Danny Goderis, Alcatel
                                                   Yves T'joens, Alcatel
                                 Christian Jacquenet, France Telecom R&D
                                                   George Memenios, NTUA
                                                     George Pavlou, UniS
                                        Richard Egan, Racal Research Ltd
                                                      David Griffin, UCL
                                           Panos Georgatsos, AlgoSystems
                                 Leonidas Georgiadis, Univ. Thessaloniki
                                                    Pim Van Heuven, IMEC

INTERNET DRAFT <draft-tequila-sls-00.txt>
                                                          November, 2000
                                                      Expires March 2001


Service Level Specification Semantics and Parameters.

Status of this Memo

   This document is an Internet-Draft and is in full conformance with
   all provisions of Section 10 of RFC2026.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.


Abstract

   This document  identifies the basic information to be included in
   Service Level Specifications (SLS, [RFC 2475], [DS-TERMS]) when
   considering the deployment of value-added IP service offerings over
   the Internet. Such IP service offerings can be provided together with
   a given quality of service (QoS), which is expected to be defined in
   such SLS, from a technical perspective. Since these IP services are



TEQUILA consortium         Expires March 2001                   [Page 1]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   likely to be provided over the whole Internet, their corresponding
   QoS will be based upon a set of technical parameters that both
   customers and services providers will have to agree upon. From this
   perspective, this draft aims at listing (and promoting a standard
   formalism for) a set of basic parameters which will actually compose
   the elementary contents of an SLS.

   Such a specification effort tries to address the following concerns:

   - Provide a standard set of information to be negotiated between a
   customer and a service provider or amongst services providers within
   the context of processing an SLS;

   - Provide the corresponding semantics of such information, so that it
   might be appropriately modeled and processed by the above-mentioned
   parties (in an automated fashion).

Table of Contents

   1.   Introduction
   1.1  Motivation
   1.2  Objective
   2.   Basic assumptions and terminology
   3.   SLS content & template
   3.1. Scope
   3.2. Flow Description
   3.3. Traffic Envelop and Traffic Conformance
   3.4. Excess Treatment
   3.5. Performance Guarantees
   3.6. Service Schedule
   3.7. Reliability
   4.   Service Level Specification examples
   4.1. Virtual Leased Line
   4.2. Bandwidth Pipe for data-services
   4.3. Real-time micro-flows
   4.4. Minimum rate guarantee with allowed excess
   4.5. Qualitative Olympic Services
   4.6. The funnel services
   4.7. Best Effort Traffic
   5.   SLS negotiation requirements
   6.   Security considerations
   7.   Acknowledgements



0. Conventions used in this document

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",



TEQUILA consortium         Expires March 2001                   [Page 2]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   "SHOULD", "SHOULD NOT", "RECOMMENDED",  "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 ([RFC-2119]).

1. Introduction

1.0 Changes w.r.t. the previous version

   This is the second version of an Internet Draft of the issue of
   Service Level Specifications (SLS). The first version <draft-
   tequila-sls-00.txt

1.1 Motivation

   This document is presented to the IETF community to gauge the
   interest for advancing the work on the specification of a Service
   Level Specification (SLS) definition, its semantics and its potential
   negotiation protocol(s). The deployment of QoS-based value-added IP
   services over the global Internet is one of the most exciting
   challenges that the service providers try to currently address,
   especially when considering the deployment of such services over
   administrative domains. From this perspective, it seems useful to
   consider the specification of an SLS template these service providers
   would agree upon, so as to enforce an inter-domain QoS policy. This
   is the basic motivation for presenting this document to the IETF
   community.

   Mailing list: sls@ist-tequila.org

   This list provides the medium for discussion on SLS template
   definition and SLS negotiation protocol requirements. One of its
   objectives is to gauge interest for the related work within the IETF
   on these specific topics.

   To subscribe to the list send an email to - majordomo@ist-tequila.org
   - with the sentense - subscribe sls@ist-tequila.org - in the body and
   nothing in the subject line.

1.2 Objective

   This document presents an outline for the definition of the Service
   Level Specification parameters, the semantics that go behind this
   representation, and some early ideas on the requirements on
   negotiation of SLSs.

   The need to have such an agreed set of Service Level Specification
   parameters and semantics is manifold.

   First, it is necessary to be able to allow for a highly developed



TEQUILA consortium         Expires March 2001                   [Page 3]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   level of automation and dynamic negotiation of Service Level
   Specifications between customers and providers. Automation and
   dynamics are indeed helpful in providing customers (as well as
   providers) the technical means for the dynamic provisioning of
   quality of service. The automation in itself is e.g. necessary to
   allow roaming (dial-in) and to enable mobile users to have access and
   negotiate a transport Service Level, independent of their point of
   attachment to the network.

   Second, the design and the deployment of Bandwidth Broker
   capabilities [TWOBIT] in a multi-vendor environment requires a
   standardized set of semantics for Service Level Specifications being
   negotiated at different locations:

      - between the customer and the service provider (namely between
      the Customer Premises Equipment (CPE) and its point of attachment
      to the IP network managed by the service provider);

      - within an administrative domain (for intra-domain SLS
      negotiation purposes);

      - between administrative domains (for inter-domain negotiation
      purposes).

