favouring small packets, main change:DoS vulnerability small packet attacks push out larger packets leaving most small packets to attack the next queue & the next, & the next DoS vulnerability similar to that of drop tail queues AQM was partly about not locking-out large packets* shouldn’t add lock-out back again in the AQM algorithm * not stated and not a motivation according to at least one author (Floyd) |