RFC 4561 PROPOSED STANDARD MPLS · FAST REROUTE · RSVP-TE

Definition of a Record Route Object (RRO) Node-Id Sub-Object

A new flag on Record Route entries lets a router find where a backup tunnel rejoins the protected path, even across areas and ASes.

On rfc-editor.org ↗
PUBLISHED
June 2006
AUTHORS
J.-P. Vasseur, Z. Ali, S. Sivabalan
STREAM
IETF
NEW FLAG
Node-id
FLAG VALUE
0x20
CARRIED IN
RRO IPv4 and IPv6 sub-objects in RSVP Resv messages
FRR METHOD COVERED
Facility backup
DOI
10.17487/RFC4561
ERRATA
Reported errata

RFC text

Contents
Original text · RFC Editor View on rfc-editor.org ↗
Network Working Group                                 J.-P. Vasseur, Ed.
Request for Comments: 4561                                        Z. Ali
Category: Standards Track                                   S. Sivabalan
                                                     Cisco Systems, Inc.
                                                               June 2006


     Definition of a Record Route Object (RRO) Node-Id Sub-Object

Status of This Memo

   This document specifies an Internet standards track protocol for the
   Internet community, and requests discussion and suggestions for
   improvements.  Please refer to the current edition of the "Internet
   Official Protocol Standards" (STD 1) for the standardization state
   and status of this protocol.  Distribution of this memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2006).

Abstract

   In the context of MPLS TE Fast Reroute, the Merge Point (MP) address
   is required at the Point of Local Repair (PLR) in order to select a
   backup tunnel intersecting a fast reroutable Traffic Engineering
   Label Switched Path (TE LSP) on a downstream Label Switching Router
   (LSR).  However, existing protocol mechanisms are not sufficient to
   find an MP address in multi-domain routing networks where a domain is
   defined as an Interior Gateway Protocol (IGP) area or an Autonomous
   System (AS).  Hence, the current MPLS Fast Reroute mechanism cannot
   be used in order to protect inter-domain TE LSPs from a failure of an
   Area Border Router (ABR) or Autonomous System Border Router (ASBR).
   This document specifies the use of existing Record Route Object (RRO)
   IPv4 and IPv6 sub-objects (with a new flag defined) thus defining the
   node-id sub-object in order to solve this issue.  The MPLS Fast
   Reroute mechanism mentioned in this document refers to the "Facility
   backup" MPLS TE Fast Reroute method.

Table of Contents

   1. Introduction ....................................................2
   2. Terminology .....................................................4
      2.1. Conventions Used in This Document ..........................5
   3. Signaling Node-Ids in RROs ......................................5
   4. Finding Merge Point .............................................6
   5. Security Considerations .........................................7
   6. Acknowledgements ................................................7
   7. References ......................................................7
      7.1. Normative References .......................................7
      7.2. Informative References .....................................8

1.  Introduction

   MPLS Fast Reroute (FRR) [FAST-REROUTE] is a fast recovery local
   protection technique used to protect Traffic Engineering LSPs from
   link/node/Shared Risk Link Group (SRLG) failure.  One or more backup
   tunnels are pre-established to protect against the failure of a
   link/node/SRLG.  In case of failure, every protected TE LSP
   traversing the failed resource is rerouted onto the appropriate
   backup tunnel.

   There are several requirements on the backup tunnel path that must be
   satisfied.  First, the backup tunnel must not traverse the element
   that it protects.  In addition, a primary tunnel and its associated
   backup tunnel should intersect at least at two points (nodes): Point
   of Local Repair (PLR) and Merge Point (MP).  The former is the head-
   end LSR of the backup tunnel, and the latter is the tail-end LSR of
   the backup tunnel.  The PLR is where FRR is triggered when
   link/node/SRLG failure happens.

   There are different methods for computing paths for backup tunnels at
   a given PLR.  Specifically, a user can statically configure one or
   more backup tunnels at the PLR with an explicitly configured path, or
   the PLR can be configured to automatically compute a backup path or
   to send a path computation request to a PCE (see [PCE-ARCH]).

   Consider the following scenario (Figure 1).

   Assumptions:

   - A multi-area network made of three areas: 0, 1, and 2.

   - A fast reroutable TE LSP T1 (TE LSP signaled with the "Local
     Protection Desired" bit set in the SESSION-ATTRIBUTE object or the
     FAST-REROUTE object) from R0 to R3.

   - A backup tunnel B1 from R1 to R2, not traversing ABR1, and
     following the R1-ABR3-R2 path.

