RFC 8923: A Minimal Set of Transport Services for End Systems
- M. Welzl,
- S. Gjessing
Abstract
This document recommends a minimal set of Transport Services offered by end systems and gives guidance on choosing among the available mechanisms and protocols. It is based on the set of transport features in RFC 8303.¶
Status of This Memo
This document is not an Internet Standards Track specification; it is published for informational purposes.¶
This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are candidates for any level of Internet Standard; see Section 2 of RFC 7841.¶
Information about the current status of this document, any
errata, and how to provide feedback on it may be obtained at
https://
Copyright Notice
Copyright (c) 2020 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://
1. Introduction
Currently, the set of Transport Services that most applications use is based on TCP and UDP (and protocols that are layered on top of them); this limits the ability for the network stack to make use of features of other transport protocols. For example, if a protocol supports out-of-order message delivery but applications always assume that the network provides an ordered byte stream, then the network stack can not immediately deliver a message that arrives out of order; doing so would break a fundamental assumption of the application. The net result is unnecessary head-of-line blocking delay.¶
By exposing the Transport Services of multiple transport protocols, a transport system can make it possible for applications to use these services without being statically bound to a specific transport protocol. The first step towards the design of such a system was taken by [RFC8095], which surveys a large number of transports, and [RFC8303] as well as [RFC8304], which identify the specific transport features that are exposed to applications by the protocols TCP, Multipath TCP (MPTCP), UDP(-Lite), and Stream Control Transmission Protocol (SCTP), as well as the Low Extra Delay Background Transport (LEDBAT) congestion control mechanism. LEDBAT was included as the only congestion control mechanism in this list because the "low extra delay background transport" service that it offers is significantly different from the typical service provided by other congestion control mechanisms. This memo is based on these documents and follows the same terminology (also listed below). Because the considered transport protocols conjointly cover a wide range of transport features, there is reason to hope that the resulting set (and the reasoning that led to it) will also apply to many aspects of other transport protocols that may be in use today or may be designed in the future.¶
By decoupling applications from transport protocols, a transport system provides a different abstraction level than the Berkeley sockets interface [POSIX]. As with high- vs. low-level programming languages, a higher abstraction level allows more freedom for automation below the interface, yet it takes some control away from the application programmer. This is the design trade-off that a transport system developer is facing, and this document provides guidance on the design of this abstraction level. Some transport features are currently rarely offered by APIs, yet they must be offered or they can never be used. Other transport features are offered by the APIs of the protocols covered here, but not exposing them in an API would allow for more freedom to automate protocol usage in a transport system. The minimal set presented here is an effort to find a middle ground that can be recommended for transport systems to implement, on the basis of the transport features discussed in [RFC8303].¶
Applications use a wide variety of APIs today. While this document
was created to ensure the API developed in the Transport Services (TAPS)
Working Group [TAPS-INTERFACE] includes the most important transport features, the
minimal set presented here must be reflected in *all* network APIs in
order for the underlying functionality to become usable everywhere. For
example, it does not help an application that talks to a library that
offers its own communication interface if the underlying Berkeley
Sockets API is extended to offer "unordered message delivery", but the
library only exposes an ordered byte stream. Both the Berkeley Sockets
API and the library would have to expose the "unordered message
delivery" transport feature (alternatively, there may be ways for
certain types of libraries to use this transport feature without
exposing it, based on knowledge about the applications, but this is not
the general case). Similarly, transport protocols such as the Stream
Control Transmission Protocol (SCTP) offer multi
This "minimal set" can be implemented "one-sided" over TCP. This means that a sender-side transport system can talk to a standard TCP receiver, and a receiver-side transport system can talk to a standard TCP sender. If certain limitations are put in place, the "minimal set" can also be implemented "one-sided" over UDP. While the possibility of such "one-sided" implementation may help deployment, it comes at the cost of limiting the set to services that can also be provided by TCP (or, with further limitations, UDP). Thus, the minimal set of transport features here is applicable for many, but not all, applications; some application protocols have requirements that are not met by this "minimal set".¶
Note that, throughout this document, protocols are meant to be used natively. For example, when transport features of TCP, or "implementation over" TCP is discussed, this refers to native usage of TCP rather than TCP being encapsulated in some other transport protocol such as UDP.¶
2. Terminology
- Transport Feature:
-
A specific end-to-end feature that the transport layer
