path: root/doc/rfc/rfc9569.txt

Internet Engineering Task Force (IETF)                            K. Gao
Request for Comments: 9569                            Sichuan University
Category: Standards Track                                      R. Schott
ISSN: 2070-1721                                         Deutsche Telekom
                                                              Y. R. Yang
                                                             L. Delwiche
                                                               L. Keller
                                                         Yale University
                                                          September 2024


The Application-Layer Traffic Optimization (ALTO) Transport Information
                       Publication Service (TIPS)

Abstract

   "Application-Layer Traffic Optimization (ALTO) Protocol" (RFC 7285)
   leverages HTTP/1.1 and is designed for the simple, sequential
   request-reply use case, in which an ALTO client requests a sequence
   of information resources and the server responds with the complete
   content of each resource, one at a time.

   RFC 8895, which describes ALTO incremental updates using Server-Sent
   Events (SSE), defines a multiplexing protocol on top of HTTP/1.x, so
   that an ALTO server can incrementally push resource updates to
   clients whenever monitored network information resources change,
   allowing the clients to monitor multiple resources at the same time.
   However, HTTP/2 and later versions already support concurrent, non-
   blocking transport of multiple streams in the same HTTP connection.

   To take advantage of newer HTTP features, this document introduces
   the ALTO Transport Information Publication Service (TIPS).  TIPS uses
   an incremental RESTful design to give an ALTO client the new
   capability to explicitly and concurrently (in a non-blocking manner)
   request (or pull) specific incremental updates using HTTP/2 or
   HTTP/3, while still functioning for HTTP/1.1.

Status of This Memo

   This is an Internet Standards Track document.

   This document is a product of the Internet Engineering Task Force
   (IETF).  It represents the consensus of the IETF community.  It has
   received public review and has been approved for publication by the
   Internet Engineering Steering Group (IESG).  Further information on
   Internet Standards is available in Section 2 of RFC 7841.

   Information about the current status of this document, any errata,
   and how to provide feedback on it may be obtained at
   https://www.rfc-editor.org/info/rfc9569.

Copyright Notice

   Copyright (c) 2024 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (https://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Revised BSD License text as described in Section 4.e of the
   Trust Legal Provisions and are provided without warranty as described
   in the Revised BSD License.

Table of Contents

   1.  Introduction
     1.1.  Requirements Language
     1.2.  Notations
   2.  TIPS Overview
     2.1.  Transport Requirements
     2.2.  TIPS Terminology
   3.  TIPS Updates Graph
     3.1.  Basic Data Model of an Updates Graph
     3.2.  Updates Graph Modification Invariants
   4.  TIPS Workflow and Resource Location Schema
     4.1.  Workflow
     4.2.  Resource Location Schema
   5.  TIPS Information Resource Directory (IRD) Announcement
     5.1.  Media Type
     5.2.  Capabilities
     5.3.  Uses
     5.4.  An Example
   6.  TIPS Management
     6.1.  Open Request
     6.2.  Open Response
     6.3.  Open Example
       6.3.1.  Basic Example
       6.3.2.  Example Using Digest Authentication
       6.3.3.  Example Using ALTO/SSE
   7.  TIPS Data Transfers - Client Pull
     7.1.  Request
     7.2.  Response
     7.3.  Example
     7.4.  New Next Edge Recommendation
       7.4.1.  Request
       7.4.2.  Response
       7.4.3.  Example
   8.  Operation and Processing Considerations
     8.1.  Considerations for Load Balancing
     8.2.  Considerations for Cross-Resource Dependency Scheduling
     8.3.  Considerations for Managing Shared TIPS Views
     8.4.  Considerations for Offering Shortcut Incremental Updates
   9.  Security Considerations
     9.1.  TIPS: Denial-of-Service Attacks
     9.2.  ALTO Client: Update Overloading or Instability
   10. IANA Considerations
     10.1.  application/alto-tips+json Media Type
     10.2.  application/alto-tipsparams+json Media Type
   11. References
     11.1.  Normative References
     11.2.  Informative References
   Appendix A.  A High-Level Deployment Model
   Appendix B.  Conformance with "Building Protocols with HTTP" (RFC
           9205) Best Current Practices
   Appendix C.  Push-Mode TIPS Using HTTP Server Push
   Appendix D.  Persistent HTTP Connections
   Acknowledgments
   Authors' Addresses

1.  Introduction

   The Application-Layer Traffic Optimization (ALTO) protocol provides
   means for network applications to obtain network status information.
   So far, the ALTO information can be transported in two ways:

   1.  Using the ALTO base protocol [RFC7285], which is designed for the
       simple use case in which an ALTO client requests a network
       information resource and the server sends the complete content of
       the requested information (if any) resource to the client.

   2.  Using ALTO incremental updates using Server-Sent Events (ALTO/
       SSE) [RFC8895]; this method is designed for an ALTO client to
       indicate to the server that it wants to receive updates for a set
       of resources, and the server can then concurrently and
       incrementally push updates to that client whenever monitored
       resources change.

   Both protocols are designed for HTTP/1.1 [RFC9112].  While they still
   work with HTTP/2 [RFC9113] and HTTP/3 [RFC9114], ALTO and ALTO/SSE
   cannot take full advantage of new features offered by HTTP/2 and
   HTTP/3.

   *  First, consider the ALTO base protocol, which is designed to
      transfer only complete information resources.  A client can run
      the base protocol on top of HTTP/2 or HTTP/3 to request multiple
      information resources in concurrent streams, but each request must
      be for a complete information resource: there is no capability for
      the server to transmit incremental updates.  Hence, there can be a
      large overhead when the client already has an information resource
      and then there are small changes to the resource.

   *  Next, consider ALTO/SSE [RFC8895].  Although ALTO/SSE can transfer
      incremental updates, it introduces a customized multiplexing
      protocol on top of HTTP, assuming a total-order message channel
      from the server to the client.  The multiplexing design does not
      provide naming (i.e., a resource identifier) to individual
      incremental updates.  Such a design cannot use concurrent data
      streams available in HTTP/2 and HTTP/3 because both cases require
      a resource identifier.  Additionally, ALTO/SSE is a push-only
      protocol, which denies the client flexibility in choosing how and
      when it receives updates.

   To mitigate these concerns, this document introduces a new ALTO
   service called the Transport Information Publication Service (TIPS).
   TIPS uses an incremental RESTful design to provide an ALTO client
   with a new capability to explicitly, concurrently issue non-blocking
   requests for specific incremental updates using HTTP/2 or HTTP/3,
   while still functioning for HTTP/1.1.

   While both ALTO/SSE [RFC8895] and TIPS can transport incremental
   updates of ALTO information resources to clients, they have different
   design goals.  The TIPS extension enables more scalable and robust
   distribution of incremental updates but is missing the session
   management and built-in server push capabilities of ALTO/SSE.  From
   the performance perspective, TIPS is optimizing throughput by
   leveraging concurrent and out-of-order transport of data, while ALTO/
   SSE is optimizing latency as new events can be immediately
   transferred to the clients without waiting for another round of
   communication when there are multiple updates.  Thus, we do not see
   TIPS as a replacement for ALTO/SSE, but as a complement to it.  One
   example of combining these two extensions is shown in Section 6.3.3.

   Note that future extensions may leverage server push, a feature of
   HTTP/2 [RFC9113] and HTTP/3 [RFC9114], as an alternative of SSE.  We
   discuss why this alternative design is not ready at the time of
   writing in Appendix C.

   Specifically, this document specifies:

   *  Extensions to the ALTO Protocol for dynamic subscription and
      efficient uniform update delivery of an incrementally changing
      network information resource.

   *  A new resource type that indicates the TIPS updates graph model
      for a resource.

   *  URI patterns to fetch the snapshots or incremental updates.

   Some operational complexities that must be taken into consideration
   when implementing this extension are discussed in Section 8: these
   include load balancing in Section 8.1 and fetching and processing
   incremental updates of dependent resources in Section 8.2.

   Appendix B discusses to what extent the TIPS design adheres to the
   best current practices for building protocols with HTTP [RFC9205].

1.1.  Requirements Language

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in
   BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
   capitals, as shown here.

1.2.  Notations

   This document uses the same syntax and notations as introduced in
   Section 8.2 of [RFC7285] to specify the extensions to existing ALTO
   resources and services.

2.  TIPS Overview

2.1.  Transport Requirements

   The ALTO Protocol and its extensions support two transport
   mechanisms:

   1.  A client can directly request an ALTO resource and obtain a
       complete snapshot of that ALTO resource, as specified in the base
       protocol [RFC7285];

   2.  A client can subscribe to incremental changes of one or multiple
       ALTO resources using the incremental update extension [RFC8895],
       and a server pushes the updates to the client through SSE.

