RFC 8669
Segment Routing Prefix Segment Identifier Extensions for BGP
Segment Routing Prefix Segment Identifier Extensions for BGP ๐ฆ
- RFC number: 8669
- Category: Standards Track, so this is an official Internet Standards Track document ๐ฅ
- Date: December 2019
- ISSN: 2070-1721
- Authors: S. Previdi (Huawei Technologies), C. Filsfils and A. Lindem, Ed. (Cisco Systems), A. Sreekantiah (the title block doesn't print an affiliation next to his name, so I'm not guessing ๐), and H. Gredler (RtBrick Inc.)
- Obsoletes: nothing is listed in the title block ๐
- Updates: nothing is listed in the title block โจ
Abstract โจ
Segment Routing (SR) is built on the source-routing paradigm ๐ง. A node steers a packet through an ordered list of instructions called "segments". A segment can be any instruction, either topological or service based. The ingress node attaches an SR header to the packet, and that header holds a set of segment identifiers (SIDs). Each SID stands for a topological or service-based instruction. Per-flow state lives only on the ingress node of the SR domain ๐. An "SR domain" is a single administrative domain for global SID assignment.
This document defines an optional, transitive BGP attribute for announcing information about BGP Prefix Segment Identifiers (BGP Prefix-SIDs), plus the specification for SR-MPLS SIDs ๐.
Status of This Memo ๐
This is an Internet Standards Track document ๐ฅ.
It's a product of the Internet Engineering Task Force (IETF) and represents the consensus of the IETF community. It went through public review and was approved for publication by the Internet Engineering Steering Group (IESG). For more on Internet Standards, check Section 2 of RFC 7841.
Info about this document's current status, any errata, and how to send feedback lives at https://www.rfc-editor.org/info/rfc8669 ๐.
Copyright Notice ยฉ๏ธ
Copyright (c) 2019 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) as they stand on the publication date. Please actually read these, because they spell out your rights and restrictions for this document ๐. Code Components pulled out of this document must include Simplified BSD License text, as described in Section 4.e of the Trust Legal Provisions, and they come without warranty, as described in the Simplified BSD License.
Table of Contents ๐๏ธ
1. Introduction
2. MPLS BGP Prefix-SID
3. BGP Prefix-SID Attribute
3.1. Label-Index TLV
3.2. Originator SRGB TLV
4. Receiving BGP Prefix-SID Attribute
4.1. MPLS Data Plane: Labeled Unicast
5. Advertising BGP Prefix-SID Attribute
5.1. MPLS Data Plane: Labeled Unicast
6. Error Handling of BGP Prefix-SID Attribute
7. IANA Considerations
8. Manageability Considerations
9. Security Considerations
10. References
10.1. Normative References
10.2. Informative References
Acknowledgements
Contributors
Authors' Addresses
1. Introduction ๐
Segment Routing (SR) runs on the source-routing paradigm ๐ง . A segment is either a topological instruction, like "go to prefix P following shortest path", or a service instruction. More types of segments might get defined later ๐ฎ.
Every segment is identified by a Segment Identifier (SID). An "SR domain" is a single administrative domain for global SID assignment. It can be one Autonomous System (AS) or several ASes under consolidated global SID administration ๐. Normally, the ingress node of the SR domain prepends an SR header with SIDs to an incoming packet.
As described in [RFC8402], when SR is applied to the MPLS data plane ([RFC8660]), the SID is a label ๐ท๏ธ.
[RFC8402] also explains how Segment Routing can run on an IPv6 data plane (SRv6), using an IPv6 routing header that holds a stack of SR SIDs encoded as IPv6 addresses [IPv6-SRH]. Support and applicability for Segment Routing over IPv6 are out of scope for this document ๐ โโ๏ธ.
A BGP Prefix Segment is a BGP prefix with a Prefix-SID attached ๐ฆ. A BGP Prefix-SID is always a global SID ([RFC8402]) within the SR domain, and it names an instruction to forward the packet over the Equal-Cost Multipath (ECMP) best path that BGP computed for the related prefix. The BGP Prefix-SID is the identifier of the BGP Prefix Segment. This document always refers to the BGP Prefix Segment by its BGP Prefix-SID ๐.
