L, Q, R, and T -- Which Spin Bit Cousin Is Here to Stay?

TL;DR

This paper evaluates four measurement techniques (L, Q, R, T bits) for passive network monitoring in encrypted protocols, finding that certain combinations offer better accuracy for loss detection despite some limitations.

Contribution

It implements and compares four proposed measurement techniques for passive loss estimation in encrypted protocols, highlighting effective combinations for network monitoring.

Findings

All techniques provide accurate loss estimates.

Longer intervals hinder detection of small or short-connection losses.

Q & R or Q & L combinations are most effective for loss measurement.

Abstract

Network operators utilize traffic monitoring to locate and fix faults or performance bottlenecks. This often relies on intrinsic protocol semantics, e.g., sequence numbers, that many protocols share implicitly through their packet headers. The arrival of (almost) fully encrypted transport protocols, such as QUIC, significantly complicates this monitoring as header data is no longer visible to passive observers. Recognizing this challenge, QUIC offers explicit measurement semantics by exposing the spin bit to measure a flow's RTT. Ongoing efforts in the IETF IPPM working group argue to expose further information and enable the passive quantification of packet loss. This work implements and evaluates four currently proposed measurement techniques (L-, Q-, R-, and T-bit). We find that all techniques generally provide accurate loss estimations, but that longer algorithmic intervals for Q and R, yet foremost for T, complicate detecting very small loss rates or loss on short connections. Deployment combinations of Q & R as well as Q & L, thus, have the best potential for accurately grasping the loss in networks.