTO Calendar, this document extends the IRD and the ALTO requests and responses for Cost Calendars.¶
This extension is designed to be lightweight and to ensure backwards compatibility with base protocol ALTO Clients and with other extensions. It relies on "Parsing of Unknown Fields" (Section 8.3.7 of [RFC7285]), which states: "Extensions may include additional fields within JSON objects defined in this document. ALTO implementations MUST ignore unknown fields when processing ALTO messages."¶
The Calendar
The applicable Calendared information resources are:¶
The ALTO Server can choose in which frequency it provides cost
Calendars to ALTO Clients. It may either provide Calendar updates
starting at the request date or carefully schedule its updates so as
to take profit from a potential repetition
Since Calendar attributes are specific to an information resource, a Server may adapt the granularity of the calendared information so as to moderate the volume of exchanged data. For example, suppose a Server provides a Calendar for cost type name "routingcost". The Server may offer a Calendar in a Cost Map resource, which may be a voluminous resource, as an array of 6 intervals lasting each 4 hours. It may also offer a Calendar in an Endpoint Cost Map resource, which is potentially less voluminous, as a finer-grained array of 24 intervals lasting 1 hour each.¶
The ALTO Server does not support constraints on Calendars, provided Calendars are requested for numerical values, for two main reasons:¶
As providing the constraint functionality in conjunction with the Calendar functionality is not feasible for the reasons described above, the two features are mutually exclusive. The absence of constraints on Filtered Cost Map and Endpoint Cost Map Calendars reflects a divergence from the non-calendared information resources defined in [RFC7285] and extended in [RFC8189], which support optional constraints.¶
3.3.1. ALTO Cost Calendar for All Cost Modes
An ALTO Cost Calendar is well suited for values encoded in the "numerical" mode. Actually, a Calendar can also represent metrics in other modes considered as compatible with time-varying values. For example, types of cost values (such as JSONBool) can also be calendared (as their value may be 'true' or 'false' depending on given time periods or likewise) values represented by strings, such as "medium", "high", "low", "blue", and "open".¶
Note also that a Calendar is suitable as well for time-varying
metrics provided in the "ordinal" mode if these values are
time-varying and the ALTO Server provides updates of
cost
3.3.2. Compatibility with Legacy ALTO Clients
The ALTO protocol extensions for Cost Calendars have been defined
so as to ensure that Calendar
A Calendar-aware ALTO Server MUST implement the base protocol specified in [RFC7285].¶
A Calendar-aware ALTO Client MUST implement the base protocol specified in [RFC7285].¶
As a consequence, when a metric is available as a Calendar array, it also MUST be available as a single value, as required by [RFC7285]. The Server, in this case, provides the current value of the metric to either Calendar-aware Clients not interested in future or time-based values or Clients implementing [RFC7285] only.¶
For compatibility with legacy ALTO Clients specified in [RFC7285], calendared information resources are not applicable for full cost maps for the following reason: a legacy ALTO Client would receive a calendared cost map via an HTTP 'GET' command. As specified in Section 8.3.7 of [RFC7285], it will ignore the Calendar attributes indicated in the "meta" of the responses. Therefore, lacking information on Calendar attributes, it will not be able to correctly interpret and process the values of the received array of Calendar cost values.¶
Therefore, calendared information resources MUST be requested via the Filtered Cost Map Service or the Endpoint Cost Service using a POST method.¶
4. ALTO Calendar Specification: IRD Extensions
The Calendar attributes in the IRD information resources capabilities
carry dateless values. A Calendar is associated with an information
resource rather than a cost type. For example, a Server can provide a
"routingcost" Calendar for the Filtered Cost Map Service at a
granularity of one day and a "routingcost" Calendar for the Endpoint
Cost Service at a finer granularity but for a limited number of
endpoints. An example IRD with Calendar
4.1. Calendar Attributes in the IRD Resource Capabilities
A Cost Calendar for a given cost type MUST be
indicated in the IRD by an object of type Calendar