   While the representation and semantics behind a Service Level
   Specification need to be standardized, this document does not assume
   that the syntax, nor the SLS negotiation protocol need to be uniquely
   defined. E.g, the negotiation could make use of various other
   protocols such as http, rsvp, IPCP, DHCP, etc. The latter is ffs, and
   as such not part of this document.

   The document is structured as follows.

   Section 2 lists the basic assumptions underlying this work and some
   terminology.

   Section 3 describes the parameters of the Service Level Specification
   (template). This draft only describes the semantics of the SLS-
   parameters, omitting all implementation details as for instance the
   parameter data types (at this moment).

   Section 4 provides some examples of relevant SLS specifications, with
   the aim to show the usage of the templates. The SLS formalism defined
   in section 3 allows making a distinction between qualitative and
   quantitative SLSs:

      - SLSs depicting qualitative services should yield the
      specification of relative QoS indicators, such as a low IP



TEQUILA consortium         Expires March 2001                   [Page 4]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


      datagram loss ratio. From this standpoint, best effort traffic is
      expected to be qualified by an SLS of that range of qualitative
      services.

      - SLSs depicting quantitative services should yield the accurate
      measurement of QoS indicators, such as e.g., transit delay.

   Sections 5 and 6 finally describe some SLS (protocol) negotiation
   requirements and security considerations respectively.

   The material presented in this draft derives from work within the
   IST-TEQUILA project [TEQUILA].

2. Basic assumptions and terminology

   The basic assumption of this draft is that IP services will be
   deployed over a public IP infrastructure, which will be (partly if
   not completely) composed of diffserv-aware network elements ([RFC-
   2475], [DS-MODEL]). These network elements are able to implement Per
   Hop Behaviors (PHBs), including the Assured Forwarding PHB ([RFC-
   2597]), and the Expedited Forwarding PHB ([RFC-2598].

   Customers of such services include Internet Service Providers (ISP),
   who may well establish QoS-based peering agreements between
   themselves, and usual customers of ISPs, like those who compose both
   the residential and the corporate market.

   The terminology used in this draft is in agreement with the DiffServ
   Working Group terminology introduced and specified in [RFC-2475],
   section 1.2 "terminology".

3. SLS content & template

   The following describes the attributes of the Service Level
   Specification. It should be remarked that some SLS-features are not
   yet specified in this draft. For example, the Internet2 QoS Working
   Group specifies an SLS for the EF-based Premium Service [QBONE]. One
   of the attributes, i.e. "Route", is used for inter-domain routing
   aspects. This and other SLS features are for further study.

3.1. Scope

   The scope of an SLS associated to a given service offering indicates
   where the Quality of Service (QoS) policy for that specific service
   offering is to be enforced. Therefore the scope uniquely identifies
   the geographical/topological region over which the QoS is to be
   enforced by indicating the boundaries of that region.




TEQUILA consortium         Expires March 2001                   [Page 5]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   An SLS is associated with uni-directional traffic flows. Note however
   that this does not exclude the provisioning by providers of
   bidirectional transport service contracts, by combining one or more
   SLSs.

   The associated scope of the SLS MUST be expressed by a couple of
   ingress and egress interfaces. Ingress/egress denote respectively the
   entry/exit points of the IP packets relative to the region (network).

   Scope = (ingress, egress) with ingress/egress defined as

      - Ingress: interface identifier | set of interface identifiers |
      any

      - Egress : interface identifier | set of interface identifiers |
      any

   Remarks:

   - "|" denotes an exclusive OR.

   - "any" is logically equivalent with unspecified.

   The following combinations of (ingress, egress) interfaces are
   allowed:

      - (1,1) -  one-to-one communication

      - (1,N) - one-to-many communication (N>1)

      - (1,any) - one-to-any communication

      - (N,1) - many-to-one communication (N>1)

      - (any,1) - any-to-one communication

   The above taxonomy excludes the many-to-many communication (M,N).
   Either ingress OR egress MUST be specified to exactly ONE interface
   identifier (with a non-exclusive OR). Many-to-many communication
   (M,N) can be decomposed into M times one-to-many communication (1,N).

   This taxonomy SHOULD avoid all ambiguity about the IP flow (defined
   as a set of IP datagrams sharing at least one common characteristic,
   like e.g. the same [source address; destination address] pair), and
   its corresponding description. (see section 3.2 and 3.3). If the
   ingress is a single interface identifier, then the traffic envelop
   and flow description concerns the incoming IP packet stream at the
   unique ingress point. If (only) the egress is a single interface,



TEQUILA consortium         Expires March 2001                   [Page 6]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   i.e. (N|any,1), then the traffic envelop and flow description
   concerns the outgoing (aggregate) traffic on the egress link. More
   details about the latter can be found in the example 4.5.

   In the remaining part of this document SLSs with an associated scope
   (topology) of (1,1) ; (1,N) ; (N,1) will be called respectively Pipe,
   Hose and Funnel SLSs.

