Missing pieces in diff-serv
Provisioning/policy/signaling: Assumed to be done using RSVP, COPS, SNMP, LDAP or over-engineering!
Route pinning/multi-paths: extensions to OSPF, BGP, QoS routing
End-to-end services: combination of above pieces: eg: frame-relay emulation, virtual leased line etc
Tools to prevent traffic based denial of service attacks