The encoding format for object Calendar
Calendar
- "cost
-type -names" : - An array of one or more elements indicating the cost type
names in the IRD entry to which the values of "time
-interval -size" and "number -of -intervals" apply.¶ - "time
-interval -size" : - The duration of an ALTO Calendar time interval in a unit of
seconds. A "time
-interval -size" value contains a non-negative JSONNumber. Example values are 300 and 7200, meaning that each Calendar value applies on a time interval that lasts 5 minutes and 2 hours, respectively. Since an interval size (e.g., 100 ms) can be smaller than the unit, the value specified may be a floating point (e.g., 0.1). Both ALTO Clients and Servers should be aware of potential precision issues caused by using floating point numbers; for example, the floating number 0.1 cannot be represented precisely using a finite number of binary bits. To improve interoperabilit y and be consistent with [RFC7285] on the use of floating point numbers, the Server and the Client SHOULD use IEEE 754 double -precision floating point [IEEE.754.2019] to store this value.¶ - "number
-of -intervals" : - A strictly positive integer (greater or equal to 1) that indicates the number of values of the Cost Calendar array.¶
4.2. Calendars in a Delegate IRD
It may be useful to distinguish IRD resources supported by the base
ALTO protocol from resources supported by its extensions. To achieve
this, one option is that a "root" ALTO Server implementing [RFC7285] resources and running at a given
domain delegates "specialized" information resources, such as the ones
providing Cost Calendars, to another ALTO Server running in a
subdomain. The "root" ALTO Server can provide a Calendar
This document provides an example where a "root" ALTO Server runs
in a domain called "alto
Another benefit of delegation is that some cost types for some resources may be more advantageous as Cost Calendars, and it makes little sense to get them as a single value. For example, if a cost type has predictable and frequently changing values calendared in short time intervals, such as a minute, it saves time and network resources to track the cost values via a focused delegate Server rather than the more general "root" Server.¶
4.3. Example IRD with ALTO Cost Calendars
This section provides an example ALTO Server IRD that supports various cost metrics and cost modes. In particular, since [RFC7285] makes it mandatory, the Server uses metric "routingcost" in the "numerical" mode.¶
For illustrative purposes, this section introduces 3 other fictitious example metrics and modes that should be understood as examples and should not be used or considered as normative.¶
The cost type names used in the example IRD are as follows:¶
- "num
-routingcost" : - Refers to metric "routingcost" in the numerical mode, as defined in [RFC7285] and registered with IANA.¶
- "num-owdelay":
- Refers to fictitious performance metric "owdelay" in the "numerical" mode to reflect the one-way packet transmission delay on a path. A related performance metric is currently under definition in [ALTO_METRICS].¶
- "num
-throughputratin g" : - Refers to fictitious metric
"throughputrati
ng" in the "numerical" mode to reflect the provider preference in terms of end-to-end throughput.¶ - "string
-servicestatus" : - Refers to fictitious metric "servicestatus" containing a string to reflect the availability, defined by the provider, of, for instance, path connectivity.¶
The example IRD includes 2 particular URIs providing Calendars:¶
- "https://
custom .alto .example .com /calendar /costmap /filtered" : - A Filtered Cost Map in which Calendar capabilities are indicated
for cost type names "num
-routingcost", "num -throughputratin g", and "string -servicestatus" and¶ - "https://
custom .alto .example .com /calendar /endpointcost /lookup" : - An Endpoint Cost Map in which Calendar capabilities are indicated
for cost type names "num
-routingcost", "num-owdelay", "num -throughputratin g", and "string -servicestatus" .¶
The design of the Calendar capabilities allows some Calendars with
the same cost type name to be available in several information
resources with different Calendar attributes. This is the case for
Calendars on "num
In this example IRD, for the Filtered Cost Map Service:¶
For the Endpoint Cost Service:¶
Note that in this example IRD, member "cost
5. ALTO Calendar Specification: Service Information Resources
This section documents extensions to two basic ALTO information resources (Filtered Cost Maps and Endpoint Cost Service) to provide calendared information services for them.¶
