ICMP Extensions for Environmental Information

IP devices use the Internet Control Message Protocol ICMPv4 and ICMPv6 to convey control information to source hosts. In particular, when an IP device receives a datagram that it cannot process, it may send an ICMP message to the datagram's originator or source. Network operators and higher-level protocols use these ICMP messages to detect and diagnose network issues. As the world transitions towards sustainability in technology, the focus is shifting not only on creating modern technologies infused with environmental sustainability but also on bridging gaps in the tools that are already available, to enhance visibility, measurement, and quantification of their environmental impact. Consequently, tools which have been foundational for control and management for decades now encounter new requirements including enhancing them to cater to a significantly increasing demand for monitoring the sustainability and environmental impact. This document serves that need by defining an ICMP extension object that appends environmental sustainability information to ICMP messages. Using the extension defined herein, a device can explicitly append these environmental sustainability metrics for transmission across an administrative domain: Present and idle power (node level, component level) Throughput (node level, component level) Ecolabels and Environmentally Relevant Certifications (EERCs) Additional environmental sustainability metrics, such as the following, for example, may also be specified in the future: Electrical Energy Provider or Zone Geolocation

This document uses the following terms:
Generically referring to ICMPv4 and ICMPv6 messages.
Extended ICMP to support multi-part messages through an ICMP extension structure, as defined in .

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

The IAB held a workshop on "Environmental Impact of Internet Applications and Systems (eimpactws)" , in which the need for visibility into environmental sustainability metrics within traditional Internet tools such as traceroute was highlighted (see WebVTT cue identifiers 139 and 140 of .) The Environmental Information ICMP Extensions defined in this document allow for augmenting the traceroute output with environmental metrics from each reported node.

To achieve the goal of transporting useful sustainability information across the network, there are two key considerations. First, what information is useful to convey and in what format, and second, how to transport that sustainability information. For the first task, it is critical to normalize and agree upon the information to convey and format, across potentially multiple transports. For the second task, there is a variety of options available depending on use cases. These can be categorized based on whether the approach is distributed (i.e., any endpoint or node can request and/or receive the sustainability information) or centralized (i.e., a single 'controller' compiles and consolidates the information.) They can also be categorized based on the networking layer used (e.g., IP, like ICMP, or application, like SNMP). Further, an existing protocol can be extended, or a brand new protocol can potentially be created for this purpose. This document builds upon a standardized, modular, backwards-compatible, and scale-proven ICMP extension . This does not preclude the definition of other methods to transport sustainability information, more fitting to other use-cases.

This section defines the Environmental Information Object, an ICMP extension object with a Class-Num (Object Class Value) of TBA that can be appended to the following messages, as per and : ICMPv4 Time Exceeded ICMPv4 Destination Unreachable ICMPv4 Parameter Problem ICMPv4 Extended Echo Reply ICMPv6 Time Exceeded ICMPv6 Destination Unreachable ICMPv6 Extended Echo Reply The ICMP extension defined in this document MAY be appended to any of the above listed messages based on policy and following security considerations. These extensions are preceded by an ICMP Extension Structure Header, and include an ICMP Object Header. Both are defined in . The same backward compatibility issues that apply to apply to this extension. A single ICMP message can contain zero, one, or multiple instances of Environmental Information Objects. The C-Type further identifies the information fields carried. A single instance of the Environmental Information Object can convey one of the information elements defined in from each reporting node in an administrative domain.

The ICMP Environmental Information Extension has the following format.

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+... |Version| Reserved | Checksum |(1) +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+... | Length | Class-Num | C-Type | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+(2) ~ Object payload ~ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+...
2 .
0 .
The one's complement checksum of the ICMP extension .
Length of the object, including header and payload, in octets. If there is no payload, the value of Length is 4. This is used to convey that the object is unavailable (e.g., because the requested information is not applicable for the type of component that is being queried).
TBA (Environmental Information)
C-Type as explained in .
As defined by each C-Type. While there is a single ICMP Extension Header, there could be multiple Environmental Information Objects.

The 8-bit C-Type defined in the Section 8 of allows to carry different information elements within this Class-Num (TBA). The techniques herein defined can be used with any specific environmental sustainability metric in use, current or future.

