One document matched: draft-ietf-tsvwg-circuit-breaker-01.xml


<?xml version="1.0" encoding="US-ASCII"?>
<!DOCTYPE rfc SYSTEM "rfc2629.dtd">
<rfc category="bcp" docName="draft-ietf-tsvwg-circuit-breaker-01"
     ipr="trust200902" obsoletes="" updates="">
  <!-- Updates SDP -->

  <?rfc toc="yes"?>

  <!-- generate a table of contents -->

  <?rfc symrefs="yes"?>

  <!-- use anchors instead of numbers for references -->

  <?rfc sortrefs="yes" ?>

  <!-- alphabetize the references -->

  <?rfc compact="yes" ?>

  <!-- conserve vertical whitespace -->

  <?rfc subcompact="no" ?>

  <!-- but keep a blank line between list items -->

  <front>
    <title abbrev="">Network Transport Circuit Breakers</title>

    <author fullname="Godred Fairhurst" initials="G." surname="Fairhurst">
      <organization>University of Aberdeen</organization>

      <address>
        <postal>
          <street>School of Engineering</street>

          <street>Fraser Noble Building</street>

          <city>Aberdeen</city>

          <region>Scotland</region>

          <code>AB24 3UE</code>

          <country>UK</country>
        </postal>

        <email>gorry@erg.abdn.ac.uk</email>

        <uri>http://www.erg.abdn.ac.uk</uri>
      </address>
    </author>

    <date day="02" month="April" year="2015" />

    <area>Transport</area>

    <workgroup>TSVWG Working Group</workgroup>

    <keyword></keyword>

    <keyword></keyword>

    <abstract>
      <t>This document explains what is meant by the term "network transport
      circuit breaker" (CB). It describes the need for circuit breakers when
      using network tunnels, and other non-congestion controlled applications.
      It also defines requirements for building a circuit breaker and the
      expected outcomes of using a circuit breaker within the Internet.</t>
    </abstract>
  </front>

  <middle>
    <!-- text starts here -->

    <section title="Introduction" toc="include">
      <t>A network transport Circuit Breaker (CB) is an automatic mechanism
      that is used to estimate congestion caused by a flow, and to terminate
      (or significantly reduce the rate of) the flow when persistent
      congestion is detected. This is a safety measure to prevent congestion
      collapse (starvation of resources available to other flows), essential
      for an Internet that is heterogeneous and for traffic that is hard to
      predict in advance.</t>

      <t>The term "Circuit Breaker" originates in electricity supply, and has
      nothing to do with network circuits or virtual circuits. In electricity
      supply, a CB is intended as a protection mechanism of last resort. Under
      normal circumstances, a CB should not be triggered; It is designed to
      protect the supply neytwork and attached equipment when there is
      overload. Just as people do not expect the electrical circuit-breaker
      (or fuse) in their home to be triggered, except when there is a wiring
      fault or a problem with an electrical appliance.</t>

      <t>In networking, the CB principle can be used as a protection mechanism
      of last resort to avoid persistent congestion. Persistent congestion
      (also known as "congestion collapse") was a feature of the early
      Internet of the 1980s. This resulted in excess traffic starving other
      connection from access to the Internet. It was countered by the
      requirement to use congestion control (CC) by the Transmission Control
      Protocol (TCP) <xref target="Jacobsen88"></xref> <xref
      target="RFC1112"></xref>. These mechanisms operate in Internet hosts to
      cause TCP connections to "back off" during congestion. The introduction
      of CC in TCP (currently documented in <xref target="RFC5681"></xref>
      ensured the stability of the Internet, because it was able to detect
      congestion and promptly react. This worked well while TCP was by far the
      dominant traffic in the Internet, and most TCP flows were long-lived
      (ensuring that they could detect and respond to congestion before the
      flows terminated). This is no longer the case, and non-congestion
      controlled traffic, including many applications of the User Datagram
      Protocol (UDP) can form a significant proportion of the total traffic
      traversing a link. The current Internet therefore requires that
      non-congestion controlled traffic needs to be considered to avoid
      congestion collapse.</t>

