rfc:rfc9188
Independent Submission J. Zhu Request for Comments: 9188 Intel Category: Experimental S. Kanugovi ISSN: 2070-1721 Nokia
February 2022
Generic Multi-Access (GMA) Encapsulation Protocol
Abstract
A device can be simultaneously connected to multiple networks, e.g., Wi-Fi, LTE, 5G, and DSL. It is desirable to seamlessly combine the connectivity over these networks below the transport layer (L4) to improve the quality of experience for applications that do not have built-in multi-path capabilities. Such optimization requires additional control information, e.g., a sequence number, in each packet. This document presents a new lightweight and flexible encapsulation protocol for this need. The solution has been developed by the authors based on their experiences in multiple standards bodies including the IETF and 3GPP. However, this document is not an Internet Standard and does not represent the consensus opinion of the IETF. This document will enable other developers to build interoperable implementations in order to experiment with the protocol.
Status of This Memo
This document is not an Internet Standards Track specification; it is published for examination, experimental implementation, and evaluation.
This document defines an Experimental Protocol for the Internet community. This is a contribution to the RFC Series, independently of any other RFC stream. The RFC Editor has chosen to publish this document at its discretion and makes no statement about its value for implementation or deployment. Documents approved for publication by the RFC Editor are not candidates for any level of Internet Standard; see Section 2 of RFC 7841.
Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at https://www.rfc-editor.org/info/rfc9188.
Copyright Notice
Copyright (c) 2022 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document.
Table of Contents
1. Introduction 1.1. Scope of Experiment 2. Conventions Used in This Document 3. Use Case 4. GMA Encapsulation Methods 4.1. Trailer-Based IP Encapsulation 4.2. Header-Based IP Encapsulation 4.3. Header-Based Non-IP Encapsulation 4.4. IP Protocol Identifier 5. Fragmentation 6. Concatenation 7. Security Considerations 8. IANA Considerations 9. References 9.1. Normative References 9.2. Informative References Authors' Addresses
1. Introduction
A device can be simultaneously connected to multiple networks, e.g., Wi-Fi, LTE, 5G, and DSL. It is desirable to seamlessly combine the connectivity over these networks below the transport layer (L4) to improve the quality of experience for applications that do not have built-in multi-path capabilities.
Figure 1 shows the Multi-Access Management Service (MAMS) user-plane protocol stack [MAMS], which has been used in today's multi-access solutions [ATSSS] [LWIPEP] [GRE1] [GRE2]. It consists of two layers: convergence and adaptation.
The convergence layer is responsible for multi-access operations, including multi-link (path) aggregation, splitting/reordering, lossless switching/retransmission, fragmentation, concatenation, etc. It operates on top of the adaptation layer in the protocol stack. From the perspective of a transmitter, a User Payload (e.g., IP packet) is processed by the convergence layer first and then by the adaptation layer before being transported over a delivery connection; from the receiver's perspective, an IP packet received over a delivery connection is processed by the adaptation layer first and then by the convergence layer.
+-----------------------------------------------------+
| User Payload, e.g., IP Protocol Data Unit (PDU) |
+-----------------------------------------------------+
+-----------------------------------------------------------+
| +-----------------------------------------------------+ |
| | Multi-Access (MX) Convergence Layer | |
| +-----------------------------------------------------+ |
| +-----------------------------------------------------+ |
| | MX Adaptation | MX Adaptation | MX Adaptation | |
| | Layer | Layer | Layer | |
| +-----------------+-----------------+-----------------+ |
| | Access #1 IP | Access #2 IP | Access #3 IP | |
| +-----------------------------------------------------+ |
| MAMS User-Plane Protocol Stack |
+-----------------------------------------------------------+
Figure 1: MAMS User-Plane Protocol Stack
GRE (Generic Routing Encapsulation) [LWIPEP] [GRE1] [GRE2] can be used as the encapsulation protocol at the convergence layer to encode additional control information, e.g., key and sequence number. However, there are two main drawbacks with this approach:
- It is difficult to introduce new control fields because the GRE
header formats are already defined, and
- IP-over-IP tunneling (required for GRE) leads to higher overhead
especially for small packets.
For example, the overhead of IP-over-IP/GRE tunneling with both key and sequence Number is 32 bytes (20-byte IP header + 12-byte GRE header), which is 80% of a 40-byte TCP ACK packet.