provides to an application. Examples include
confidentiality
, reliable delivery, ordered delivery, message -versus -stream orientation, etc.¶ - Transport Service:
- A set of Transport Features, without an association to any given framing protocol, that provides a complete service to an application.¶
- Transport Protocol:
- An implementation that provides one or more different Transport Services using a specific framing and header format on the wire.¶
- Application:
- An entity that uses a transport-layer interface for end-to-end delivery of data across the network (this may also be an upper-layer protocol or tunnel encapsulation).¶
- Application
-specific knowledge: - Knowledge that only applications have.¶
- End system:
- An entity that communicates with one or more other end systems using a transport protocol. An end system provides a transport-layer interface to applications.¶
- Connection:
- Shared state of two or more end systems that persists across messages that are transmitted between these end systems.¶
- Connection Group:
- A set of connections that share the same configuration (configuring one of them causes all other connections in the same group to be configured in the same way). We call connections that belong to a connection group "grouped", while "ungrouped" connections are not a part of a connection group.¶
- Socket:
- The combination of a destination IP address and a destination port number.¶
Moreover, throughout the document, the protocol name "UDP(-Lite)" is used when discussing transport features that are equivalent for UDP and UDP-Lite; similarly, the protocol name "TCP" refers to both TCP and MPTCP.¶
3. Deriving the Minimal Set
We assume that applications have no specific requirements that need knowledge about the network, e.g., regarding the choice of network interface or the end-to-end path. Even with these assumptions, there are certain requirements that are strictly kept by transport protocols today, and these must also be kept by a transport system. Some of these requirements relate to transport features that we call "Functional".¶
Functional transport features provide functionality that cannot be used without the application knowing about them, or else they violate assumptions that might cause the application to fail. For example, ordered message delivery is a functional transport feature: it cannot be configured without the application knowing about it because the application's assumption could be that messages always arrive in order. Failure includes any change of the application behavior that is not performance oriented, e.g., security.¶
"Change DSCP" and "Disable Nagle algorithm" are examples of transport
features that we call "Optimizing"; if a transport system autonomously
decides to enable or disable them, an application will not fail, but a
transport system may be able to communicate more efficiently if the
application is in control of this optimizing transport feature. These
transport features require application
The transport features of IETF transport protocols that do not
require application
We approach the construction of a minimal set of transport features in the following way:¶
Following [RFC8303] and retaining its terminology, we divide the transport features into two main groups as follows:¶
4. The Reduced Set of Transport Features
By hiding automatable transport features from the application, a transport system can gain opportunities to automate the usage of network-related functionality. This can facilitate using the transport system for the application programmer and it allows for optimizations that may not be possible for an application. For instance, system-wide configurations regarding the usage of multiple interfaces can better be exploited if the choice of the interface is not entirely up to the application. Therefore, since they are not strictly necessary to expose in a transport system, we do not include automatable transport features in the reduced set of transport features. This leaves us with only the transport features that are either optimizing or functional.¶
A transport system should be able to communicate via TCP or UDP if alternative transport protocols are found not to work. For many transport features, this is possible, often by simply not doing anything when a specific request is made. For some transport features, however, it was identified that direct usage of neither TCP nor UDP is possible; in these cases, even not doing anything would incur semantically incorrect behavior. Whenever an application would make use of one of these transport features, this would eliminate the possibility to use TCP or UDP. Thus, we only keep the functional and optimizing transport features for which an implementation over either TCP or UDP is possible in our reduced set.¶
The following list contains the transport features from Appendix A, reduced using these rules. The "minimal set" derived in this document is meant to be implementable "one-sided" over TCP and, with limitations, UDP. In the list, we therefore precede a transport feature with "T:" if an implementation over TCP is possible, "U:" if an implementation over UDP is possible, and "T,U:" if an implementation over either TCP or UDP is possible.¶
4.1. CONNECTION-Related Transport Features
ESTABLISHMENT:¶
AVAILABILITY:¶
MAINTENANCE:¶
TERMINATION:¶
4.2. DATA-Transfer-Related Transport Features
4.2.3. Errors
This section describes sending failures that are associated with a specific call to in the "Sending Data" category (Appendix A.2.1).¶
5. Discussion
The reduced set in the previous section exhibits a number of
peculiarities, which we will discuss in the following. This section
focuses on TCP because, with the exception of one particular transport