Both extensions return calendar start time
5.1. Calendar Extensions for Filtered Cost Maps (FCM)
A legacy ALTO Client requests and gets Filtered Cost Map responses, as specified in [RFC7285].¶
5.1.1. Calendar Extensions in Filtered Cost Map Requests
The input parameters of a "legacy" request for a Filtered Cost
Map, defined by object Req
A Calendar-aware ALTO Client requesting a Calendar on a given cost type for a Filtered Cost Map resource having Calendar capabilities MUST add the following field to its input parameters:¶
This field is an array of 1 to N boolean values, where N is the number of requested metrics. N is greater than 1 when the Client and the Server also implement [RFC8189].¶
Each entry corresponds to the requested metric at the same array position. Each boolean value indicates whether or not the ALTO Server should provide the values for this cost type as a Calendar. The array MUST contain exactly N boolean values, otherwise, the Server returns an error.¶
This field MUST NOT be included if no member
"calendar
If a value of field "calendared" is 'true' for a cost type name for which no Calendar attributes have been specified, an ALTO Server, whether it implements the extensions of this document or only implements [RFC7285], MUST ignore it and return a response with a single cost value, as specified in [RFC7285].¶
If this field is not present, it MUST be assumed to have only values equal to 'false'.¶
A Calendar-aware ALTO Client that supports requests for only one cost type at a time and wants to request a Calendar MUST provide an array of 1 element:¶
A Calendar-aware ALTO Client that supports requests for more than one cost type at a time, as specified in [RFC8189], MUST provide an array of N values set to 'true' or 'false', depending whether it wants the applicable cost type values as a single or calendared value.¶
5.1.2. Calendar Extensions in Filtered Cost Map Responses
In a calendared ALTO Filtered Cost Map, a cost value between a source
and a destination is a JSON array of JSON values. An ALTO Calendar
values array has a number of values equal to the value of member
"number
The FCM response conveys metadata, among which:¶
The non
If the Client request does not provide member "calendared" or if it provides it with a value equal to 'false' for all the requested cost types, then the ALTO Server response is exactly as specified in [RFC7285] and [RFC8189].¶
If the value of member "calendared" is equal to 'false' for a given requested cost type, the ALTO Server MUST return, for this cost type, a single cost value as specified in [RFC7285].¶
If the value of member "calendared" is equal to 'true' for a given
requested cost type, the ALTO Server returns, for this cost type, a
cost value Calendar, as specified above in this section. In addition
to the above cited non
The Calendar
The format of member "Calendar
Calendar
- "cost
-type -names" : - An array of one or more cost type names to which the value
of the other members of Calendar
Response Attributes apply and for which a Calendar has been requested. The value of this member is a subset of the "cost -type -names" member of the abovementioned corresponding "Calendar Attributes" object in the "calendar -attributes" array member in the IRD. This member MUST be present when Cost Calendars are provided for more than one cost type.¶ - "calendar
-start -time" : - Indicates the date at which the first value of the Calendar
applies. The value is a string that, as specified in Section 5, contains an HTTP "Date" header
field using the IMF-fixdate format specified in Section 7.1.1.1 of [RFC7231]. The
value provided for attribute "calendar
-start -time" SHOULD NOT be later than the request date.¶ - "time
-interval -size" : - As specified in Section 4.1 and
with the same value as in the abovementioned corresponding
"Calendar
Attributes" object.¶ - "number
-of -intervals" : - As specified in Section 4.1 and
with the same value as in the abovementioned corresponding
"Calendar
Attributes" object.¶ - "repeated":
- An optional field provided for Calendars. It is an integer
N greater or equal to '1' that indicates how many iterations of
the Calendar value array starting at the date indicated by
"calendar
-start -time" have the same values. The number N includes the iteration provided in the returned response.¶
For example, suppose the "calendar
Attribute "repeated" may take a very high value if a Calendar
represents a cyclic value pattern that the Server considers valid
for a long period and hence will only update once this period has