The ICMP Environmental Information Extension Object header has the following format: 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Length | Class-Num=TBA | C-Type=1-255 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ The following C-Type values are currently defined. Node Power Draw Sub-Object

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Present Power (32-bit unsigned word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Idle Power (32-bit unsigned word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ A Class-Num of TBA and a C-Type of 1 are specified. The Length is 8 if the object contains this payload. A Length value of 4 indicates that it is unavailable. The Present Power is the node-level power being presently drawn, which is a magnitude that may be directly displayed, and is expressed in Watts (W). A value of 0 indicates that the Present Power is not available. The Idle Power is the node-level power when the node is idle. A value of 0 indicates that the Idle Power is not available. Node Throughput Sub-Object

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Throughput (32-bit unsigned word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ A Class-Num of TBA and a C-Type of 2 are specified. The Length is 8 if the object contains this payload. A Length value of 4 indicates that it is unavailable. The returned value is the node-level current throughput, which is a magnitude that may be directly displayed, and is expressed in bits-per-second (BPS). This allows the recipient of the ICMP message to determine a relationship between power and traffic load. Ecolabels and Environmentally Relevant Certification (EERC) Sub-Object

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | EERC number |0 0 0 0| Year | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ A Class-Num of TBA and a C-Type of 3 are specified. The Length is 8 if the object contains this payload. A Length value of 4 indicates that it is unavailable. The returned value references an Ecolabels and Environmentally Relevant Certification (EERC) number. The following EERC numbers are defined by the present specification: ISO 14001:2015 TCO Certified Energy-efficient ethernet The "Year" field must contain the year in which the certificate was issued, or 0 to indicate "unknown" or "not specified". Component-level Power Draw Sub-Object

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 1 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Present Component Power (32-bit unsigned word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Idle Component Power (32-bit unsigned word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ A Class-Num of TBA and a C-Type of 4 are specified. The Length is 4 plus 20 times the number of elements included. A Length value of 4 indicates that this object is unavailable. The returned value is one or more instances of component-level power drawn metrics. Each instance is a set comprised by a UUID uniquely identifying the component, and the Present Component Power and Idle Component Power fields. The Present Component Power is the component-level power being presently drawn, which is a magnitude that may be directly displayed, and is expressed in Watts (W). A value of 0 indicates that the Present Component Power is not available. The Idle Component Power is the component-level power when the component is idle. A value of 0 indicates that the Idle Component Power is not available. Component-level Throughput Sub-Object

1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 1 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | UUID 32-bit Word 4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Component Throughput (32-bit word) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ A Class-Num of TBA and a C-Type of 5 are specified. The Length is 4 plus 20 times the number of elements included. A Length value of 4 indicates that this object is unavailable. The returned value is one or more instances of component-level throughput. Each instance is a set comprised by a UUID uniquely identifying the component, and the actual throughput of said component in bits-per-second (BPS). This allows the recipient of the ICMP message to determine a relationship between power and traffic load.

The ICMP extension defined in this memo can be used to get sustainability metrics, either via a "transactional" or a "scheduled automated" fashion, inside an administrative domain. This section presents a sample "transactional" use case of how these metrics could be displayed to a user. Since both traceroute and ping utilities are based on ICMP, we will use traceroute as an example. The flavor of traceroute that has been shown here supports the ICMP extensions and is capable of conveying to the end user the sustainability metrics in the extensions, along with the nodes that the original datagram visited on its way to the destination. This traceroute is also backwards-compatible, i.e., it can also work well with those nodes which do not support these ICMP extensions. A user at a host with an IP address 198.51.100.27 executes a traceroute to 192.0.2.1 and the shows how the user can be presented with these metrics:

> traceroute 192.0.2.1 Tracing route to 192.0.2.1 over a maximum of 30 hops 1 3 ms 1 ms 2 ms 203.0.113.118 Present Power(Node=160W,Fan=7W) Idle Power(Node=152W,Fan=7W,Chassis=10W) Throughput(53687091200bps) EERC(ISO 14001:2015, Energy-efficient ethernet) 2 12 ms 9 ms 9 ms 192.0.2.9 Present Power(Node=163W,Fan=8W,Chassis=11W) Throughput(55834574848bps) EERC(ISO 14001:2015) 3 12 ms 9 ms 9 ms 192.0.2.17 4 7 ms 4 ms 7 ms 192.0.2.122 Idle Power(Node=150W,Chassis=9W) Throughput(51539607552bps) EERC(ISO 14001:2015, Energy-efficient ethernet) 5 4 ms 3 ms 3 ms 192.0.2.1 Trace complete. Many use cases are possible on the basis of the ICMP extensions defined in this memo; it is up to the user to decide how frequently queries are issued, when and how these metrics are reported, or which policy will guide such decisions.

