Cross-Protect
A new QoS architecture for IP networks

Cross-protect router
A combination of flow-aware QoS control
mechanisms in an IP router

Effective control of Quality of Service (QoS) in IP networks is a priority for operators like France Telecom. Our evaluation of currently available QoS solutions (Intserv, Diffserv,?) reveals inadequacies which have led us to propose an alternative flow-aware QoS architecture called Cross-Protect. Cross-Protect represents a new direction for QoS. Its originality resides in its ability to offer adequate quality of service to both data flows and real-time flows without the need for explicit class of service differentiation (no packet marking as in Diffserv, no resource reservation as in Intserv). Cross-Protect performs implicit differentiation. This results in much simpler network operations leading to potentially significant cost reductions in the IP backbone.

Principle

Cross-Protect combines two flow-aware control mechanisms to be implemented in an IP router: On very high capacity links (2.5 Gbit/s and above), fair queueing is enough to guarantee low packet delay and loss for real-time flows (whose rate is less than the fair rate). However, Cross-Protect implements a novel enhancement whereby packets of flows emitting at less than the current fair rate are given priority. This enables useful performance guarantees for a range of real-time services even on links of lower capacity and with no requirement for packet marking.

Prototype

We have developed a prototype that implements the Cross-Protect mechanisms in a Linux router. The double objective is to demonstrate the feasibility of the architecture and to convince network operators and equipment vendors of its utility.
prototype

Advantages for an operator

The introduction of Cross-Protect would bring a number of significant advantages for the network operator. It increases network efficiency. It avoids the current requirement to rely on users correctly implementing TCP to ensure fair bandwidth sharing. It requires no change to existing protocols and no new protocols. It can be introduced incrementally starting, for example, with routers that control strategically important links such as peering links. Preliminary trials and experiments performed with our Networking Division, discussions with equipment vendors and the emergence of commercial "flow-aware" products demonstrate that there are no technological barriers to the deployment of Cross-Protect.

Publications

Frequently asked questions

  1. Flow-aware networking
    1. Why does the network need to be flow-aware?
    2. Does flow-aware imply a solution like Intserv or ATM?
    3. What service guarantees are provided by Cross-protect?
    4. FAN has been designed with current services and technology in mind; is it necessarily future proof?
    5. Have all the problems to do with implementing FAN been solved?
  2. Fair queueing
    1. Is per-flow fair queuing sufficient?
    2. Why not increase "utility" by using weighted fair sharing?
    3. Why not improve elastic flow performance using size-based scheduling?
    4. Is it also possible to provide hard bandwidth guarantees for certain flows?
  3. Admission control
    1. What is the role of admission control?
    2. Don't users generally prefer reduced throughput rather than no throughput at all due to blocking?
    3. Why would users accept the implicit blocking signal of packet discard and not continue to send additional packets?
    4. Doesn't distributed admission control lead to inconsistencies with flows admitted on some links and blocked on others?
    5. What key can be used to distinguish priority flows in a system with discriminatory blocking?
  4. Complexity, implementation
    1. Is per-flow fair queuing scalable?
    2. Is implicit per-flow admission control scalable?
    3. Is it necessary to implement Cross-protect on every link?
    4. Can Cross-protect be combined advantageously with other traffic control mechanisms?
    5. Does FAN/Cross-protect bring additional operational expenditure?
    6. Can Cross-protect be implemented in an input-queued switch fabric?
    7. How can we perform flow-aware networking if flows are masked by tunnels?
    8. Is FAN compatible with the implementation of VPNs?
  5. Denial of service
    1. Can users avoid flow blocking by maintaining a stream of keep-alive packets between a given source and destination?
    2. Can users saturate the protected flow table by sending a lot of single packet flows (e.g., by using a different flow id for every packet)?
    3. Can users gain more than a fair share by setting up several flows in parallel?
    4. Can users ensure low latency for a high rate flow by disguising it as multiple lower rate flows?

Les informations de cette page n'engagent que son auteur et ne constituent en rien une information émanant de France Télécom
Ces pages sont hébergées par France Télécom R&D 38-40 Av. du Général Leclerc 92794 Issy les Moulineaux CEDEX