   Disclaimer:

   An ingress (or egress) interface identifier should uniquely determine
   the boundary link as defined in [RFC-2475] on which packets
   arrive/depart at the border of a DS domain. This link identifier MAY
   be an IP address, but it may also be any other mutually agreed upon
   identifier which uniquely identifies a boundary link. Fore example a
   layer-two identifier in case of e.g. ethernet, or for unnumbered
   links like in e.g. PPP(Point-to-Point Protocol, [RFC-1661])-based
   access configurations. The interface identifier(s) may also
   implicitly be derived from the source or destination address
   information in the Flow Description field (see next section 3.2)
   combined with e.g. BGP4 (Border Gateway Protocol, version 4, [RFC-
   1771]) routing information.

3.2. Flow Description

   The flow description of an SLS associated to a given service offering
   indicates for which IP packets the QoS guarantees for that specific
   service offering is to be enforced.

   A flow description identifies a stream of IP datagrams sharing at
   least one common characteristic. An SLS contains one (and only one)
   flow description, which MAY formally be specified by providing one or
   more of the following attributes:

   flow description = (Differentiated Services information, source
   information, destination information, application information)

      - Differentiated Services information = DSCP value | set of DSCP
      values | any

      The Differentiated Services Code Point (DSCP) IP header field is
      defined in [RFC-2474].

      - Source information = source address | set of  source addresses |
      source prefix | set of source prefixes | any

      - Destination information = destination address | set of
      destination addresses | destination prefix | set of destination



TEQUILA consortium         Expires March 2001                   [Page 7]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


      prefixes | any

      - Application information = protocol number | protocol number and
      source port, destination port | any

   Note: "any" is again logically equivalent with unspecified.

   Thus, the flow description may be expressed by information attributes
   related to the source/destination nodes, the application or the DS
   field in the IP header. The flow description provides the necessary
   information for classifying the packets at a DS boundary node.

   This datagram classification can either be Behaviour Aggregate (BA)
   or Multi-Field (MF)classification based.

   In case of MF-classification all attributes MAY be specified,
   including the DSCP field. MF classification may depict as well
   micro-flows as aggregate macro-flows, based on e.g. source network
   prefix [DS-MODEL]. Also the "set-of" semantics allows for the
   specification of aggregate flows. If a flow description is e.g.
   specified by a set of two IP source addresses, then any packet with
   either of the two concerned source addresses belongs to the IP packet
   stream identified by this flow description.

   In case of BA-classification [RFC-2475], the DSCP attribute MUST be
   specified and the other attributes MUST NOT be specified. If a set of
   DSCP-values is specified, then any packet having a DSCP belonging to
   this set is part of the Flow (description) packet stream (analogous
   to the example above with the IP source addresses). As an example
   consider an Ordered Aggregate (OA) IP packet stream of a particular
   Assured Forwarding Class AFx (AF1,AF2,AF3,AF4 - see [RFC 2597]). This
   stream could be specified within one flow description using three
   DSCP-values, indicating the three drop precedences levels,
   respectively colored in green, yellow and red.

   It should however be noticed that the DSCP-value(s) specified in the
   SLS has (have) as such nothing to do with the DSCP-marking of packets
   inside the DiffServ network. The latter, i.e. the "interior" DSCP is
   used for differentiating packets according to Per Hop Behaviours
   (PHBs). The former, i.e. the "ingress" DSCP value (specified in the
   SLS), is just another way of identifying a packet stream, eventually
   in combination with other IP header fields. At the ingress DiffServ
   node (incoming) packets are classified based on the "ingress" DSCP
   value (amongst others), after which they may be re-marked by the
   "interior" DSCP-value.

   Finally note also that the IP routing scheme MAY put restrictions on
   combining scope and flow description within an SLS.



TEQUILA consortium         Expires March 2001                   [Page 8]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   In general, if (only) the flow description is specified by source and
   destination IP address (IP-src, IP-dest), and the scope is
   unspecified, then there is no a-priori assumption about the actual
   ingress/egress points that this traffic will use. Indeed, it is the
   responsibility of the service provider to define the most appropriate
   route for this traffic, by enforcing the corresponding traffic
   engineering and routing policy. Thus, the (ingress, egress)
   information (which is in this case not in the SLS) is then derived
   from the flow description and the routing policy of the service
   provider.

   On the other hand, if the flow description AND scope are specified in
   the SLS, respectively by the pairs (IP-src, IP-dest) and (IP-ingr,
   IP-egr) then it is clear that the IP packets MUST follow the route
   (IP-src,...,IP-ingr,...,IP-egr,...,IP-dest). Thus the restriction is
   that the scope (IP-ingr, IP-egr) is part of the route from IP-src to
   IP-dest.

   Further routing considerations are outside the scope of this
   document.

   Finally remark that the exclusion of the many-to-many communication
   scope model puts similar constraints on the source/destination fields
   of the Flow Description.

3.3 Traffic Envelop and Traffic Conformance

   The traffic envelop describes the traffic (conformance)
   characteristics of the IP packet stream identified by the flow
   description. The traffic envelop is a set of Traffic Conformance
   Parameters, describing how the packet stream should look like to get
   the guarantees indicated by the performance parameters (defined in
   section 3.5)

   The Traffic Conformance Parameters are the basic input for the
   Traffic Conformance Algorithm. Traffic Conformance Testing as the
   combination of the Traffic Conformance Parameters and the Traffic
   Conformance Algorithm. This will usually be done at a DS-boundary
   node.

   The algorithm and the conformance test can be binary-based or multi-
   level based.