This document presents a lightweight Generic Multi-Access (GMA) encapsulation protocol for the convergence layer. It supports three encapsulation methods: trailer-based IP encapsulation, header-based IP encapsulation, and non-IP encapsulation. Particularly, the IP encapsulation methods avoid IP-over-IP tunneling overhead (20 bytes), which is 50% of a 40-byte TCP ACK packet. Moreover, it introduces new control fields to support fragmentation and concatenation, which are not available in GRE-based solutions [LWIPEP] [GRE1] [GRE2].
The GMA protocol only operates between endpoints that have been configured to use GMA. This configuration can be through any control messages and procedures, including, for example, Multi-Access Management Services [MAMS]. Moreover, UDP or IPsec tunneling can be used at the adaptation sublayer to protect GMA operation from intermediate nodes.
The solution described in this document was developed by the authors based on their experiences in multiple standards bodies including the IETF and 3GPP. However, this document is not an Internet Standard and does not represent the consensus opinion of the IETF. This document presents the protocol specification to enable experimentation as described in Section 1.1 and to facilitate other interoperable implementations.
1.1. Scope of Experiment
The protocol described in this document is an experiment. The objective of the experiment is to determine whether the protocol meets the requirements, can be safely used, and has support for deployment.
Section 4 describes three possible encapsulation methods that are enabled by this protocol. Part of this experiment is to assess whether all three mechanisms are necessary or whether, for example, all implementations are able to support the main "trailer-based" IP encapsulation method. Similarly, the experiment will investigate the relative merits of the IP and non-IP encapsulation methods.
It is expected that this protocol experiment can be conducted on the Internet since the GMA packets are identified by an IP protocol number and the protocol is intended for single-hop propagation; devices should not be forwarding packets, and if they do, they will not need to examine the payload, while destination systems that do not support this protocol should not receive such packets and will handle them as unknown payloads according to normal IP processing. Thus, experimentation is conducted between consenting end systems that have been mutually configured to participate in the experiment as described in Section 7.
Note that this experiment "reuses" the IP protocol identifier 114 as described in Section 4.4. Part of this experiment is to assess the safety of doing this. The experiment should consider the following safety mechanisms:
- GMA endpoints SHOULD detect non-GMA IP packets that also use 114
and log an error to report the situation (although such error
logging MUST be subject to rate limits).
- GMA endpoints SHOULD stop using 114 and switch to non-IP
encapsulation, i.e., UDP encapsulation (Figure 7), after detecting
any non-GMA usage of 114.
The experiment SHOULD use a packet tracing tool, e.g., WireShark or TCPDUMP, to monitor both ingress and egress traffic at GMA endpoints and ensure the above safety mechanisms are implemented.
Path quality measurements (one-way delay, loss, etc.) and congestion detection are performed by the receiver based on the GMA control fields, e.g., Sequence Number, Timestamp, etc. The receiver will then dynamically control how to split or steer traffic over multiple delivery connections accordingly. The GMA control protocol [GMAC] MAY be used for signaling between GMA endpoints. Another objective of the experiment is to evaluate the usage of various receiver-based algorithms [GCC] [MPIP] in multi-path traffic management and the impact on the End-to-End (E2E) performance (throughput, delay, etc.) of higher-layer (transport) protocols, e.g., TCP, QUIC, WebRTC, etc.
The authors will continually assess the progress of this experiment and encourage other implementers to contact them to report the status of their implementations and their experiences with the protocol.
2. Conventions Used in This Document
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.
3. Use Case
As shown in Figure 2, a client device (e.g., smartphone, laptop, etc.) may connect to the Internet via both Wi-Fi and LTE connections, one of which (e.g., LTE) may operate as the anchor connection, and the other (e.g., Wi-Fi) may operate as the delivery connection. The anchor connection provides the IP address and connectivity for end- to-end Internet access, and the delivery connection provides an additional path between the client and Multi-Access Gateway for multi-access optimizations.
Multi-Access Aggregation
+---+ +---+
| |A|--- LTE Connection -----|C| |
|U|-| |-|S| Internet
| |B|--- Wi-Fi Connection ---|D| |
+---+ +---+
client Multi-Access Gateway
Figure 2: GMA-Based Multi-Access Aggregation
A: The adaptation-layer endpoint of the LTE connection resides in
the client.
B: The adaptation-layer endpoint of the Wi-Fi connection resides in
the client.
