End-to-End Arguments in System Design¶
Saltzer, J. H., Reed, D. P., & Clark, D. D. (1984). End-to-End Arguments in System Design. ACM Transactions on Computer Systems, 2(4), 277-288.
Cited by¶
4 citations across 4 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Communication Repair
- The four-cell conversation-analytic repair taxonomy maps onto retry/recovery semantics in distributed protocols: self-initiated self-repair is client-side retry, other-initiated self-repair is NAK-and-retransmit, other-initiated other-repair is server-side correction, and self-initiated other-repair is a unilateral protocol upgrade — with the preference for self-initiation mapping onto the end-to-end principle.
This sourceArgues that reliability functions belong at the endpoints, mapping onto the conversation-analytic preference for self-initiated self-repair.
- The four-cell conversation-analytic repair taxonomy maps onto retry/recovery semantics in distributed protocols: self-initiated self-repair is client-side retry, other-initiated self-repair is NAK-and-retransmit, other-initiated other-repair is server-side correction, and self-initiated other-repair is a unilateral protocol upgrade — with the preference for self-initiation mapping onto the end-to-end principle.
- Idempotence
- Cryptographic and security protocols use idempotence to defend against replay attacks — nonce-based protocols mark messages so that a re-presented message is detected and discarded; the property dual to idempotence (rejecting duplicates) and the property itself (tolerating duplicates) are two strategies against the same threat, an end-to-end-argument framing in the sense of Saltzer, Reed, and Clark (1984).
This sourceArgues that correctness and performance properties are best implemented and measured at communication endpoints rather than intermediate layers; analogue for evaluating escalation effectiveness end-to-end across tiers.
- Cryptographic and security protocols use idempotence to defend against replay attacks — nonce-based protocols mark messages so that a re-presented message is detected and discarded; the property dual to idempotence (rejecting duplicates) and the property itself (tolerating duplicates) are two strategies against the same threat, an end-to-end-argument framing in the sense of Saltzer, Reed, and Clark (1984).
- Local Autonomy & Tiered Escalation
- Tier-3 loop-back (issues escalated back to lower tiers without final resolution) should be <5%.
This sourceArgues that correctness and performance properties are best implemented and measured at communication endpoints rather than intermediate layers; analogue for evaluating escalation effectiveness end-to-end across tiers.
- Tier-3 loop-back (issues escalated back to lower tiers without final resolution) should be <5%.
Mechanisms¶
- Protocol Stack
- The design principle that guards the boundary is the end-to-end argument: functions like reliability are often best placed at the endpoints (the transport and application layers) rather than smeared into every lower layer, keeping the network's core simple.
This sourcePlaces complete reliability at application endpoints while limiting lower-layer mechanisms to justified performance enhancements.
- The design principle that guards the boundary is the end-to-end argument: functions like reliability are often best placed at the endpoints (the transport and application layers) rather than smeared into every lower layer, keeping the network's core simple.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:d8fc79aaa90e · see in the full table