ISO/IEC 29341-8-18 QoS Marker Service

UPnP QoS Architecture — Packet Marking for Layer 2 and Layer 3 QoS

Overview of the QoS Marker Service

The QoS Marker service, defined in ISO/IEC 29341-8-18, provides a standardized mechanism for marking network packets with QoS priority information within the UPnP QoS architecture v3. Packet marking is the process of writing QoS-related information into packet headers so that downstream network elements can apply appropriate treatment without re-classifying the traffic. The marker supports both Layer 3 (DSCP/ToS byte in IP headers) and Layer 2 (802.1p priority in Ethernet VLAN headers) marking.

Marking is a fundamental QoS mechanism that enables differentiated treatment across multiple network hops. A packet marked at the ingress edge of a network retains its priority marking as it traverses core switches and routers, ensuring consistent QoS treatment end-to-end.

Marking Actions and Configuration

The service defines actions to configure and apply marking rules. Each marking rule specifies a traffic class (TrafficClassID) and the corresponding Layer 2 and Layer 3 marking values to be applied. The service also maintains a default marking table for traffic classes that do not have explicit marking rules.

Action Input Parameters Effect
SetMarkingRule TrafficClassID, DSCPValue, 802.1pPriority, UserPriority Creates or updates a marking rule for a traffic class
RemoveMarkingRule TrafficClassID Removes a specific marking rule, reverting to the default mapping
GetMarkingRule TrafficClassID Retrieves the current marking values for a traffic class
GetDefaultMarkingTable None Returns the complete default marking table
When deploying in a mixed-vendor network, coordinate the DSCP-to-802.1p mapping strategy across all devices. Inconsistent mapping — where one device maps DSCP 46 (EF) to 802.1p 5 while another maps the same DSCP value to 802.1p 6 — undermines end-to-end QoS.

Engineering Design Insights

The marking operation itself must be performed with minimal latency. On software-based routers and gateways, packet marking requires modifying the packet header in memory, which involves checksum recalculation for IP and transport-layer headers. The QoS Marker service implementation should use hardware offload where available — most modern Ethernet controllers support DSCP marking and 802.1p priority insertion at wire speed.

An important consideration is the trust boundary. Packets arriving from untrusted interfaces (such as the WAN port of a residential gateway) may already contain DSCP markings set by the sender. The QoS Marker service must be configured with a trust model: either trust the existing markings (pass-through mode) or overwrite them based on classification results (re-mark mode).

In a home network, always use re-mark mode on the WAN-facing interface. Trusting external DSCP markings can allow a remote attacker to prioritize their traffic by simply setting high DSCP values in outgoing packets, effectively stealing bandwidth from legitimate local traffic.

The service also manages the relationship between TrafficClass identifiers and concrete marking values. The UPnP QoS architecture defines eight traffic classes corresponding roughly to the IEEE 802.1D priority levels (0-7). The mapping from TrafficClass to DSCP should follow the standardized DSCP per-hop behaviors defined in RFC 2474 and RFC 4594 for interoperability with DiffServ domains.

Be aware of DSCP re-marking at network boundaries. Many ISPs and corporate firewalls re-mark or strip DSCP values from incoming packets. A QoS marking strategy that relies on DSCP values being preserved across the WAN link will fail if the ISP resets DSCP to zero. Consider tunnel-based QoS (e.g., IPsec with QoS copying) for end-to-end marking preservation.

FAQs

Q: Can the QoS Marker service mark both IPv4 and IPv6 packets?

Yes. The service supports marking for both IPv4 and IPv6. For IPv4, the TOS byte (DSCP field) is modified. For IPv6, the Traffic Class byte is modified. The same marking rules apply regardless of the IP version.

Q: What happens when a marking rule conflicts with an existing rule for the same TrafficClass?

The most recently applied SetMarkingRule action takes precedence. The service updates the marking table entry for the specified TrafficClass and generates a notification event. Control points can subscribe to these events to maintain a synchronized view of the marking configuration.

Q: Is it possible to mark packets without re-classifying them?

Yes. The QoS Marker service can operate independently of the QoS Classifier. A packet can be marked based on its existing classification (e.g., from a previously applied classifier) or the device can apply marking using its own internal classification logic. However, the standard recommends using the QoS Classifier for classification and the QoS Marker only for marking to maintain architectural separation.

Q: How does the service handle marking of VLAN-tagged packets?

For packets with VLAN tags (802.1Q), the marker updates the PCP (Priority Code Point) field in the VLAN header, which corresponds to the 802.1p priority value. For untagged packets, the marker inserts the priority information only in the IP header’s DSCP field.

Leave a Reply

Your email address will not be published. Required fields are marked *