      <t>There are important differences between a transport circuit-breaker
      and a congestion-control method. Specifically, congestion control (as
      implemented in TCP, SCTP, and DCCP) needs to operate on the timescale on
      the order of a packet round-trip-time (RTT), the time from sender to
      destination and return. Congestion control methods may react to a single
      packet loss/marking and reduce the transmission rate for each loss or
      congestion event. The goal is usually to limit the maximum transmission
      rate that reflects the available capacity of a network path. These
      methods typically operate on individual traffic flows (e.g., a
      5-tuple).</t>

      <t>In contrast, CBs are recommended for non-congestion-controlled
      Internet flows and for traffic aggregates, e.g., traffic sent using a
      network tunnel. Later sections provide examples of cases where
      circuit-breakers may or may not be desirable.</t>

      <t>A CB needs to measure (meter) the traffic to determine if the network
      is experiencing congestion and must be designed to trigger robustly when
      there is persistent congestion. This means the trigger needs to operate
      on a timescale much longer than the path round trip time (e.g., seconds
      to possibly many tens of seconds). This longer period is needed to
      provide sufficient time for transports (or applications) to adjust their
      rate following congestion, and for the network load to stabilise after
      any adjustment. A CB trigger will often be based on a series of
      successive sample measurements taken over a reasonably long period of
      time. This is to ensure that a CB does not accidentally trigger
      following a single (or even successive) congestion events (congestion
      events are what triggers congestion control, and are to be regarded as
      normal on a network link operating near its capacity). Once triggered, a
      control function needs to remove traffic from the network, either
      disabling the flow or significantly reducing the level of traffic. This
      reaction provides the required protection to prevent persistent
      congestion being experienced by other flows that share the congested
      part of the network path.</t>

      <t><xref target="Require"></xref> defines requirements for building a
      circuit breaker.</t>

      <section title="Types of Circuit-Breaker">
        <t>There are various forms of network transport circuit breaker. These
        are differentiated mainly on the timescale over which they are
        triggered, but also in the intended protection they offer:<list
            style="symbols">
            <t>Fast-Trip Circuit Breakers: The relatively short timescale used
            by this form of circuit breaker is intended to protect a flow or
            related group of flows.</t>

            <t>Slow-Trip Circuit Breakers: This circuit breaker utilises a
            longer timescale and is designed to protect traffic
            aggregates.</t>

            <t>Managed Circuit Breakers: Utilise the operations and management
            functions that may be present in a managed service to implement a
            circuit breaker.</t>
          </list>Examples of each type of circuit breaker are provided in
        section 4.</t>
      </section>
    </section>

    <section title="Terminology" toc="include">
      <t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
      "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
      document are to be interpreted as described in <xref
      target="RFC2119"></xref>.</t>
    </section>

    <section title="Design of a Circuit-Breaker (What makes a good circuit breaker?)"
             toc="include">
      <t>Although circuit breakers have been talked about in the IETF for many
      years, there has not yet been guidance on the cases where circuit
      breakers are needed or upon the design of circuit breaker mechanisms.
      This document seeks to offer advise on these two topics.</t>

      <t>Section 3.1 describes the functional components of a circuit breaker
      and section 3.2 defines requirements for implementing a circuit
      breaker.</t>

      <section title="Functional Components" toc="include">
        <t>The basic design of a transport circuit breaker involves
        communication between an ingress point (a sender) and an egress point
        (a receiver) of a network flow. A simple picture of CB operation is
        provided in figure 1. This shows a set of routers (each labelled R)
        connecting a set of endpoints. A CB is used to control traffic passing
        through a subset of these routers, acting between an ingress and a
        egress point. In some cases, the ingress and egress may be win one or
        both network endpoints, in other cases they will be within a network
        device, for example, one expected use would be at the ingress and
        egress of a tunnel service.</t>