   - The PLR R1 reroutes any protected TE LSP traversing ABR1 onto the
     backup tunnel B1 in case of ABR1's failure.

             <--- area 1 --><---area 0---><---area 2--->
                R0-----R1-ABR1--R2------ABR2--------R3
                       \        /
                        \      /
                          ABR3

      Figure 1: Use of Fast Reroute to protect a TE LSP against an ABR
                failure with MPLS Traffic Engineering Fast Reroute

   When T1 is first signaled, the PLR R1 needs to dynamically select an
   appropriate backup tunnel intersecting T1 on a downstream LSR.
   However, existing protocol mechanisms are not sufficient to
   unambiguously find the MP address in a network with inter-domain TE
   LSP.  This document addresses these limitations.

   R1 needs to select an existing backup tunnel with the following
   properties:

      1. The backup tunnel intersects with the primary tunnel at the MP.
         For the sake of illustration, in Figure 1, R1 needs to
         determine that T1 and B1 intersect at the node R2.

      2. The backup tunnel satisfies the primary LSP's request with
         respect to the bandwidth protection request (i.e., bandwidth
         guaranteed for the primary tunnel during failure), and the type
         of protection (link or node failure), as specified in
         [FAST-REROUTE].

   One technique for the PLR to ensure that condition (1) is met
   consists of examining the Record Route Object (RRO) of the primary
   tunnel to see whether any of the addresses specified in the RRO
   correspond to the MP.  That said, as per [RSVP-TE], the addresses
   specified in the RRO IPv4 or IPv6 sub-objects sent in Resv messages
   can be node-ids and/or interface addresses.  Hence, in Figure 1,
   router R2 may specify interface addresses in the RROs for T1 and B1.
   Note that these interface addresses are different in this example.

   The problem of finding the MP using the interface addresses or node-
   ids can be easily solved in the case of a single IGP area.
   Specifically, in the case of a single IGP area, the PLR has the
   knowledge of all the interfaces attached to the tail-end of the
   backup tunnel.  This information is available in PLR's IGP topology
   database.  Thus, the PLR can unambiguously determine whether a backup
   tunnel intersecting a protected TE LSP on a downstream node exists
   and can also find the MP address regardless of how the addresses
   carried in the RRO IPv4 or IPv6 sub-objects are specified (i.e.,
   whether using the interface addresses or the node-ids).  However,
   such routing information is not available in the case of inter-domain
   environments.  Hence, unambiguously making sure that condition (1)
   above is met in the case of inter-domain TE LSPs is not possible with
   existing mechanisms.

   In this document, we define extensions to and describe the use of
   Resource Reservation Protocol (RSVP) [RSVP, RSVP-TE] to solve the
   above-mentioned problem.  Note that the requirement for the support
   of the fast recovery technique specified in [FAST-REROUTE] to inter-
   domain TE LSPs has been specified in [INTER-AREA-TE-REQS] and
   [INTER-AS-TE-REQS].

2.  Terminology

   Area Border Routers (ABRs): Border routers used to connect two
   Interior Gateway Protocol (IGP) areas (areas in OSPF or levels in
   IS-IS).

   Autonomous System Border Router (ASBRs): Border routers used to
   connect to another AS of a different or the same Service Provider via
   one or more links inter-connecting between ASes.

   Backup Tunnel: The LSP that is used to back up one of the many LSPs
   in many-to-one backup.

   Inter-AS TE LSP: A TE LSP that crosses an AS boundary.

   Inter-area TE LSP: A TE LSP that crosses an IGP area.

   LSR: Label Switching Router.

   LSP: Label Switched Path.

   Local Repair: Techniques used to repair TE LSPs quickly when a link,
   an SRLG, or a node along the TE LSP fails.

   PCE: Path Computation Element.  An entity (component, application, or
   network node) that is capable of computing a network path or route
   based on a network graph and applying computational constraints.

   MP: Merge Point.  The LSR where one or more backup tunnels rejoin the
   path of the protected LSP downstream of the potential failure.

   Protected LSP: An LSP is said to be protected at a given hop if it
   has one or multiple associated backup tunnels originating at that
   hop.

   PLR: Point of Local Repair.  The head-end of a backup tunnel.

   Reroutable LSP: Any LSP for which the "Local Protection Desired" bit
   is set in the Flag field of the SESSION_ATTRIBUTE object of its Path
   messages.

   TE LSP: Traffic Engineering Label Switched Path.

2.1.  Conventions Used in This Document

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 [RFC2119].

