RFC 8563

Bidirectional Forwarding Detection (BFD) Multipoint Active Tails

๐Ÿ“… published April 2019, from ietf

Bidirectional Forwarding Detection (BFD) Multipoint Active Tails โœจ

Internet Engineering Task Force (IETF) ๐ŸŽ€ ยท Request for Comments: 8563 ๐Ÿฆ‹ ยท ISSN: 2070-1721

Okay so this is RFC 8563 ๐Ÿ’–, and it's a Standards Track document from April 2019 ๐ŸŒธ. The authors are D. Katz (Juniper Networks), D. Ward (Cisco Systems), S. Pallagatti, Ed. (VMware), and G. Mirsky, Ed. (ZTE Corp.) ๐Ÿ‘‘. It doesn't obsolete or update anything, so it's a brand-new extension ๐Ÿงš. It's bestie-approved as an official Internet Standard, fr fr ๐Ÿ’….


Abstract โœจ

This document describes active tail extensions to the Bidirectional Forwarding Detection (BFD) protocol for multipoint networks ๐Ÿฆ‹.

Status of This Memo ๐Ÿ“œ

This is an Internet Standards Track document ๐ŸŒˆ.

This document is a product of the Internet Engineering Task Force (IETF) ๐Ÿ’œ. It represents the consensus of the IETF community ๐Ÿซถ. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG) โœจ. Further information on Internet Standards is available in Section 2 of RFC 7841 ๐ŸŽ€.

Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at https://www.rfc-editor.org/info/rfc8563 ๐Ÿ”ฅ.

Copyright (c) 2019 IETF Trust and the persons identified as the document authors. All rights reserved ๐ŸŒธ.

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document ๐Ÿ’…. Please review these documents carefully, as they describe your rights and restrictions with respect to this document ๐Ÿ™ˆ. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License ๐Ÿ’œ.

Table of Contents ๐Ÿ“

1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   3
2.  Terminology and Acronyms  . . . . . . . . . . . . . . . . . .   3
3.  Keywords  . . . . . . . . . . . . . . . . . . . . . . . . . .   3
4.  Overview  . . . . . . . . . . . . . . . . . . . . . . . . . .   4
5.  Operational Scenarios . . . . . . . . . . . . . . . . . . . .   5
  5.1.  No Head Notification  . . . . . . . . . . . . . . . . . .   5
  5.2.  Head Notification . . . . . . . . . . . . . . . . . . . .   5
    5.2.1.  Head Notification without Polling . . . . . . . . . .   5
    5.2.2.  Head Notification and Tail Solicitation with
            Multipoint Polling  . . . . . . . . . . . . . . . . .   6
    5.2.3.  Head Notification with Composite Polling  . . . . . .   6
6.  Protocol Details  . . . . . . . . . . . . . . . . . . . . . .   7
  6.1.  Multipoint Client Session . . . . . . . . . . . . . . . .   8
  6.2.  Multipoint Client Session Failure . . . . . . . . . . . .   8
  6.3.  State Variables . . . . . . . . . . . . . . . . . . . . .   8
    6.3.1.  New State Variables . . . . . . . . . . . . . . . . .   8
    6.3.2.  New State Variable Value  . . . . . . . . . . . . . .   9
    6.3.3.  State Variable Initialization and Maintenance . . . .  10
  6.4.  Controlling Multipoint BFD Options  . . . . . . . . . . .  11
  6.5.  State Machine . . . . . . . . . . . . . . . . . . . . . .  11
  6.6.  Session Establishment . . . . . . . . . . . . . . . . . .  12
  6.7.  Discriminators and Packet Demultiplexing  . . . . . . . .  12
  6.8.  Controlling Tail Packet Transmission  . . . . . . . . . .  12
  6.9.  Soliciting the Tails  . . . . . . . . . . . . . . . . . .  13
  6.10. Verifying Connectivity to Specific Tails  . . . . . . . .  13
  6.11. Detection Times . . . . . . . . . . . . . . . . . . . . .  14
  6.12. MultipointClient Down/AdminDown Sessions  . . . . . . . .  15
  6.13. Base BFD for Multipoint Networks Specification Text
        Replacement . . . . . . . . . . . . . . . . . . . . . . .  15
    6.13.1.  Reception of BFD Control Packets . . . . . . . . . .  15
    6.13.2.  Demultiplexing BFD Control Packets . . . . . . . . .  16
    6.13.3.  Transmitting BFD Control Packets . . . . . . . . . .  16
7.  Assumptions . . . . . . . . . . . . . . . . . . . . . . . . .  17
8.  Operational Considerations  . . . . . . . . . . . . . . . . .  18
9.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  18
10. Security Considerations . . . . . . . . . . . . . . . . . . .  18
11. Normative References  . . . . . . . . . . . . . . . . . . . .  19
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . .  19
Contributors  . . . . . . . . . . . . . . . . . . . . . . . . . .  19
Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  20

1. Introduction ๐Ÿฆ‹

Okay so this is an extension to Multipoint BFD [RFC8562] โœจ, and it lets tails tell the head when they've lost multipoint connectivity ๐Ÿ’…. As an extra bonus, heads can ask the tails for a notification by using a polling mechanism ๐Ÿซถ. Notification can be turned on for all tails, or just for a subset of them ๐ŸŒˆ.