        <figure>
          <artwork><![CDATA[
 +--------+                                                   +--------+
 |Endpoint|                                                   |Endpoint|
 +--+-----+                                                   +--+-----+
    |                                                            |
    | +-+  +-+  +---------+  +-+  +-+  +-+  +--------+  +-+  +-+ |
    +-+R+--+R+--+ Ingress +--+R+--+R+--+R+--+ Egress |--+R+--+R+-+
      +++  +-+  +-------+-+  +-+  +-+  +-+  +-----+--+  +++  +-+
       |         ^      |                         |      |
  +-+  |         | +----+----+                    |      |  +-+
  +R+--+         | | Measure +<-------------------+      +--+R+
  +++            | +----+----+                              +++
   |             |      |                                    |
   |             | +----+----+                               |
+--+-----+       | | Trigger +                            +--+-----+
|Endpoint|       | +----+----+                            |Endpoint|
+--------+       |      |                                 +--------+
                 +------+
                 Reaction]]></artwork>
        </figure>

        <t>Figure 1: A CB controlling the part of the end-to-end path between
        an ingress point and an egress point.</t>

        <t>The set of components needed to implement a circuit breaker
        are:</t>

        <t><list style="numbers">
            <t>An Ingress meter (at the sender or tunnel ingress) records the
            number of packets/bytes sent in each measurement interval. This
            measures the offered network load. The measurement interval could
            be every few seconds.</t>

            <t>An Egress meter (at the receiver or tunnel egress) records the
            number/bytes received in each measurement interval. This measures
            the supported load and may utilise other signals to detect the
            effect of congestion (e.g., loss/marking experienced over the
            path).</t>

            <t>The measured values at the ingress and egress are communicated
            to the CB Measurement function. This may use several methods
            including: Sending return measurement packets from a receiver to a
            trigger function at the sender; An implementation using
            Operations, Administration and Management (OAM); or another
            in-band signalling datagram to send to the trigger function. This
            could also be implemented purely as a control plane function using
            a software-defined network controller.</t>

            <t>The Measurement function combines the Ingress and Egress
            measurements to assess the present level of network congestion.
            (For example, the loss rate for each measurement interval could be
            deduced from calculating the difference between ingress and egress
            counter values. Note that accurate measurement intervals are not
            typically important, since isolated loss events need to be
            disregarded.)</t>

            <t>A Trigger function determines if the measurements indicate
            persistent congestion. This defines an appropriate threshold for
            determining there is persistent congestion between the ingress and
            egress (e.g., more than 10% loss, but other methods could also be
            based on the rate of transmission as well as the loss rate). The
            transport CB is triggered when the threshold is exceeded in
            multiple measurement intervals (e.g., 3 successive measurements).
            This design needs to be robust to single or spurious events
            triggering a reaction.</t>

            <t>A Reaction that is applied at the Ingress when the CB is
            triggered. This seeks to automatically remove the traffic causing
            persistent congestion.</t>

            <t>The CB also triggers when it does not receive both sender and
            receiver measurements, since this also could indicate a loss of
            control packets (also a symptom of heavy congestion or inability
            to control the load).</t>
          </list></t>
      </section>
    </section>

    <section anchor="Require"
             title="Requirements for a Network Transport Circuit Breaker">
      <t>The requirements for implementing a CB are:</t>

      <t><list style="symbols">
          <t>There MUST be a control path from the Ingress meter and the
          Egress meter to the point of measurement. The CB MUST trigger if
          this control path fails. That is, the feedback indicating a
          congested period is designed so that the CB is triggered when it
          fails to receive measurement reports that indicate an absence of
          congestion, rather than relying on the successful transmission of a
          "congested" signal back to the sender. (The feedback signal could
          itself be lost under congestion collapse).</t>