feature ("Receive a message"; we will discuss this in Section 5.1), the list shows that UDP is
strictly a subset of TCP. We can first try to understand how to build a
transport system that can run over TCP, and then narrow down the result
further to allow that the system can always run over either TCP or UDP
(which effectively means removing everything related to reliability,
ordering, authentication, and closing
Note that, because the functional transport features of UDP are, with
the exception of "Receive a message", a subset of TCP, TCP can be used
as a replacement for UDP whenever an application does not need message
delimiting (e.g., because the application
5.1. Sending Messages, Receiving Bytes
For implementing a transport system over TCP, there are several transport features related to sending, but only a single transport feature related to receiving: "Receive data (with no message delimiting)" (and, strangely, "information about partial message arrival"). Notably, the transport feature "Receive a message" is also the only non-automatable transport feature of UDP(-Lite) for which no implementation over TCP is possible.¶
To support these TCP receiver semantics, we define an
"Application
In an AFra Byte Stream, the sending application can optionally
inform the transport about message boundaries and required properties
per message (configurable order and reliability, or embedding a
request not to delay the acknowledgement of a message). Whenever the
sending application specifies per-message properties that relax the
notion of reliable in-order delivery of bytes, it must assume that the
receiving application is 1) able to determine message boundaries,
provided that messages are always kept intact, and 2) able to accept
these relaxed per-message properties. Any signaling of such
information to the peer is up to an application
For example, if an application requests to transfer fixed-size messages of 100 bytes with partial reliability, this needs the receiving application to be prepared to accept data in chunks of 100 bytes. Then, if some of these 100-byte messages are missing (e.g., if SCTP with Configurable Reliability is used), this is the expected application behavior. With TCP, no messages would be missing, but this is also correct for the application, and the possible retransmission delay is acceptable within the best-effort service model (see Section 3.5 of [RFC7305]). Still, the receiving application would separate the byte stream into 100-byte chunks.¶
Note that this usage of messages does not require all messages to
be equal in size. Many application protocols use some form of
Type
5.2. Stream Schedulers without Streams
We have already stated that multi-streaming does not require application
With only these semantics necessary to represent, the interface to a transport system becomes easier if we assume that connections may be not only a transport protocol's connection or association, but could also be a stream of an existing SCTP association, for example. We only need to allow for a way to define a possible grouping of connections. Then, all MAINTENANCE transport features can be said to operate on connection groups, not connections, and a scheduler operates on the connections within a group.¶
To be compatible with multiple transport protocols and uniformly allow access to both transport connections and streams of a multi-streaming protocol, the semantics of opening and closing need to be the most restrictive subset of all of the underlying options. For example, TCP's support of half-closed connections can be seen as a feature on top of the more restrictive "ABORT"; this feature cannot be supported because not all protocols used by a transport system (including streams of an association) support half-closed connections.¶
5.3. Early Data Transmission
There are two transport features related to transferring a message
early: "Hand over a message to reliably transfer (possibly multiple
times) before connection establishment", which relates to TCP Fast
Open [RFC7413], and "Hand over a
message to reliably transfer during connection establishment", which
relates to SCTP's ability to transfer data together with the
COOKIE-Echo chunk. Also without TCP Fast Open, TCP can transfer data
during the handshake, together with the SYN packet; however, the
receiver of this data may not hand it over to the application until
the handshake has completed. Also, different from TCP Fast Open, this
data is not delimited as a message by TCP (thus, not visible as a
"message"). This functionality is commonly available in TCP and
supported in several implementations
A transport system could differentiate between the cases of transmitting data "before" (possibly multiple times) or "during" the handshake. Alternatively, it could also assume that data that are handed over early will be transmitted as early as possible, and "before" the handshake would only be used for messages that are explicitly marked as "idempotent" (i.e., it would be acceptable to transfer them multiple times).¶
The amount of data that can successfully be transmitted before or during the handshake depends on various factors: the transport protocol, the use of header options, the choice of IPv4 and IPv6, and the Path MTU. A transport system should therefore allow a sending application to query the maximum amount of data it can possibly transmit before (or, if exposed, during) connection establishment.¶
5.4. Sender Running Dry
The transport feature "Notification that the stack has no more user
data to send" relates to SCTP's "SENDER DRY" notification. Such
notifications can, in principle, be used to avoid having an
unnecessarily large send buffer, yet ensure that the transport sender
always has data available when it has an opportunity to transmit it.