3.  Signaling Node-Ids in RROs

   As mentioned above, the limitation that we need to address is the
   generality of the contents of the RRO IPv4 and IPv6 sub-objects, as
   defined in [RSVP-TE].  [RSVP-TE] defines the IPv4 and IPv6 RRO sub-
   objects.  Moreover, two additional flags are defined in
   [FAST-REROUTE]: the "Local Protection Available" and "Local
   Protection in Use" bits.

   In this document, we define the following new flag:

   Node-id: 0x20

      When set, this indicates that the address specified in the RRO's
      IPv4 or IPv6 sub-object is a node-id address, which refers to the
      "Router Address" as defined in [OSPF-TE], or "Traffic Engineering
      Router ID" as defined in [ISIS-TE].  A node MUST use the same
      address consistently.  Once an address is used in the RRO's IPv4
      or IPv6 sub-object, it SHOULD always be used for the lifetime of
      the TE LSP.

   An IPv4 or IPv6 RRO sub-object with the node-id flag set is also
   called a node-id sub-object.  The problem of finding an MP address in
   a network with inter-domain TE LSP is solved by inserting a node-id
   sub-object (an RRO "IPv4" and "IPv6" sub-object with the 0x20 flag
   set) in the RRO object carried in the RSVP Resv message.

   An implementation may decide to either:

   1) Add the node-id sub-object in the RRO carried in an RSVP Resv
      message and, when required, also add another IPv4/IPv6 sub-object
      to record interface address.

      Example: an inter-domain fast reroutable TE LSP would have the
      following two sub-objects in the RRO carried in Resv message: a
      node-id sub-object and a label sub-object.  If recording the
      interface address is required, then an additional IPv4/IPv6 sub-
      object is added.

   or

   2) Add an IPv4/IPv6 sub-object recording the interface address and,
      when required, add a node-id sub-object in the RRO.

      Example: an inter-domain fast reroutable TE LSP would have the
      following three sub-objects in the RRO carried in Resv message: an
      IPv4/IPv6 sub-object recording interface address, a label sub-
      object, and a node-id sub-object.

   Note also that the node-id sub-object may have other applications
   than Fast Reroute backup tunnel selection.  Moreover, it is
   RECOMMENDED that an LSR recording a node-id address in an IPv4/IPv6
   RRO sub-object also set the node-id flag.

4.  Finding Merge Point

   Two cases should be considered:

   - Case 1: If the backup tunnel destination is the MP's node-id, then
     a PLR can find the MP and suitable backup tunnel by simply
     comparing the backup tunnel's destination address with the node-id
     included in the RRO of the primary tunnel.

   - Case 2: If the backup tunnel terminates at an address different
     from the MP's node-id, then a node-id sub-object MUST also be
     included in the RRO of the backup tunnel.  A PLR can find the MP
     and suitable backup tunnel by simply comparing the node-ids present
     in the RROs of both the primary and backup tunnels.

   It must be noted that although the technique described in this
   document for selecting an appropriate backup tunnel using the node-id
   sub-object applies to the case of Inter-area and Inter-AS, in the
   case of Inter-AS, the assumption is made that the MP's node-id (of
   the downstream domain) does not overlap with any LSR's node-id
   present in the PLR's AS.

   When both IPv4 node-id and IPv6 node-id sub-objects are present, a
   PLR may use any or both of them in finding the MP address.

5.  Security Considerations

   This document does not introduce new security issues.  The security
   considerations pertaining to [RSVP] and [RSVP-TE] remain relevant.

6.  Acknowledgements

   We would like to acknowledge input and helpful comments from Carol
   Iturralde, Anca Zamfir, Reshad Rahman, Rob Goguen, and Philip
   Matthews.  A special thanks to Adrian Farrel for his thorough review
   of this document.

7.  References

7.1.  Normative References

   [RFC2119]            Bradner, S., "Key words for use in RFCs to
                        Indicate Requirement Levels", BCP 14, RFC 2119,
                        March 1997.

   [RSVP]               Braden, R., Zhang, L., Berson, S., Herzog, S.,
                        and S. Jamin, "Resource ReSerVation Protocol
                        (RSVP) -- Version 1 Functional Specification",
                        RFC 2205, September 1997.

   [RSVP-TE]            Awduche, D., Berger, L., Gan, D., Li, T.,
                        Srinivasan, V., and G. Swallow, "RSVP-TE:
                        Extensions to RSVP for LSP Tunnels", RFC 3209,
                        December 2001.

