Network Working Group A. Morton Internet-Draft AT&T Labs Intended status: Informational June 30, 2015 Expires: January 1, 2016 Active and Passive Metrics and Methods (and everything in-between, or Hybrid) draft-ietf-ippm-active-passive-00 Abstract This memo provides clear definitions for Active and Passive performance assessment. The construction of Metrics and Methods can be described as Active or Passive. Some methods may use a subset of both active and passive attributes, and we refer to these as Hybrid Methods. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on January 1, 2016. Copyright Notice Copyright (c) 2015 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of Morton Expires January 1, 2016 [Page 1] Internet-Draft Active and Passive June 2015 the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 1.1. Requirements Language . . . . . . . . . . . . . . . . . . 3 2. Purpose and Scope . . . . . . . . . . . . . . . . . . . . . . 3 3. Terms and Definitions . . . . . . . . . . . . . . . . . . . . 3 3.1. Performance Metric . . . . . . . . . . . . . . . . . . . 3 3.2. Method of Measurement . . . . . . . . . . . . . . . . . . 4 3.3. Observation Point . . . . . . . . . . . . . . . . . . . . 4 3.4. Active Methods . . . . . . . . . . . . . . . . . . . . . 4 3.5. Active Metric . . . . . . . . . . . . . . . . . . . . . . 4 3.6. Passive Methods . . . . . . . . . . . . . . . . . . . . . 5 3.7. Passive Metric . . . . . . . . . . . . . . . . . . . . . 5 3.8. Hybrid Methods and Metrics . . . . . . . . . . . . . . . 6 4. Discussion . . . . . . . . . . . . . . . . . . . . . . . . . 6 4.1. Graphical Representation . . . . . . . . . . . . . . . . 6 4.2. Discussion of PDM . . . . . . . . . . . . . . . . . . . . 8 4.3. Discussion of "Coloring" Method . . . . . . . . . . . . . 9 5. Security considerations . . . . . . . . . . . . . . . . . . . 9 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 10 7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 10 8. References . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1. Normative References . . . . . . . . . . . . . . . . . . 10 8.2. Informative References . . . . . . . . . . . . . . . . . 10 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 11 1. Introduction The adjectives "active" and "passive" have been used for many years to distinguish two different classes of Internet performance assessment. The first Passive and Active Measurement (PAM) Conference was held in 2000, but the earliest proceedings available on-line are from the second PAM conference in 2001 [https://www.ripe.net/ripe/meetings/pam-2001]. The notions of "active" and "passive" are well-established. In general: An Active metric or method depends on a dedicated measurement packet stream and observations of the stream. A Passive metric or method depends *solely* on observation of one or more existing packet streams. The streams only serve measurement when they are observed for that purpose, and are present whether measurements take place or not. Morton Expires January 1, 2016 [Page 2] Internet-Draft Active and Passive June 2015 As new techniques for assessment emerge it is helpful to have clear definitions of these notions. This memo provides more detailed definitions, defines a new category for combinations of traditional active and passive techniques, and discusses means to evaluate new techniques as they emerge. This memo provides definitions for Active and Passive Metrics and Methods based on long usage in the Internet measurement community, and especially the Internet Engineering Task Force. 1.1. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. 2. Purpose and Scope The scope of this memo is to define and describe Active and Passive versions of metrics and methods which are consistent with the long- time usage of these adjectives in the Internet measurement community and especially the Internet Engineering Task Force. Since the science of measurement is expanding, we provide a category for combinations of the traditional extremes, treating Active and Passive as a continuum and designating combinations of their attributes as Hybrid methods. Further, this memo's purpose includes describing multiple dimensions in which to evaluate methods as they emerge. 3. Terms and Definitions This section defines the key terms of the memo. Some definitions use the notion of "stream of interest" which is synonymous with "population of interest" defined in clause 6.1.1 of ITU-T Recommendation Y.1540. The definitions are consistent with [I-D.zheng-ippm-framework-passive]. 3.1. Performance Metric The standard definition of a quantity, produced in an assessment of performance and/or reliability of the network, which has an intended utility and is carefully specified to convey the exact meaning of a measured value. (This definition is consistent with that of Performance Metric in RFC 2330 and RFC 6390). Morton Expires January 1, 2016 [Page 3] Internet-Draft Active and Passive June 2015 3.2. Method of Measurement The procedure or set of operations having the object of determining a Measured Value or Measurement Result. 