C: The adaptation-layer endpoint of the LTE connection resides in
the Multi-Access Gateway, aka N-MADP (Network Multi-Access Data
Proxy) in [MAMS].
D: The adaptation-layer endpoint of the Wi-Fi connection resides in
the Multi-Access Gateway.
U: The convergence-layer endpoint resides in the client.
S: The convergence-layer endpoint resides in the Multi-Access
Gateway.
For example, per-packet aggregation allows a single IP flow to use the combined bandwidth of the two connections. In another example, packets lost due to a temporary link outage may be retransmitted. Moreover, packets may be duplicated over multiple connections to achieve high reliability and low latency, where duplicated packets are eliminated by the receiving side. Such multi-access optimization requires additional control information, e.g., a sequence number, in each packet, which can be supported by the GMA encapsulation protocol described in this document.
The GMA protocol described in this document is designed for multiple connections, but it may also be used when there is only one connection between two endpoints. For example, it may be used for loss detection and recovery. In another example, it may be used to concatenate multiple small packets and reduce per-packet overhead.
4. GMA Encapsulation Methods
The GMA encapsulation protocol supports the following three methods:
- Trailer-based IP Encapsulation (Section 4.1)
- Header-based IP Encapsulation (Section 4.2)
- Header-based non-IP Encapsulation (Section 4.3)
Non-IP encapsulation MUST be used if the original IP packet is IPv6.
Trailer-based IP encapsulation MUST be used if it is supported by GMA endpoints and the original IP packet is IPv4.
Header-based encapsulation MUST be used if the trailer-based method is not supported by either the client or Multi-Access Gateway. In this case, if the adaptation layer, e.g., UDP tunneling, supports non-IP packet format, non-IP encapsulation MUST be used; otherwise, header-based IP encapsulation MUST be used.
If non-IP encapsulation is configured, a GMA header MUST be present in every packet. In comparison, if IP encapsulation is configured, a GMA header or trailer may be added dynamically on a per-packet basis, and it indicates the presence of a GMA header (or trailer) to set the protocol type of the GMA PDU to "114" (see Section 4.4).
The GMA endpoints MAY configure the GMA encapsulation method through
control signaling or pre-configuration. For example, the "MX UP
Setup Configuration Request" message as specified in Multi-Access
Management Service [MAMS] includes "MX Convergence Method
Parameters", which provides the list of parameters to configure the
convergence layer, and can be extended to indicate the GMA
encapsulation method.
GMA endpoint MUST discard a received packet and MAY log an error to report the situation (although such error logging MUST be subject to rate limits) under any of the following conditions:
- The GMA version number in the GMA header (or trailer) is not
understood or supported by the GMA endpoint.
- A flag bit in the GMA header (or trailer) not understood or
supported by the GMA endpoint is set to "1".
4.1. Trailer-Based IP Encapsulation
|<---------------------GMA PDU ----------------------->|
+------------------------------------------------------+
| IP hdr | IP payload | GMA Trailer |
+------------------------------------------------------+
|<------- GMA SDU (user payload)-------->|
Figure 3: GMA PDU Format with Trailer-based IP Encapsulation
This method SHALL NOT be used if the original IP packet (GMA service data unit (GMA SDU)) is IPv6.
Figure 3 shows the trailer-based IP encapsulation GMA protocol data unit (GMA PDU) format. A (GMA) PDU may carry one or multiple IP packets, aka (GMA) SDUs, in the payload, or a fragment of the SDU.
The protocol type field in the IP header of the GMA PDU MUST be changed to 114 (Any 0-Hop Protocol) (see Section 4.4) to indicate the presence of the GMA trailer.
The following three IP header fields MUST be changed:
IP Length: Add the length of "GMA Trailer" to the length of the
original IP packet.
Time To Live (TTL): Set to "1".
IP checksum: Recalculate after changing "protocol type", "TTL", and
"IP Length".
The GMA (Generic Multi-Access) trailer MUST consist of two mandatory fields (the last 3 bytes): Next Header and Flags.
This is defined as follows:
Next Header (1 byte): This is the IP protocol type of the (first)
SDU in a PDU; it stores the value before it was overwritten to
114.
Flags (2 bytes): Bit 0 is the most significant bit (MSB), and bit 15
is the least significant bit (LSB).
Checksum Present (bit 0): If the Checksum Present bit is set to
1, then the Checksum field is present.
Concatenation Present (bit 1): If the Concatenation Present bit
is set to 1, then the PDU carries multiple SDUs, and the First
SDU Length field is present.