   Binary Traffic Conformance Testing is a set of actions which uniquely
   identifies the "in-profile" and "out-of profile" (or excess) packets
   of an IP stream (identified by Flow-Id). In this case the Traffic
   Conformance Parameters describe the reference values the traffic
   (identified by the flow description) will have to comply with, thus



TEQUILA consortium         Expires March 2001                   [Page 9]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   yielding the notions of "in" and "out" of profile traffics. The
   Traffic Conformance Algorithm is the mechanism enabling unambiguously
   to identify all "in" or "out" of profile packets based on these
   Conformance parameters.

   In case of multi-level (n) Traffic Conformance Testing a packet will
   be tagged (by the algorithm) as belonging to a particular level
   (1...n). Packets tagged as level n are called "excess" packets.

   The SLS MUST indicate the concerned level (n) of the conformance
   testing algorithm:

      - Multi-level conformance testing n (integer)

   The following gives a (non-exhaustive) list of potential conformance
   parameters.

      - Peak rate p (bits per second)

      - Token bucket rate r (bits per second)

      - bucket depth b (bytes)

      - Maximum Transport Unit (MTU) M (bytes)

      - Minimum packet size (bytes)

   Binary-based Traffic Conformance Testing examples:

      - Conformance parameters = token bucket parameters (b,r);
      conformance algorithm = token bucket algorithm.

      - Conformance parameters = token bucket parameters and peak rate
      (b,r,p) with p larger than r; conformance algorithm = the combined
      token bucket (b,r) and (b,p). This is the conformance test for
      Integrated Services Controlled Load and Guaranteed Service IP
      flows in the IntSer QoS architecture [RFC-2211, RFC-2212]. The
      scheme permits bursty traffic to be sent, limited to a burst of b
      bytes, with a (long-term) average rate of r and a peak rate of no
      more than p.

      - Conformance parameters = MTU; conformance algorithm = all
      packets allowed with size smaller than MTU; packets larger than
      MTU are fragmented or dropped.

   Three-level based Traffic Conformance Testing example

      - The Two-rate Three-colour marker [REF] is based on two token



TEQUILA consortium         Expires March 2001                  [Page 10]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


      buckets with rates r1 and r2 (larger than r1), containing
      respectively green and yellow tokens. The simplest operational
      mode is the "colour-blank" mode. A packet is tagged "green" if
      there are green and yellow tokens available, yellow if only yellow
      tokens are available and otherwise it is tagged red.


3.4. Excess Treatment

   This section describes how the service provider will process excess
   traffic, i.e. out-of-profile traffic (in case of binary conformance
   testing) or n-level traffic (in case of n-level conformance testing).
   The process takes place after Traffic Conformance Testing, described
   previously.

   Excess traffic may be dropped, shaped and/or remarked. The SLS MUST
   specify the appropriate action by the following attribute.

      - Excess Treatment

   If Excess Treatment is not indicated, then excess traffic is dropped.
   Depending on the appropriate action, more parameters MAY be required
   The following is an indication in case of binary conformance testing.
   Multi-level conformance testing (like the definition of a
   hierarchical drop preference model) MAY also be enforced, but this
   concern has been left for further study.

      - If excess traffic is dropped, then all packets marked as "out-
      of-profile" by the Traffic Conformance Algorithm are dropped. No
      extra parameters are needed.

      - If excess traffic is shaped, then all packets marked as "out-
      of-profile" by the Traffic Conformance Algorithm are delayed until
      they are "in-profile". The shaping rate is the policing/token
      bucket rate r. The extra parameter is the buffer size of the
      shaper.

      - If excess traffic is marked or remarked, then all packets marked
      as "out-of-profile" by the Traffic Conformance Algorithm are (re-)
      marked with a particular DSCP-value (yellow or red). The extra
      parameter is the DSCP.


3.5. Performance Guarantees

   The performance parameters describe the service guarantees the
   network offers to the customer for the packet stream described by the
   flow description and over the geographical/topological extent given



TEQUILA consortium         Expires March 2001                  [Page 11]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   by the scope.

   There are four performance parameters:

      - delay, time interval, optional quantile

      - jitter, time interval, optional quantile

      - packet loss, time interval

      - throughput, time interval

   Delay, jitter and packet loss guarantees are for the in-profile
   traffic in case of binary conformance testing. For multi-level (n)
   conformance testing, delay, jitter and loss guarantees MAY be
   specified for each conformance level-i, except the last one (n). For
   example if n = 3, one can have a delay guarantee for the "conformance
   level-1" packets and a different delay guarantee for the "conformance
   level-2" packets. No guarantees are given for excess ("conformance
   level-n") traffic.

   The throughput is an overall guarantee for the IP packet stream,
   independent of a particular level (see below).

   The following definitions always consider the (measurable)
   performance parameters related to the packet stream specified by the
   flow description. For simplicity the definitions below are given for
   binary conformance testing (n=2), but generalisation is
   straightforward.


   The delay and jitter indicate respectively the maximum packet
   transfer delay and packet transfer delay variation from ingress to
   egress, measured over (any) time period with a length equal to the
   (indicated) time interval.

   Delay and jitter may either be specified as worst case
   (deterministic) bounds or as quantiles. Indeed, the worst case
   delay/jitter bounds will be very rare events and customers may find
   measurements of e.g. 99.5th percentile a more relevant empirical
   gauge of delay/jitter.