3.3. Observation Point See section 2 of [RFC7011] for this definition (a location in the network where packets can be observed), and related definitions. The comparable term defined in IETF literature on Active measurement is Measurement Point, see section 4.1 of [RFC5835]. Two terms have come into use describing similar actions at the identified point in the network path. 3.4. Active Methods Active measurement methods have the following attributes: 1. Commonly, the packet stream of interest is generated as the basis of measurement. Another packet stream may be generated to increase traffic load, but the loading stream itself may not be measured. 2. The packets in the stream of interest have fields (or are augmented or modified to include fields) which are dedicated to measurement. Since measurement usually requires determining the corresponding packets at multiple measurement points, a sequence number is the most common information dedicated to measurement. 3. The Source and Destination of the packet stream of interest are usually known a' priori. 4. The characteristics of the packet stream of interest are known at the Source at least, and may be communicated to Destination as part of the method. When adding traffic to the network for measurement, Active Methods influence the quantities measured to some degree, and those performing tests should take steps to quantify the effect(s) and/or minimize such effects. 3.5. Active Metric An Active Metric incorporates one or more of the aspects of Active Methods in the metric definition. For example, IETF metrics for IP performance (developed according to the [RFC2330] framework) include the Source packet stream Morton Expires January 1, 2016 [Page 4] Internet-Draft Active and Passive June 2015 characteristics as metric input parameters, and also specify the packet characteristics (Type-P) and Source and Destination IP addresses (with their implications on both stream treatment and interfaces associated with measurement points). 3.6. Passive Methods Passive measurement methods are o based solely on observations of undisturbed and unmodified packet stream of interest o dependent on the existence of one or more packet streams to supply the stream of interest o dependent on the presence of the packet stream of interest at one or more designated observation points. Some passive methods simply observe and collect information on all packets that pass Observation Point(s), while others filter the packets as a first step and only collect information on packets that match the filter criteria, and thereby narrow the stream of interest. It is common that passive methods are conducted at one or more Observation Points. Passive methods to assess Performance Metrics often require multiple observation points, e.g., to assess latency of packet transfer across a network path between two Observation Points. In this case, the observed packets must include enough information to determine the corresponding packets at different Observation Points. Communication of the observations (in some form) to a collector is an essential aspect of Passive Methods. In some configurations, the traffic load associated with results export to a collector may influence the network performance. However, the collection of results is not unique to Passive Methods, and the load from management and operations of measurement systems must always be considered for potential effects on the measured values. 3.7. Passive Metric Passive Metrics apply to observations of packet traffic (traffic flows in [RFC7011]). Passive performance metrics are assessed independent of the packets or traffic flows, and solely through observation. Some refer to such assessments as "out-of-band". Morton Expires January 1, 2016 [Page 5] Internet-Draft Active and Passive June 2015 One example of passive performance metrics for IP packet transfer can be found in ITU-T Recommendation Y.1540, where the metrics are defined on the basis of reference events as packet pass reference points, so the metrics are agnostic to the distinction between active and passive when the necessary packet correspondence can be derived from the observed stream of interest when required. 3.8. Hybrid Methods and Metrics Methods of Measurement which use a combination of Active Methods and Passive Methods, to assess Active Metrics, Passive Metrics, or new metrics derived from the a' priori knowledge and observations of the stream of interest. ITU-T Recommendation Y.1540 defines metrics are applicable to the hybrid category, since packet correspondence at different observation/reference points could be derived from "fields which are dedicated to measurement", but otherwise the methods are passive. With respect to the stream of interest, Hybrid methods fit in the continuum as follows, in terms of what happens at the Source(or Observation Point nearby): o If you generate the stream of interest => Active o If you augment of modify a stream of interest => Hybrid o If you solely observe a stream of interest => Passive 4. Discussion This section illustrates the definitions and presents some examples. 