This document covers the BGP extensions used to signal the BGP Prefix-SID. Specifically, it defines a BGP attribute called the "BGP Prefix-SID attribute", and it lays out the rules for originating, receiving, and handling error conditions for that attribute โจ.
The BGP Prefix-SID attribute can be attached to prefixes from Multiprotocol BGP IPv4/IPv6 Labeled Unicast ([RFC4760] [RFC8277]). Using the attribute with other Address Family Identifier (AFI) / Subsequent Address Family Identifier (SAFI) combinations isn't defined here, but future specs might cover it ๐ฎ.
[RFC8670] walks through example use cases where the BGP Prefix-SID is used with the AFI/SAFI combinations above ๐.
A few things to note ๐:
- A BGP Prefix-SID will be global across ASes when the interconnected ASes are part of the same SR domain. Otherwise, when ASes are interconnected, the ASBRs of each domain have to handle advertising unique SIDs. The mechanisms for that interconnection are outside the scope of the protocol extensions in this document ๐.
- A BGP Prefix-SID MAY be attached to a BGP prefix. That means each prefix gets advertised individually, which cuts down on the ability to pack BGP advertisements that share common attributes ๐ฆ.
Heads up, these are the BCP 14 key words. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are interpreted as described in BCP 14 [RFC2119] [RFC8174], but only when they appear in all capitals, exactly as shown here ๐.
2. MPLS BGP Prefix-SID ๐ธ
The BGP Prefix-SID runs on the MPLS data plane ([RFC8660]) like this:
The operator assigns a globally unique label index, L_I, to a locally originated prefix of a BGP speaker N. That prefix is advertised to all other BGP speakers in the SR domain ๐ท๏ธ.
According to [RFC8402], every BGP speaker is configured with a label block called the Segment Routing Global Block (SRGB) ๐งฑ. [RFC8402] recommends using the same SRGB across all nodes in the SR domain. Still, the SRGB of a node is a local property and can differ between speakers. The drawbacks of having BGP speakers with different SRGBs are documented in [RFC8402] and [RFC8670] โ ๏ธ.
If traffic engineering within the SR domain is needed, each node may also have to advertise topological information and Peer SIDs for each of its links and peers ๐ฃ๏ธ. That information is required to do explicit path computation and to express an explicit path as a list of SIDs. The topological information and peer segments (Peer SIDs) are advertised through [BGPLS-SR-EPE].
If a prefix segment goes into an MPLS label stack, for example for traffic-engineering purposes, you need to know the prefix originator's SRGB so you can compute the local label the originator uses ๐งฎ.
This document assumes Border Gateway Protocol - Link State (BGP-LS) is the preferred way to collect both peer segments (Peer SIDs) and SRGB information, through [RFC7752], [BGPLS-SR-EPE], and [BGPLS-SR-EXT]. As an optional alternative for advertising the local SRGB without topology or Peer SIDs, the Originator SRGB TLV of the BGP Prefix-SID attribute is specified in Section 3.2 of this document. That route has no applicability for TE, though ๐.
A BGP speaker derives its local MPLS label L from the label index L_I and its local SRGB, as described in [RFC8660]. Then it programs the MPLS label L into its MPLS data plane as its incoming/local label for the prefix. See Section 4.1 for more details ๐.
The outgoing label for the prefix is found in the Network Layer Reachability Information (NLRI) of the Multiprotocol BGP IPv4/IPv6 Labeled Unicast prefix advertisement, as defined in [RFC8277]. The label index L_I is only a hint used to derive the local/incoming label ๐ก.
Section 3.1 of this document specifies the Label-Index TLV of the BGP Prefix-SID attribute. This TLV can be used to advertise the label index for a given prefix ๐.
3. BGP Prefix-SID Attribute ๐
The BGP Prefix-SID attribute is an optional, transitive BGP path attribute. IANA assigned attribute type code 40 (see Section 7) ๐ข.
The attribute is a set of elements encoded as "Type/Length/Value" tuples, meaning a set of TLVs ๐งฉ. Every BGP Prefix-SID attribute TLV starts with a 1-octet type and a 2-octet length. This document defines the following TLVs:
- Label-Index TLV
- Originator SRGB TLV
The Label-Index and Originator SRGB TLVs are only used when SR is applied to the MPLS data plane ๐.