The goal here is for the head to have reasonably rapid knowledge of tails that have lost connectivity from the head ๐Ÿ”ฅ.

Scaling is a primary concern ๐Ÿ˜ญ, especially state explosion toward the head ๐Ÿ’€. So it is required that the head be in control of all timing aspects of the mechanism ๐Ÿ‘‘, and that BFD packets from the tails to the head not be synchronized ๐Ÿงš.

Throughout this document, the term "multipoint" is defined as a mechanism by which one or more systems receive packets sent by a single sender ๐ŸŒธ. This specifically includes things like IP multicast and point-to-multipoint MPLS ๐Ÿ’œ.

The term "connectivity" in this document is not being used in the context of connectivity verification in a transport network ๐Ÿ™ˆ. Instead, it's an alternative to "continuity", i.e., the existence of a path between the sender and the receiver ๐Ÿ“.

This document effectively modifies and adds to Sections 5.12 and 5.13 of the base BFD multipoint networks specification [RFC8562] ๐ŸŽ€.

2. Terminology and Acronyms ๐Ÿ“–

  • BFD: Bidirectional Forwarding Detection ๐Ÿ’–
  • c-poll: Composite Poll ๐Ÿฆ‹
  • m-poll: Multipoint Poll ๐ŸŒธ

3. Keywords ๐Ÿ”‘

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here ๐Ÿ’œ.

4. Overview ๐ŸŒˆ

Okay so a head might want to know about the tails' connectivity (or the lack of it), and there are a bunch of ways to do that โœจ. First, if all that's needed is a best-effort failure notification, as discussed in Section 5.2.1, the tails can send unsolicited unicast BFD Control packets to the head when the path fails, as described in Section 6.4 ๐Ÿ’….

If the head wants to know which tails are active on the multipoint path, it can send a multipoint BFD Control packet with the Poll (P) bit set ๐Ÿซถ. That makes the tails send back a unicast BFD Control packet with the Final (F) bit set (see a detailed description in Section 5.2.2) ๐Ÿฆ‹. The head can then create BFD session state for each of the tails that have multipoint connectivity ๐Ÿ‘‘. If the head sends such a packet on occasion, it can keep track of which tails answer ๐ŸŒธ. That gives a more deterministic way of spotting which tails fail to respond (implying a loss of multipoint connectivity) ๐Ÿ”ฅ. In this document, this method is called the Multipoint Poll (m-poll) ๐Ÿ’–.

If the head wants definite indication of the tails' connectivity, it can do all of the above ๐Ÿงš. But if it notices that a tail didn't answer the previous multipoint poll, it may start a Demand mode Poll Sequence as a unicast to that tail (see a detailed description in Section 5.2.3) ๐Ÿ˜ญ. This covers the case where either the multipoint poll or the single reply gets lost in transit ๐Ÿ’€. If it wants, the head can Poll one or more tails proactively to track their connectivity ๐ŸŽ€. In this document, the method that combines multipoint and unicast polling of tails by the head is called the Composite Poll (c-poll) ๐Ÿ’œ.

If the awareness of some nodes' state matters more to the head, in the sense that the head needs to detect the lack of multipoint connectivity to a subset of tails at a different rate, the head may transmit unicast BFD Polls to that subset of tails ๐ŸŒˆ. In this case, the timing may be independent on a tail-by-tail basis ๐Ÿ“.

Individual tails may be configured so that they never send BFD Control packets to the head ๐Ÿ™ˆ. Such tails will never be known to the head, but they'll still be able to detect multipoint path failures from the head ๐Ÿซถ.

5. Operational Scenarios ๐ŸŽฌ

It's worth analyzing how this protocol reacts to different scenarios ๐Ÿ”. There are three path components present: the multipoint path, the forward unicast path (from the head to a particular tail), and the reverse unicast path (from a tail to the head) ๐Ÿ›ค๏ธ. There are also four options for how the head is notified about failures from the tail ๐ŸŒธ. For the different modes described below, the settings of new state variables are given even if they're only introduced later in the document (see Section 6.3) ๐Ÿ’….