4.1. Graphical Representation If we compare the Active and Passive Methods, there are at least two dimensions on which methods can be evaluated. This evaluation space may be useful when a method is a combination of the two alternative methods. The two dimensions (initially chosen) are: 1. The degree to which the stream of interest effects overall network conditions experienced by that stream and other streams. This is a key dimension for Active measurement error analysis. (Comment: There is also the notion of time averages - a measurement stream may have significant effect while it is present, but the stream is only generated 0.1% of the time. On the other hand, observations alone have no effect on network Morton Expires January 1, 2016 [Page 6] Internet-Draft Active and Passive June 2015 performance. To keep things simple, we consider the stream effect only when it is present.) 2. The degree to which stream characteristics are know a' priori. There are methodological advantages of knowing the source stream characteristics, and having complete control of the stream characteristics. For example, knowing the number of packets in a stream allows more efficient operation of the measurement receiver, and so is an asset for active measurement methods. Passive methods (with no sample filter) have few clues available to anticipate what the protocol first packet observed will use or how many packets will comprise the flow, but once the standard protocol of a flow is known the possibilities narrow (for some compliant flows). Therefore this is a key dimension for Passive measurement error analysis. There are a few examples we can plot on a two-dimensional space. We can anchor the dimensions with reference point descriptions. Effect of the measured stream on network conditions ^ Max |* Active using max capacity stream | | | | |* Active using stream with load of typical user | | | |* Active using extremely sparse, randomized stream | * PDM Passive | Min * +----------------------------------------------------------------| | | Stream No Stream Characteristics Characteristics completely Known known We recognize that method categorization could be based on additional dimensions, but this would require a different graphical approach. For example, "effect of stream of interest on network conditions" could easily be further qualified into: Morton Expires January 1, 2016 [Page 7] Internet-Draft Active and Passive June 2015 1. effect on the performance of the stream of interest itself: for example, choosing a packet marking or DSCP resulting in domain treatment as a real-time stream (as opposed to default/best- effort marking. 2. effect on unmeasured streams that share the path and/or bottlenecks: for example, an extremely sparse measured stream of minimal size packets typically has little effect on other flows (and itself), while a stream designed to characterize path capacity may effect all other flows passing through the capacity bottleneck (including itself). 3. effect on network conditions resulting in network adaptation: for example, a network monitoring load and congestion conditions might change routing, placing some flows to alternate paths to mitigate the congestion. At present, we have combined 1 and 2 on one axis, as examination of examples indicates strong correlation of affects on this pair, and network adaptation is not addressed. As suggestions emerge we will re-examine the possibilities. It is apparent that different methods of IP network measurement can produce different results, even when measuring the same path at the same time. The two dimensions of the graph help to understand how the results might change with the method chosen. For example, an Active Method to assess throughput adds some amount of traffic to the network which might result in lower throughput for all streams. However, a Passive Method to assess throughput can also err on the low side due to unknown limitations of the hosts providing traffic, competition for host resources, limitations of the network interface, or private sub-networks that are not an intentional part of the path, etc. And Hybrid Methods could easily suffer from both forms of error. Another example of potential errors stems from the pitfalls of using an Active stream with known bias, such as a periodic stream defined in [RFC3432]. The strength of modelling periodic streams (like VoIP) is a potential weakness when extending the measured results to other application whose streams are non-periodic. The solutions are to model the application streams more exactly with an Active Method, or accept the risks and potential errors with the Passive Method discussed above. 