   [FAST-REROUTE]       Pan, P., Swallow, G., and A. Atlas, "Fast
                        Reroute Extensions to RSVP-TE for LSP Tunnels",
                        RFC 4090, May 2005.

   [OSPF-TE]            Katz, D., Kompella, K., and D. Yeung, "Traffic
                        Engineering (TE) Extensions to OSPF Version 2",
                        RFC 3630, September 2003.

   [ISIS-TE]            Smit, H. and T. Li, "Intermediate System to
                        Intermediate System (IS-IS) Extensions for
                        Traffic Engineering (TE)", RFC 3784, June 2004.

7.2.  Informative References

   [INTER-AREA-TE-REQS] Le Roux, J.-L., Vasseur, J.-P., and J. Boyle,
                        "Requirements for Inter-Area MPLS Traffic
                        Engineering", RFC 4105, June 2005.

   [INTER-AS-TE-REQS]   Zhang, R. and J.-P. Vasseur, "MPLS Inter-
                        Autonomous System (AS) Traffic Engineering (TE)
                        Requirements", RFC 4216, November 2005.

   [PCE-ARCH]           Farrel, A., Vasseur, J.-P., and J. Ash, "A Path
                        Computation Element (PCE) Based Architecture",
                        Work in Progress, April 2006.

Authors' Addresses

   J.-P. Vasseur (Editor)
   Cisco Systems, Inc.
   1414 Massachusetts Avenue
   Boxborough , MA - 01719
   USA

   EMail: jpv@cisco.com


   Zafar Ali
   Cisco Systems, Inc.
   100 South Main St. #200
   Ann Arbor, MI 48104
   USA

   EMail: zali@cisco.com


   Siva Sivabalan
   Cisco Systems, Inc.
   2000 Innovation Drive
   Kanata, Ontario, K2K 3E8
   Canada

   EMail: msiva@cisco.com

Full Copyright Statement

   Copyright (C) The Internet Society (2006).

   This document is subject to the rights, licenses and restrictions
   contained in BCP 78, and except as set forth therein, the authors
   retain all their rights.

   This document and the information contained herein are provided on an
   "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
   OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
   ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
   INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
   INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
   WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Intellectual Property

   The IETF takes no position regarding the validity or scope of any
   Intellectual Property Rights or other rights that might be claimed to
   pertain to the implementation or use of the technology described in
   this document or the extent to which any license under such rights
   might or might not be available; nor does it represent that it has
   made any independent effort to identify any such rights.  Information
   on the procedures with respect to rights in RFC documents can be
   found in BCP 78 and BCP 79.

   Copies of IPR disclosures made to the IETF Secretariat and any
   assurances of licenses to be made available, or the result of an
   attempt made to obtain a general license or permission for the use of
   such proprietary rights by implementers or users of this
   specification can be obtained from the IETF on-line IPR repository at
   http://www.ietf.org/ipr.

   The IETF invites any interested party to bring to its attention any
   copyrights, patents or patent applications, or other proprietary
   rights that may cover technology that may be required to implement
   this standard.  Please address the information to the IETF at
   ietf-ipr@ietf.org.

Acknowledgement

   Funding for the RFC Editor function is provided by the IETF
   Administrative Support Activity (IASA).

AI ELI5

On this page
PROBLEMIn MPLS TE Fast Reroute, the Point of Local Repair needs the Merge Point address to pick a backup tunnel, but Record Route entries may hold either node-ids or interface addresses, and across IGP areas or ASes the PLR cannot map one to the other.
MECHANISMRFC 4561 defines a new flag, 0x20, on the existing RRO IPv4 and IPv6 sub-objects. When set, the address is the node-id, so the PLR can compare node-ids from the primary and backup tunnels' RROs.
WHY IT MATTERSWith node-ids marked, Fast Reroute can protect inter-domain TE LSPs against failure of an ABR or ASBR. The RFC introduces no new security issues.

§1The Merge Point Problem

MPLS Fast Reroute (FRR) protects Traffic Engineering LSPs from link, node or Shared Risk Link Group failure. Backup tunnels are set up in advance, and when a resource fails, every protected LSP crossing it is moved onto the matching backup tunnel.

A backup tunnel starts at the Point of Local Repair (PLR) and ends at the Merge Point (MP), where it rejoins the protected path. When a fast reroutable LSP is first signaled, the PLR must dynamically pick a backup tunnel that meets the primary LSP at a downstream router, and that satisfies its bandwidth protection and link or node protection request.