   However, the current transport mechanisms are not optimized for
   storing, transmitting, and processing (incremental) updates of ALTO
   information resources.  Specifically, the new transport mechanism
   must satisfy the following requirements:

   Incremental updates:  Incremental updates only maintain and transfer
      the "diff" upon changes.  Thus, it is more efficient than storing
      and transferring the full updates, especially when the change of
      an ALTO resource is minor.  The base protocol does not support
      incremental updates and the current incremental update mechanism
      in [RFC8895] has limitations (as discussed below).

   Concurrent, non-blocking update transmission:  When a client needs to
      receive and apply multiple incremental updates, it is desired to
      transmit the updates concurrently to fully utilize the bandwidth
      and to reduce head-of-line blocking.  Unfortunately, the ALTO
      incremental update extension [RFC8895] does not satisfy this
      requirement.  Even though the updates can be multiplexed by the
      server to avoid head-of-line blocking between multiple resources,
      the updates are delivered sequentially and can suffer from head-
      of-line blocking inside the connection (for example, when there is
      a packet loss).

   Long polling updates:  Long polling updates can reduce the time to
      send the request, making it possible to achieve sub-RTT
      transmission of ALTO incremental updates.  In [RFC8895], this
      requirement is fulfilled using SSE and is still desired in the new
      ALTO transport.

   Backward compatibility:  While some of the previous requirements are
      offered by HTTP/2 [RFC9113] and HTTP/3 [RFC9114], it is desired
      that the new ALTO transport mechanism can work with HTTP/1.1 as
      many development tools and current ALTO implementations are based
      on HTTP/1.1.

   The new ALTO transport specified in this document satisfies all of
   the following design requirements above by:

   *  Reusing the data format introduced in [RFC8895] that enables
      incremental updates using JSON patches or merge patches.

   *  Introducing a unified data model to describe the changes
      (snapshots and incremental updates) of an ALTO resource, referred
      to as a "TIPS view".  In the data model, snapshots and incremental
      updates are indexed as individual HTTP resources following a
      unified naming convention, independent of the HTTP version.  Thus,
      these updates can be concurrently requested and be transferred in
      a non-blocking manner either by using multiple connections or
      leveraging multiplexed data transfer offered by HTTP/2 or HTTP/3.

   *  Basing the unified naming convention on a monotonically increasing
      sequence number, making it possible for a client to construct the
      URL of a future update and send a long polling request.

   *  Making the unified naming convention independent of the HTTP
      versions and able to operate atop HTTP/1.1, HTTP/2, or HTTP/3.

   This document assumes the deployment model discussed in Appendix A.

2.2.  TIPS Terminology

   In addition to the terms defined in [RFC7285], this document uses the
   following terms:

   Transport Information Publication Service (TIPS):  A new type of ALTO
      service, as specified in this document, to enable a uniform
      transport mechanism for updates of an incrementally changing ALTO
      network information resource.

   Network information resource:  A piece of retrievable information
      about network state, per [RFC7285].

   TIPS view (tv):  The container of incremental transport information
      about the network information resource.  The TIPS view has one
      basic component, the updates graph (ug), but may include other
      transport information.

   Updates graph (ug):  A directed, acyclic graph whose nodes represent
      the set of versions of an information resource and whose edges
      represent the set of update items to compute these versions.  An
      ALTO map service (e.g., a cost map or a network map) may need only
      a single updates graph.  A dynamic network information service
      (e.g., a filtered cost map) may create an updates graph (within a
      new TIPS view) for each unique request.  The encoding of an
      updates graph is specified in Section 6.1.

   Version:  The representation of a historical content of an
      information resource.  For an information resource, each version
      is associated with and uniquely identified by a monotonically and
      consecutively increased sequence number.  This document uses the
      term "version s" to refer to the version associated with sequence
      number "s".  The version is encoded as a JSONNumber, as specified
      in Section 6.1.

   Start sequence number (<start-seq>):  The smallest non-zero sequence
      number in an updates graph.

   End sequence number (<end-seq>):  The largest sequence number in an
      updates graph.

   Snapshot:  A full replacement of a resource that is contained within
      an updates graph.

   Incremental update:  A partial replacement of a resource contained
      within an updates graph, codified in this document as a JSON merge
      patch or a JSON patch.  An incremental update is mandatory if the
      source version (i) and the target version (j) are consecutive
      (i.e., i + 1 = j); otherwise, it is optional (or a shortcut).
      Mandatory incremental updates are always in an updates graph,
      while optional/shortcut incremental updates may or may not be
      included in an updates graph.

   Update item:  The content on an edge of the updates graph, which can
      be either a snapshot or an incremental update.  An update item can
      be considered to be a pair (op, data) where op denotes whether the
      item is an incremental update or a snapshot and data is the
      content of the item.

   ID#i-#j:  Denotation of the update item on a specific edge in the
      updates graph to transition from version i to version j, where i
      and j are the sequence numbers of the source node and the target
      node of the edge, respectively.

                                       +-------------+
        +-----------+ +--------------+ |  Dynamic    | +-----------+
        |  Routing  | | Provisioning | |  Network    | | External  |
        | Protocols | |    Policy    | | Information | | Interface |
        +-----------+ +--------------+ +-------------+ +-----------+
              |              |                |              |
    +-----------------------------------------------------------------+
    | ALTO Server                                                     |
    | +-------------------------------------------------------------+ |
    | |                                         Network Information | |
    | | +-------------+                         +-------------+     | |
    | | | Information |                         | Information |     | |
    | | | Resource #1 |                         | Resource #2 |     | |
    | | +-------------+                         +-------------+     | |
    | +-----|--------------------------------------/-------\--------+ |
    |       |                                     /         \         |
    | +-----|------------------------------------/-----------\------+ |
    | |     |       Transport Information       /             \     | |
    | | +--------+                     +--------+        +--------+ | |
    | | |  tv1   |                     |  tv2   |        |  tv3   | | |
    | | +--------+                     +--------+        +--------+ | |
    | |     |                          /                     |      | |
    | | +--------+            +--------+                 +--------+ | |
    | | | tv1/ug |            | tv2/ug |                 | tv3/ug | | |
    | | +--------+            +--------+                 +--------+ | |
    | +----|----\----------------|-------------------------|--------+ |
    |      |     \               |                         |          |
    +------|------\--------------|-------------------------|----------+
           |       +------+      |                         |
           |               \     |                         |
       +----------+       +----------+                 +----------+
       | Client 1 |       | Client 2 |                 | Client 3 |
       +----------+       +----------+                 +----------+

    tvi   = TIPS view i
    tvi/ug = incremental updates graph associated with tvi

                      Figure 1: Overview of ALTO TIPS

   Figure 1 shows an example illustrating an overview of the ALTO TIPS
   extension.  The server provides TIPS for two information resources
   (#1 and #2) where #1 is an ALTO map service and #2 is a filterable
   service.  There are three ALTO clients (Client 1, Client 2, and
   Client 3) that are connected to the ALTO server.

   Each client uses the TIPS view to retrieve updates.  Specifically, a
   TIPS view (tv1) is created for the map service #1 and is shared by
   multiple clients.  For the filtering service #2, two different TIPS
   views (tv2 and tv3) are created upon different client requests with
   different filter sets.

3.  TIPS Updates Graph

   In order to provide incremental updates for a resource, an ALTO
   server creates an updates graph, which is a directed acyclic graph
   that contains a sequence of incremental updates and snapshots
   (collectively called "update items") of a network information
   resource.

3.1.  Basic Data Model of an Updates Graph

   For each resource (e.g., a cost map or a network map), the
   incremental updates and snapshots can be represented using the
   following directed acyclic graph model, where the server tracks the
   change of the resource maps with version IDs that are assigned
   sequentially (i.e., incremented by one each time):

   *  Each node in the graph is a version of the resource, which is
      identified by a sequence number (defined as a JSONNumber).
      Version 0 is reserved as the initial state (empty/null).

   *  A tag identifies the content of a node.  A tag has the same format
      as the "tag" field in Section 10.3 of [RFC7285] and is valid only
      within the scope of the resource.

   *  Each edge is an update item.  In particular, the edge from i to j
      is the update item to transit from version i to version j.

   *  The version is path independent, i.e., different paths arriving at
      the node associated with the same version have the same content.

   A concrete example is shown in Figure 2.  There are seven nodes in
   the graph, representing seven different versions of the resource.
   Edges in the figure represent the updates from the source version to
   the target version.  Thick lines represent mandatory incremental
   updates (e.g., ID103-104), dotted lines represent optional
   incremental updates (e.g., ID103-105), and thin lines represent
   snapshots (e.g., ID0-103).  Note that node content is path
   independent: the content of node v can be obtained by applying the
   updates from any path that ends at v.  For example, assume the latest
   version is 105 and a client already has version 103.  The base
   version of the client is 103 as it serves as a base upon which
   incremental updates can be applied.

   The target version 105 can be:

   *  directly fetched as a snapshot;

   *  computed incrementally by applying the incremental updates between
      103 and 104, then 104 and 105; or,

   *  computed incrementally by taking the "shortcut" path from 103 to
      105 if the optional update from 103 to 105 exists.