   Suppose e.g. that the SLS specifies the triple (delay = 10ms, time
   interval = 5 minutes, quantile = 10E-3). Then the probability that
   the transfer delay of a packet (between ingress-egress) is larger
   than 10ms, is less than 10E-3; and this for any measurement period of
   5 minutes.




TEQUILA consortium         Expires March 2001                  [Page 12]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   The above syntax for delay/jitter can be generalised by specifying in
   the SLS an array of e.g. N (delay/jitter, quantile)-couples. The more
   couples, the better the delay probability tail distribution can be
   approximated. Such a specification together with the eventual need of
   such a generalisation is for further study.


   The packet loss probability is ratio of the lost (in-profile) packets
   between ingress and egress and the offered (in-profile) packets at
   ingress.

                 lost packets between (and including) ingress and egress
   packet loss = -------------------------------------------------------
                 offered (injected) packets at ingress

   The ratio is measured over (any) time period with a length equal to
   the (indicated) time interval.


   The throughput is the rate measured at egress counting all packets
   identified by the flow description. Notice that all packets,
   independently of their conformance level (in/out-of-profile)
   contribute. Indeed, if the customer (only) wants a throughput
   guarantee, then he/she does not care whether in- or out-profile
   packets are dropped, but is only interested in the overall throughput
   of its packet stream.


   Note on the relation with the Traffic Conformance Parameters (section
   3.3) in case of a binary-based conformance testing algorithm:

      - The Traffic Conformance Algorithm (and parameters) MUST be
      specified when guaranteeing delay/jitter or packet loss, i.e. if
      one of these performance parameters is quantified in the SLS.
      Conformance testing is required because the delay/jitter and loss
      guarantees are only for the stream of in-profile packets.

      - When only guaranteeing a throughput, or if non of the other
      performance parameters is quantified, the traffic conformance
      algorithm MAY be specified. It is not required to specify the
      Conformance Algorithm, because the (eventual) troughput guarantee
      does not require the strict distinction between in/out-of-profile
      traffic. However, the network operator will probably protect his
      network by implementing a Traffic Conditioner at Ingress and
      specifying the token policing rate (r) (almost) equal to the
      throughput guarantee R, r~R.  He may or may not tag/mark excess
      traffic, according to his own - internal - policy rules. See also
      example 4.2.



TEQUILA consortium         Expires March 2001                  [Page 13]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   Note on the relation between throughput R, packet loss p and excess
   treatment in case of a binary-based conformance testing algorithm:

      - First consider the case where excess traffic is dropped (or
      shaped to in-profile) based on the token bucket (b,r) traffic
      conformance algorithm. As only in-profile packets are allowed at
      ingress, the following equality holds:

         throughput R = (1-p) * token rate r

      Thus the throughput guarantee can be derived from the loss
      probability and token rate and is therefore not an independent
      parameter.

      - If excess traffic is allowed (and marked accordingly), then
      "throughput" is an independent parameter because it also takes
      into account the out-of-profile packets (measured at egress). One
      has obviously the inequality:

         throughput R >= (1-p) * token rate r


   Quantitative performance guarantees

   A performance parameter is said to be quantified if its value is
   specified to a numeric (quantitative) value.

   The service guarantee described by the SLS is said to be quantitative
   IF at least one of the 4 performance parameters is quantified.


   Qualitative performance guarantees

   If non of the SLS performance parameters are quantified, then the
   performance parameters "delay" and "packet loss" MAY be "qualified".

   Possible qualitative values (for delay and/or loss): high, medium,
   low.

   Relative delay guarantees:

      - gold service : value = low

      - silver service : value = medium

      - bronze service : value = high or not indicated

   Relative loss guarantees



TEQUILA consortium         Expires March 2001                  [Page 14]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


      - green service : value = low

      - yellow service : value = medium

      - red service : value = high or not indicated

   The quantification of relative difference between <high/medium/low>
   is a provider policy (e.g. high = 2 x  medium ; medium = 2 x low).

   The above taxonomy yields the following combinations of qualitative
   services.

    -------------------------------------------------------
    |\ delay |             |               |               |
    | \------| low         | medium        |high           |
    |  loss  |             |               |               |
    |------------------------------------------------------|
    | low    | gold green  | silver green  | bronze green  |
    | medium | gold yellow | silver yellow | bronze yellow |
    | high   | gold red    | silver red    | bronze red    |
    |------------------------------------------------------|
                            Combinations table

   The service guarantee described by the SLS is said to be qualitative
   if it is NOT quantitative and either delay or loss (non-exclusive)
   are qualified to "medium" or "low", i.e. excluding bronze/red from
   the above.

   The service guarantee described by the SLS is said to be best-effort
   if it is NOT quantified nor qualified.


3.6. Service schedule

   The service schedule indicates the start time and end time of the
   service, i.e. when is the service available.

   This might be expressed as collection of the following parameters:

      - Time of the day range

      - Day of the week range

      - Month of the year range

   Some examples are:
      - Time of the day range
        08h00-18h00



TEQUILA consortium         Expires March 2001                  [Page 15]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


      - Day of the week range
        A single day

        A group of sequential days

      - Month of the year range
        A single month

        A group of sequential months

      - Year range
        A single year

        A group of sequential years

   Remark: service schedule "from now on" [now, infinity] can be
   captured by putting the above to their full range.