5.1. No Head Notification ๐Ÿ™‰

In this scenario, only the multipoint path is used, and none of the others matter ๐ŸŒท. A failure in the multipoint path will make the tail notice the failure within a Detection Time, and the head will stay ignorant of the tail state ๐Ÿ˜ถ. This mode emulates the behavior described in [RFC8562] ๐Ÿ’–. In this mode, bfd.SessionType is MultipointTail, and the variable bfd.SilentTail (see Section 6.3.1) MUST be set to 1 ๐Ÿ”’. If bfd.SessionType is MultipointHead or MultipointClient, bfd.ReportTailDown MUST be set to zero ๐Ÿ™…โ€โ™€๏ธ. The head MAY set bfd.RequiredMinRxInterval to zero, and thus suppress tails sending any BFD Control packets ๐ŸŒ™.

5.2. Head Notification ๐Ÿ“ฃ

In these scenarios, the tail sends unsolicited or solicited BFD packets in response to the detection of a multipoint path failure ๐Ÿšจ. All these scenarios have common settings:

  • if bfd.SessionType is MultipointTail, the variable bfd.SilentTail (see Section 6.3.1) MUST be set to zero ๐ŸŒฟ;
  • if bfd.SessionType is MultipointHead or MultipointClient, bfd.ReportTailDown MUST be set to 1 โœ…;
  • the head MUST set bfd.RequiredMinRxInterval to nonzero, and thus allow tails to send BFD Control packets ๐Ÿซง.

5.2.1. Head Notification without Polling ๐Ÿ“ฌ

In this scenario, the tail sends unsolicited BFD packets in response to the detection of a multipoint path failure ๐Ÿ’Œ. It uses the reverse unicast path, but not the forward unicast path ๐Ÿ›ฃ๏ธ.

If the multipoint path fails but the reverse unicast path stays up, the tail will detect the failure within a Detection Time, and the head will know about it within one reverse packet time (since the notification is delayed) โฐ.

If both the multipoint path and the reverse unicast paths fail, the tail will detect the failure, but the head will remain unaware of it ๐Ÿ˜ฑ.


To be continued in Part 2 โœจ๐Ÿ’–

5.2.2. Head Notification and Tail Solicitation with Multipoint Polling โœจ

Okay so in this one ๐Ÿ’… the head sends occasional multipoint Polls on top of (or instead of) the regular non-Poll multipoint BFD Control packets, and it expects the tails to reply with Final ๐Ÿซถ. This scenario uses the reverse unicast path too, but it doesn't touch the forward unicast path.

If the multipoint path fails but the reverse unicast path is still up, the tail catches the failure within a Detection Time ๐Ÿ˜ญ. The head finds out within one reverse packet time, but the notification gets delayed so the tails don't all sync up and send at once ๐Ÿ™ˆ.

If both the multipoint path and the reverse unicast paths die, the tail notices, but the head is completely clueless ๐Ÿ’€.

If the reverse unicast path fails but the multipoint path stays up, the head sees the BFD session fail. It can't tell what the multipoint path is doing though ๐Ÿคทโ€โ™€๏ธ. Meanwhile the tail keeps getting multipoint data traffic ๐ŸŒˆ.

If either the multipoint Poll or the unicast reply gets lost in transit, the head sees the BFD session fail, but once again the multipoint path state is a mystery ๐Ÿ”. The tail keeps receiving multipoint data traffic โœจ.

5.2.3. Head Notification with Composite Polling

Okay this is the most main-character scenario ๐Ÿ‘‘. The head sends occasional multipoint Polls on top of (or instead of) non-Poll multipoint BFD Control packets, expecting the tails to reply with Final. If a tail that used to reply to a multipoint Poll goes quiet (or if the head just wants to double-check that a tail is still there), the head sends a unicast Poll Sequence to that tail ๐ŸŽ€. This scenario uses all three paths ๐Ÿ”ฅ. In this mode, for bfd.SessionType of MultipointTail, the variable bfd.SilentTail (see Section 6.3.1) MUST be set to zero.

If the multipoint path fails but both unicast paths stay up, the tail catches the failure within a Detection Time. The head learns about it within one reverse packet time, since the notification is delayed. Heads up, though: the reverse packet time might be shorter here if the head already sent a unicast Poll earlier, because the tail won't delay the notification in that case โฉ.

If both the multipoint path and the reverse unicast paths fail (no matter what the forward unicast path is doing), the tail notices, but the head stays in the dark ๐ŸŒ‘. The head can see a BFD session failure to the tail, but it can't figure out what's going on with the tail's multipoint connectivity ๐Ÿ˜ต.

If the forward unicast path fails but the reverse unicast path stays up, the head only sees a BFD session failure to the tail if it happens to send a unicast Poll Sequence. Even then, it can't tell what's happening with the tail's multipoint connectivity ๐Ÿค”. If the multipoint path to the tail fails before any unicast Poll gets sent, the tail catches it within a Detection Time, and the head learns about it within one reverse packet time, since the notification is delayed ๐Ÿ’Œ.

If the multipoint path stays up but the reverse unicast path fails, the head sees that particular MultipointClient session fail if it happens to send a Poll Sequence. The state of the multipoint path stays unknown to the head, though ๐Ÿซ . The tail keeps receiving multipoint data traffic ๐Ÿฆ‹.