                                                        +======+
                                                  ------|  0   |
                                                 /      +======+
                                        ID0-101 /        |   |
                                              |/__       |   |
                                       +======+          |   |
                       tag: 3421097 -> | 101  |          |   |
                                       +======+          |   |
                               ID101-102  ||             |   |
                                          \/             |   |
                                       +======+          |   |
                       tag: 6431234 -> | 102  |          |   |
                                       +======+          |   |
                               ID102-103  ||             |   |
                                          \/             |   |
                                       +======+          /   |
    +--------------+   tag: 0881080 -> | 103  |<--------/    |
    | Base Version |   =======>        +======+ ID0-103      |
    +--------------+             103-104  ||    ..           |
                                          \/     ..          |
                                       +======+  ..          |
                       tag: 6452654 -> | 104  |  .. ID103    |
                                       +======+  .. -105     |
                               ID104-105  ||     ..          | ID0-105
                                          \/   |._           /
                                       +======+             /
                       tag: 7838392 -> | 105  |<-----------/
                                       +======+
                               ID105-106  ||
                                          \/
                                       +======+
                       tag: 6470983 -> | 106  |
                                       +======+

                        Figure 2: TIPS Model Example

3.2.  Updates Graph Modification Invariants

   A server might change its updates graph (to compact it, to add nodes,
   etc.), but it will need to ensure that any resource state that it
   makes available is reachable by clients, either directly via a
   snapshot (that is, relative to 0) or indirectly by requesting an
   earlier snapshot and a contiguous set of incremental updates.
   Additionally, to allow clients to proactively construct URIs for
   future update items, the ID of each added node in the updates graph
   will need to increment contiguously by 1.  More specifically, the
   updates graph MUST satisfy the following invariants:

   Continuity:  At any time, let ns denote the smallest non-zero version
      (i.e., <start-seq>) in the updates graph and let ne denote the
      latest version (i.e., <end-seq>).  Then, any version in between ns
      and ne MUST also exist.  This implies that the incremental update
      from ni to ni + 1 exists for any ns <= ni <= ne, and all the
      version numbers in the updates graph (except 0) constitute exactly
      the integer interval [ns, ne].

   Feasibility:  Let ns denote <start-seq> in the updates graph.  The
      server MUST provide a snapshot of ns; in other words, there is
      always a direct link to ns in the updates graph.

   "Right shift" only:  Assume a server provides versions in [n1, n2] at
      time t and versions in [n1', n2'] at time t'.  If t' > t, then n1'
      >= n1 and n2' >= n2.

   For example, consider the case that a server compacts a resource's
   updates graph to conserve space, using the example model in
   Section 3.1.  Assume at time 0, the server provides the versions
   {101, 102, 103, 104, 105, 106}.  At time 1, both {103, 104, 105, 106}
   and {105, 106} are valid sets.  However, {102, 103, 104, 105, 106}
   and {104, 105, 106} are not valid sets as there is no snapshot to
   version 102 or 104 in the updates graph.  Thus, there is a risk that
   the right content of version 102 (in the first example) or 104 (in
   the second example) cannot be obtained by a client that does not have
   the previous version 101 or 103, respectively.

4.  TIPS Workflow and Resource Location Schema

4.1.  Workflow

   At a high level, an ALTO client first requests the TIPS information
   resource (denoted as TIPS-F, where F is for frontend) to indicate the
   information resource or resources that the client wants to monitor.
   For each requested resource, the server returns a JSON object that
   contains a URI, which points to the root of a TIPS view (denoted as
   TIPS-V), and a summary of the current view, which contains the
   information to correctly interact with the current view.  With the
   URI to the root of a TIPS view, clients can construct URIs (see
   Section 4.2) to fetch incremental updates.

   An example workflow is shown in Figure 3.  After the TIPS-F receives
   the request from the client to monitor the updates of an ALTO
   resource, it creates a TIPS view resource and returns the
   corresponding information to the client.  The URI points to that
   specific TIPS-V instance, and the summary contains the <start-seq>
   and <end-seq> of the updates graph and a server-recommended edge to
   consume first (e.g., from i to j).

   An ALTO client can then continuously pull each additional update with
   the information.  For example, the client in Figure 3 first fetches
   the update from i to j and then from j to j+1.  Note that the update
   item at "<tips-view-uri>/ug/<j>/<j+1>" might not yet exist, so the
   server holds the request until the update becomes available (i.e.,
   long polling).

   A server MAY close a TIPS view at any time (e.g., under high system
   load or due to client inactivity).  In the event that a TIPS view is
   closed, an edge request will receive error code 404 (Not Found) in
   response, and the client will have to request a new TIPS view URI.

   If resources allow, a server SHOULD avoid closing TIPS views that
   have active polling edge requests or have recently served responses
   until clients have had a reasonable interval to request the next
   update, unless guided by specific control policies.

      Client                                 TIPS-F           TIPS-V
        o                                       .                .
        | POST to create/receive a TIPS view    .  Create TIPS   .
        |           for resource 1              .      View      .
        |-------------------------------------> |.-.-.-.-.-.-.-> |
        | <tips-view-uri>, <tips-view-summary>  .                |
        | <-------------------------------------| <-.-.-.-.-.-.-.|
        |                                                        .
        | GET /<tips-view-path>/ug/<i>/<j>                       .
        |------------------------------------------------------> |
        | content on edge i to j                                 |
        | <------------------------------------------------------|
        |                                                        .
        | GET /<tips-view-path>/ug/<j>/<j+1>                     .
        |------------------------------------------------------> |
        .                                                        .
        .                                                        .
        | content on edge j to j+1                               |
        | <------------------------------------------------------|
        |                                                        .
        o                                                        .
                                                                 .
                                               TIPS View Closed  o

            Figure 3: ALTO TIPS Workflow Supporting Client Pull

4.2.  Resource Location Schema

   The resource location schema defines how a client constructs URIs to
   fetch incremental updates.

   To access each update in an updates graph, consider the model
   represented as a "virtual" file system (adjacency list), contained
   within the root of a TIPS view URI (see Section 6.2 for the
   definition of tips-view-uri).  For example, assuming that the updates
   graph of a TIPS view is as shown in Figure 2, the location schema of
   this TIPS view will have the format as in Figure 4.

       <tips-view-path>  // root path to a TIPS view
         |_ ug    // updates graph
         |  |_ 0
         |  |  |_ 101    // full 101 snapshot
         |  |  |_ 103
         |  |  \_ 105
         |  |_ 101
         |  |  \_ 102    // 101 -> 102 incremental update
         |  |_ 102
         |  |  \_ 103
         |  |_ 103
         |  |  |_ 104
         |  |  \_ 105    // optional shortcut 103 -> 105 incr. update
         |  |_ 104
         |  |  \_ 105
         |  \_ 105
         |     \_ 106
         \_ ...

                     Figure 4: Location Schema Example

   TIPS uses this directory schema to generate template URIs that allow
   clients to construct the location of incremental updates after
   receiving the tips-view-uri from the server.  The generic template
   for the location of the update item on the edge from node 'i' to node
   'j' in the updates graph is:

       <tips-view-uri>/ug/<i>/<j>

   Due to the sequential nature of the update item IDs, a client can
   long poll a future update that does not yet exist (e.g., the
   incremental update from 106 to 107).  This can be done by
   constructing the URI for the next edge that will be added, starting
   from the sequence number of the current last node (denoted as <end-
   seq>) in the graph to the next sequential node (with the sequence
   number of <end-seq + 1>):

       <tips-view-uri>/ug/<end-seq>/<end-seq + 1>

   Incremental updates of a TIPS view are read-only.  Thus, they are
   fetched using the HTTP GET method.

5.  TIPS Information Resource Directory (IRD) Announcement

   To announce a TIPS information resource in the IRD, an ALTO server
   MUST specify "media-type", "capabilities", and "uses" as follows.

5.1.  Media Type

   The media type of the Transport Information Publication Service
   (TIPS) resource is "application/alto-tips+json".

5.2.  Capabilities

   The "capabilities" field of a TIPS information resource is modeled on
   that defined in Section 6.3 of [RFC8895].

   Specifically, the capabilities are defined as an object of the
   TIPSCapabilities type:

        object {
          IncrementalUpdateMediaTypes incremental-change-media-types;
        } TIPSCapabilities;

        object-map {
           ResourceID -> String;
        } IncrementalUpdateMediaTypes;

                         Figure 5: TIPSCapabilities

   with the field:

   incremental-change-media-types:  If a TIPS information resource can
      provide updates with incremental changes for a resource, the
      "incremental-change-media-types" field has an entry whose key is
      the ID of the resource and the value is the supported media types
      of incremental changes, separated by commas.  For the
      implementation of this specification, this MUST be "application/
      merge-patch+json", "application/json-patch+json", or "application/
      merge-patch+json,application/json-patch+json", unless defined by a
      future extension.