3.7. Reliability

   Reliability indicates the maximum allowed mean downtime per year
   (MDT) and the maximum allowed time to repair (TTR) in case of service
   breakdown (e.g. in case of cable cut).

   The Mean Down Time might be expressed in minutes per year and the
   Maximum Time To Repair might be expressed in seconds.

3.8 Others

   Other parameters such as route, reporting guarantees, security,
   scheduled maintenance, etc... remain for further study.

4. Service Level Specification examples.

   Within this section a number of example instantiations of SLSs are
   presented to illustrate the potential use of the SLS template defined
   above.

4.1. Virtual Leased Line

   The following specifies the SLS for a (uni-directional) VLL with
   quantified throughput guarantee of e.g 1 Mbps, a delay guarantee of
   20 ms for a 10E-3 quantile and zero packet loss.

   - Scope: one-to-one communication (Ingress, Egress) specified

   - Flow description: (source,destination) IP-addresses, DSCP=EF.




TEQUILA consortium         Expires March 2001                  [Page 16]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   - Traffic Conditioning: token bucket (b,r), r = 1 Mbps

   - Excess Treatment = dropping. Thus only in-profile packets are
   allowed.

   - Delay guarantee = (d = 20 ms, t = 5 minutes, q = 10E-3)

   - Loss guarantee p = 0 (imlying a throughput guarantee R = r)

   - Service Schedule: may be indicated

   - Reliability: may be indicated

   Notice that in this example, the throughput guarantee is a derived
   parameter from the packet loss p=0, the conditioning token bucket
   parameter r=1 Mbps and the excess treatment=dropping.

4.2 Bandwidth Pipe for data-services

   The following SLS specifies a bandwidth pipe with a strict throughput
   guarantee, but with only a loose requirements for packet loss, i.e.
   "low". Thus, the SLS only mentiones the scope (pipe), the flow
   description and a throughput guarantee. Remark that there are now
   traffic conformance parameters (and consequently no excess treatment
   indication).

   - Scope: one-to-one communication (Ingress, Egress) specified

   - Flow description: (source,destination) IP-addresses

   - Throughput guarantee R = 1 Mbps

   - Service Schedule: may be indicated

   - Reliability: may be indicated

   Although there is no (explicit) traffic conditioning agreement
   between the customer and the network operator (i.e. not mentioned in
   the SLS), the operator is likely to protect his network by
   implementing a traffic conditioner token bucket (b,r). If the
   operator can guarantee a zero packet loss for the bandwidth pipe,
   then the token rate equals the throughput guarantee. However, the SLS
   can also be met by the operator without such a stringent loss
   requirement, say p = 10E-5. In this case the token rate is derived
   from the throughput guarantee and the loss probability:

      token rate r = R / (1-p)




TEQUILA consortium         Expires March 2001                  [Page 17]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   The in-profile packet stream (according to the conditioner (b,r)) has
   a throughput guarantee of R = r * (1-p) = 1 Mbps.

   Further, it is up to the operator's policy whether or not excess
   traffic (again according to the operator's conditioner (b,r), which
   is not mentioned in the SLS agreement) is allowed or not in his
   network.

4.3. Real-time micro-flows

   - Scope: one-to-one communication (Ingress, Egress) specified

   - Flow description: (source IP-address, destination IP-address,
   source port number, destination port number, protocol)

   - Traffic Conditioning: token bucket (b,r), peak rate p= r = 64 Kbps

   - Excess Treatment = dropping.

   - Performance Parameters: delay = 10 msec, packet loss = 10E-6,
   guaranteed throughput R ~ r.

4.4 Minimum rate guarantee with allowed excess

   The following could be for bulk FTP traffic that requires a minimum
   throughput, but would take everything it can get (TCP). Also adaptive
   applications, like video streaming, that however require a minimum
   throughput for the service.

   - Scope: one-to-one (Pipe)

   - Flow description: e.g. DSCP-value indicating a possible AF-PHB.

   - Traffic Conformance Parameters: (b,r) MUST be indicated

   - Excess Treatment: Remarking MUST be indicated (excess is given a
   higher drop precedence)

   - Performance guarantees: guaranteed throughput R = r.


4.5. Qualitative Olympic services

   The following SLS is meant for the Olympic Service. It could be used
   for differentiating applications such as web-browsing and e-mail
   traffic.

   SLS 1 (on-line web-browsing) - Scope: one-to-one (pipe) or one-to-



TEQUILA consortium         Expires March 2001                  [Page 18]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   many (hose)

   - Flow description: MAY be indicated

   - Traffic Conformance Parameters: token parameters (b,r) The token
   bucket rate r indicates an (average) maximum Committed Information
   Rate (CIR) for which "better-than-best-effort" treatment will be
   applied.

   - Excess Treatment: remarking.

   - Performance Parameter: Delay and Packet loss are indicated as
   "low": gold/green class

   SLS2 : (background e-mail traffic)

   This is identical to SLS1 but targeting the silver/green class.