This has been found to be very beneficial for some applications [WWDC2015]. However, "SENDER DRY" truly
means that the entire send buffer (including both unsent and
unacknowledged data) has emptied, i.e., when it notifies the sender,
it is already too late; the transport protocol already missed an
opportunity to send data. Some modern TCP implementations now include
the unspecified "TCP
SCTP allows configuring the sender-side buffer too; the
automatable Transport Feature "Configure send buffer size" provides
this functionality, but only for the complete buffer, which includes
both unsent and unacknowledged data. SCTP does not allow to control
these two sizes separately. It therefore makes sense for a transport
system to allow for uniform access to "TCP
5.5. Capacity Profile
The transport features:¶
All relate to a QoS-like application need such as "low latency" or "scavenger". In the interest of flexibility of a transport system, they could therefore be offered in a uniform, more abstract way, where a transport system could, e.g., decide by itself how to use combinations of LEDBAT-like congestion control and certain DSCP values, and an application would only specify a general "capacity profile" (a description of how it wants to use the available capacity). A need for "lowest possible latency at the expense of overhead" could then translate into automatically disabling the Nagle algorithm.¶
In some cases, the Nagle algorithm is best controlled directly by the application because it is not only related to a general profile but also to knowledge about the size of future messages. For fine-grain control over Nagle-like functionality, the "Request not to bundle messages" is available.¶
5.6. Security
Both TCP and SCTP offer authentication. TCP authenticates complete segments. SCTP allows configuring which of SCTP's chunk types must always be authenticated; if this is exposed as such, it creates an undesirable dependency on the transport protocol. For compatibility with TCP, a transport system should only allow to configure complete transport layer packets, including headers, IP pseudo-header (if any) and payload.¶
Security is discussed in a separate document [RFC8922]. The minimal set presented in the present document
excludes all security
5.7. Packet Size
UDP(-Lite) has a transport feature called "Specify DF field". This
yields an error message in the case of sending a message that exceeds the
Path MTU, which is necessary for a UDP-based application to be able to
implement Path MTU Discovery (a function that UDP-based applications
must do by themselves). The "Get max. transport
6. The Minimal Set of Transport Features
Based on the categorization, reduction, and discussion in Section 3, this section describes a minimal set of transport features that end systems should offer. Any configuration based on the described minimum set of transport feature can always be realized over TCP but also gives the transport system flexibility to choose another transport if implemented. In the text of this section, "not UDP" is used to indicate elements of the system that cannot be implemented over UDP. Conversely, all elements of the system that are not marked with "not UDP" can also be implemented over UDP.¶
The arguments laid out in Section 5 ("discussion") were used to make the final representation of the minimal set as short, simple, and general as possible. There may be situations where these arguments do not apply, e.g., implementers may have specific reasons to expose multi-streaming as a visible functionality to applications, or the restrictive open/close semantics may be problematic under some circumstances. In such cases, the representation in Section 4 ("reduction") should be considered.¶
As in Section 3, Section 4, and [RFC8303], we categorize the minimal set of transport features as 1) CONNECTION related (ESTABLISHMENT, AVAILABILITY, MAINTENANCE, TERMINATION) and 2) DATA Transfer related (Sending Data, Receiving Data, Errors). Here, the focus is on connections that the transport system offers as an abstraction to the application, as opposed to connections of transport protocols that the transport system uses.¶
6.1. ESTABLISHMENT, AVAILABILITY, and TERMINATION