For future extensibility, unknown TLVs MUST be ignored and propagated unmodified ๐ซถ.
3.1. Label-Index TLV ๐ง
The Label-Index TLV MUST be present in the BGP Prefix-SID attribute attached to IPv4/IPv6 Labeled Unicast prefixes ([RFC8277]). It MUST be ignored when received for other BGP AFI/SAFI combinations. Here's the format ๐:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | RESERVED |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Flags | Label Index |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Label Index |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Here's what each field means ๐:
- Type:
1. - Length:
7, which is the total length in octets of the value portion of the TLV. - RESERVED: An 8-bit field. It MUST be clear on transmission and MUST be ignored on reception ๐ซ.
- Flags: 16 bits of flags. None are defined by this document. The Flags field MUST be clear on transmission and MUST be ignored on reception ๐ซ.
- Label Index: A 32-bit value representing the index value in the SRGB space ๐ข.
3.2. Originator SRGB TLV โจ
okay so the Originator SRGB TLV is totally optional ๐ but it's giving real main character energy when it shows up. Here's the layout:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Flags |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Flags |
+-+-+-+-+-+-+-+-+
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| SRGB 1 (6 octets) |
| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| SRGB n (6 octets) |
| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Here's what each piece means ๐ :
- Type:
3 - Length: the total length in octets of the value portion of the TLV, which is
2 + (non-zero multiple of 6). bestie, that math is the whole vibe ๐งฎ - Flags: 16 bits of flags, and none are defined in this document ๐ The Flags field MUST be clear on transmission and MUST be ignored on reception.
- SRGB: 3 octets for the first label in the range, followed by 3 octets for the number of labels in the range. The SRGB field MAY appear multiple times, and if it does, the SRGB is made of multiple ranges that get concatenated ๐
The Originator SRGB TLV carries the SRGB of the node that originated the prefix the BGP Prefix-SID is attached to. ๐ฆ It MUST NOT be changed during the propagation of the BGP update. It's used to build SR policies when different SRGBs show up in the fabric, for example, [RFC8670].
Examples of how receiving routers concatenate the ranges and build their neighbor's Segment Routing Global Block (SRGB) are included in [RFC8660] ๐
The Originator SRGB TLV may only appear in a BGP Prefix-SID attribute attached to IPv4/IPv6 Labeled Unicast prefixes ([RFC8277]). If it shows up on any other BGP AFI/SAFI combination, it MUST be ignored ๐ Since the Label-Index TLV is required for IPv4/IPv6 prefix applicability, the Originator SRGB TLV will be ignored if it isn't specified in a manner consistent with Section 6.
Now for the drama ๐ฟ If a BGP speaker gets a node's SRGB as an attribute of the BGP-LS Node NLRI, AND it also gets that same node's SRGB inside a BGP Prefix-SID attribute, then the received values should be the same. If they're different, the values advertised in the BGP-LS NLRI SHOULD be preferred, and an error should be logged ๐ญ
4. Receiving BGP Prefix-SID Attribute ๐ซถ
A BGP speaker that receives a BGP Prefix-SID attribute from an External BGP (EBGP) neighbor residing outside the boundaries of the SR domain MUST discard the attribute, unless it's configured to accept the attribute from that EBGP neighbor. ๐ซ A BGP speaker SHOULD log an error for further analysis when it discards an attribute.
4.1. MPLS Data Plane: Labeled Unicast ๐ง
A BGP session supporting the Multiprotocol BGP Labeled IPv4 or IPv6 Unicast ([RFC8277]) AFI/SAFI is required.