          <t>A CB MUST define a measurement period over which the receiver
          measures the level of congestion. This method does not have to
          detect individual packet loss, but MUST have a way to know that
          packets have been lost/marked from the traffic flow. If Explicit
          Congestion Notification (ECN) is enabled <xref
          target="RFC3168"></xref>, an egress meter MAY also count the number
          of ECN congestion marks/event per measurement interval, but even if
          ECN is used, loss MUST still be measured, since this better reflects
          the impact of persistent congestion. The type of CB will determine
          how long this measurement period needs to be. The minimum time must
          be significantly longer than the time that current CC algorithms
          need to reduce their rate following detection of congestion (i.e.
          many path RTTs).</t>

          <t>A CB is REQUIRED to define a threshold to determine whether the
          measured congestion is considered excessive.</t>

          <t>A CB is REQUIRED to define a period over which the Trigger uses
          the collected measurements.</t>

          <t>A CB MUST be robust to multiple congestion events. This usually
          will define a number of measured persistent congestion events per
          triggering period. For example, a CB may combine the results of
          several measurement periods to determine if the CB is triggered.
          (e.g., triggered when persistent congestion is detected in 3
          measurements within the triggering interval).</t>

          <t>A triggered CB MUST react decisively by disabling (or
          significantly reducing) traffic at the source (e.g., tunnel
          ingress). The CB SHOULD be constructed so that it does not trigger
          under light or intermittent congestion, with a default response to a
          trigger that disables all traffic that contributed to
          congestion.</t>

          <t>Some circuit breaker designs use a reaction that reduces, rather
          that disables, the flows it control. This response MUST be much more
          severe than that of a CC algorithm, because the CB reacts to more
          persistent congestion and operates over longer timescales. A CB that
          reduces the rate of a flow, MUST continue to monitor the level
          congestion and MUST further reduce the rate if the CB is again
          triggered.</t>

          <t>The reaction to a triggered CB MUST continue for a period of time
          of at least the triggering interval. Manual operator intervention
          will usually be required to restore the flow. If an automated
          response is needed to reset the trigger, then this MUST NOT be
          immediate. The design of this release mechanism needs to be
          sufficiently conservative that it does not adversely interact with
          other mechanisms (including other CB algorithms that control traffic
          over a common path.</t>

          <t>When a CB is triggered, it SHOULD be regarded as an abnormal
          network event. As such, this event SHOULD be logged. The
          measurements that lead to triggering of the CB SHOULD also be
          logged.</t>
        </list></t>

      <section title="Unidirectional Circuit Breakers over Controlled Paths">
        <t>A CB can be used to control uni-directional UDP traffic, providing
        that there is a control path to connect the functional components at
        the Ingress and Egress. This control path can exist in networks for
        which the traffic flow is purely unidirectional (e.g., a multicast
        stream that sends packets across an Internet path and can use
        multicast routing to prune flows to shed network load).</t>

        <t>Some paths are provisioned using a control protocol, e.g., flows
        provisioned using the Multi-Protocol Label Switching (MPLS) services,
        path provisioned using the Resource resevration protocol (RSVP), or
        admission-controlled Differentiated Services. For these paths the
        control protocol may be invoked to shed the network load when the
        circuit breaker is triggered.</t>
      </section>
    </section>

    <section title="Examples of Circuit Breakers">
      <t>There are multiple types of CB that may be defined for use in
      different deployment cases. This section provides examples of different
      types of circuit breaker:</t>

      <section title="A Fast-Trip Circuit Breaker">
        <t>A fast-trip circuit breaker is the most responsive form of CB. It
        has a response time that is only slightly larger than that of the
        traffic it controls. It is suited to traffic with well-understood
        characteristics. It is not be suited to arbitrary network traffic,
        since it may prematurely trigger (e.g., when multiple
        congestion-controlled flows lead to short-term overload).</t>