elapsed or if an unexpected event occurs on the network. In the
latter case, the Client will be notified if it uses the "ALTO
Incremental Updates Using Server-Sent Events (SSE)" Service,
specified in [RFC8895]. To this
end, it is RECOMMENDED that ALTO Servers providing
ALTO Calendars also provide the "ALTO Incremental Updates Using
Server-Sent Events (SSE)" Service, which is specified in [RFC8895]. Likewise, ALTO Clients capable
of using ALTO Calendars SHOULD also use the SSE
Service. See also discussion in Section 8 "Operational Considerations"
5.1.3. Use Case and Example: FCM with a Bandwidth Calendar
An example of non-real-time information that can be provisioned
in a Calendar is the expected path throughput. While the
transmission rate can be measured in real time by end systems, the
operator of a data center is in the position of formulating
preferences for given paths at given time periods to avoid traffic
peaks due to diurnal usage patterns. In this example, we assume
that an ALTO Client requests a Calendar of network
In the example IRD, Calendars for cost type name
"num
We suppose in the present example that the ALTO Client sends its
request on Tuesday, July 1st 2019 at 13:15. The Server returns
Calendars with arrays of 12 numbers for each source and destination
pair. The values for metric "throughputrati
5.2. Calendar Extensions in the Endpoint Cost Service
This document extends the Endpoint Cost Service, as defined in Section 11.5.1 of [RFC7285], by adding new input parameters and capabilities and by returning JSONArrays instead of JSONNumbers as the cost values. The media type (Section 11.5.1.1 of [RFC7285]) and HTTP method (Section 11.5.1.2 of [RFC7285]) are unchanged.¶
5.2.1. Calendar-Specific Input in Endpoint Cost Requests
The extensions to the requests for calendared Endpoint Cost Maps are the same as for the Filtered Cost Map Service, specified in Section 5.1.1 of this document. Likewise, the rules defined around the extensions to ECM requests are the same as those defined in Section 5.1.1 for FCM requests.¶
The Req
Member "cost-type" is optional because, in the Req
The interpretation of member "calendared" is the same as for the
Req
For the reasons explained in Section 3.3, a Calendar-aware ALTO Server does not support
constraints. Therefore, member "[constraints]" is not present in the
Req
5.2.2. Calendar Attributes in the Endpoint Cost Response
The "meta" field of a calendared Endpoint Cost response MUST include at least:¶
If the Client request does not provide member "calendared" or if it provides it with a value equal to 'false', for all the requested cost types, then the ALTO Server response is exactly as specified in [RFC7285] and [RFC8189].¶
If the ALTO Client provides member "calendared" in the input
parameters with a value equal to 'true' for given requested cost
types, the "meta" member of a calendared Endpoint Cost response
MUST include, for these cost types, an additional
member "calendar
If the value of member "calendared" is equal to 'false' for a given requested cost type, the ALTO Server MUST return, for this cost type, a single cost value as specified in [RFC7285].¶
5.2.3. Use Case and Example: ECS with a routingcost Calendar
Let us assume an Application Client is located in an end system with limited resources and has access to the network that is either intermittent or provides an acceptable quality in limited but predictable time periods. Therefore, it needs to schedule both its resource-greedy networking activities and its ALTO transactions.¶
The Application Client has the choice to trade content or resources with a set of endpoints and needs to decide with which one it will connect and at what time. For instance, the endpoints are spread in different time zones or have intermittent access. In this example, the 'routingcost' is assumed to be time-varying, with values provided as ALTO Calendars.¶
The ALTO Client associated with the Application Client queries an ALTO Calendar on 'routingcost' and will get the Calendar covering the 24-hour time period "containing" the date and time of the ALTO Client request.¶
For cost type "num
In the following example, the ALTO Client sends its request on Tuesday, July 1st 2019 at 13:15.¶
The "routingcost" values are assumed to be encoded in 3 digits.¶
When the Client gets the Calendar for "routingcost", it sees that
the "calendar
5.2.4. Use Case and Example: ECS with a Multi-cost Calendar for routingcost and owdelay