If the multipoint path and the reverse unicast path both stay up but the forward unicast path fails, neither side notices as long as the head never sends a unicast Poll Sequence ๐Ÿ™ˆ. Once the head does send one, it catches the failure in the forward unicast path. The state of the multipoint path gets figured out by the multipoint Poll, and the tail keeps receiving multipoint data traffic ๐Ÿ’œ.


6. Protocol Details ๐ŸŽ€

This section describes how the BFD Multipoint active tail operates, in detail. It modifies Section 4 of [RFC8562] as follows:

  • Section 6.3 introduces new state variables and modifies the usage of a few existing ones;
  • Section 6.13 replaces the corresponding sections in the base BFD for multipoint networks specification.

6.1. Multipoint Client Session

Okay so if the head is keeping track of some or all of the tails ๐Ÿงš, it has a session of type MultipointClient for each tail it cares about. All of the MultipointClient sessions for tails on a particular multipoint path are tied to the MultipointHead session that the clients are listening to. A BFD Poll Sequence may be sent over a MultipointClient session to a tail if the head wants to verify connectivity ๐Ÿ”. These sessions receive any BFD Control packets the tails send, and they MUST NOT transmit periodic BFD Control packets other than Poll Sequences (periodic transmission is always handled by the MultipointHead session, so no double-dipping ๐Ÿ’…). Also, the settings of all BFD variables in a MultipointClient session for a particular tail override the matching settings in the MultipointHead session ๐Ÿ‘‘.

6.2. Multipoint Client Session Failure

If a MultipointClient session receives a BFD Control packet from the tail with state Down or AdminDown, the head reliably knows the tail has lost multipoint connectivity ๐Ÿ˜ค. If the Detection Time expires on a MultipointClient session, though, it's ambiguous. It could be that the multipoint connectivity failed, or it could be a unicast path problem in one direction or the other ๐Ÿคทโ€โ™€๏ธ. So the head doesn't reliably know the tail's state in that case ๐Ÿ’€.

6.3. State Variables

BFD Multipoint active tail introduces new state variables and modifies the usage of a few existing ones defined in Section 5.4 of [RFC8562] ๐Ÿซถ.

6.3.1. New State Variables

A few state variables get added to support multipoint BFD active tail โœจ.

bfd.SilentTail

If zero, a tail may send packets to the head according to the other parts of this specification. Setting this to 1 lets tails be provisioned to always stay silent, even when the head is soliciting traffic from them ๐Ÿคซ. This can be useful, for example, in deployments with a large number of tails where the head only wants to track a subset of them ๐ŸŒธ. This variable MUST be initialized based on configuration. The default value MUST be 1.

This variable is only pertinent when bfd.SessionType is MultipointTail, and it SHOULD NOT be modified after the MultipointTail session has been created ๐Ÿ™…โ€โ™€๏ธ.

bfd.ReportTailDown

Set to 1 if the head wants tails to notify it, via periodic BFD Control packets, when they see the BFD session fail ๐Ÿ“ฃ. If zero, the tail never sends periodic BFD Control packets, and the head won't get notified of session failures by the tails ๐Ÿ˜ถ. This variable MUST be initialized based on configuration. The default value MUST be zero.

This variable is only pertinent when bfd.SessionType is MultipointHead or MultipointClient ๐Ÿ“.

bfd.UnicastRcvd

Set to 1 if a tail has received a unicast BFD Control packet from the head while being in Up state ๐Ÿ“ฌ. This variable MUST be set to zero if the session transitions from Up state to some other state. This variable MUST be initialized to zero.

This variable is only pertinent when bfd.SessionType is MultipointTail ๐Ÿ’œ.

6.3.2. New State Variable Value

A new state variable value is being added to:

bfd.SessionType

The type of this session, as defined in [RFC7880]. One new value is introduced:

  • MultipointClient: A session on the head that tracks the state of an individual tail, when desirable ๐ŸŒˆ.

This variable MUST be initialized to the appropriate type when the session is created, according to the rules in Section 5.4 of [RFC8562] ๐Ÿ”ฅ.

6.3.3. State Variable Initialization and Maintenance

Some state variables defined in Section 6.8.1 of [RFC5880] need to be initialized or manipulated differently depending on the session type ๐Ÿง . The values of some of these relate to the same variables in a MultipointHead session (see Section 5.4.2 of [RFC8562]) ๐Ÿซ‚.

bfd.LocalDiscr

For session type MultipointClient, this variable MUST always match the value of bfd.LocalDiscr in the associated MultipointHead session.

bfd.DesiredMinTxInterval

For session type MultipointClient, this variable MUST always match the value of bfd.DesiredMinTxInterval in the associated MultipointHead session.

bfd.RequiredMinRxInterval

It MAY be set to zero at the head BFD system to suppress traffic from the tails. Setting it to zero in the MultipointHead session suppresses traffic from all tails ๐Ÿ›‘. The setting in a MultipointClient session suppresses traffic from a single tail ๐ŸŽฏ.

bfd.DemandMode

This variable MUST be initialized to 1 for session types MultipointClient ๐Ÿ’….

bfd.DetectMult

For session type MultipointClient, this variable MUST always match the value of bfd.DetectMult in the associated MultipointHead session.