        <section title="A Fast-Trip Circuit Breaker for RTP">
          <t>A set of fast-trip CB methods have been specified for use
          together by a Real-time Transport Protocol (RTP) flow using the
          RTP/AVP Profile <xref target="RTP-CB"></xref>. It is expected that,
          in the absence of severe congestion, all RTP applications running on
          best-effort IP networks will be able to run without triggering these
          circuit breakers. A fast-trip RTP CB is therefore implemented as a
          fail-safe.</t>

          <t>The sender monitors reception of RTCP Reception Report (RR or
          XRR) packets that convey reception quality feedback information.
          This is used to measure (congestion) loss, possibly in combination
          with ECN <xref target="RFC6679"></xref>.</t>

          <t>The CB action (shutdown of the flow) is triggered when any of the
          following trigger conditions are true:</t>

          <t><list style="numbers">
              <t>An RTP CB triggers on reported lack of progress.</t>

              <t>An RTP CB triggers when no receiver reports messages are
              received.</t>

              <t>An RTP CB uses a TFRC-style check and sets a hard upper limit
              to the long-term RTP throughput (over many RTTs).</t>

              <t>An RTP CB includes the notion of Media Usability. This
              circuit breaker is triggered when the quality of the transported
              media falls below some required minimum acceptable quality.</t>
            </list></t>
        </section>
      </section>

      <section title="A Slow-trip Circuit Breaker">
        <t>A slow-trip CB may be implemented in an endpoint or network device.
        This type of CB is much slower at responding to congestion than a
        fast-trip CB and is expected to be more common.</t>

        <t>One example where a slow-trip CB is needed is where flows or
        traffic-aggregates use a tunnel or encapsulation and the flows within
        the tunnel do not all support TCP-style congestion control (e.g., TCP,
        SCTP, TFRC), see <xref target="RFC5405"></xref> section 3.1.3. A use
        case is where tunnels are deployed in the general Internet (rather
        than "controlled environments" within an ISP or Enterprise),
        especially when the tunnel may need to cross a customer access
        router.</t>
      </section>

      <section title="A Managed Circuit Breaker">
        <t>A managed CB is implemented in the signalling protocol or
        management plane that relates to the traffic aggregate being
        controlled. This type of circuit breaker is typically applicable when
        the deployment is within a "controlled environment".</t>

        <t>A Circuit Breaker requires more than the ability to determine that
        a network path is forwarding data, or to measure the rate of a path -
        which are often normal network operational functions. There is an
        additional need to determine a metric for congestion on the path and
        to trigger a reaction when a threshold is crossed that indicates
        persistent congestion.</t>

        <section title="A Managed Circuit Breaker for SAToP Pseudo-Wires">
          <t><xref target="RFC4553"></xref>, SAToP Pseudo-Wires (PWE3),
          section 8 describes an example of a managed circuit breaker for
          isochronous flows.</t>

          <t>If such flows were to run over a pre-provisioned (e.g., MPLS)
          infrastructure, then it may be expected that the Pseudo-Wire (PW)
          would not experience congestion, because a flow is not expected to
          either increase (or decrease) their rate. If instead Pseudo-Wire
          traffic is multiplexed with other traffic over the general Internet,
          it could experience congestion. <xref target="RFC4553"></xref>
          states: "If SAToP PWs run over a PSN providing best-effort service,
          they SHOULD monitor packet loss in order to detect "severe
          congestion". The currently recommended measurement period is 1
          second, and the trigger operates when there are more than three
          measured Severely Errored Seconds (SES) within a period.</t>

          <t>If such a condition is detected, a SAToP PW should shut down
          bidirectionally for some period of time...". The concept was that
          when the packet loss ratio (congestion) level increased above a
          threshold, the PW was by default disabled. This use case considered
          fixed-rate transmission, where the PW had no reasonable way to shed
          load.</t>