In this example, it is assumed that the ALTO Server implements multi-cost capabilities, as specified in [RFC8189] . That is, an ALTO Client can request and receive values for several cost types in one single transaction. An illustrating use case is a path selection done on the basis of 2 metrics: routingcost and owdelay.¶
As in the previous example, the IRD indicates that the ALTO Server provides "routingcost" Calendars in terms of 24 time intervals of 1 hour (3600 seconds) each.¶
For metric "owdelay", the IRD indicates that the ALTO Server provides Calendars in terms of 12 time interval values lasting 5 minutes (300 seconds) each.¶
In the following example transaction, the ALTO Client sends its request on Tuesday, July 1st 2019 at 13:15.¶
This example assumes that the values of metric "owdelay" and "routingcost" are encoded in 3 digits.¶
When receiving the response, the Client sees that the Calendar values for metric "routingcost" are repeated for 4 iterations. Therefore, in its next requests until the "routingcost" Calendar is expected to change, the Client will only need to request a Calendar for "owdelay".¶
Without the ALTO Calendar extensions, the ALTO Client would have no clue on the dynamicity of the metric value change and would spend needless time requesting values at an inappropriate pace. In addition, without the Multi-Cost ALTO capabilities, the ALTO Client would duplicate this waste of time as it would need to send one request per cost metric.¶
6. IANA Considerations
This document has no IANA actions.¶
7. Security Considerations
As an extension of the base ALTO protocol [RFC7285], this document fits into the architecture of the base protocol and hence the security considerations (Section 15 of [RFC7285]) fully apply when this extension is provided by an ALTO Server. For example, the same authenticity and integrity considerations (Section 15.1 of [RFC7285]) still fully apply; the same considerations for the privacy of ALTO users (Section 15.4 of [RFC7285]) also still fully apply.¶
The calendaring information provided by this extension requires additional considerations on three security considerations discussed in [RFC7285]: potential undesirable guidance to Clients (Section 15.2 of [RFC7285]), confidentiality of ALTO information (Section 15.3 of [RFC7285]), and availability of ALTO (Section 15.5 of [RFC7285]). For example, by providing network information in the future in a Calendar, this extension may improve availability of ALTO when the ALTO Server is unavailable but related information is already provided in the Calendar.¶
For confidentiality of ALTO information, an operator should be cognizant that this extension may introduce a new risk, a malicious ALTO Client may get information for future events that are scheduled through Calendaring. Possessing such information, the malicious Client may use it to generate massive connections to the network at times where its load is expected to be high.¶
To mitigate this risk, the operator should address the risk of ALTO
information being leaked to malicious Clients or third parties. As
specified in "Protection Strategies" (Section 15.3.2 of [RFC7285]), the ALTO Server should
authenticate ALTO Clients and use the Transport Layer Security (TLS)
protocol so that man
Section 1 of TLS 1.3 [RFC8446] states: "While TLS 1.3 is not directly compatible with previous versions, all versions of TLS incorporate a versioning mechanism which allows Clients and Servers to interoperably negotiate a common version if one is supported by both peers". ALTO Clients and Servers SHOULD support both TLS 1.3 [RFC8446] and TLS 1.2 [RFC5246] and MAY support and use newer versions of TLS as long as the negotiation process succeeds.¶
The operator should be cognizant that the preceding mechanisms do not address all security risks. In particular, they will not help in the case of "malicious Clients" possessing valid authentication credentials. The threat here is that legitimate Clients have become subverted by an attacker and are now 'bots' being asked to participate in a DDoS attack. The Calendar information now becomes valuable in knowing exactly when to perpetrate a DDoS attack. A mechanism, such as a monitoring system that detects abnormal behaviors, may still be needed.¶
To avoid malicious or erroneous guidance from ALTO information, an
ALTO Client should be cognizant that using calendaring information can
have risks: (1) Calendar values, especially in "repeated" Calendars, may
be only statistical and (2) future events may change. Hence, a more
robust ALTO Client should adapt and extend protection strategies
specified in Section 15.2 of [RFC7285].