Connection ID Present (bit 2): If the Connection ID Present bit
is set to 1, then the Connection ID field is present.
Flow ID Present (bit 3): If the Flow ID Present bit is set to 1,
then the Flow ID field is present.
Fragmentation Present (bit 4): If the Fragmentation Present bit
is set to 1, then the PDU carry a fragment of the SDU and the
Fragmentation Control field is present.
Delivery SN Present (bit 5): If the Delivery SN (Sequence Number)
Present bit is set to 1, then the Delivery SN field is present
and contains the valid information.
Flow SN Present (bit 6): If the Flow SN Present bit is set to 1,
then the Sequence Number field is present.
Timestamp Present (bit 7): If the Timestamp Present bit is set to
1, then the Timestamp field is present.
TTL Present (bit 8): If the TTL Present bit is set to 1, then the
TTL field is present.
Reserved (bit 9-12): This is set to "0" and ignored on receipt.
Version (bit 13~15): This is the GMA version number; it is set to
0 for the GMA encapsulation protocol specified in this
document.
The Flags field is at the end of the PDU, and the Next Header field is the second last. The receiver SHOULD first decode the Flags field to determine the length of the GMA trailer and then decode each optional field accordingly. The Generic Multi-Access (GMA) trailer MAY consist of the following optional fields:
Checksum (1 byte): This contains the (one's complement) checksum sum
of all 8 bits in the trailer. For purposes of computing the
checksum, the value of the Checksum field is zero. This field is
present only if the Checksum Present bit is set to 1.
First SDU Length (2 bytes): This is the length of the first IP
packet in the PDU, only included if a PDU contains multiple IP
packets. This field is present only if the Concatenation Present
bit is set to 1.
Connection ID (1 byte): This contains an unsigned integer to
identify the anchor and delivery connection of the GMA PDU. This
field is present only if the Connection ID Present bit is set to
1.
Anchor Connection ID (MSB 4 bits): This contains an unsigned
integer to identify the anchor connection.
Delivery Connection ID (LSB 4 bits): This contains an unsigned
integer to identify the delivery connection.
Flow ID (1 byte): This contains an unsigned integer to identify the
IP flow that a PDU belongs to, for example Data Radio Bearer (DRB)
ID [LWIPEP] for a cellular (e.g., LTE) connection. This field is
present only if the Flow ID Present bit is set to 1.
Fragmentation Control (FC) (1 byte): This provides necessary
information for reassembly, only needed if a PDU carries
fragments. This field is present only if the Fragmentation
Present bit is set to 1. Please refer to Section 5 for its
detailed format and usage.
Delivery SN (1 byte): This contains an auto-incremented integer to
indicate the GMA PDU transmission order on a delivery connection.
Delivery SN is needed to measure packet loss of each delivery
connection and therefore generated per delivery connection per
flow. This field is present only if the Delivery SN Present bit
is set to 1.
Flow SN (3 bytes): This contains an auto-incremented integer to
indicate the GMA SDU (IP packet) order of a flow. Flow SN is
needed for retransmission, reordering, and fragmentation. It
SHALL be generated per flow. This field is present only if the
Flow SN Present bit is set to 1.
Timestamp (4 bytes): This contains the current value of the
timestamp clock of the transmitter in the unit of 1 millisecond.
This field is present only if the Timestamp Present bit is set to
1.
TTL (1 byte): This contains the TTL value of the original IP header
if the GMA SDU is IPv4, or the Hop-Limit value of the IP header if
the GMA SDU is IPv6. This field is present only if the TTL
Present bit is set to 1.
Figure 4 shows the GMA trailer format with all the fields present, and the order of the GMA control fields SHALL follow the bit order in the Flags field. Note that the bits in the Flags field are ordered with the first bit transmitted being bit 0 (MSB). All fields are transmitted in regular network byte order and appear in reverse order to their corresponding flag bits. If a flag bit is clear, the corresponding optional field is absent.
For example, bit 0 (the MSB) of the Flags field is the Checksum Present bit, and the Checksum field is the last in the trailer with the exception of the two mandatory fields. Bit 1 is the Concatenation Present bit, and the FSL field is the second last.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| TTL | Timestamp
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Flow SN |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Delivery SN | FC | Flow ID | Connection ID |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| First SDU Length (FSL) | Checksum | Next Header |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Flags |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Figure 4: GMA Trailer Format with All Optional Fields Present
4.2. Header-Based IP Encapsulation
This method SHALL NOT be used if the original IP packet (GMA SDU) is IPv6.