A connection must first be "created" to allow for some initial configuration to be carried out before the transport system can actively or passively establish communication with a remote end system. As a configuration of the newly created connection, an application can choose to disallow usage of MPTCP. Furthermore, all configuration parameters in Section 6.2 can be used initially, although some of them may only take effect when a connection has been established with a chosen transport protocol. Configuring a connection early helps a transport system make the right decisions. For example, grouping information can influence whether or not the transport system implements a connection as a stream of a multi-streaming protocol's existing association.¶
For ungrouped connections, early configuration is necessary because it allows the transport system to know which protocols it should try to use. In particular, a transport system that only makes a one-time choice for a particular protocol must know early about strict requirements that must be kept, or it can end up in a deadlock situation (e.g., having chosen UDP and later be asked to support reliable transfer). As an example description of how to correctly handle these cases, we provide the following decision tree (this is derived from Section 4.1 excluding authentication, as explained in Section 8):¶
Note that this decision tree is not optimal for all cases. For example, if an application wants to use "Specify checksum coverage used by the sender", which is only offered by UDP-Lite, and "Configure priority or weight for a scheduler", which is only offered by SCTP, the above decision tree will always choose UDP-Lite, making it impossible to use SCTP's schedulers with priorities between grouped connections. Also, several other factors may influence the decisions for or against a protocol, e.g., penetration rates, the ability to work through NATs, etc. We caution implementers to be aware of the full set of trade-offs, for which we recommend consulting the list in Section 4.1 when deciding how to initialize a connection.¶
To summarize, the following parameters serve as input for the transport system to help it choose and configure a suitable protocol:¶
- Reliability:
- a boolean that should be set to true when any of the following will be
useful to the application: reliably transfer data; notify the peer of
closing
/aborting; or preserve data ordering.¶ - Checksum coverage:
- a boolean to specify whether it will be useful to the application to specify checksum coverage when sending or receiving.¶
- Configure message priority:
- a boolean that should be set to true when any of the following per-message configuration or prioritization mechanisms will be useful to the application: choosing a scheduler to operate between grouped connections, with the possibility to configure a priority or weight per connection; configurable message reliability; unordered message delivery; or requesting not to delay the acknowledgement (SACK) of a message.¶
- Early message timeout notifications:
- a boolean that should be set to true when any of the following will be useful to the application: hand over a message to reliably transfer (possibly multiple times) before connection establishment; suggest timeout to the peer; notification of excessive retransmissions (early warning below abortion threshold); or notification of ICMP error message arrival.¶
Once a connection is created, it can be queried for the maximum amount of data that an application can possibly expect to have reliably transmitted before or during transport connection establishment (with zero being a possible answer) (see Section 6.2.1). An application can also give the connection a message for reliable transmission before or during connection establishment (not UDP); the transport system will then try to transmit it as early as possible. An application can facilitate sending a message particularly early by marking it as "idempotent" (see Section 6.3.1); in this case, the receiving application must be prepared to potentially receive multiple copies of the message (because idempotent messages are reliably transferred, asking for idempotence is not necessary for systems that support UDP).¶
After creation, a transport system can actively establish communication with a peer, or it can passively listen for incoming connection requests. Note that active establishment may or may not trigger a notification on the listening side. It is possible that the first notification on the listening side is the arrival of the first data that the active side sends (a receiver-side transport system could handle this by continuing to block a "Listen" call, immediately followed, for example, by issuing "Receive"; callback-based implementations could simply skip the equivalent of "Listen"). This also means that the active opening side is assumed to be the first side sending data.¶