      When choosing the media types to encode incremental updates for a
      resource, the server MUST consider the limitations of the
      encoding.  For example, when a JSON merge patch specifies that the
      value of a field is null, its semantics are that the field is
      removed from the target; hence, the field is no longer defined
      (i.e., undefined).  However, this may not be the intended result
      for the resource, when null and undefined have different semantics
      for the resource.  In such a case, the server MUST choose JSON
      patch encoding over JSON merge patch encoding for the incremental
      update if both media types "application/json-patch+json" and
      "application/merge-patch" are supported by the TIPS information
      resource.

5.3.  Uses

   The "uses" attribute MUST be an array with the resource IDs of every
   network information resource for which this TIPS information resource
   can provide service.

   This set MAY be any subset of the ALTO server's network information
   resources and MAY include resources defined in linked IRDs.  However,
   it is RECOMMENDED that the ALTO server selects a set that is closed
   under the resource dependency relationship.  That is, if a TIPS
   information resource's "uses" set includes resource R1, and resource
   R1 depends on ("uses") resource R0, then the "uses" set should
   include R0 as well as R1.  For example, if a TIPS information
   resource provides a TIPS view for a cost map, it should also provide
   a TIPS view for the network map upon which that cost map depends.

   If the set is not closed, at least one resource R1 in the "uses"
   field of a TIPS information resource depends on another resource R0
   that is not in the "uses" field of the same TIPS information
   resource.  Thus, a client cannot receive incremental updates for
   another resource R0 that is not in the "uses" field of the same TIPS
   information resource.  If the client observes in an update of R1 that
   the version tag for R0 has changed, it must request the full content
   of R0, which is likely to be less efficient than receiving the
   incremental updates of R0.

5.4.  An Example

   Extending the IRD example in Section 8.1 of [RFC8895], Figure 6 is
   the IRD of an ALTO server supporting the ALTO base protocol, ALTO/
   SSE, and ALTO TIPS.

     "my-network-map": {
       "uri": "https://alto.example.com/networkmap",
       "media-type": "application/alto-networkmap+json"
     },
     "my-routingcost-map": {
       "uri": "https://alto.example.com/costmap/routingcost",
       "media-type": "application/alto-costmap+json",
       "uses": ["my-network-map"],
       "capabilities": {
         "cost-type-names": ["num-routingcost"]
       }
     },
     "my-hopcount-map": {
       "uri": "https://alto.example.com/costmap/hopcount",
       "media-type": "application/alto-costmap+json",
       "uses": ["my-network-map"],
       "capabilities": {
         "cost-type-names": ["num-hopcount"]
       }
     },
     "my-simple-filtered-cost-map": {
       "uri": "https://alto.example.com/costmap/filtered/simple",
       "media-type": "application/alto-costmap+json",
       "accepts": "application/alto-costmapfilter+json",
       "uses": ["my-network-map"],
       "capabilities": {
         "cost-type-names": ["num-routingcost", "num-hopcount"],
         "cost-constraints": false
       }
     },
     "update-my-costs": {
       "uri": "https://alto.example.com/updates/costs",
       "media-type": "text/event-stream",
       "accepts": "application/alto-updatestreamparams+json",
       "uses": [
           "my-network-map",
           "my-routingcost-map",
           "my-hopcount-map",
           "my-simple-filtered-cost-map"
       ],
       "capabilities": {
         "incremental-change-media-types": {
           "my-network-map": "application/json-patch+json",
           "my-routingcost-map": "application/merge-patch+json",
           "my-hopcount-map": "application/merge-patch+json"
         },
         "support-stream-control": true
       }
     },
     "update-my-costs-tips": {
       "uri": "https://alto.example.com/updates-new/costs",
       "media-type": "application/alto-tips+json",
       "accepts": "application/alto-tipsparams+json",
       "uses": [
           "my-network-map",
           "my-routingcost-map",
           "my-hopcount-map",
           "my-simple-filtered-cost-map"
       ],
       "capabilities": {
         "incremental-change-media-types": {
           "my-network-map": "application/json-patch+json",
           "my-routingcost-map": "application/merge-patch+json",
           "my-hopcount-map": "application/merge-patch+json",
           "my-simple-filtered-cost-map": "application/merge-patch+json"
         }
       }
     },
     "tips-sse": {
       "uri": "https://alto.example.com/updates/tips",
       "media-type": "text/event-stream",
       "accepts": "application/alto-updatestreamparams+json",
       "uses": [ "update-my-costs-tips" ],
       "capabilities": {
         "incremental-change-media-types": {
           "update-my-costs-tips": "application/merge-patch+json"
         }
       }
     }

        Figure 6: Example of an ALTO Server Supporting the ALTO Base
                     Protocol, ALTO/SSE, and ALTO TIPS

   Note that it is straightforward for an ALTO server to run HTTP/2 and
   support concurrent retrieval of multiple resources such as "my-
   network-map" and "my-routingcost-map" using multiple HTTP/2 streams.

   The resource "update-my-costs-tips" provides an ALTO TIPS information
   resource, and this is indicated by the media type "application/alto-
   tips+json".

6.  TIPS Management

   Upon request, a server sends a TIPS view to a client.  This TIPS view
   might be created at the time of the request or might already exist
   (either because another client has already created a TIPS view for
   the same requested network resource or because the server perpetually
   maintains a TIPS view for an often-requested resource).

6.1.  Open Request

   An ALTO client requests that the server provide a TIPS view for a
   given resource by sending an HTTP POST body with the media type
   "application/alto-tipsparams+json".  That body contains a JSON object
   of the TIPSReq type, where:

       object {
          ResourceID   resource-id;
          [JSONString  tag;]
          [Object      input;]
       } TIPSReq;

                             Figure 7: TIPSReq

   with the following fields:

   resource-id:  This field contains the resource ID of an ALTO resource
      to be monitored, which MUST be in the TIPS information resource's
      "uses" list (Section 5).  If a client does not support all
      incremental methods from the set announced in the server's
      capabilities, the client MUST NOT use the TIPS information
      resource.

   tag:  If the "resource-id" is associated with a GET-mode resource
      with a version tag (or "vtag"), as defined in Section 10.3 of
      [RFC7285], and the ALTO client has previously retrieved a version
      of that resource from ALTO, the ALTO client MAY set the "tag"
      field to the tag part of the client's version of that resource.
      The server MAY use the tag when calculating a recommended starting
      edge for the client to consume.  Note that the client MUST support
      all incremental methods from the set announced in the server's
      capabilities for this resource.

   input:  If the resource is a POST-mode service that requires input,
      the ALTO client MUST set the "input" field to a JSON object with
      the parameters that the resource expects.

6.2.  Open Response

   The response to a valid request MUST be a JSON object of the
   AddTIPSResponse type, denoted as media type "application/alto-
   tips+json":

       object {
         URI               tips-view-uri;
         TIPSViewSummary   tips-view-summary;
       } AddTIPSResponse;

       object {
         UpdatesGraphSummary   updates-graph-summary;
       } TIPSViewSummary;

       object {
         JSONNumber       start-seq;
         JSONNumber       end-seq;
         StartEdgeRec     start-edge-rec;
       } UpdatesGraphSummary;

       object {
         JSONNumber       seq-i;
         JSONNumber       seq-j;
       } StartEdgeRec;

                         Figure 8: AddTIPSResponse

   with the following fields:

   tips-view-uri:  This is the URI to the requested TIPS view.  The
      value of this field MUST have the following format:

          scheme "://" tips-view-host "/" tips-view-path

          tips-view-host = host [ ":" port]
          tips-view-path = path

      where scheme MUST be "http" or "https" unless specified by a
      future extension, and host, port, and path are as specified in
      Sections 3.2.2, 3.2.3, and 3.3 in [RFC3986].  An ALTO server
      SHOULD use the "https" scheme unless the contents of the TIPS view
      are intended to be publicly accessible and do not raise security
      concerns.  The field MUST contain only ASCII characters.  In case
      the original URL contains international characters (e.g., in the
      domain name), the ALTO server implementation MUST properly encode
      the URL into the ASCII format (e.g., using the "urlencode"
      function).

      A server MUST NOT use the same URI for different TIPS views,
      either for different resources or for different request bodies to
      the same resource.  URI generation is implementation specific; for
      example, one may compute a Universally Unique Identifier (UUID)
      [RFC9562] or a hash value based on the request and append it to a
      base URL.  For performance considerations, it is NOT RECOMMENDED
      to use properties that are not included in the request body to
      determine the URI of a TIPS view, such as cookies or the client's
      IP address, which may result in duplicated TIPS views in cases
      such as mobile clients.  However, this is not mandatory as a
      server might intentionally use client information to compute the
      TIPS view URI to provide service isolation between clients.

   tips-view-summary:  Contains an updates-graph-summary.