4.6. The Funnel service

   The service offered by the funnel model is primarily a protection
   service: the customer wants to set a maximum on the amount of traffic
   (characterized by a DSCP) entering his network. It could e.g. be used
   for business customers to restrict the amount of web browsing traffic
   entering their network.

                  /---------------\
                  |Network   _____|______ B
                  |    _____/     |
       A__________|___.___________|______ C
         /_____   |    _____      |
         \a(out)  |         \_____|_______D
                  \---------------/

                          Figure 4: Funnel model

   In [Figure 4], customer A requires that specific traffic entering his
   network from B,C and D does not exceed the rate a_out.

   - Scope: Funnel (N|all,1).

   - Flow description: DSCP MUST be indicated. The filter (see below) is
   applied to all traffic characterized by the DSCP -value.

   - Traffic Conformance Parameters: (b, r) MUST be indicated. The token
   bucket parameters indicate the maximum allowed throughput (r = a_out)
   towards the customer network on the specified egress interface. This
   maximum or filter is applied to all packets marked with the DSCP-



TEQUILA consortium         Expires March 2001                  [Page 19]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   value indicated above.

   - Excess treatment: dropping (this is actually the service offered by
   the network).

   - Performance Parameter: not specified.


4.7. Best effort traffic

   - Scope : all models

   - Flow description : none

   - Traffic Conformance Parameters: if not indicated, then the full
   link capacity is allowed

   - Excess Treatment: not specified

   - Performance Parameters: none

   - Service Schedule: may be indicated.

   - Reliability: may be indicated.

5. SLS negotiation requirements

   [This section is informational and preliminary. More detailed study
   is required.]

   A major goal of the availability of an SLS template is helping in the
   deployment of dynamical SLS negotiation procedures between customer
   and providers or between providers. This draft only discussed the SLS
   template and its basic contents. The SLS negotiation protocol is for
   further study. The following lists a number of conditions which
   should be met by a (to be defined) SLS negotiation protocol.

   The SLS negotiation protocol MUST allow for:

   - Original service requests, according the components of the
   specified SLS.

   - Service acknowledgement (ACK), indicating agreement with the
   requested service level.

   - Service rejection (NAK) but indicating the possibility of offering
   a closely related service (or indication of alternative DSCP to use
   for a particular service). The reply message may indicate the related



TEQUILA consortium         Expires March 2001                  [Page 20]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   offering by overwriting the proposed SLS attributes (hints).

   - Service rejection (REJECT) indicating  incapability of providing
   the service.

   - The ACK/NACK procedures require a reliable transport mode for such
   a negotiation protocol.

   - Service modification from both user and provider.

   The following are further requirements for the overall network
   architecture which SHOULD be fulfilled.

      - The protocol should be able to interact with feedback of events
   related to the service. For example performance degradation MAY
   result in re-negotiation of the SLS.

      - The  protocol should preferentially make use of / be an
   extension of existing specifications protocol design work available
   such as RSVP ([RFC-2205]) or PPP/IPCP ([RFC-1661]).


6. Security considerations

   The information which will yield the instantiation of an SLS template
   to address the specific requirements of a customer in terms of the
   quality associated to the service it has subscribed to may require
   the activation of security features so that:

   - Identification and authentication of the requesting entity needs to
   be performed;

   - Identification and authentication of the peering entities which
   will participate in the SLS negotiation process needs to be
   performed;

   - Preservation of the confidentiality of the information to be
   conveyed during the SLS negotiation and instantiation procedures
   between the peering entities is a MUST.


7. Acknowledgements

   Part of this work has been funded under the European Commission 5th
   framework IST program.

   The authors would like to acknowledge all their colleagues in the
   TEQUILA project for their input and reflection on this work.



TEQUILA consortium         Expires March 2001                  [Page 21]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   The authors also would like to acknowledge Werner Almesberger, Marcus
   Brunner, Stefaan De Cnodder, Stefano Salsano, Alberto Kamienski and
   Abdul Malick for their useful comments and suggestions on the mailing
   list sls@ist-tequila.org and during private conversation.

References

   [TEQUILA] IST-Tequila project http://www.ist-tequila.org/

   [RFC 1661] "The Point-to-Point Protocol (PPP)", W. Simpson,
   http://www.ietf.org/rfc/rfc1661.txt?number=1661

   [RFC-1771]      A Border Gateway Protocol 4 (BGP-4). Y. Rekhter, T.
   Li. March 1995. http://www.ietf.org/rfc/rfc2205.txt?number=1771

   [RFC 2205] "Resource ReSerVation Protocol (RSVP)- Version 1
   Functional Specification", R. Braden et al.
   http://www.ietf.org/rfc/rfc2205.txt?number=2205

   [RFC-2211]      J. Wroclawski, "Specification of the Controlled-Load
   Network Element Service", RFC 2211, September 1997.

   [RFC-2212]      S. Shenker, C. Partridge, R. Guerin, "Specification
   of Guaranteed Quality of Service", RFC 2212, September 1997.