A transport system can actively close a connection, i.e., terminate it after reliably delivering all remaining data to the peer (if reliable data delivery was requested earlier (not UDP)), in which case the peer is notified that the connection is closed. Alternatively, a connection can be aborted without delivering outstanding data to the peer. In case reliable or partially reliable data delivery was requested earlier (not UDP), the peer is notified that the connection is aborted. A timeout can be configured to abort a connection when data could not be delivered for too long (not UDP); however, timeout-based abortion does not notify the peer application that the connection has been aborted. Because half-closed connections are not supported, when a host implementing a transport system receives a notification that the peer is closing or aborting the connection (not UDP), its peer may not be able to read outstanding data. This means that unacknowledged data residing in a transport system's send buffer may have to be dropped from that buffer upon arrival of a "close" or "abort" notification from the peer.¶
6.2. MAINTENANCE
A transport system must offer means to group connections, but it
cannot guarantee truly grouping them using the transport protocols
that it uses (e.g., it cannot be guaranteed that connections become
multiplexed as streams on a single SCTP association when SCTP may not
be available). The transport system must therefore ensure that group-
versus non
As a general rule, any configuration described below should be carried out as early as possible to aid the transport system's decision making.¶
6.2.1. Connection Groups
The following transport features and notifications (some directly from Section 4; some new or changed, based on the discussion in Section 5) automatically apply to all grouped connections:¶
Configure a timeout (not UDP)
This can be done with the following parameters:¶
Configure urgency
This can be done with the following parameters:¶
Following Section 5.7, these properties can be queried:¶
In addition to the already mentioned closing
- Excessive Retransmissions
: - The configured (or a default) number of retransmissions has been reached, yielding this early warning below an abortion threshold.¶
- ICMP Arrival (parameter: ICMP message):
- An ICMP packet carrying the conveyed ICMP message has arrived.¶
- ECN Arrival (parameter: ECN value):
- A packet carrying the conveyed Explicit Congestion Notification (ECN) value has arrived. This can be useful for applications implementing congestion control.¶
- Timeout (parameter: s seconds):
- Data could not be delivered for s seconds.¶
- Drain:
- The send buffer has either drained below the configured buffer limit
or it has become completely empty. This is a generic notification that
tries to enable uniform access to "TCP
_NOTSENT _LOWAT" as well as the "SENDER DRY" notification (as discussed in Section 5.4; SCTP's "SENDER DRY" is a special case where the threshold (for unsent data) is 0 and there is also no more unacknowledged data in the send buffer).¶
6.2.2. Individual Connections
Configure priority or weight for a scheduler, as described in [RFC8260].¶
Configure checksum usage: This can be done with the following parameters, but there is no guarantee that any checksum limitations will indeed be enforced (the default behavior is "full coverage, checksum enabled"):¶
6.3. DATA Transfer
6.3.1. Sending Data
When sending a message, no guarantees are given about the preservation of message boundaries to the peer; if message boundaries are needed, the receiving application at the peer must know about them beforehand (or the transport system cannot use TCP). Note that an application should already be able to hand over data before the transport system establishes a connection with a chosen transport protocol. Regarding the message that is being handed over, the following parameters can be used:¶
- Reliability:
- This parameter is used to convey a choice of: fully reliable with congestion control (not UDP), unreliable without congestion control, unreliable with congestion control (not UDP), and partially reliable with congestion control (see [RFC3758] and [RFC7496] for details on how to specify partial reliability) (not UDP). The latter two choices are optional for a transport system to offer and may result in full reliability. Note that applications sending unreliable data without congestion control should themselves perform congestion control in accordance with [RFC8085].¶
- Ordered (not UDP):
- This boolean lets an application choose between ordered message delivery (true) and possibly unordered, potentially faster message delivery (false).¶
- Bundle:
- This boolean expresses a preference for allowing to bundle messages (true) or not (false). No guarantees are given.¶
- DelAck:
- This boolean, if false, lets an application request that the peer not delay the acknowledgement for this message.¶
- Fragment:
- This boolean expresses a preference for allowing to fragment messages (true) or not (false), at the IP level. No guarantees are given.¶
- Idempotent (not UDP):
- This boolean expresses whether a message is idempotent (true) or not (false). Idempotent messages may arrive multiple times at the receiver (but they will arrive at least once). When data is idempotent, it can be used by the receiver immediately on a connection establishment attempt. Thus, if data is handed over before the transport system establishes a connection with a chosen transport protocol, stating that a message is idempotent facilitates transmitting it to the peer application particularly early.¶
An application can be notified of a failure to send a specific message. There is no guarantee of such notifications, i.e., send failures can also silently occur.¶
6.3.2. Receiving Data
A receiving application obtains an "Application
Different from TCP's semantics, if the sending application has allowed that messages are not fully reliably transferred, or delivered out of order, then such reordering or unreliability may be reflected per message in the arriving data. Messages will always stay intact, i.e., if an incomplete message is contained at the end of the arriving data block, this message is guaranteed to continue in the next arriving data block.¶
7. IANA Considerations
This document has no IANA actions.¶
8. Security Considerations
Authentication, confidentiality protection, and integrity protection are identified as transport features by [RFC8095]. Often, these features are provided by a protocol or layer on top of the transport protocol; none of the full-featured standards-track transport protocols in [RFC8303], which this document is based upon, provide all of these transport features on its own. Therefore, they are not considered in this document, with the exception of native authentication capabilities of TCP and SCTP for which the security considerations in [RFC5925] and [RFC4895] apply. The minimum requirements for a secure transport system are discussed in a separate document [RFC8922].¶
9. References
9.1. Normative References
- [RFC8095]
-
Fairhurst, G., Ed., Trammell, B., Ed., and M. Kuehlewind, Ed., "Services Provided by IETF Transport Protocols and Congestion Control Mechanisms", RFC 8095, DOI 10
.17487 , , <https:///RFC8095 www >..rfc -editor .org /info /rfc8095 - [RFC8303]
-
Welzl, M., Tuexen, M., and N. Khademi, "On the Usage of Transport Features Provided by IETF Transport Protocols", RFC 8303, DOI 10
.17487 , , <https:///RFC8303 www >..rfc -editor .org /info /rfc8303 - [RFC8922]
-
Enghardt, T., Pauly, T., Perkins, C., Rose, K., and C. Wood, "A Survey of the Interaction between Security Protocols and Transport Services", RFC 8922, DOI 10
.17487 , , <https:///RFC8922 www >..rfc -editor .org /info /rfc8922
9.2. Informative References
- [COBS]
-
Cheshire, S. and M. Baker, "Consistent overhead byte stuffing", IEEE/ACM Transactions on Networking, Volume 7, Issue 2
, DOI 10
.1109 , , <https:///90 .769765 doi >..org /10 .1109 /90 .769765 - [POSIX]
-
The Open Group, "IEEE Standard for Information Technology
--Portable Operating System Interface (POSIX(R)) Base Specifications, Issue 7" , (Revision of IEEE Std 1003.1-2008), IEEE Std 1003.1-2017, , <https://www >..opengroup .org /onlinepubs /9699919799 /functions /contents .html - [RFC3758]
-
Stewart, R., Ramalho, M., Xie, Q., Tuexen, M., and P. Conrad, "Stream Control Transmission Protocol (SCTP) Partial Reliability Extension", RFC 3758, DOI 10
.17487 , , <https:///RFC3758 www >..rfc -editor .org /info /rfc3758 - [RFC4895]
-
Tuexen, M., Stewart, R., Lei, P., and E. Rescorla, "Authenticated Chunks for the Stream Control Transmission Protocol (SCTP)", RFC 4895, DOI 10