6.4. Controlling Multipoint BFD Options

The state variables defined above decide which operational options are active ๐ŸŽ›๏ธ.

The most basic form of BFD operation in multipoint networks is explained in [RFC8562]. In this setup, BFD Control packets only flow from the head, and no tracking of tail state at the head is wanted ๐ŸŒ™. That's done by setting bfd.ReportTailDown to zero in the MultipointHead session (Section 5.1).

If the head wants to know which tails are active, it sends multipoint Polls as needed. Previously known tails that don't respond to the Polls get detected (as per Section 5.2.2) ๐Ÿ•ต๏ธโ€โ™€๏ธ.

If the head wants a notification from the tails when they lose connectivity, it sets bfd.ReportTailDown to 1 in either the MultipointHead session (if it wants notifications from all tails) or the MultipointClient session (if it wants them from one particular tail) ๐Ÿ“ฃ. Heads up: the setting in a MultipointClient session for a particular tail overrides the setting in the MultipointHead session ๐Ÿ’–.

If the head wants to verify the state of a tail on an ongoing basis, it sends a Poll Sequence from the MultipointClient session tied to that tail, as needed ๐Ÿซถ. This skips the initial delay (described in Section 6.13.3) that the tail would otherwise insert before sending the packet. So the head may hear about a session failure more quickly than it would with m-poll โšก.

If a tail wants to operate silently (sending no BFD Control packets to the head), it sets bfd.SilentTail to 1 in the MultipointTail session ๐Ÿค. This lets a tail stay silent no matter what the head's settings are ๐Ÿฆ‹.

6.5. State Machine

Okay so the state transitions for the state machine (defined in Section 5.5 of [RFC8562]) for a session type MultipointHead are only driven administratively ๐Ÿง‘โ€๐Ÿ’ป. The state machine for a session of type MultipointClient is the same, so the diagram applies to both ๐Ÿ’œ.

6.6. Session Establishment ๐Ÿงš

Okay so when BFD Control packets show up at the head, they get demultiplexed to sessions of type MultipointClient, which basically represent the set of tails the head is interested in tracking ๐Ÿ‘€. These sessions will typically also get set up dynamically based on the receipt of BFD Control packets. The head has broad latitude in choosing which tails to track, if any, without affecting the basic operation of the protocol ๐Ÿ’…. The head directly controls whether or not tails are allowed to send BFD Control packets back to it by setting bfd.RequiredMinRxInterval to zero in a MultipointHead or a MultipointClient session ๐Ÿ™ˆ.


6.7. Discriminators and Packet Demultiplexing ๐Ÿฆ‹

When the tails send BFD Control packets to the head from the MultipointTail session, the contents of Your Discriminator (the discriminator received from the head) won't be enough for the head to demultiplex the packet, since the same value gets received from all tails on the multicast tree ๐Ÿ˜ญ. So in this case, the head MUST demultiplex packets based on the source address and the value of Your Discriminator, which together uniquely identify the tail and the multipoint path ๐Ÿ”ฅ.

When the head sends unicast BFD Control packets to a tail from a MultipointClient session, the value of Your Discriminator will be valid, and the tail MUST demultiplex the packet based solely on Your Discriminator โœจ.


6.8. Controlling Tail Packet Transmission ๐ŸŒธ

As the fan-in from the tails to the head may be very large, it is critical that the flow of BFD Control packets from the tails is controlled ๐Ÿ˜ณ.

The head always operates in Demand mode. This means no tail will send an asynchronous BFD Control packet as long as the session is Up ๐Ÿ’œ.

The value of Required Min Rx Interval received by a tail in a unicast BFD Control packet, if any, always takes precedence over the value received in multipoint BFD Control packets. This lets the packet rate from individual tails be controlled separately, as desired, by sending a BFD Control packet from the matching MultipointClient session. It also gets rid of the random delay (see Section 6.13.3) that would otherwise be inserted before transmission from the tail, which cuts down the latency of reporting a failure to the head โšก.

If the head wishes to suppress traffic from the tails when they detect a session failure, it MAY set bfd.RequiredMinRxInterval to zero, which is a reserved value meaning the sender wants to receive no periodic traffic ๐Ÿ›‘. This can be set in the MultipointHead session (suppressing traffic from all tails), or it can be set in a MultipointClient session (suppressing traffic from only a single tail) ๐Ÿ‘‘.