      The "updates-graph-summary" field contains the <start-seq> of the
      updates graph (in the "start-seq" field) and the <end-seq> that is
      currently available (in the "end-seq" field), along with a
      recommended edge to consume (in the "start-edge-rec" field).  If
      the client does not provide a version tag, the server MUST
      recommend the edge of the latest available snapshot.  If the
      client provides a version tag, the server MUST either recommend
      the first incremental update edge starting from the client's
      tagged version or recommend the edge of the latest snapshot: which
      edge is selected depends on the implementation.  For example, a
      server MAY calculate the cumulative size of the incremental
      updates available from that version onward and compare it to the
      size of the complete resource snapshot.  If the snapshot is
      bigger, the server recommends the first incremental update edge
      starting from the client's tagged version.  Otherwise, the server
      recommends the latest snapshot edge.

   If the request has any errors, the ALTO server MUST return an HTTP
   400 (Bad Request) error code to the ALTO client; the body of the
   response follows the generic ALTO error response format specified in
   Section 8.5.2 of [RFC7285].  Hence, an example ALTO error response
   has the format shown in Figure 9.

       HTTP/1.1 400 Bad Request
       Content-Length: 131
       Content-Type: application/alto-error+json

       {
           "meta":{
               "code":  "E_INVALID_FIELD_VALUE",
               "field": "resource-id",
               "value": "my-network-map/#"
           }
       }

                        Figure 9: ALTO Error Example

   Note that "field" and "value" are optional fields.  If the "value"
   field exists, the "field" field MUST exist.

   *  If the TIPS request does not have a "resource-id" field, the error
      code of the error message MUST be "E_MISSING_FIELD" and the
      "field" field, if present, MUST be "resource-id".  The ALTO server
      MUST NOT create any TIPS view.

   *  If the "resource-id" field is invalid or is not associated with
      the TIPS information resource, the error code of the error message
      MUST be "E_INVALID_FIELD_VALUE".  If present, the "field" field
      MUST be the full path of the "resource-id" field, and the "value"
      field MUST be the value of the "resource-id" field in the request.

   *  If the resource is a POST-mode service that requires input, the
      client MUST set the "input" field to a JSON object with the
      parameters that resource expects.  If the "input" field is missing
      or invalid, the ALTO server MUST return the same error response
      that resource would return for missing or invalid inputs (see
      [RFC7285]).

   Furthermore, it is RECOMMENDED that the server use the following HTTP
   code to indicate other errors, with the media type "application/alto-
   error+json".

   429 (Too Many Requests):  Indicates when the number of TIPS views
      open requests exceeds the server threshold.  The server MAY
      indicate when to retry the request in the "Re-Try After" headers.

   It is RECOMMENDED that the server provide the ALTO/SSE support for
   the TIPS resource.  Thus, the client can be notified of the version
   updates of all the TIPS views that it monitors and make better cross-
   resource transport decisions (see Section 8.2 for related
   considerations).

6.3.  Open Example

6.3.1.  Basic Example

   For simplicity, assume that the ALTO server is using Basic
   authentication [RFC7617].  If a client with username "client1" and
   password "helloalto" wants to create a TIPS view of an ALTO cost map
   resource with the resource ID "my-routingcost-map", it can send the
   request depicted in Figure 10.

       POST /tips HTTP/1.1
       Host: alto.example.com
       Accept: application/alto-tips+json, application/alto-error+json
       Authorization: Basic Y2xpZW50MTpoZWxsb2FsdG8K
       Content-Type: application/alto-tipsparams+json
       Content-Length: 41

       {
         "resource-id": "my-routingcost-map"
       }

             Figure 10: Request Example of Opening a TIPS View

   If the operation is successful, the ALTO server returns the message
   shown in Figure 11.

       HTTP/1.1 200 OK
       Content-Type: application/alto-tips+json
       Content-Length: 255

       {
         "tips-view-uri": "https://alto.example.com/tips/2718281828",
         "tips-view-summary": {
           "updates-graph-summary": {
             "start-seq": 101,
             "end-seq": 106,
             "start-edge-rec" : {
               "seq-i": 0,
               "seq-j": 105
             }
           }
         }
       }

             Figure 11: Response Example of Opening a TIPS View

6.3.2.  Example Using Digest Authentication

   Below is another example of the same query using Digest
   authentication, a mandatory authentication method of ALTO servers as
   defined in Section 8.3.5 of [RFC7285].  The content of the response
   is the same as in Figure 11; thus, it has been omitted for
   simplicity.

       POST /tips HTTP/1.1
       Host: alto.example.com
       Accept: application/alto-tips+json, application/alto-error+json
       Authorization: Basic Y2xpZW50MTpoZWxsb2FsdG8K
       Content-Type: application/alto-tipsparams+json
       Content-Length: 41

       {
         "resource-id": "my-routingcost-map"
       }

       HTTP/1.1 401 UNAUTHORIZED
       WWW-Authenticate: Digest
           realm="alto.example.com",
           qop="auth",
           algorithm="MD5",
           nonce="173b5aba4242409ee2ac3a4fd797f9d7",
           opaque="a237ff9ab865379a69d9993162ef55e4"

       POST /tips HTTP/1.1
       Host: alto.example.com
       Accept: application/alto-tips+json, application/alto-error+json
       Authorization: Digest
           username="client1",
           realm="alto.example.com",
           uri="/tips",
           qop=auth,
           algorithm=MD5,
           nonce="173b5aba4242409ee2ac3a4fd797f9d7",
           nc=00000001,
           cnonce="ZTg3MTI3NDFmMDQ0NzI1MDQ3MWE3ZTFjZmM5MTNiM2I=",
           response="8e937ae696c1512e4f990fa21c7f9347",
           opaque="a237ff9ab865379a69d9993162ef55e4"
       Content-Type: application/alto-tipsparams+json
       Content-Length: 41

       {
         "resource-id": "my-routingcost-map"
       }


       HTTP/1.1 200 OK
       Content-Type: application/alto-tips+json
       Content-Length: 258

       {....}

             Figure 12: Open Example with Digest Authentication

6.3.3.  Example Using ALTO/SSE

   This section gives an example of receiving incremental updates of the
   TIPS view summary using ALTO/SSE [RFC8895].  Consider the "tips-sse"
   resource, as announced by the IRD in Figure 6, which provides ALTO/
   SSE for the "update-my-cost-tips" resource; a client might send the
   following request to receive updates of the TIPS view (authentication
   is omitted for simplicity).

       POST /updates/tips HTTP/1.1
       Host: alto.example.com
       Accept: text/event-stream,application/alto-error+json
       Content-Type: application/alto-updatestreamparams+json
       Content-Length: 76

       {
         "add": {
           "tips-123": { "resource-id": "update-my-cost-tips" }
         }
       }

          Figure 13: Example of Monitoring TIPS View with ALTO/SSE

   Then, the client will be able to receive the TIPS view summary as
   follows.

    HTTP/1.1 200 OK
    Connection: keep-alive
    Content-Type: text/event-stream

    event: application/alto-tips+json,tips-123
    data: {
    data:   "tips-view-uri": "https://alto.example.com/tips/2718281828",
    data:   "tips-view-summary": {
    data:     "updates-graph-summary": {
    data:       "start-seq": 101,
    data:       "end-seq": 106,
    data:       "start-edge-rec" : {
    data:         "seq-i": 0,
    data:         "seq-j": 105
    data:       }
    data:     }
    data:   }
    data: }

   When there is an update to the TIPS view (for example, when the "end-
   seq" field is increased by 1), the client will be able to receive the
   incremental update of the TIPS view summary as follows.

       event: application/merge-patch+json,tips-123
       data: {
       data:   "tips-view-summary": {
       data:     "updates-graph-summary": {
       data:       "end-seq": 107
       data:     }
       data:   }
       data: }

7.  TIPS Data Transfers - Client Pull

   TIPS allows an ALTO client to retrieve the content of an update item
   from the updates graph, with an update item defined as the content
   (incremental update or snapshot) on an edge in the updates graph.

7.1.  Request

   The client sends an HTTP GET request, where the media type of an
   update item resource MUST be the same as the "media-type" field of
   the update item on the specified edge in the updates graph.

   The GET request MUST have the following format:

       GET /<tips-view-path>/ug/<i>/<j>
       HOST: <tips-view-host>

   For example, consider the updates graph in Figure 4.  If the client
   wants to query the content of the first update item (0 -> 101) whose
   media type is "application/alto-costmap+json", it sends a request to
   "/tips/2718281828/ug/0/101" and sets the "Accept" header to
   "application/alto-costmap+json,application/alto-error+json".  See
   Section 7.3 for a concrete example.

7.2.  Response

   If the request is valid (i.e., "ug/<i>/<j>" exists), the response is
   encoded as a JSON object whose data format is indicated by the media
   type.

   A client MAY conduct proactive fetching of future updates, by long
   polling updates that have not been provided in the directory yet.
   For such updates, the client MUST indicate all media types that might
   appear.  It is RECOMMENDED that the server allow for at least the
   long polling of <end-seq> -> <end-seq + 1>.