Figure 5 shows the header-based IP encapsulation format. Here, the GMA header is inserted right after the IP header of the GMA SDU, and the IP header fields of the GMA PDU MUST be changed the same way as in trailer-based IP encapsulation.
+-----------------------------------------------+
|IP hdr | GMA Header | IP payload |
+-----------------------------------------------+
Figure 5: GMA PDU Format with Header-Based IP Encapsulation
Figure 6 shows the GMA header format. In comparison to the GMA trailer, the only difference is that the Flags field is now in the front so that the receiver can first decode the Flags field to determine the GMA header length.
The "TTL" field MUST be included and the "TTL" bit in the GMA header (or Trailer) MUST be set to 1 if (trailer- or header-based) IP encapsulation is used.
+------------------------------------------------------+
| Flags | other fields (TTL, Timestamp, Flow SN, etc.) |
+------------------------------------------------------+
Figure 6: GMA Header Format
4.3. Header-Based Non-IP Encapsulation
Figure 7 shows the header-based non-IP encapsulation format. Here, "UDP Tunneling" is configured at the MX adaptation layer. The ports for "UDP Tunneling" at the client are chosen from the Dynamic Port range, and the ports for "UDP Tunneling" at the Multi-Access Gateway are configured and provided to the client through additional control messages, e.g., [MAMS].
"TTL", "FSL", and "Next Header" are no longer needed and MUST not be included. Moreover, the IP header fields of the GMA SDU remain unchanged.
+-------------------------------------------------------------+
| IP hdr | UDP hdr | GMA Header | IP hdr | IP payload |
+-------------------------------------------------------------+
|<------- GMA SDU------------>|
|<------------------- GMA PDU------------>|
Figure 7: GMA PDU Format with Non-IP Encapsulation
4.4. IP Protocol Identifier
As described in Section 4.1, IP-encapsulated GMA PDUs are indicated using the IP protocol type 114. This is designated and recorded by IANA [IANA] to indicate "any 0-Hop Protocol". No reference is given in the IANA registry for the definition of this protocol type, and IANA has no record of why the assignment was made or how it is used, although it was probably assigned before 1999 [IANA1999].
There is some risk associated with "reusing" protocol type 114 because there may be implementations of other protocols also using this protocol type. However, because the protocol described in this document is used only between adjacent devices specifically configured for this purpose, the use of protocol type 114 should be safe.
As described in Section 1.1, one of the purposes of the experiment described in this document is to verify the safety of using this protocol type. Deployments should be aware of the risk of a clash with other uses of this protocol type.
5. Fragmentation
If the MTU size of the anchor connection (for GMA SDU) is configured such that the corresponding GMA PDU length adding the GMA header (or trailer) and other overhead (UDP tunneling) MAY exceed the MTU of a delivery connection, GMA endpoints MUST be configured to support fragmentation through additional control messages [MAMS].
The fragmentation procedure at the convergence sublayer is similar to IP fragmentation [RFC0791] in principle, but with the following two differences for less overhead:
- The fragment offset field is expressed in number of fragments.
- The maximum number of fragments per SDU is 2^7 (=128).
The Fragmentation Control (FC) field in the GMA trailer (or header) contains the following bits:
Bit 7: a More Fragment (MF) flag to indicate if the fragment is the
last one (0) or not (1)
Bit 0-6: Fragment Offset (in units of fragments) to specify the
offset of a particular fragment relative to the beginning of the
SDU
A PDU carries a whole SDU without fragmentation if the FC field is set to all "0"s or the FC field is not present in the trailer. Otherwise, the PDU contains a fragment of the SDU.
The Flow SN field in the trailer is used to distinguish the fragments of one SDU from those of another. The Fragment Offset (FO) field tells the receiver the position of a fragment in the original SDU. The More Fragment (MF) flag indicates the last fragment.
To fragment a long SDU, the transmitter creates n PDUs and copies the content of the IP header fields from the long PDU into the IP header of all the PDUs. The length field in the IP header of the PDU SHOULD be changed to the length of the PDU, and the protocol type SHOULD be changed to 114.