When the BGP Prefix-SID attribute is attached to a BGP Labeled IPv4 or IPv6 Unicast [RFC8277] AFI/SAFI, it MUST contain the Label-Index TLV and MAY contain the Originator SRGB TLV. A BGP Prefix-SID attribute received without a Label-Index TLV MUST be considered to be "invalid" by the receiving speaker ๐
The label index gives the receiving BGP speaker guidance on the incoming label that SHOULD be allocated to the prefix ๐ฏ
A BGP speaker may be locally configured with SRGB=[SRGB_Start, SRGB_End]. Which method it uses to derive the SRGB is a matter of local node configuration โ๏ธ
The mechanisms through which a given label-index value gets assigned to a given prefix are outside the scope of this document. Not our tea here ๐ต
Given a label index L_I, we refer to L = L_I + SRGB_Start as the derived label. A BGP Prefix-SID attribute is designated "conflicting" for a speaker M if the derived label value L lies outside the SRGB configured on M. Otherwise, the Label-Index TLV is designated "acceptable" to speaker M. โ
โ
If multiple different prefixes are received with the same label index, then all of the different prefixes MUST have their BGP Prefix-SID attribute considered to be "conflicting". Two prefixes, one index, zero friends ๐
If multiple valid paths for the same prefix are received from multiple BGP speakers, or, in the case of [RFC7911], from the same BGP speaker, and the BGP Prefix-SID attributes do NOT contain the same label index, then the label index from the best path BGP Prefix-SID attribute SHOULD be chosen. There's a notable exception when [RFC5004] is being used to dampen route changes ๐
When a BGP speaker receives a path from a neighbor with an "acceptable" BGP Prefix-SID attribute and that path is selected as the best path, it SHOULD program the derived label as the label for the prefix in its local MPLS data plane. ๐ฅ
When a BGP speaker receives a path from a neighbor with an "invalid" or "conflicting" BGP Prefix-SID attribute, or when it receives a path from a neighbor with a BGP Prefix-SID attribute but is unable to process it (e.g., local policy disables the functionality), it MUST ignore the BGP Prefix-SID attribute. For label allocation purposes, a BGP speaker MUST assign a local (also called dynamic) label (non-SRGB) for such a prefix, as per classic Multiprotocol BGP IPv4/IPv6 Labeled Unicast ([RFC8277]) operation. ๐ง
For an "invalid" BGP Prefix-SID attribute, a BGP speaker MUST follow the error-handling rules specified in Section 6. A BGP speaker SHOULD log an error for further analysis. For a "conflicting" BGP Prefix-SID attribute, a BGP speaker SHOULD NOT treat it as an error, and SHOULD propagate the attribute unchanged. A BGP speaker SHOULD log a warning for further analysis, i.e., in the case the conflict is not due to a label-index transition. ๐
When a BGP Prefix-SID attribute changes and transitions from "conflicting" to "acceptable", the BGP Prefix-SID attributes for other prefixes may also transition to "acceptable" as well. Implementations SHOULD ensure all impacted prefixes revert to using the label indices corresponding to these newly "acceptable" BGP Prefix-SID attributes. It's like a glow-up domino effect ๐ธ
The outgoing label is always programmed as per classic Multiprotocol BGP IPv4/IPv6 Labeled Unicast ([RFC8277]) operation. Specifically, a BGP speaker that receives a prefix with a BGP Prefix-SID attribute, and a label NLRI field of Implicit NULL [RFC3032] from a neighbor, MUST adhere to standard behavior and program its MPLS data plane to pop the top label when forwarding traffic to the prefix. The label NLRI defines the outbound label that MUST be used by the receiving node. ๐
5. Advertising BGP Prefix-SID Attribute ๐ฃ
The BGP Prefix-SID attribute MAY be attached to BGP IPv4/IPv6 Labeled Unicast prefixes [RFC8277]. To stop the BGP Prefix-SID attribute from spreading beyond its intended scope of applicability, attribute filtering SHOULD be deployed to remove it at the administrative boundary of the SR domain ๐ง
A BGP speaker that advertises a path received from one of its neighbors SHOULD advertise the BGP Prefix-SID received with the path without modification, as long as the BGP Prefix-SID was acceptable ๐ If the path did not come with a BGP Prefix-SID attribute, the speaker MAY attach a BGP Prefix-SID to the path if it's configured to do so. The content of the TLVs present in the BGP Prefix-SID is determined by configuration ๐ง
5.1. MPLS Data Plane: Labeled Unicast ๐
A BGP speaker that originates a prefix attaches the BGP Prefix-SID attribute when it advertises the prefix to its neighbors via Multiprotocol BGP IPv4/IPv6 Labeled Unicast ([RFC8277]). The value of the label index in the Label-Index TLV is determined by configuration.
A BGP speaker that originates a BGP Prefix-SID attribute MAY optionally announce the Originator SRGB TLV along with the mandatory Label-Index TLV. The content of the Originator SRGB TLV is determined by configuration.