   Hence, the server processing logic MUST be:

   *  If a resource with path "ug/<i>/<j>" exists, return content using
      encoding.

   *  Else, if long polling "ug/<i>/<j>" is acceptable, put request in a
      backlog queue, then either a response is triggered when the
      content is ready or the request is interrupted (e.g., by a network
      error).

   *  Else, return error.

   It is RECOMMENDED that the server use the following HTTP codes to
   indicate errors, with the media type "application/alto-error+json",
   regarding update item requests.

   404 (Not Found):  Indicates that the requested update does not exist
      or the requested TIPS view does not exist or is closed by the
      server.

   410 (Gone):  Indicates an update has a seq that is smaller than the
      <start-seq>.

   415 (Unsupported Media Type):  Indicates the media type (or types)
      accepted by the client does not include the media type of the
      update chosen by the server.

   425 (Too Early):  Indicates the seq exceeds the server long polling
      window.

   429 (Too Many Requests):  Indicates the number of pending (long poll)
      requests exceeds the server threshold.  The server MAY indicate
      when to retry the request in the "Re-Try After" headers.

7.3.  Example

   Assume the client wants to get the contents of the update item on
   edge 0 to 101.  The format of the request is shown in Figure 14.

       GET /tips/2718281828/ug/0/101 HTTP/1.1
       Host: alto.example.com
       Accept: application/alto-costmap+json, \
                 application/alto-error+json

                           Figure 14: GET Example

   The response is shown in Figure 15.

       HTTP/1.1 200 OK
       Content-Type: application/alto-costmap+json
       Content-Length: 50

       { ... full replacement of my-routingcost-map ... }

                    Figure 15: Response to a GET Request

7.4.  New Next Edge Recommendation

   While intended TIPS usage is for the client to receive a recommended
   starting edge in the TIPS summary, consume that edge, and then
   construct all future URIs by incrementing the sequence count by one,
   there may be cases in which the client needs to request a new next
   edge to consume.  For example, if a client has an open TIPS view but
   has not polled in a while, the client might request the next logical
   incremental URI; however, the server has compacted the updates graph,
   so it no longer exists.  Thus, the client MAY request a new next edge
   to consume based on its current version of the resource.

7.4.1.  Request

   An ALTO client requests that the server provide a next edge
   recommendation for a given TIPS view by sending an HTTP POST request
   with the media type "application/alto-tipsparams+json".  The URL of
   the request MUST have the following format:

       <tips-view-path>/ug

   and the "HOST" field MUST be "<tips-view-host>".

   The POST body has the same format as the TIPSReq in Figure 7.  The
   "resource-id" field MUST be the same as the resource ID used to
   create the TIPS view, and the optional "input" field MUST NOT be
   present.

7.4.2.  Response

   The response to a valid request MUST be a JSON merge patch to the
   object of the AddTIPSResponse type (defined in Section 6.2), denoted
   as media type "application/merge-patch+json".  The "updates-graph-
   summary" field MUST be present in the response; hence, its parent
   field "tips-view-summary" MUST be present as well.

   If the "tag" field is present in the request, the server MUST check
   if any version within the range [<start-seq>, <end-seq>] has the same
   tag value.  If the version exists (e.g., denoted as <tag-seq>), the
   server MUST compute the paths from both <tag-seq> and 0 to the <end-
   seq> and choose the one with the minimal cost.  The cost MAY be
   implementation specific (e.g., number of messages, accumulated data
   size, etc.).  The first edge of the selected path MUST be returned as
   the recommended next edge.

   If the "tag" field is not present, the interpretation MUST be that
   the <tag-seq> is 0.

   It is RECOMMENDED that the server use the following HTTP code to
   indicate errors, with the media type "application/alto-error+json",
   regarding new next edge requests.

   404 (Not Found):  Indicates that the requested TIPS view does not
      exist or has been closed by the server.

7.4.3.  Example

   In this section, we give an example of the new next edge
   recommendation service.  Assume that a client already creates a TIPS
   view (as in Section 6.3) whose updates graph is as shown in Figure 2.
   Now assume that the client already has tag 0881080, whose
   corresponding sequence number is 103, and sends the following new
   next edge recommendation request (authentication is omitted for
   simplicity):

       POST /tips/2718281828/ug HTTP/1.1
       HOST alto.example.com
       Accept: application/merge-patch+json, application/alto-error+json
       Content-Type: application/alto-tipsparams+json
       Content-Length: 62

       {
         "resource-id": "my-routingcost-map",
         "tag": "0881080"
       }

   According to Figure 2, there are three potential paths: 103 -> 104 ->
   105 -> 106, 103 -> 105 -> 106, and 0 -> 105 -> 106.  Assume that the
   server chooses the shortest update path by the accumulated data size
   and the best path is 103 -> 105 -> 106.  Thus, the server responds
   with the following message:

       HTTP/1.1 200 OK
       Content-Type: application/merge-patch+json
       Content-Length: 193

       {
         "tips-view-summary": {
           "updates-graph-summary": {
             "start-seq": 101,
             "end-seq": 106,
             "start-edge-rec": {
               "seq-i": 103,
               "seq-j": 105
             }
           }
         }
       }

8.  Operation and Processing Considerations

   TIPS has some common operational considerations as ALTO/SSE
   [RFC8895], including:

   *  the server choosing update messages (Section 9.1 of [RFC8895]);

   *  the client processing update messages (Section 9.2 of [RFC8895]);

   *  the updates of filtered map services (Section 9.3 of [RFC8895]);
      and

   *  the updates of ordinal mode costs (Section 9.4 of [RFC8895]).

   There are also some operational considerations specific to TIPS,
   which we discuss below.

8.1.  Considerations for Load Balancing

   There are two levels of load balancing in TIPS: the first level is to
   balance the load of TIPS views for different clients and the second
   is to balance the load of incremental updates.

   Load balancing of TIPS views can be achieved either at the
   application layer or at the infrastructure layer.  For example, an
   ALTO server MAY set <tips-view-host> to different subdomains to
   distribute TIPS views or simply use the same host of the TIPS
   information resource and rely on load balancers to distribute the
   load.

   TIPS allows a client to make concurrent pulls of incremental updates
   for the same TIPS view, potentially through different HTTP
   connections.  As a consequence, TIPS introduces additional
   complexities when the ALTO server balances the load by distributing
   the requests to a set of backend servers.  For example, a request
   might be directed to the wrong backend server and get processed
   incorrectly if the following two conditions both hold:

   *  these backend servers are stateful (i.e., the TIPS view is created
      and stored only on a single server); and

   *  the ALTO server is using Layer 4 load balancing (i.e., the
      requests are distributed based on the TCP 5-tuple).

   Thus, additional considerations are required to enable correct load
   balancing for TIPS, including:

   Using a stateless architecture:  One solution is to follow the
      stateless computing pattern: states about the TIPS view are not
      maintained by the backend servers but are stored in a distributed
      database.  Thus, concurrent requests to the same TIPS view can be
      processed on arbitrary stateless backend servers, which all fetch
      data from the same database.

   Configuring the load balancers properly:  In the case that the
      backend servers are stateful, the load balancers must be properly
      configured to guarantee that requests of the same TIPS view always
      arrive at the same server.  For example, an operator or a provider
      of an ALTO server MAY configure Layer 7 load balancers that
      distribute requests based on the tips-view-path component in the
      URI.

8.2.  Considerations for Cross-Resource Dependency Scheduling

   Dependent ALTO resources result in cross-resource dependencies in
   TIPS.  Consider the following pair of resources, where my-cost-map
   (C) is dependent on my-network-map (N).  The updates graph for each
   resource is shown, along with links between the respective updates
   graphs to show dependency:

                              +---+   +---+   +---+   +---+   +---+
         my-network-map (N)   | 0 |-->|89 |-->|90 |-->|91 |-->|92 |
                              +---+   +---+   +---+   +---+   +---+
                                        |   \       \       \
                                        |    \       \       \
                              +---+   +---+   +---+   +---+   +---+
         my-cost-map (C)      | 0 |-->|101|-->|102|-->|103|-->|104|
                              +---+   +---+   +---+   +---+   +---+
                               |_______________________|

                    Figure 16: Example Dependency Model

   In Figure 16, the cost-map versions 101 and 102 (denoted as C101 and
   C102) are dependent on the network-map version 89 (denoted as N89).
   The cost-map version 103 (C103) is dependent on the network-map
   version 90 (N90), and so on.

   Thus, the client must decide the order in which to receive and apply
   the updates.  The order may affect how fast the client can build a
   consistent view and how long the client needs to buffer the update.

   Example 1:  The client requests N89, N90, N91, C101, C102 in that
      order.  The client either gets no consistent view of the resources
      or has to buffer N90 and N91.

   Example 2:  The client requests C101, C102, C103, N89.  The client
      either gets no consistent view or has to buffer C103.