Any tail may be provisioned to never send any BFD Control packets to the head by setting bfd.SilentTail to 1 ๐Ÿคซ. This gives a way for only a subset of tails to report their session status to the head ๐Ÿ“.


6.9. Soliciting the Tails ๐Ÿ“ฃ

If the head wants to know which tails are active, the MultipointHead session can send a BFD Control packet as specified in Section 6.13.3, with the Poll (P) bit set to 1 ๐Ÿ™‹. That makes all of the tails reply with a unicast BFD Control packet, randomized across one packet interval ๐ŸŽฒ.

The decision as to when to send a multipoint Poll is outside the scope of this specification. Still, it MUST NOT be sent more often than the regular multipoint BFD Control packet ๐Ÿ™…. Since the tail treats a multipoint Poll like any other multipoint BFD Control packet, Polls may be sent in lieu of non-Poll packets ๐Ÿ”.

Soliciting the tails also starts the Detection Timer for each of the associated MultipointClient sessions, which will make those sessions time out if the associated tails don't respond โฐ.

Note that for this mechanism to work properly, the Detection Time (which is equal to bfd.DesiredMinTxInterval) MUST be greater than the round-trip time of BFD Control packets from the head to the tail (via the multipoint path) and back (via a unicast path). See Section 6.11 for more details ๐Ÿง .


6.10. Verifying Connectivity to Specific Tails ๐Ÿ”

If the head wants to verify connectivity to a specific tail, the matching MultipointClient session can send a BFD Poll Sequence to said tail ๐Ÿ’Œ. This might happen in reaction to the Detection Timer expiring (the tail didn't respond to a multipoint Poll), or it might happen on a proactive basis ๐Ÿ’ช.

The interval between transmitted packets in the Poll Sequence MUST be calculated as specified in the base BFD specification [RFC5880] (the greater of bfd.DesiredMinTxInterval and bfd.RemoteMinRxInterval) ๐Ÿ“.

The value transmitted in Required Min RX Interval will be used by the tail (rather than the value received in any multipoint packet) when it transmits BFD Control packets to the head to let it know about a session failure, and those transmitted packets won't be delayed ๐Ÿšจ. This value can potentially be set much lower than in the multipoint case, to speed up a notification to the head, since only the single tail uses it ๐Ÿƒ. This value (and the lack of delay) is "sticky": once the tail receives it, it keeps using it indefinitely ๐Ÿงท. So if the head no longer wants to single out the tail, it SHOULD reset the timer to the default by sending a Poll Sequence with the same value of Required Min Rx Interval as is carried in the multipoint packets, or it MAY reset the tail session by sending a Poll Sequence with state AdminDown (after which the session will come back up) ๐Ÿ”„.

Note that a failure of the head to receive a response to a Poll Sequence does not necessarily mean the tail has lost multipoint connectivity ๐Ÿคท. A reply to a Poll Sequence, though, does reliably indicate connectivity or lack thereof (because the tail's state isn't Up in the BFD Control packet) โœ….


6.11. Detection Times โฑ๏ธ

MultipointClient sessions at the head are always in Demand mode, so they only care about Detection Time in two cases ๐Ÿค“. First, if a Poll Sequence is being sent on a MultipointClient session, the Detection Time on that session is calculated according to the base BFD specification [RFC5880], which means the transmission interval multiplied by bfd.DetectMult ๐Ÿงฎ. Second, when a multipoint Poll is sent to solicit tail replies, the Detection Time on all associated MultipointClient sessions that aren't currently sending Poll Sequences is set to a value greater than or equal to bfd.RequiredMinRxInterval (one packet time) ๐Ÿ•ฐ๏ธ.

This value can be made arbitrarily large, so the Detection Time is greater than the round-trip time of a BFD Control packet between the head and the tail, with no ill effects other than delaying the detection of unresponsive tails ๐Ÿ›ก๏ธ. Note that a Detection Time expiration on a MultipointClient session at the head, while indicating a BFD session failure, cannot be taken to mean that the tail isn't hearing multipoint packets from the head ๐Ÿ™…โ€โ™€๏ธ.


6.12. MultipointClient Down/AdminDown Sessions ๐Ÿ’ค

If the MultipointHead session is in Down/AdminDown state (which only happens administratively), all associated MultipointClient sessions SHOULD be destroyed, since they're superfluous ๐Ÿ—‘๏ธ.

If a MultipointClient session goes down because it received an unsolicited BFD Control packet from the tail with state Down or AdminDown (not in response to a Poll), and tail connectivity verification isn't being done, the session MAY be destroyed ๐ŸŒ€. If verification is desired, the session SHOULD send a Poll Sequence and the session SHOULD be maintained ๐Ÿง.

If the tail replies to a Poll Sequence with state Down or AdminDown, it means the tail session is definitely down. In this case, the session MAY be destroyed ๐Ÿ’€.