The data of the long SDU is divided into n portions based on the MTU size of the delivery connection. The first portion of the data is placed in the first PDU. The MF flag is set to "1", and the FO field is set to "0". The i-th portion of the data is placed in the i-th PDU. The MF flag is set to "0" if it is the last fragment and set to "1" otherwise. The FO field is set to i-1.
To assemble the fragments of an SDU, the receiver combines PDUs that all have the same Flow SN. The combination is done by placing the data portion of each fragment in the relative order indicated by the Fragment Offset in that fragment's GMA trailer (or header). The first fragment will have the Fragment Offset set to "0", and the last fragment will have the More Fragment flag set to "0".
GMA fragmentation operates above the IP layer of individual access connection (Wi-Fi, LTE) and between the two endpoints of convergence layer. The convergence layer endpoints (client, Multi-access Gateway) SHOULD obtain the MTU of individual connection through either manual configuration or implementing Path MTU Discovery (PMTUD) as suggested in [RFC8900].
6. Concatenation
The convergence sublayer MAY support concatenation if a delivery connection has a larger maximum transmission unit (MTU) than the original IP packet (SDU). Only the SDUs with the same client IP address and the same Flow ID MAY be concatenated.
If the (trailer- or header-based) IP encapsulation method is used, the First SDU Length (FSL) field SHOULD be included in the GMA trailer (or header) to indicate the length of the first SDU. Otherwise, the FSL field SHOULD not be included.
+-----------------------------------------------------------+ |IP hdr| IP payload |IP hdr| IP payload | GMA Trailer | +-----------------------------------------------------------+
Figure 8: Example of GMA PDU Format with Concatenation and
Trailer-Based IP Encapsulation
To concatenate two or more SDUs, the transmitter creates one PDU and copies the content of the IP header field from the first SDU into the IP header of the PDU. The data of the first SDU is placed in the first portion of the data of the PDU. The whole second SDU is then placed in the second portion of the data of the PDU (Figure 8). The procedure continues until the PDU size reaches the MTU of the delivery connection. If the FSL field is present, the IP Length field of the PDU SHOULD be updated to include all concatenated SDUs and the trailer (or header), and the IP checksum field SHOULD be recalculated if the packet is IPv4.
To disaggregate a PDU, if the (header- or trailer-based) IP encapsulation method is used, the receiver first obtains the length of the first SDU from the FSL field and decodes the first SDU. The receiver then obtains the length of the second SDU based on the length field in the second SDU IP header and decodes the second SDU. The procedure continues until no byte is left in the PDU. If the non-IP encapsulation method (Figure 7) is used, the IP header of the first SDU will not change during the encapsulation process, and the receiver SHOULD obtain the length of the first SDU directly from its IP header (Figure 9).
|<-------1st GMA SDU------------
+---------------------------------------------------------------+
| IP hdr | UDP hdr | GMA Header | IP hdr | IP payload |
+---------------------------------------------------------------+
| IP hdr | IP payload |
+-------------------------------------------+
-------->|<-------2nd GMA SDU--------------->
Figure 9: Example of GMA PDU Format with Concatenation and
Header-Based Non-IP (UDP) Encapsulation
If a PDU contains multiple SDUs, the Flow SN field is for the last SDU, and the Flow SN of other SDUs carried by the same PDU can be obtained according to its order in the PDU. For example, if the SN field is 6 and a PDU contains 3 SDUs (IP packets), the SN is 4, 5, and 6 for the first, second, and last SDU, respectively.
GMA concatenation can be used for packing small packets of a single application, e.g., TCP ACKs, or from multiple applications. Notice that a single GMA flow may carry multiple application flows (TCP, UDP, etc.).
GMA endpoints MUST NOT perform concatenation and fragmentation in a single PDU. If a GMA PDU carries a fragmented SDU, it MUST NOT carry any other (fragmented or whole) SDU.
7. Security Considerations
Security in a network using GMA should be relatively similar to security in a normal IP network. GMA is unaware of IP- or higher- layer end-to-end security as it carries the IP packets as opaque payload. Deployers are encouraged to not consider that GMA adds any form of security and to continue to use IP- or higher-layer security as well as link-layer security.
The GMA protocol at the convergence sublayer is a 0-hop protocol and relies on the security of the underlying network transport paths. When this cannot be assumed, appropriate security protocols (IPsec, DTLS, etc.) SHOULD be configured at the adaptation sublayer. On the other hand, packet filtering requires either that a firewall looks inside the GMA packet or that the filtering is done on the GMA endpoints. In those environments in which this is considered to be a security issue, it may be desirable to terminate the GMA operation at the firewall.