          <t>The trigger needs to be set at the rate that the PW was likely to
          experience a serious problem, possibly making the service
          non-compliant. At this point, triggering the CB would remove the
          traffic preventing undue impact on congestion-responsive traffic
          (e.g., TCP). Part of the rationale, was that high loss ratios
          typically indicated that something was "broken" and should have
          already resulted in operator intervention, and therfore should
          trigger this intervention.</t>

          <t>An operator-based response provides opportunity for other action
          to restore the service quality, e.g., by shedding other loads or
          assigning additional capacity, or to consciously avoid reacting to
          the trigger while engineering a solution to the problem. This may
          require the trigger to be sent to a third location (e.g., a network
          operations centre, NOC) responsible for operation of the tunnel
          ingress, rather than the tunnel ingress itself.</t>
        </section>
      </section>
    </section>

    <section title="Examples where circuit breakers may not be needed. ">
      <t>A CB is not required for a single CC-controlled flow using TCP, SCTP,
      TFRC, etc. In these cases, the CC methods are designed to prevent
      congestion collapse.</t>

      <section title="CBs over pre-provisioned Capacity">
        <t>One common question is whether a CB is needed when a tunnel is
        deployed in a private network with pre-provisioned capacity?</t>

        <t>In this case, compliant traffic that does not exceed the
        provisioned capacity should not result in congestion. A CB will hence
        only be triggered when there is non-compliant traffic. It could be
        argued that this event should never happen - but it may also be argued
        that the CB equally should never be triggered. If a CB were to be
        implemented, it would provide an appropriate response should this
        persistent congestion occur in an operational network. Implementing a
        CB will not reduce performance of the flows, but offers protection
        should persistent congestion occur.</t>
      </section>

      <section title="CBs with CC Traffic">
        <t>IP-based traffic is generally assumed to be congestion-controlled,
        i.e., it is assumed that the transport protocols generating IP-based
        traffic at the sender already employ mechanisms that are sufficient to
        address congestion on the path <xref target="RFC5405"></xref>. A
        question therefore arises when people deploy a tunnel that is thought
        to only carry an aggregate of TCP (or some other CC-controlled)
        traffic: Is there advantage in this case in using a CB?</t>

        <t>For sure, traffic in a such a tunnel will respond to congestion.
        However, the answer to the question may not be obvious, because the
        overall traffic formed by an aggregate of flows that implement a CC
        mechanism does not necessarily prevent congestion collapse. For
        instance, most CC mechanisms require long-lived flows to react to
        reduce the rate of a flow, an aggregate of many short flows may result
        in many terminating before they experience congestion. It is also
        often impossible for a tunnel service provider to know that the tunnel
        only contains CC-controlled traffic (e.g., Inspecting packet headers
        may not be possible). The important thing to note is that if the
        aggregate of the traffic does not result in persistent congestion
        (impacting other flows), then the CB will not trigger. This is the
        expected case in this context - so implementing a CB will not reduce
        performance of the tunnel, but offers protection should persistent
        congestion occur.</t>
      </section>

      <section title="CBs with Uni-directional Traffic and no Control Path">
        <t>A one-way forwarding path could have no associated control path,
        and therefore cannot be controlled using an automated process. This
        service could be provided using a path that has dedicated capacity and
        does not share this capacity with other elastic Internet flows (i.e.,
        flows that vary their rate).</t>

        <t>When capacity is shared, one way to mitigate the impact on other
        flows is to manage the traffic envelope by using ingress policing.</t>

        <t>Supporting this type of traffic in the general Internet requires
        operator monitoring to detect and respond to persistent
        congestion.</t>
      </section>
    </section>

    <section title="Security Considerations" toc="include">
      <t>Timely operation of a circuit breaker depends on the choice of
      measurement period. If the receiver has an interval that is overly long,
      then the responsiveness of the circuit breaker decreases. This is design
      choice.</t>