4.2. Discussion of PDM In [I-D.ietf-ippm-6man-pdm-option], an IPv6 Option Header for Performance and Diagnostic Measurements (PDM) is described which (when added to the stream of interest at strategic interfaces) supports performance measurements. This method processes a user Morton Expires January 1, 2016 [Page 8] Internet-Draft Active and Passive June 2015 traffic stream and adds "fields which are dedicated to measurement". Thus: o The method may have a small effect on the measured stream and other streams in the network. o The measured stream has unknown characteristics until it is processed to add the PDM Option header. We conclude that this is a Hybrid method, having at least one characteristic of both active and passive methods. 4.3. Discussion of "Coloring" Method Draft [I-D.tempia-opsawg-p3m], proposed to color packets by re- writing a field of the stream at strategic interfaces to support performance measurements. This method processes a user traffic stream and inserts "fields which are dedicated to measurement". Thus: o The method may have a small effect on the measured stream and other streams in the network (smaller than PDM above). o The measured stream has unknown characteristics until it is processed to add the coloring in the header, and the stream could be measured and time-stamped during that process. We note that [I-D.chen-ippm-coloring-based-ipfpm-framework] proposes a method similar to [I-D.tempia-opsawg-p3m], and ippm-list discussion indicates [I-D.chen-ippm-coloring-based-ipfpm-framework] may be covered by the same IPR as [I-D.tempia-opsawg-p3m]. We conclude that this is a Hybrid method, having at least one characteristic of both active and passive methods. 5. Security considerations When considering privacy of those involved in measurement or those whose traffic is measured, there is sensitive information communicated and observed at observation and measurement points described above. We refer the reader to the privacy considerations described in the Large Scale Measurement of Broadband Performance (LMAP) Framework [I-D.ietf-lmap-framework], which covers active and passive measurement techniques and supporting material on measurement context. Morton Expires January 1, 2016 [Page 9] Internet-Draft Active and Passive June 2015 6. IANA Considerations This memo makes no requests for IANA consideration. 7. Acknowledgements Thanks to Mike Ackermann for asking the right question, and for several suggestions on terminology. Brian Trammell provided key terms and references for the passive category. Tiziano Ionta reviewed the draft and suggested the classification for the "coloring" method of measurement. Nalini Elkins identified several areas for clarification following her review. Bill Jouris reviewed 01 editorially and suggested several improvements. 8. References 8.1. Normative References [RFC2330] Paxson, V., Almes, G., Mahdavi, J., and M. Mathis, "Framework for IP Performance Metrics", RFC 2330, May 1998. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC3432] Raisanen, V., Grotefeld, G., and A. Morton, "Network performance measurement with periodic streams", RFC 3432, November 2002. [RFC5835] Morton, A. and S. Van den Berghe, "Framework for Metric Composition", RFC 5835, April 2010. [RFC7011] Claise, B., Trammell, B., and P. Aitken, "Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information", STD 77, RFC 7011, September 2013. 8.2. Informative References [I-D.ietf-lmap-framework] Eardley, P., Morton, A., Bagnulo, M., Burbridge, T., Aitken, P., and A. Akhter, "A framework for Large-Scale Measurement of Broadband Performance (LMAP)", draft-ietf- lmap-framework-14 (work in progress), April 2015. Morton Expires January 1, 2016 [Page 10] Internet-Draft Active and Passive June 2015 [I-D.ietf-ippm-6man-pdm-option] Elkins, N. and M. Ackermann, "IPv6 Performance and Diagnostic Metrics (PDM) Destination Option", draft-ietf- ippm-6man-pdm-option-00 (work in progress), June 2015. [I-D.tempia-opsawg-p3m] Capello, A., Cociglio, M., Castaldelli, L., and A. Bonda, "A packet based method for passive performance monitoring", draft-tempia-opsawg-p3m-04 (work in progress), February 2014. [I-D.chen-ippm-coloring-based-ipfpm-framework] Chen, M., Zheng, L., Mirsky, G., and G. Fioccola, "IP Flow Performance Measurement Framework", draft-chen-ippm- coloring-based-ipfpm-framework-03 (work in progress), February 2015. [I-D.zheng-ippm-framework-passive] Zheng, L., Elkins, N., Lingli, D., Ackermann, M., and G. Mirsky, "Framework for IP Passive Performance Measurements", draft-zheng-ippm-framework-passive-03 (work in progress), February 2015. Author's Address Al Morton AT&T Labs 200 Laurel Avenue South Middletown, NJ USA Email: acmorton@att.com Morton Expires January 1, 2016 [Page 11]