The security considerations of and of apply to these extensions. Upon receipt of an ICMP message, application software must check it for syntactic correctness. The extension checksum MUST be verified. Care should be taken, as improperly specified length attributes and other syntax problems may result in buffer overruns. This document does not define the conditions under which a router sends an ICMP message. Therefore, it does not expose routers to any new denial-of-service attacks. Routers may need to limit the rate at which ICMP messages are sent. The extensions defined in this document allows a router to append environmental sustainability information to multi-part ICMP messages, and therefore can provide the user of the traceroute and ping applications with additional metrics. The intended field of use for the extensions defined in this document is administrative debugging and troubleshooting and operational facilities. The extensions herein defined supply additional information in ICMP responses. These mechanisms are not initially intended for other uses. Some of the additional metrics provided, as e.g., power draw information, have privacy considerations. For example, behavioral considerations of the devices, or estimating other node and network attributes from the power or energy data. Other things like identification of the node, deducing node usage patterns are some more privacy concerns that can be related to the metrics. Keeping these considerations in mind, we limited the scope of the transportation of the sustainability metrics to a single administrative domain (AD). But, based on , limiting a protocols functionality doesn't mean that it will be secure. So, this particular document, which defines "a modified ICMP message with sustainability metrics", can be classified as a FAIL-OPEN protocol . That is, the interfaces of administrative domain border nodes, facing towards the open internet, can be configured such that they avoid leaking messages with extensions containing sustainability metrics, out of the AD. To allow general ICMP messages, an administrator can configure those outward facing interfaces to not block/drop the entire message but only strip off the extension objects and only forward the ICMP message if it is destined to go out of the AD. When metrics are limited to the same AD, it can be considered that they can be generated from a valid source and will have integrity. High-fidelity reporting of power draw for the targeted node's memory, cache, hardware security module, or other sensitive component could allow an attacker to perform a remote side-channel attack (i.e., using differential power analysis) during cryptographic operations. This attack would allow the adversary to extract the network node's secret key(s) or other sensitive data. There are a couple of ways of mitigating this type of attack; exclude power metrics for components that process sensitive data or provide countermeasures that introduce noise in the reported power metrics (e.g., software that demarcates sensitive data which signals the processing hardware to treat this data with algorithmic noise). The latter technique is an area of ongoing research at the time of this writing. Finally, this document does not specify an authentication mechanism for the extension that it defines. Application developers should be aware of various ICMP attacks .

IANA is requested to assign the following object Class-num in the ICMP Extension Object Classes and Class Sub-types registry : Class Value Class name Reference TBA Environmental Information Object This document IANA is requested to establish a registry for the corresponding class sub-type (C-Type) space, as follows: C-Type Value Description Reference 0 Reserved This document 1 Node Power Draw This document 2 Node Throughput This document 3 Ecolabels and Environmentally Relevant Certification (EERC) This document 4 Component-level Power Draw This document 5 Component-level Throughput This document 6-246 Unassigned 247-255 Reserved for Experimentation This document C-Type values are assignable on a first-come-first-serve (FCFS) basis. IANA is requested to establish a registry for Ecolabels and Environmentally Relevant Certification (EERC) numbers (C-Type 2), as follows: Number Name Reference 0 Reserved 1 ISO 14001:2015 This document 2 TCO Certified This document 3 Energy-efficient ethernet This document 4-65527 Unassigned 65528-65535 Reserved for Experimentation This document EERC numbers are assignable on a first-come-first-serve (FCFS) basis, and require a citation to the definition of the certification.

We are very grateful to Jari Arkko for his thorough review and most useful set of comments and suggestions. We are also appreciative of the feedback, input, and interest from participants of the eimpact 2024 Interim meeting. Shawn Emery provided very useful feedback and suggestions.