      <t>All circuit breaker mechanisms rely upon coordination between the
      ingress and egress meters and communication with the trigger function.
      This may be achieved by passing network control information across the
      network. The circuit breaker MUST be designed to be robust to packet
      loss that can also be experienced during congestion/overload. In
      particular, an absence of control information MUST cause the circuit
      breaker to trigger.</t>

      <t>A network path used to communicate measurement data MUST be protected
      from off-path attacks. Without protection it may be trivial for an
      attacker to inject packets with measurement values that could
      prematurely trigger a circuit breaker resulting in Denial of Service
      (DoS). Simple protection can be provided by using a randomised source
      port, or equivalent field in the packet header (such as the RTP SSRC
      value and the RTP sequence number) expected not to be known to an
      off-path attacker. Stronger protection may be achieved using a secure
      authentication protocol.</t>

      <t>The feedback channel itself sends control traffic that could
      potentially add to network congestion. If this traffic is sent over a
      shared path, it is RECOMMENDED that this control traffic is prioristied
      to reduce the probability of loss under congestion.</t>

      <t>If the trigger function is implemented remotely, the signalling for
      this function MUST be protected to prevent a denial of service
      attack.</t>

      <t>Each design of circuit breaker must evaluate whether the particular
      circuit breaker mechanism has new security implications.</t>
    </section>

    <section title="IANA Considerations" toc="include">
      <t>This document makes no request from IANA.</t>
    </section>

    <section title="Acknowledgments">
      <t>There are many people who have discussed and described the issues
      that have motivated this draft. Contributions and comments included:
      Lars Eggert, Colin Perkins, David Black, Matt Mathis and Andrew
      McGregor.</t>
    </section>

    <section title="Revision Notes">
      <t>XXX RFC-Editor: Please remove this section prior to publication</t>

      <t>Draft 00</t>

      <t>This was the first revision. Help and comments are greatly
      appreciated.</t>

      <t>Draft 01</t>

      <t>Contained clarifications and changes in response to received
      comments, plus addition of diagram and definitions. Comments are
      welcome.</t>

      <t>WG Draft 00</t>

      <t>Approved as a WG work item on 28th Aug 2014.</t>

      <t>WG Draft 01</t>

      <t>Incorporates feedback after Dallas IETF TSVWG meeting. This version
      is thought ready for WGLC comments.</t>
    </section>
  </middle>

  <!--  *****BACK MATTER ***** -->

  <back>
    <!-- -->

    <references title="Normative References">
      <?rfc sortrefs="yes"?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml"?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.5405.xml"?>
    </references>

    <references title="Informative References">
      <reference anchor="Jacobsen88">
        <front>
          <title>Congestion Avoidance and Control", SIGCOMM Symposium
          proceedings on Communications architectures and protocols</title>

          <author fullname="Jacobson, V.">
            <organization>European Telecommunication Standards, Institute
            (ETSI)</organization>
          </author>

          <date month="August" year="1998" />
        </front>
      </reference>

      <reference anchor="RTP-CB">
        <front>
          <title>Multimedia Congestion Control: Circuit Breakers for Unicast
          RTP Sessions</title>

          <author fullname="C. S. Perkins" surname="Perkins">
            <organization></organization>

            <address>
              <postal>
                <street></street>

                <city></city>

                <region></region>

                <code></code>

                <country></country>
              </postal>

              <phone></phone>

              <facsimile></facsimile>

              <email></email>

              <uri></uri>
            </address>
          </author>

          <author fullname="V. Singh" surname="Singh">
            <organization></organization>
          </author>

          <date month="February" year="2014" />
        </front>
      </reference>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.1112.xml"
?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.4553.xml"
?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.6040.xml"
?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.3168.xml"
?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.6679.xml"?>

      <?rfc include="http://xml.resource.org/public/rfc/bibxml/reference.RFC.5681.xml"?>

      <?rfc ?>
    </references>
  </back>
</rfc>

PAFTECH AB 2003-20262026-04-23 05:52:23