   [RFC 2474] "Definition of the Differentiated Services Field (DS
   Field) in the IPv4 and IPv6 Headers", K.Nichols, S. Blake, F. Baker,
   D. Black, www.ietf.org/rfc/rfc2474.txt

   [RFC 2475] "An Architecture for Differentiated Services",  S. Blake,
   D. Black, M.Carlson,E.Davies,Z.Wang,W.Weiss,
   www.ietf.org/rfc/rfc2475.txt

   [RFC 2597] "Assured Forwarding PHB Group", F. Baker, J. Heinanen, W.
   Weiss, J. Wroclawski, www.ietf.org/rfc/rfc2597.txt

   [RFC 2598] "An Expedited Forwarding PHB", V.Jacobson, K.Nichols,
   K.Poduri, www.ietf.org/rfc/rfc2598.txt

   [RFC 2698] "A Two Rate Three Color Marker." J. Heinanen, R. Guerin.
   September 1999. www.ietf.org/rfc/rfc2698.txt

   [DS-MODEL] "A Conceptual Model for Diffserv Routers", Y. Bernet et
   al., draft-ietf-diffserv-model-03.txt, Work in Progress, May 2000

   [DS-TERMS] "New terminology for diffserv", D. Grossman, draft-ietf-
   diffserv-new-terms-02.txt, work in progress




TEQUILA consortium         Expires March 2001                  [Page 22]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   [QBONE] "Qbone Architecture (v1.0), Ben Teitelbaum (1999),
   http://www.internet2.edu/qos/wg/papers/qbArch/

   [TWOBIT] "A Two-bit Differentiated Services Architecture for the
   Internet", ftp://ftp.ee.lbl.gov/parpers/dsarch.pdf, 1997

Full copyright statement

   Copyright (C) The Internet Society (1999).  All Rights Reserved.

   This document and translations of it may be copied and furnished to
   others, and derivative works that comment on or otherwise explain it
   or assist its implementation may be prepared, copied, published and
   distributed, in whole or in part, without restriction of any kind,
   provided that the above copyright notice and this paragraph are
   included on all such copies and derivative works.

   However, this document itself may not be modified in any way, such as
   by removing the copyright notice or references to the Internet
   Society or other Internet organizations, except as needed for the
   purpose of developing Internet standards in which case the procedures
   for copyrights defined in the Internet Standards process must be
   followed, or as required to translate it into languages other than
   English.

   The limited permissions granted above are perpetual and will not be
   revoked by the Internet Society or its successors or assigns.

   This document and the information contained herein is provided on an
   "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
   TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
   BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
   HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
   MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Authors Addresses

   Danny Goderis
   Alcatel Corporate Research Center
   Fr. Wellesplein 1, 2018 Antwerpen, Belgium.
   Tel : +32 3 240 7853
   Fax : +32 3 240 9932
   E-mail: Danny.Goderis@Alcatel.be








TEQUILA consortium         Expires March 2001                  [Page 23]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   Yves T'Joens
   Alcatel Corporate Research Center
   Fr. Wellesplein 1, 2018 Antwerpen, Belgium.
   Tel : +32 3 240 7890
   Fax : +32 3 240 9932
   E-mail: Yves.TJoens@Alcatel.be

   Christian Jacquenet
   France Telecom Research and Development (FT R&D)
   Rue des Coutures 42, BP6243, 14066 CAEN CEDEX 04 France
   Tel : +33 2 31 75 94 28
   Fax : +33 2 31 73 56 26
   E-mail: christian.jacquenet@francetelecom.fr

   George Memenios
   Research Associate, Telecommunications Laboratory NTUA
   Heroon Polytechniou 9, 157 73 Zografou, Athens, Greece
   Tel : +30 1 772 1494
   Fax : +30 1 772 2534
   E-mail: gmemen@telecom.ntua.gr

   George Pavlou
   Centre for Communication Systems Research (CCSR)
   Univ. of Surrey, Guildford, Surrey GU2 7XH, UK
   Tel : +44 (0)1483 259480
   Fax : +44 (0)1483 876011
   E-mail: G.Pavlou@eim.surrey.ac.uk

   Richard Egan
   Racal Research Ltd
   Worton Drive, Worton Grange Industrial Estate
   Reading, Berkshire RG2 OSB, UK
   Tel : +44 118 986 8601
   Fax : +44 118 923 8399
   E-mail: richard.egan@rrl.co.uk

   David Griffin
   Department of Electronic and Electrical Engineering
   University College London, Torrington Place, London WC1E 7JE, UK
   Tel : +44 (0)20 7679 3557
   Fax : +44 (0)20 7388 9325
   E-mail: D.Griffin@ee.ucl.ac.uk









TEQUILA consortium         Expires March 2001                  [Page 24]


Internet Draft          draft-tequila-sls-00.txt           October, 2000


   Panos Georgatsos
   Algosystems S.A.
   Sardeon str. 4, 172 34 Athens, Greece
   Tel : +30 1 93 10 281
   Fax : +30 1 93 52 873
   E-mail: pgeorgat@algo.com.gr

   Leonidas Georgiadis
   Aristotel Univ. of Thessaloniki, Faculty of Engineering
   School of Electrical and Computer Engineering, Telecommunications Dept.
   PO Box 435, Thessaloniki, 54006, Greece
   Tel : +30 31 996385
   Fax : +30 31 996312
   E-mail: leonid@eng.auth.gr

   Pim Van Heuven
   Inter-University Micro-Electronics Centre
   Tel : +32 9 267 3592
   E-mail: pvheuven@intec.rug.ac.be
































TEQUILA consortium         Expires March 2001                  [Page 25]