.17487 , , <https:///RFC4895 www >..rfc -editor .org /info /rfc4895 - [RFC4987]
-
Eddy, W., "TCP SYN Flooding Attacks and Common Mitigations", RFC 4987, DOI 10
.17487 , , <https:///RFC4987 www >..rfc -editor .org /info /rfc4987 - [RFC5925]
-
Touch, J., Mankin, A., and R. Bonica, "The TCP Authentication Option", RFC 5925, DOI 10
.17487 , , <https:///RFC5925 www >..rfc -editor .org /info /rfc5925 - [RFC6897]
-
Scharf, M. and A. Ford, "Multipath TCP (MPTCP) Application Interface Considerations", RFC 6897, DOI 10
.17487 , , <https:///RFC6897 www >..rfc -editor .org /info /rfc6897 - [RFC7305]
-
Lear, E., Ed., "Report from the IAB Workshop on Internet Technology Adoption and Transition (ITAT)", RFC 7305, DOI 10
.17487 , , <https:///RFC7305 www >..rfc -editor .org /info /rfc7305 - [RFC7413]
-
Cheng, Y., Chu, J., Radhakrishnan, S., and A. Jain, "TCP Fast Open", RFC 7413, DOI 10
.17487 , , <https:///RFC7413 www >..rfc -editor .org /info /rfc7413 - [RFC7496]
-
Tuexen, M., Seggelmann, R., Stewart, R., and S. Loreto, "Additional Policies for the Partially Reliable Stream Control Transmission Protocol Extension", RFC 7496, DOI 10
.17487 , , <https:///RFC7496 www >..rfc -editor .org /info /rfc7496 - [RFC8085]
-
Eggert, L., Fairhurst, G., and G. Shepherd, "UDP Usage Guidelines", BCP 145, RFC 8085, DOI 10
.17487 , , <https:///RFC8085 www >..rfc -editor .org /info /rfc8085 - [RFC8260]
-
Stewart, R., Tuexen, M., Loreto, S., and R. Seggelmann, "Stream Schedulers and User Message Interleaving for the Stream Control Transmission Protocol", RFC 8260, DOI 10
.17487 , , <https:///RFC8260 www >..rfc -editor .org /info /rfc8260 - [RFC8304]
-
Fairhurst, G. and T. Jones, "Transport Features of the User Datagram Protocol (UDP) and Lightweight UDP (UDP-Lite)", RFC 8304, DOI 10
.17487 , , <https:///RFC8304 www >..rfc -editor .org /info /rfc8304 - [RFC8622]
-
Bless, R., "A Lower-Effort Per-Hop Behavior (LE PHB) for Differentiated Services", RFC 8622, DOI 10
.17487 , , <https:///RFC8622 www >..rfc -editor .org /info /rfc8622 - [SCTP-STREAM-1]
- Weinrank, F. and M. Tuexen, "Transparent Flow Mapping for NEAT", IFIP Networking 2017, Workshop on Future of Internet Transport (FIT 2017), .
- [SCTP-STREAM-2]
-
Welzl, M., Niederbacher, F., and S. Gjessing, "Beneficial Transparent Deployment of SCTP: The Missing Pieces", IEEE GlobeCom 2011, DOI 10
.1109 , , <https:///GLOCOM .2011 .6133554 doi >..org /10 .1109 /GLOCOM .2011 .6133554 - [TAPS-INTERFACE]
-
Trammell, B., Welzl, M., Enghardt, T., Fairhurst, G., Kuehlewind, M., Perkins, C., Tiesel, P. S., Wood, C. A., and T. Pauly, "An Abstract Application Layer Interface to Transport Services", Work in Progress, Internet-Draft, draft
-ietf , , <https://-taps -interface -09 tools >..ietf .org /html /draft -ietf -taps -interface -09 - [WWDC2015]
-
Lakhera, P. and S. Cheshire, "Your App and Next Generation Networks", Apple Worldwide Developers Conference 2015, San Francisco, USA, , <https://
developer >..apple .com /videos /wwdc /2015 /?id =719
Appendix A. The Superset of Transport Features
In this description, transport features are presented
following the nomenclature
"CATEGORY
We designate some transport features as "automatable" on the basis of a broader decision that affects multiple transport features:¶
Finally, in three cases, transport features are aggregated and/or slightly changed from [RFC8303] in the description below. These transport features are marked as "CHANGED FROM RFC 8303". These do not add any new functionality but just represent a simple refactoring step that helps to streamline the derivation process (e.g., by removing a choice of a parameter for the sake of applications that may not care about this choice). The corresponding transport features are automatable, and they are listed immediately below the "CHANGED FROM RFC 8303" transport feature.¶
A.1. CONNECTION-Related Transport Features
ESTABLISHMENT:¶
AVAILABILITY:¶
MAINTENANCE:¶
TERMINATION:¶
A.2. DATA-Transfer-Related Transport Features
A.2.3. Errors
This section describes sending failures that are associated with a specific call to in the "Sending Data" category (Appendix A.2.1).¶
Acknowledgements
The authors would like to thank all the participants of the TAPS
Working Group and the NEAT and MAMI research projects for valuable input
to this document. We especially thank Michael Tüxen for help with connection establishment