For example, to be notified immediately when a particular ALTO value
that the Client depends on changes, it is RECOMMENDED
that both the ALTO Client and ALTO Server using this extension support
"Application
Another risk of erroneous guidance appears when the Server exposes an
occurrence of a same cost type name in different elements of the
Calendar objects array associated to an information resource. In this
case, there is no way for the Client to figure out which Calendar object
in the array is valid. The specification in this document recommends, in
this case, that the Client uses the first encountered Calendar object
occurrence containing the cost type name. However, the Client may want
to avoid the risks of erroneous guidance associated to the use of
potentially invalid Calendar values. To this end, as an alternative to
the recommendation in this document, the Client MAY
ignore the totality of occurrences of Calendar
8. Operational Considerations
It is important that both the operator of the network and the
operator of the applications consider both the feedback aspect and the
prediction
First, consider the feedback aspect and consider the Cost Calendar as a traffic-aware map service (e.g., Google Maps). Using the service without considering its own effect, a large fleet can turn a not-congested road into a congested one; a large number of individual cars each choosing a road with light traffic ("cheap link") can also result in congestion or result in a less-optimal global outcome (e.g., the Braess' Paradox [BRAESS_PARADOX]).¶
Next, consider the prediction aspect. Conveying ALTO Cost Calendars tends to reduce the on-the-wire data exchange volume compared to multiple single-cost ALTO transactions. An application using Calendars has a set of time-dependent values upon which it can plan its connections in advance with no need for the ALTO Client to query information at each time. Additionally, the Calendar response attribute "repeated", when provided, saves additional data exchanges in that it indicates that the ALTO Client does not need to query Calendars during a period indicated by this attribute. The preceding is true only when "accidents" do not happen.¶
Although individual network operators and application operators can choose their own approaches to address the aforementioned issues, this document recommends the following considerations. First, a typical approach to reducing instability and handling uncertainty is to ensure timely update of information. The SSE Service, as discussed in Section 7, can handle updates if supported by both the Server and the Client. Second, when a network operator updates the Cost Calendar and when an application reacts to the update, they should consider the feedback effects. This is the best approach even though there is theoretical analysis [SELFISH_RTG_2002] and Internet-based evaluation [SELFISH_RTG_2003] showing that uncoordinated behaviors do not always cause substantial suboptimal results.¶
High-resolution intervals may be needed when values change, sometimes during very small time intervals but in a significant manner. A way to avoid conveying too many entries is to leverage on the "repeated" feature. A Server can smartly set the Calendar start time and number of intervals so as to declare them "repeated" for a large number of periods until the Calendar values change and are conveyed to requesting Clients.¶
The newer JSON Data Interchange Format specification [RFC8259] used in ALTO Calendars replaces the
older one [RFC7159] used in the base
ALTO protocol [RFC7285]. The newer JSON
mandates UTF-8 text encoding to improve interoperabilit
9. References
9.1. Normative References
- [IEEE.754.2019]
-
IEEE, "IEEE Standard for Floating-Point Arithmetic", IEEE 754-2019, DOI 10
.1109 , , <https:///IEEESTD .2019 .8766229 doi >..org /10 .1109 /IEEESTD .2019 .8766229 - [RFC2119]
-
Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10
.17487 , , <https:///RFC2119 www >..rfc -editor .org /info /rfc2119 - [RFC5246]
-