Since the label-index value must be unique within an SR domain, by default an implementation SHOULD NOT advertise the BGP Prefix-SID attribute outside an AS, unless it is explicitly configured to do so ๐
In all cases, the Label field of the advertised NLRI ([RFC8277] [RFC4364]) MUST be set to the local/incoming label programmed in the MPLS data plane for the given advertised prefix. If the prefix is associated with one of the BGP speaker's interfaces, this is the usual MPLS label, such as the Implicit or Explicit NULL label [RFC3032]. ๐ซง
6. Error Handling of BGP Prefix-SID Attribute ๐จ
When a BGP speaker receives a BGP UPDATE message containing a malformed or invalid BGP Prefix-SID attribute attached to an IPv4/IPv6 Labeled Unicast prefix ([RFC8277]), it MUST ignore the received BGP Prefix-SID attribute and MUST NOT advertise it to other BGP peers. ๐ โโ๏ธ
In this context, a malformed BGP Prefix-SID attribute is one that can't be parsed, for any of these reasons: it doesn't meet the minimum attribute length requirement, it contains a TLV length that doesn't conform to the length constraints for that TLV, or it contains a TLV length that would extend beyond the end of the attribute (as defined by the attribute length). ๐งฉ This is equivalent to the "Attribute discard" action specified in [RFC7606]. When discarding an attribute, a BGP speaker SHOULD log an error for further analysis.
As per [RFC7606], if the BGP Prefix-SID attribute appears more than once in an UPDATE message, all the occurrences of the attribute other than the first one SHALL be discarded, and the UPDATE message will continue to be processed ๐ Similarly, if a recognized TLV appears more than once in a BGP Prefix-SID attribute while the specification only allows for a single occurrence, then all the occurrences of the TLV other than the first one SHALL be discarded, and the Prefix-SID attribute will continue to be processed. Only the first one gets to stay, iykyk ๐
For future extensibility, unknown TLVs MUST be ignored and propagated unmodified. ๐ฆ
7. IANA Considerations ๐
okay so this doc defines a BGP path attribute called the BGP Prefix-SID attribute ๐
and IANA gave it attribute code type 40 from the "BGP Path Attributes" registry ๐ธ
it also defines two TLVs for the BGP Prefix-SID attribute, and both are officially registered with IANA โจ IANA made a brand new registry for them, so under the "Border Gateway Protocol (BGP) Parameters" registry you'll find "BGP Prefix-SID TLV Types" pointing right back to this document ๐ฆ
the registration procedure is giving organized ๐๏ธ
Values 1-254, Expert Review as defined in [RFC8126]
Values 0 and 255, Reserved
and the actual table of values is literally this:
+-------+-----------------+---------------+
| Value | Type | Reference |
+=======+=================+===============+
| 0 | Reserved | This document |
+-------+-----------------+---------------+
| 1 | Label-Index | This document |
+-------+-----------------+---------------+
| 2 | Deprecated | This document |
+-------+-----------------+---------------+
| 3 | Originator SRGB | This document |
+-------+-----------------+---------------+
| 4-254 | Unassigned | |
+-------+-----------------+---------------+
| 255 | Reserved | This document |
+-------+-----------------+---------------+
Table 1: BGP Prefix-SID TLV Types ๐
so value 2 used to be the IPv6 SID TLV, which was in earlier versions of this doc ๐ฅน it got removed, and using the BGP Prefix-SID for Segment Routing over the IPv6 data plane [RFC8402] has been pushed off to future specs. that's the tea โ
two more registries got made too, both under "Border Gateway Protocol (BGP) Parameters" and both pointing to this doc ๐ first up is "BGP Prefix-SID Label-Index TLV Flags", a 16-bit flags registry that starts out totally empty ๐ซ the registration policy for flag bits is Expert Review [RFC8126], which matches the "BGP Prefix-SID TLV Types" registry.