Local-only packet leak prevention (HL=0, TTL=1) SHOULD be on preventing the leak of the local-only GMA PDUs outside the "local domain" to the Internet or to another domain that could use the same IP protocol type, i.e., 114.
8. IANA Considerations
This document has no IANA actions.
9. References
9.1. Normative References
[GRE1] Dommety, G., "Key and Sequence Number Extensions to GRE",
RFC 2890, DOI 10.17487/RFC2890, September 2000,
<https://www.rfc-editor.org/info/rfc2890>.
[GRE2] Leymann, N., Heidemann, C., Zhang, M., Sarikaya, B., and
M. Cullen, "Huawei's GRE Tunnel Bonding Protocol",
RFC 8157, DOI 10.17487/RFC8157, May 2017,
<https://www.rfc-editor.org/info/rfc8157>.
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119,
DOI 10.17487/RFC2119, March 1997,
<https://www.rfc-editor.org/info/rfc2119>.
[RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
May 2017, <https://www.rfc-editor.org/info/rfc8174>.
9.2. Informative References
[ATSSS] 3GPP, "Study on access traffic steering, switch and
splitting support in the 5G System (5GS) architecture",
Release 16, 3GPP TR 23.793, December 2018,
<https://portal.3gpp.org/desktopmodules/Specifications/
SpecificationDetails.aspx?specificationId=3254>.
[GCC] Holmer, S., Lundin, H., Carlucci, G., De Cicco, L., and S.
Mascolo, "A Google Congestion Control Algorithm for Real-
Time Communication", Work in Progress, Internet-Draft,
draft-ietf-rmcat-gcc-02, 8 July 2016,
<https://datatracker.ietf.org/doc/html/draft-ietf-rmcat-
gcc-02>.
[GMAC] Zhu, J. and M. Zhang, "UDP-based Generic Multi-Access
(GMA) Control Protocol", Work in Progress, Internet-Draft,
draft-zhu-intarea-gma-control-00, 13 October 2021,
<https://datatracker.ietf.org/doc/html/draft-zhu-intarea-
gma-control-00>.
[IANA] IANA, "Protocol Numbers",
<https://www.iana.org/assignments/protocol-numbers>.
[IANA1999] IANA, Wayback Machine archive of "Protocol Numbers",
February 1999,
<https://web.archive.org/web/19990203044112/
http://www.isi.edu:80/in-notes/iana/assignments/protocol-
numbers>.
[LWIPEP] 3GPP, "Evolved Universal Terrestrial Radio Access
(E-UTRA); LTE-WLAN Radio Level Integration Using Ipsec
Tunnel (LWIP) encapsulation; Protocol specification",
Release 13, 3GPP TS 36.361, July 2020,
<https://portal.3gpp.org/desktopmodules/Specifications/
SpecificationDetails.aspx?specificationId=3037>.
[MAMS] Kanugovi, S., Baboescu, F., Zhu, J., and S. Seo, "Multiple
Access Management Services Multi-Access Management
Services (MAMS)", RFC 8743, DOI 10.17487/RFC8743, March
2020, <https://www.rfc-editor.org/info/rfc8743>.
[MPIP] Sun, L., Tian, G., Zhu, G., Liu, Y., Shi, H., and D. Dai,
"Multipath IP Routing on End Devices: Motivation, Design,
and Performance", 2017,
<https://eeweb.engineering.nyu.edu/faculty/yongliu/docs/
MPIP_Tech.pdf>.
[RFC0791] Postel, J., "Internet Protocol", STD 5, RFC 791,
DOI 10.17487/RFC0791, September 1981,
<https://www.rfc-editor.org/info/rfc791>.
[RFC8900] Bonica, R., Baker, F., Huston, G., Hinden, R., Troan, O.,
and F. Gont, "IP Fragmentation Considered Fragile",
BCP 230, RFC 8900, DOI 10.17487/RFC8900, September 2020,
<https://www.rfc-editor.org/info/rfc8900>.
Authors' Addresses
Jing Zhu Intel
Email: jing.z.zhu@intel.com
Satish Kanugovi Nokia
Email: satish.k@nokia.com
/home/gen.uk/domains/wiki.gen.uk/public_html/data/pages/rfc/rfc9188.txt · Last modified: 2022/02/11 07:31 by 127.0.0.1