Dierks, T. and E. Rescorla, "The Transport Layer Security (TLS) Protocol Version 1.2", RFC 5246, DOI 10
.17487 , , <https:///RFC5246 www >..rfc -editor .org /info /rfc5246 - [RFC7231]
-
Fielding, R., Ed. and J. Reschke, Ed., "Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content", RFC 7231, DOI 10
.17487 , , <https:///RFC7231 www >..rfc -editor .org /info /rfc7231 - [RFC7285]
-
Alimi, R., Ed., Penno, R., Ed., Yang, Y., Ed., Kiesel, S., Previdi, S., Roome, W., Shalunov, S., and R. Woundy, "Application
-Layer Traffic Optimization (ALTO) Protocol" , RFC 7285, DOI 10.17487 , , <https:///RFC7285 www >..rfc -editor .org /info /rfc7285 - [RFC8174]
-
Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10
.17487 , , <https:///RFC8174 www >..rfc -editor .org /info /rfc8174 - [RFC8189]
-
Randriamasy, S., Roome, W., and N. Schwan, "Multi-Cost Application
-Layer Traffic Optimization (ALTO)" , RFC 8189, DOI 10.17487 , , <https:///RFC8189 www >..rfc -editor .org /info /rfc8189 - [RFC8259]
-
Bray, T., Ed., "The JavaScript Object Notation (JSON) Data Interchange Format", STD 90, RFC 8259, DOI 10
.17487 , , <https:///RFC8259 www >..rfc -editor .org /info /rfc8259 - [RFC8446]
-
Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.3", RFC 8446, DOI 10
.17487 , , <https:///RFC8446 www >..rfc -editor .org /info /rfc8446 - [RFC8895]
-
Roome, W. and Y. Yang, "Application
-Layer Traffic Optimization (ALTO) Incremental Updates Using Server-Sent Events (SSE)" , RFC 8895, DOI 10.17487 , , <https:///RFC8895 www >..rfc -editor .org /info /rfc8895
9.2. Informative References
- [ALTO_METRICS]
-
Wu, Q., Yang, Y. R., Dhody, D., Randriamasy, S., and L. M. Contreras, "ALTO Performance Cost Metrics", Work in Progress, Internet-Draft, draft
-ietf , , <https://-alto -performance -metrics -09 tools >..ietf .org /html /draft -ietf -alto -performance -metrics -09 - [BRAESS_PARADOX]
-
Steinberg, R. and W. Zangwill, "The Prevalence of Braess' Paradox", Transportation Science Vol. 17, No. 3, DOI 10
.1287 , , <https:///trsc .17 .3 .301 doi >..org /10 .1287 /trsc .17 .3 .301 - [RFC2818]
-
Rescorla, E., "HTTP Over TLS", RFC 2818, DOI 10
.17487 , , <https:///RFC2818 www >..rfc -editor .org /info /rfc2818 - [RFC5693]
-
Seedorf, J. and E. Burger, "Application
-Layer Traffic Optimization (ALTO) Problem Statement" , RFC 5693, DOI 10.17487 , , <https:///RFC5693 www >..rfc -editor .org /info /rfc5693 - [RFC6708]
-
Kiesel, S., Ed., Previdi, S., Stiemerling, M., Woundy, R., and Y. Yang, "Application
-Layer Traffic Optimization (ALTO) Requirements" , RFC 6708, DOI 10.17487 , , <https:///RFC6708 www >..rfc -editor .org /info /rfc6708 - [RFC7159]
-
Bray, T., Ed., "The JavaScript Object Notation (JSON) Data Interchange Format", RFC 7159, DOI 10
.17487 , , <https:///RFC7159 www >..rfc -editor .org /info /rfc7159 - [SELFISH
_RTG _2002] - Roughgarden, T., "Selfish Routing", Dissertation Thesis, Cornell, .
- [SELFISH
_RTG _2003] -
Qiu, L., Yang, Y., Zhang, Y., and S. Shenker, "Selfish Routing in Internet-Like Environments", Proceedings of SIGCOMM '03, DOI 10
.1145 , , <https:///863955 .863974 doi >..org /10 .1145 /863955 .863974 - [SENSE]
-
Department of Energy Office of Science Advanced Scientific Computing Research (ASCR) Program, "SDN for End-to-End Networked Science at the Exascale (SENSE)", <http://
sense >..es .net /overview - [UNICORN-FGCS]
-
Xiang, Q., Wang, T., Zhang, J., Newman, H., Yang, Y., and Y. Liu, "Unicorn: Unified resource orchestration for multi-domain, geo-distributed data analytics", Future Generation Computer Systems (FGCS), Vol. 93,
Pages 188-197, DOI 10
.1016 , ISSN 0167-739X, , <https:///j .future .2018 .09 .048 doi >..org /10 .1016 /j .future .2018 .09 .048
Acknowledgments
The authors would like to thank Fred Baker, Li Geng, Diego Lopez, He Peng, and Haibin Song for fruitful discussions and feedback on earlier draft versions. Dawn Chan, Kai Gao, Vijay Gurbani, Yichen Qian, Jürgen Schönwälder, Brian Weis, and Jensen Zhang provided substantial review feedback and suggestions to the protocol design.¶