Forward Erasure Correction for Short-Message Delay-Sensitive QUIC Connections

Introduction The QUIC protocol is general purpose transport protocol, which supports both reliable and unreliable data transmission. Depending on application-specific use cases, one can choose either to rely on QUIC built-in loss recovery mechanism or to use application layer retransmission mechanism. In both cases it takes more than one round-trip time to retransmit lost data, which may be crucial in delay-sensitive applications (e.g. RTC) if RTT is high enough. Forward erasure coding allows to avoid or minimize extra delay incurred by the retransmission of lost data, while redundancy adaptation minimizes data overhead generated by FEC.. There are several works considering the use of Forward Erasure Correction (FEC) in QUIC protocol: , and . These works share the common idea of protecting a sequence of packets each containing protected data. But there is a broad area of applications there it’s only needed to send short messages of data (one or couple QUIC packets) in timely manner with relatively high time gap in-between, for example instant messaging, control channels, notifications, etc. In this case it’s more beneficial to protect every message independently of each over. This document defines extensions to the QUIC protocol to add the ability to protect single packets independently and make it able to recover from packet losses prior to retransmission using FEC.

Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Design Overview In this document it’s proposed to protect whole QUIC packet, motivated by the applications described in introduction. Therefore, each protected packet corresponds to several repair symbols, and each repair symbol correspond to one protected packet. Prior to encryption, serialized QUIC packet is divided into several parts, called shards, each shard acts as source symbol and sequence of shards corresponding to single QUIC packet act as message (see ).

Example of packet division into two shards Number of shards depend on encoding algorithm and parameters used for protection. If the size of protected packet is either too small or can’t be evenly divided, then the protected packet may be padded with PADDING frame during serialization to achieve desirable size. It is noted that this method only protect the application data space. After sending protected packet, sender SHOULD encode corresponding shards into repair symbols and send them afterwards. Several repair symbols MAY be sent in one QUIC packet, but it’s RECOMMENDED to send repair symbols in separate packets. In general, distribution of repair symbols between packets depends on properties of concrete erasure code used. Each repair symbol MUST contain information about corresponding protected packet number. It allows to avoid marking protected packets with some FEC-specific id. Receiver MAY ignore repair symbols, particularly in the cases when corresponding protected packet is either already received or recovered. Repair symbols are accumulated on receiver either until recovery or the moment when recovery of corresponding lost packet is not possible anymore.

FEC and Loss Recovery The FEC extension described in this document SHOULD work as an addition to built-in QUIC loss recovery mechanism and intended only for faster recovery of data lost during transmission through network. Modules of QUIC, which rely on precise loss rate measurements (e.g. congestion control) during transmission, should be provided with actual packet loss rate from wire, rather than loss rate measured after recovery. Depending on repair symbol scheduling, packet recovery may be observed as packet reordering in wire, therefore should be properly accounted. Finally, FEC adaptive redundancy mechanism should consider possible losses incurred by congestion control overshooting and avoid positive feedback loop: recursively increase redundancy as a reaction to increased packet loss rate.

Protocol Extensions QUIC protocol extensions are specified in this sectioin.

Handshake Negotiation and Transport Parameter This extension defines a new transport parameter, used to negotiate the use of FEC extensions during the connection handshake, as specified in . The new transport parameter is defined as follows: enable_FEC: The enable_FEC transport parameter is included if the endpoint supports FEC mechanism and FEC extensions as defined in this draft. This parameter specify the the support FEC algorithm. How the FEC algorithm is encoded will be added in future versions.

Repair Symbol Frame FEC-REPAIR Frame are used by a sender to contain the FEC symbol which will be used by the receiver to recover a lost packet. FEC_REPAIR frames are formatted as follow .

FEC_REPAIR frame format It contains the following fields: FEC Version: A variable-length integer which specifies the encoding algorithm used and the structure of the following FEC Meta Data field. Packet Number Length: As defined in Protected Packet Number: The corresponding source packet number that the FEC frame protects. As defined in the packet number definition in . FEC Meta Data: A structure, which is intended for additional information about repair symbol, such as identificator of repair symbol in the coding block, encoding parameters, FEC Payload size, etc. Contents of this structure depend on concrete implementation and encoding algorithm used. Reserved: A variable-length integer reserved for future use. Default value is 0. FEC Payload: The bytes generated by FEC encoder for corresponding repair symbol.

Acknowledgement of recovered packets In order to inform sender about what packets have been recovered, acknowledgement of recovered packets MUST be provided. There are two alternatives to be consider:

Alternative 1: New FEC ACK Frame A new frame is proposed. Receiver SHOULD send FEC_ACK frame either after each recovery or with the first ACK frame after recovery.

FEC_ACK frame format FEC Latest Restored Packet Number: A variable-length integer which contains latest restored packet number. FEC Restored Bytes: A variable-length integer which contains number of bytes restored on receiver side. This field is intended for statistics collection and analysis on sender. FEC Restored Packets: A variable-length integer which contains number of packets restored on receiver side. This field is intended for statistics collection and analysis on sender. FEC Restored Packet List Size: A variable-length integer which contains amount of packet numbers following after in that frame. FEC Restored Packet Number: A list of recovered packet numbers listed in restoring order (newer first). This alternative doesn't modify the existing QUIC mechanisms and can be easily as a add-on to the current QUIC implementation.

Alternative 2: Extended ACK Frame This alternative is to extend ACK Frame to include optional FEC recovery information as defined in .

Loss Rate Calculation Using FEC recovery acknowledgement mechanism it’s possible to measure packet loss rate in network, considering the diagram as follow.

Relationship between acked and FEC acked protected packets It is suggested that FEC_ACK is a subset of ACK. In another words, if some PN is FEC acked, then it’s also is acked. To avoid the retransmssion of repaired lost packets, the receiver SHOULD include the recovered packets as the received packets in the ACK frames. When calculating the loss rate, the recovered packets SHOULD be considered as the lost packets as well.

Adaptive redundancy In order to achieve maximum efficiency, sender should change encoding algorithm parameters to match network conditions. To be precise, from a set of algorithm parameters, which provide a certain protection level at current network packet loss rate ( we provide example of relation between loss rate in BEC and performance of FEC scheme with fixed parameters as follow), choose one that have maximum coding rate. This way it will tend to reduce redundancy while providing certain level of protection.

Example of performance profile of a given FEC scheme

Security Consideration The FEC mechanism for QUIC only runs under 0-RTT and 1-RTT encryption levels and only operates inside the encrypted payload.

DoS due to difficult symbols recoveries An attacker could try to cause a DoS of a receiver by selectively sending repair symbols to trigger intensive erasure correction operations on the receiver. A QUIC receiver is never forced to perform any erasure correction and may ignore any received repair symbol if it has doubts in its capabilities to decode it in a reasonable amount of time.

IANA Considerations This document defines a new transport parameter for supporting FEC mechanisms, and possibly 2 new frame types.

List of new frames