   To get consistent ALTO information, a client must process the updates
   following the guidelines specified in Section 9.2 of [RFC8895].  If
   resources permit (i.e., sufficient updates can be buffered), an ALTO
   client can safely use long polling to fetch all the updates.  This
   allows a client to build consistent views quickly as the updates are
   already stored in the buffer.  Otherwise, it is RECOMMENDED to
   request a full snapshot if the client does not have enough local
   resources to buffer and process the incremental updates.

8.3.  Considerations for Managing Shared TIPS Views

   From a client's point of view, it sees only one copy of the TIPS view
   for any resource.  However, on the server side, there are different
   implementation options, especially for common resources (e.g.,
   network maps or cost maps) that may be frequently queried by many
   clients.  Some potential options are listed below:

   *  An ALTO server creates one TIPS view of the common resource for
      each client.

   *  An ALTO server maintains one copy of the TIPS view for each common
      resource and all clients requesting the same resources use the
      same copy.  There are two ways to manage the storage for the
      shared copy:

      -  the ALTO server maintains the set of clients that have sent a
         polling request to the TIPS view and only removes the view from
         the storage when the set becomes empty and no client
         immediately issues a new edge request; or

      -  the TIPS view is never removed from the storage.

   Developers may choose different implementation options depending on
   criteria such as request frequency, available resources of the ALTO
   server, the ability to scale, and programming complexity.

8.4.  Considerations for Offering Shortcut Incremental Updates

   Besides the mandatory stepwise incremental updates (from i to i+1),
   an ALTO server MAY optionally offer shortcut incremental updates, or
   simple shortcuts, between two non-consecutive versions i and i+k (k >
   1).  Such shortcuts offer alternative paths in the updates graph and
   can potentially speed up the transmission and processing of
   incremental updates, leading to faster synchronization of ALTO
   information, especially when the client has limited bandwidth and
   computation.  However, implementors of an ALTO server must be aware
   that:

   1.  optional shortcuts may increase the size of the updates graph,
       worst case scenario being the square of the number of updates
       (i.e., when a shortcut is offered for each version to all future
       versions).

   2.  optional shortcuts require additional storage on the ALTO server.

   3.  optional shortcuts may reduce concurrency when the updates do not
       overlap (e.g., when the updates apply to different parts of an
       ALTO resource).  In such a case, the total size of the original
       updates is close to the size of the shortcut, but the original
       updates can be transmitted concurrently while the shortcut is
       transmitted in a single connection.

9.  Security Considerations

   The security considerations of the base protocol (Section 15 of
   [RFC7285]) fully apply to this extension.  For example, the same
   authenticity and integrity considerations (Section 15.1 of [RFC7285])
   still fully apply; the same considerations for the privacy of ALTO
   users (Section 15.4 of [RFC7285]) also still fully apply.
   Additionally, operators of the ALTO servers MUST follow the
   guidelines in [RFC9325] to avoid new TLS vulnerabilities discovered
   after [RFC7285] was published.

   The additional services (the addition of update read service and
   update push service) provided by this extension extend the attack
   surface described in Section 15.1.1 of [RFC7285].  The following
   subsections discuss the additional risks and their remedies.

9.1.  TIPS: Denial-of-Service Attacks

   Allowing TIPS views enables new classes of DoS attacks.  In
   particular, for the TIPS server, one or multiple malicious ALTO
   clients might create an excessive number of TIPS views, to exhaust
   the server resource and/or to block normal users from accessing the
   service.

   To avoid such attacks, the server MAY choose to limit the number of
   active views and reject new requests when that threshold is reached.
   TIPS allows predictive fetching and the server MAY also choose to
   limit the number of pending requests.  If a new request exceeds the
   threshold, the server MAY log the event and return the HTTP status
   429 (Too Many Requests).

   It is important to note that the preceding approaches are not the
   only possibilities.  For example, it might be possible for a TIPS
   server to use somewhat more clever logic involving TIPS view eviction
   policies, IP reputation, rate-limiting, and compartmentalization of
   the overall threshold into smaller thresholds that apply to subsets
   of potential clients.  If service availability is a concern, ALTO
   clients MAY establish service level agreements with the ALTO server.

9.2.  ALTO Client: Update Overloading or Instability

   The availability of continuous updates can also cause overload for an
   ALTO client, in particular, an ALTO client with limited processing
   capabilities.  The current design does not include any flow control
   mechanisms for the client to reduce the update rates from the server.
   For example, TCP, HTTP/2, and QUIC provide stream and connection flow
   control data limits, which might help prevent the client from being
   overloaded.  Under overloading, the client MAY choose to remove the
   information resources with high update rates.

   Also, under overloading, the client might no longer be able to detect
   whether information is still fresh or has become stale.  In such a
   case, the client should be careful in how it uses the information to
   avoid stability or efficiency issues.

10.  IANA Considerations

   IANA has registered the following media types from the registry
   available at [IANA-Media-Type]:

   *  application/alto-tips+json: as described in Section 6.2;

   *  application/alto-tipsparams+json: as described in Section 6.1;

10.1.  application/alto-tips+json Media Type

   Type name:  application

   Subtype name:  alto-tips+json

   Required parameters:  N/A

   Optional parameters:  N/A

   Encoding considerations:  Encoding considerations are identical to
      those specified for the "application/json" media type.  See
      [RFC8259].

   Security considerations:  See the Security Considerations section of
      RFC 9569.

   Interoperability considerations:  N/A

   Published specification:  Section 6.2 of RFC 9569.

   Applications that use this media type:  ALTO servers and ALTO clients
      either stand alone or are embedded within other applications.

   Fragment identifier considerations:  N/A

   Additional information:

      Deprecated alias names for this type:  N/A
      Magic number(s):  N/A
      File extension(s):  RFC 9569 uses the media type to refer to
         protocol messages; thus, it does not require a file extension.
      Macintosh file type code(s):  N/A

   Person & email address to contact for further information:
      See the Authors' Addresses section of RFC 9569.

   Intended usage:  COMMON

   Restrictions on usage:  N/A

   Author:  See the Authors' Addresses section of RFC 9569.

   Change controller:  Internet Engineering Task Force (iesg@ietf.org).

10.2.  application/alto-tipsparams+json Media Type

   Type name:  application

   Subtype name:  alto-tipsparams+json

   Required parameters:  N/A

   Optional parameters:  N/A

   Encoding considerations:  Encoding considerations are identical to
      those specified for the "application/json" media type.  See
      [RFC8259].

   Security considerations:  See the Security Considerations section of
      RFC 9569.

   Interoperability considerations:  N/A

   Published specification:  Section 6.1 of RFC 9569.

   Applications that use this media type:  ALTO servers and ALTO clients
      either stand alone or are embedded within other applications.

   Fragment identifier considerations:  N/A

   Additional information:

      Deprecated alias names for this type:  N/A
      Magic number(s):  N/A
      File extension(s):  RFC 9569 uses the media type to refer to
         protocol messages; thus, it does not require a file extension.
      Macintosh file type code(s):  N/A

   Person & email address to contact for further information:
      See the Authors' Addresses section of RFC 9569.

   Intended usage:  COMMON

   Restrictions on usage:  N/A

   Author:  See the Authors' Addresses section of RFC 9569.

   Change controller:  Internet Engineering Task Force (iesg@ietf.org).

11.  References

11.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <https://www.rfc-editor.org/info/rfc2119>.

   [RFC3986]  Berners-Lee, T., Fielding, R., and L. Masinter, "Uniform
              Resource Identifier (URI): Generic Syntax", STD 66,
              RFC 3986, DOI 10.17487/RFC3986, January 2005,
              <https://www.rfc-editor.org/info/rfc3986>.

   [RFC7285]  Alimi, R., Ed., Penno, R., Ed., Yang, Y., Ed., Kiesel, S.,
              Previdi, S., Roome, W., Shalunov, S., and R. Woundy,
              "Application-Layer Traffic Optimization (ALTO) Protocol",
              RFC 7285, DOI 10.17487/RFC7285, September 2014,
              <https://www.rfc-editor.org/info/rfc7285>.

   [RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
              2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
              May 2017, <https://www.rfc-editor.org/info/rfc8174>.

   [RFC8259]  Bray, T., Ed., "The JavaScript Object Notation (JSON) Data
              Interchange Format", STD 90, RFC 8259,
              DOI 10.17487/RFC8259, December 2017,
              <https://www.rfc-editor.org/info/rfc8259>.

   [RFC8895]  Roome, W. and Y. Yang, "Application-Layer Traffic
              Optimization (ALTO) Incremental Updates Using Server-Sent
              Events (SSE)", RFC 8895, DOI 10.17487/RFC8895, November
              2020, <https://www.rfc-editor.org/info/rfc8895>.

   [RFC9112]  Fielding, R., Ed., Nottingham, M., Ed., and J. Reschke,
              Ed., "HTTP/1.1", STD 99, RFC 9112, DOI 10.17487/RFC9112,
              June 2022, <https://www.rfc-editor.org/info/rfc9112>.