If the Detection Time expires on a MultipointClient session (meaning the tail didn't reply to a Poll Sequence), the session MAY be destroyed ๐Ÿ‘‹.


6.13. Base BFD for Multipoint Networks Specification Text Replacement ๐Ÿงฉ

The following sections are meant to extend the corresponding sections in the base BFD for multipoint networks specification [RFC8562] ๐Ÿ“š.

6.13.1. Reception of BFD Control Packets ๐Ÿ“ฅ

The following procedure modifies parts of Section 5.13.1 of [RFC8562].

When a BFD Control packet is received, the procedure defined in Section 5.13.1 of [RFC8562] MUST be followed, in the order specified. If the packet is discarded according to these rules, processing of the packet MUST cease at that point. In addition to that, if tail tracking is desired by the head, the following procedure MUST be applied.

      If bfd.SessionType is MultipointTail

         If bfd.UnicastRcvd is zero or the Multipoint (M) bit is clear,
         set bfd.RemoteMinRxInterval to the value of Required Min RX
         Interval.

         If the Multipoint (M) bit is clear, set bfd.UnicastRcvd to 1.

      Else (not MultipointTail)

         Set bfd.RemoteMinRxInterval to the value of Required Min RX
         Interval.

      If the Poll (P) bit is set, and bfd.SilentTail is zero, send a BFD
      Control packet to the remote system with the Poll (P) bit clear
      and the Final (F) bit set (see Section 6.13.3).

6.13.2. Demultiplexing BFD Control Packets ๐Ÿ”€

This section is part of the addition to Section 5.13.2 of [RFC8562], separated for clarity.

      If the Multipoint (M) bit is clear

         If the Your Discriminator field is nonzero:

            Select a session based on the value of Your Discriminator.
            If no session is found, the packet MUST be discarded.

            If bfd.SessionType is MultipointHead:

               Find a MultipointClient session grouped to this
               MultipointHead session, based on the source address and
               the value of Your Discriminator.  If a session is found
               and is not MultipointClient, the packet MUST be
               discarded.  If no session is found, a new session of type
               MultipointClient MAY be created, or the packet MAY be
               discarded.  This choice is outside the scope of this
               specification.

               If bfd.SessionType is not MultipointClient, the packet
               MUST be discarded.

6.13.3. Transmitting BFD Control Packets ๐Ÿ“ฆ

okay bestie, the first rule for sending is lowkey strict ๐Ÿ™…โ€โ™€๏ธ A system MUST NOT periodically transmit BFD Control packets if bfd.SessionType is MultipointClient and a Poll Sequence is not being transmitted. so clients only talk when a poll is actually happening, no cap.

If bfd.SessionType is MultipointTail and periodic transmission is just starting (because Demand mode isn't active on the remote system), the first packet MUST be delayed by a random amount of time between zero and (0.9 * bfd.RemoteMinRxInterval). it's giving "don't all show up at the exact same second" energy ๐ŸŒธ

now the poll replies, which are super important โœจ If a BFD Control packet comes in with the Poll (P) bit set to 1, the receiver MUST transmit a BFD Control packet with the Poll (P) bit clear and the Final (F) bit set. this happens without respect to the transmission timer or any other transmission limitations, the session state, and whether Demand mode is active on either system. so yes, even if the timer is like "not yet," you still answer ๐Ÿ’… A system MAY limit the rate at which such packets are transmitted. if rate limiting is in effect, the advertised value of Desired Min TX Interval MUST be greater than or equal to the interval between transmitted packets imposed by the rate-limiting function. so you can't promise a faster rate than you're actually allowed to send ๐Ÿ™ˆ If the Multipoint (M) bit is set in the received packet, the packet transmission MUST be delayed by a random amount of time between zero and (0.9 * bfd.RemoteMinRxInterval). otherwise, the packet MUST be transmitted as soon as practicable. ASAP, bestie ๐Ÿƒโ€โ™€๏ธ

A system MUST NOT set the Demand (D) bit if bfd.SessionType is MultipointClient unless bfd.DemandMode is 1, bfd.SessionState is Up, and bfd.RemoteSessionState is Up. so the D bit is only allowed when everything is already vibing ๐ŸŒˆ

Content of the transmitted packet MUST be as explained in Section 5.13.3 of [RFC8562]. go read that one for the exact details ๐Ÿฆ‹


7. Assumptions ๐Ÿ’–

okay so, if the head notification is going to be used, it's assumed that a multipoint BFD packet encapsulation has enough info that a tail can address a unicast BFD packet to the head ๐Ÿ“ฌ

also if the head notification is used, it's assumed there's bidirectional unicast communication (at the same protocol layer BFD runs at) between the tail and the head ๐Ÿ”

now here's the tea โ˜• For the head to know reliably that a tail has lost multipoint connectivity, the unicast paths in both directions between that tail and the head have to stay up when the multipoint path fails. so it's desirable that the unicast paths don't share fate with the multipoint path as much as possible, if the head wants more definite knowledge of the tail's state ๐Ÿซถ

last one: since the normal BFD three-way handshake isn't used in this application, a tail that goes from Up to Down and back to Up again may not be reliably detected at the head. that's a lowkey plot twist ๐Ÿ˜ญ