One way to check the first condition is to look through the primary tunnel's Record Route Object (RRO) for the MP's address. The catch is that, per RFC 3209, RRO IPv4 and IPv6 sub-objects in Resv messages can carry node-ids, interface addresses, or both. In the RFC's example, router R2 may list different interface addresses in the RROs of the primary tunnel T1 and the backup tunnel B1.

A router needs to know where its detour joins the main road. But the road signs name each door of a building instead of the building, so the router cannot tell two doors belong to the same building.

§2Why Existing Mechanisms Fall Short

Inside a single IGP area the problem is easy. The PLR's IGP topology database lists every interface on the tail-end of the backup tunnel, so it can match any address in the RRO to the MP, whether that address is an interface address or a node-id.

That routing information is not available between domains, where a domain is an IGP area or an Autonomous System. The PLR cannot then be sure that a backup tunnel meets the protected LSP at the MP. As a result, as the abstract puts it, MPLS Fast Reroute cannot be used to protect inter-domain TE LSPs from failure of an Area Border Router (ABR) or Autonomous System Border Router (ASBR).

The RFC's Figure 1 shows the case: a protected LSP from R0 to R3 across areas 1, 0 and 2, with backup tunnel B1 from R1 to R2 following the R1-ABR3-R2 path to avoid ABR1. The PLR R1 must work out that T1 and B1 meet at R2.

The RFC applies to the Facility backup method of FRR, and the requirements for FRR on inter-domain LSPs come from RFC 4105 and RFC 4216.

Inside one town, the router has a full map and can match doors to buildings. Between towns it has no map, so it needs the sign itself to say which building it is.

§3The Node-Id Flag

RFC 3209 defines the IPv4 and IPv6 RRO sub-objects, and RFC 4090 adds two flags, Local Protection Available and Local Protection in Use. RFC 4561 adds a third flag, Node-id, with value 0x20.

When set, the address in the sub-object is a node-id: the 'Router Address' of RFC 3630 (OSPF-TE) or the 'Traffic Engineering Router ID' of RFC 3784 (IS-IS TE). A node MUST use the same address consistently, and once an address is used in the RRO sub-object it SHOULD be used for the whole lifetime of the TE LSP.

An IPv4 or IPv6 sub-object with this flag set is called a node-id sub-object. The fix is to insert one into the RRO carried in the RSVP Resv message. It is RECOMMENDED that an LSR that records a node-id address in an RRO sub-object also set the flag. The RFC notes the node-id sub-object may have other uses besides picking a backup tunnel.

The new flag is a sticker on an address that says 'this is the router's own name, not one of its doors'. The router has to keep using the same name for as long as the path lives.

§4Finding the Merge Point

An implementation may choose between two ways of filling the RRO in the Resv message. Either it adds the node-id sub-object and, when needed, a separate sub-object recording the interface address. Or it adds the interface-address sub-object and, when needed, a node-id sub-object. For an inter-domain fast reroutable LSP, the first approach yields a node-id sub-object and a label sub-object, plus an interface sub-object if one is required. The second yields an interface sub-object, a label sub-object and a node-id sub-object.

The PLR then has two cases. In Case 1, the backup tunnel's destination is the MP's node-id, and the PLR compares that destination address with the node-id in the primary tunnel's RRO. In Case 2, the backup tunnel ends at some other address, so a node-id sub-object MUST also appear in the backup tunnel's RRO, and the PLR compares the node-ids in the RROs of both tunnels.

If both IPv4 and IPv6 node-id sub-objects are present, the PLR may use either or both. For inter-AS use, the RFC assumes the MP's node-id in the downstream domain does not overlap with any node-id of an LSR in the PLR's own AS.

Either the detour is already headed to the building, so the router just checks the name, or the detour ends at some other door and must also show the building's name so the two can be matched.

THE TWO CASES FOR FINDING THE MP (RFC 4561 SECTION 4)
CaseBackup tunnel ends atWhat the PLR compares
Case 1The MP's node-idBackup tunnel destination with the node-id in the primary RRO
Case 2 THIS RFCAn address other than the MP's node-idNode-ids in the primary RRO and in the backup RRO, which MUST carry a node-id sub-object

§5Security Considerations

The RFC says this document does not introduce new security issues. The security considerations of RSVP (RFC 2205) and RSVP-TE (RFC 3209) remain relevant, since the node-id is carried in the same RRO those protocols already define.

It only adds a label to something that already exists, so it does not add new ways to cheat. The old safety rules still apply.

§6References