   [RFC9113]  Thomson, M., Ed. and C. Benfield, Ed., "HTTP/2", RFC 9113,
              DOI 10.17487/RFC9113, June 2022,
              <https://www.rfc-editor.org/info/rfc9113>.

   [RFC9114]  Bishop, M., Ed., "HTTP/3", RFC 9114, DOI 10.17487/RFC9114,
              June 2022, <https://www.rfc-editor.org/info/rfc9114>.

   [RFC9325]  Sheffer, Y., Saint-Andre, P., and T. Fossati,
              "Recommendations for Secure Use of Transport Layer
              Security (TLS) and Datagram Transport Layer Security
              (DTLS)", BCP 195, RFC 9325, DOI 10.17487/RFC9325, November
              2022, <https://www.rfc-editor.org/info/rfc9325>.

11.2.  Informative References

   [IANA-Media-Type]
              IANA, "Media Types",
              <https://www.iana.org/assignments/media-types>.

   [RFC7617]  Reschke, J., "The 'Basic' HTTP Authentication Scheme",
              RFC 7617, DOI 10.17487/RFC7617, September 2015,
              <https://www.rfc-editor.org/info/rfc7617>.

   [RFC9205]  Nottingham, M., "Building Protocols with HTTP", BCP 56,
              RFC 9205, DOI 10.17487/RFC9205, June 2022,
              <https://www.rfc-editor.org/info/rfc9205>.

   [RFC9562]  Davis, K., Peabody, B., and P. Leach, "Universally Unique
              IDentifiers (UUIDs)", RFC 9562, DOI 10.17487/RFC9562, May
              2024, <https://www.rfc-editor.org/info/rfc9562>.

Appendix A.  A High-Level Deployment Model

   Conceptually, the TIPS system consists of three types of resources:

   (R1):  The TIPS frontend to create TIPS views.

   (R2):  The TIPS view directory, which provides metadata (e.g.,
      references) about the network resource data.

   (R3):  The actual network resource data, encoded as complete ALTO
      network resources (e.g., a cost map or a network map) or
      incremental updates.


                      +------------------------------------------------+
                      |                                                |
 +------+             |R1: Frontend/Open  R2: Directory/Meta  R3: Data |
 |      | "iget" base |     +-----+           +-----+         +-----+  |
 |      | resource 1  |     |     |           |     |         |     |  |
 |      |-------------|---->|     |           |     |         |     |  |
 |      | incremental |     |     |           |     |-------->|     |  |
 |      | transfer    |     |     |           |     |         |     |  |
 |      | resource    |     |     |           |     |         |     |  |
 |      |<------------|-----------------------|     |         |     |  |
 |Client|             |     |     |           +-----+         +-----+  |
 |      | "iget" base |     |     |                                    |
 |      | resource 2  |     |     |           +-----+         +-----+  |
 |      |-------------|---->|     |           |     |         |     |  |
 |      | incremental |     |     |           |     |         |     |  |
 |      | transfer    |     +-----+           |     | ------->|     |  |
 |      | resource    |                       |     |         |     |  |
 |      |<------------|-----------------------|     |         |     |  |
 +------+             |                       +-----+         +-----+  |
                      |                                                |
                      +------------------------------------------------+

               Figure 17: Sample TIPS Deployment Model

   Design Point: Component Resource Location

   Design 1 (Single):  all the three resource types at the same single
      server (accessed via relative reference).

   Design 2 (Flexible):  all three resource types can be at their own
      server (accessed via absolute reference).

   Design 3 (Dir + Data):  R2 and R3 must remain together, though R1
      might not be on the same server.

   This document supports Designs 1 and 3.  For Design 1, the ALTO
   server simply needs to always use the same host for the TIPS views.
   For Design 3, the ALTO server can set tips-view-host to a different
   server.  Note that the deployment flexibility is at the logical
   level, as these services can be distinguished by different paths and
   potentially be routed to different physical servers by Layer 7 load
   balancing.  See Section 8.1 for a discussion on load balancing
   considerations.  Future documents could extend the protocol to
   support Design 2.

Appendix B.  Conformance with "Building Protocols with HTTP" (RFC 9205)
             Best Current Practices

   This specification adheres fully to [RFC9205] as further elaborated
   below:

   *  TIPS does not (as described in Section 3.1 of [RFC9205]):

      |  ...redefine, refine, or overlay the semantics of generic
      |  protocol elements such as methods, status codes, or existing
      |  header fields.

      and instead focuses on

      |  ...protocol elements that are specific to [the TIPS]
      |  application -- namely, [its] HTTP resources.

   *  There are no statically defined URI components (Section 3.2 of
      [RFC9205]).

   *  No minimum version of HTTP is specified by TIPS, which is
      recommended (in Section 4.1 of [RFC9205]).

   *  The TIPS design follows the advice (in Section 4.1 of [RFC9205])
      that:

      |  When specifying examples of protocol interactions, applications
      |  should document both the request and response messages with
      |  complete header sections, preferably in HTTP/1.1 format...

   *  TIPS uses URI templates, which is recommended (in Section 4.2 of
      [RFC9205]).

   *  TIPS follows the pattern (in Section 4.4.1 of [RFC9205]) that:

      |  Generally, a client will begin interacting with a given
      |  application server by requesting an initial document that
      |  contains information about that particular deployment,
      |  potentially including links to other relevant resources.  Doing
      |  so ensures that the deployment is as flexible as possible
      |  (potentially spanning multiple servers), allows evolution, and
      |  also gives the application the opportunity to tailor the
      |  "discovery document" to the client.

   *  TIPS uses existing HTTP schemes (Section 4.4.2 of [RFC9205]).

   *  TIPS defines its errors "to use the most applicable status code"
      (Section 4.6 of [RFC9205]).

   *  TIPS does not (as in Section 4.11 of [RFC9205]):

      |  ...make assumptions about the relationship between separate
      |  requests on a single transport connection; doing so breaks many
      |  of the assumptions of HTTP as a stateless protocol and will
      |  cause problems in interoperability, security, operability, and
      |  evolution.

      The only relationship between requests is that a client has to
      first discover where a TIPS view of a resource will be served,
      which is consistent with the URI discovery in Section 4.4.1 of
      [RFC9205].

Appendix C.  Push-Mode TIPS Using HTTP Server Push

   TIPS allows ALTO clients to subscribe to incremental updates of an
   ALTO resource, and the specification in this document is based on the
   current best practice of building such a service using basic HTTP.
   Earlier versions of this document had investigated the possibility of
   enabling push-mode TIPS (i.e., by taking advantage of the server push
   feature in HTTP/2 and HTTP/3).

   In the ideal case, push-mode TIPS can potentially improve performance
   (e.g., latency) in more dynamic environments and use cases with wait-
   free message delivery.  Using the built-in HTTP server push also
   results in minimal changes to the current protocol.  While not
   adopted due to the lack of server push support and increased protocol
   complexity, push-mode TIPS remains a potential direction of protocol
   improvement.

Appendix D.  Persistent HTTP Connections

   Previous draft versions of this document use persistent HTTP
   connections to detect the liveness of clients.  However, this design
   does not conform well with the best current practices of HTTP.  For
   example, if an ALTO client is accessing a TIPS view over an HTTP
   proxy, the connection is not established directly between the ALTO
   client and the ALTO server, but between the ALTO client and the proxy
   and between the proxy and the ALTO server.  Thus, using persistent
   connections might not correctly detect the right liveness state.

Acknowledgments

   The authors of this document would like to thank Mark Nottingham and
   Spencer Dawkins for providing invaluable reviews of earlier draft
   versions of this document; Adrian Farrel, Qin Wu, and Jordi Ros
   Giralt for their continuous feedback; Russ White, Donald Eastlake
   3rd, Martin Thomson, Bernard Aboba, Spencer Dawkins, Linda Dunbar,
   and Sheng Jiang for the directorate reviews; Martin Duke for the area
   director review; Francesca Palombini, Wesley Eddy, Roman Danyliw,
   Murray Kucherawy, and Zaheduzzaman Sarker for the telechat and IESG
   reviews; and Mohamed Boucadair for shepherding the document.

Authors' Addresses

   Kai Gao
   Sichuan University
   No.24 South Section 1, Yihuan Road
   Chengdu
   610000
   China
   Email: kaigao@scu.edu.cn


   Roland Schott
   Deutsche Telekom
   Deutsche-Telekom-Allee 9
   64295 Darmstadt
   Germany
   Email: Roland.Schott@telekom.de


   Yang Richard Yang
   Yale University
   51 Prospect Street
   New Haven, CT 06511
   United States of America
   Email: yry@cs.yale.edu


   Lauren Delwiche
   Yale University
   51 Prospect Street
   New Haven, CT 06511
   United States of America
   Email: lauren.delwiche@yale.edu


   Lachlan Keller
   Yale University
   51 Prospect Street
   New Haven, CT 06511
   United States of America
   Email: lachlan.keller@aya.yale.edu