8. Operational Considerations ๐ŸŽ€

Section 7 of [RFC5880] has the requirements for a congestion control mechanism when BFD is used across multiple hops, plus a mechanism that uses congestion detection to reduce how many BFD packets the system generates. those requirements apply to this specification too ๐Ÿงš

when this specification is used in the mode with no head notifications by tails (see Section 5.1), the head MUST limit its packet transmission rate to no higher than one BFD packet per second (see Section 5.13.3 of [RFC8562]). rate limit, obsessed ๐Ÿ™Œ

when BFD uses one of the notifications by the tails to the head mechanisms from Section 5.2, the tail can use Min RX Interval to control the head's packet transmission rate. the exact way changes in the Min RX Interval value are processed when it's received from the tail in response to a multicast or unicast Poll BFD packet is outside the scope of this document. that's a whole other chapter bestie ๐Ÿ“–

as noted in Section 7 of [RFC5880], "any mechanism that increases the transmit or receive intervals will increase the Detection Time for the session". so be careful with the timers, they affect how fast you notice trouble ๐Ÿ’€


9. IANA Considerations ๐ŸŒท

This document has no IANA actions. nothing to register here, we're all good ๐Ÿ’…


10. Security Considerations ๐Ÿ”

The same security considerations as those described in [RFC5880] and [RFC8562] apply to this document. read those too, they're serious ๐Ÿ‘€

Additionally, implementations that create MultpointClient sessions dynamically upon receipt of a BFD Control packet from a tail MUST implement protective measures to prevent a number of MultpointClient sessions from being created and growing out of control. this part is dramatic, but it's real ๐Ÿ˜ฑ Below are some points to be considered in such implementations:

  • When the number of MultpointClient sessions exceeds the number of expected tails, the implementation should generate an alarm to users to indicate the anomaly. ring the bell ๐Ÿ””
  • The implementation should have a reasonable upper bound on the number of MultpointClient sessions that can be created, with the upper bound potentially being computed based on the number of multicast streams that the system is expecting. no infinite sessions, periodt ๐Ÿ›‘

This specification does not raise any additional security issues beyond those of the specifications referred to in the list of normative references. so the security story is basically "go check the other RFCs" ๐Ÿง


11. Normative References ๐Ÿ“š

[RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
           Requirement Levels", BCP 14, RFC 2119,
           DOI 10.17487/RFC2119, March 1997,
           <https://www.rfc-editor.org/info/rfc2119>.

[RFC5880]  Katz, D. and D. Ward, "Bidirectional Forwarding Detection
           (BFD)", RFC 5880, DOI 10.17487/RFC5880, June 2010,
           <https://www.rfc-editor.org/info/rfc5880>.

[RFC7880]  Pignataro, C., Ward, D., Akiya, N., Bhatia, M., and
           S. Pallagatti, "Seamless Bidirectional Forwarding
           Detection (S-BFD)", RFC 7880, DOI 10.17487/RFC7880, July
           2016, <https://www.rfc-editor.org/info/rfc7880>.

[RFC8174]  Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
           2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
           May 2017, <https://www.rfc-editor.org/info/rfc8174>.

[RFC8562]  Katz, D., Ward, D., Pallagatti, S., Ed., and G. Mirsky,
           Ed., "Bidirectional Forwarding Detection (BFD) for
           Multipoint Networks", RFC 8562, DOI 10.17487/RFC8562,
           April 2019, <https://www.rfc-editor.org/info/rfc8562>.

Acknowledgments ๐Ÿซถ

The authors would like to thank Nobo Akiya, Vengada Prasad Govindan, Jeff Haas, Wim Henderickx, and Mingui Zhang who have greatly contributed to this document. the squad is iconic ๐Ÿ‘‘

Contributors ๐ŸŒŸ

Rahul Aggarwal of Juniper Networks and George Swallow of Cisco Systems provided the initial idea for this specification and contributed to its development. the OG idea people ๐Ÿ“

Authors' Addresses ๐Ÿฆ‹

Dave Katz
Juniper Networks
1194 N. Mathilda Ave.
Sunnyvale, California  94089-1206
United States of America

Email: dkatz@juniper.net


Dave Ward
Cisco Systems
170 West Tasman Dr.
San Jose, California  95134
United States of America

Email: wardd@cisco.com


Santosh Pallagatti (editor)
VMware

Email: santosh.pallagatti@gmail.com


Greg Mirsky (editor)
ZTE Corp.

Email: gregimirsky@gmail.com
๐Ÿ“ฆ where this page comes from