last one is "BGP Prefix-SID Originator SRGB TLV Flags", also a 16-bit flags registry that starts empty, and it uses Expert Review [RFC8126] too, consistent with the BGP Prefix-SID TLV Types registry ๐
the designated experts must be good and faithful stewards of all of these registries ๐ง they make sure every request is legit and matches a viable use case. flag bits are kinda scarce (only 16 per registry!) and each flag only applies to one TLV, so additional scrutiny should be afforded to flag-bit requests. in general, no single use case should need more than one flag bit, and if a use case needs more, alternate encodings using new TLVs should be considered ๐
8. Manageability Considerations ๐ฆ
this doc defines a BGP attribute to handle use cases like the one in [RFC8670] ๐ธ it's assumed that the operator controls whether the BGP Prefix-SID attribute gets advertised, so they can:
- Prevent undesired origination/advertisement of the BGP Prefix-SID attribute. By default, a BGP Prefix-SID attribute SHOULD NOT be attached to a prefix and advertised. Hence, BGP Prefix-SID Advertisement SHOULD require explicit enablement. ๐
- Prevent any undesired propagation of the BGP Prefix-SID attribute. By default, the BGP Prefix-SID is not advertised outside the boundary of a single SR/administrative domain that may include one or more ASes. The propagation to other ASes MUST be explicitly configured. ๐ง
the deployment model in [RFC8670] assumes multiple ASes under one common administrative domain ๐ for that use case, BGP Prefix-SID Advertisement applies to the inter-AS context, meaning EBGP, while staying confined to a single administrative domain. main character energy, but make it organized ๐
9. Security Considerations ๐
okay security is serious bestie ๐ญ this doc introduces a BGP attribute (BGP Prefix-SID), and it inherits the security considerations from [RFC4271], [RFC8277], and [RFC8402]. read those, no skipping ๐
when it's advertised using BGPsec as described in [RFC8205], the BGP Prefix-SID attribute doesn't add any unique security considerations. however, it should be noted that the BGP Prefix-SID attribute is not protected by the BGPsec signatures ๐จ
also, as described in Section 8, this doc is about a deployment model where all nodes are under a single administrative domain. in that setup, we assume the operator doesn't want to leak any info about internal prefixes and topology outside the administrative domain ๐ซฃ the internal info includes the BGP Prefix-SID. to stop that leaking, the common BGP mechanisms (filters) get applied at the boundary of the SR/administrative domain. local BGP-attribute-filtering policies and mechanisms are not standardized, so they're beyond this doc's scope ๐งฑ
to prevent a Denial-of-Service (DoS) or Distributed-Denial-of-Service (DDoS) attack caused by excessive BGP updates with an invalid or conflicting BGP Prefix-SID attribute, error log message rate limiting as well as suppression of duplicate error log messages SHOULD be deployed ๐ก๏ธ
and since BGP-LS is the preferred method for advertising SRGB information, the BGP speaker SHOULD log an error if a BGP Prefix-SID attribute is received with SRGB information different from what it got as an attribute of the same node's BGP-LS Node NLRI ๐ it's giving detective era, and I'm obsessed โจ
10. References ๐
10.1. Normative References
- [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI
10.17487/RFC2119, March 1997,<https://www.rfc-editor.org/info/rfc2119>. ๐ท - [RFC4271] Rekhter, Y., Ed., Li, T., Ed., and S. Hares, Ed., "A Border Gateway Protocol 4 (BGP-4)", RFC 4271, DOI
10.17487/RFC4271, January 2006,<https://www.rfc-editor.org/info/rfc4271>. ๐ - [RFC4364] Rosen, E. and Y. Rekhter, "BGP/MPLS IP Virtual Private Networks (VPNs)", RFC 4364, DOI
10.17487/RFC4364, February 2006,<https://www.rfc-editor.org/info/rfc4364>. ๐ซง - [RFC4760] Bates, T., Chandra, R., Katz, D., and Y. Rekhter, "Multiprotocol Extensions for BGP-4", RFC 4760, DOI
10.17487/RFC4760, January 2007,<https://www.rfc-editor.org/info/rfc4760>. ๐ - [RFC7606] Chen, E., Ed., Scudder, J., Ed., Mohapatra, P., and K. Patel, "Revised Error Handling for BGP UPDATE Messages", RFC 7606, DOI
10.17487/RFC7606, August 2015,<https://www.rfc-editor.org/info/rfc7606>. ๐ ๏ธ - [RFC7911] Walton, D., Retana, A., Chen, E., and J. Scudder, "Advertisement of Multiple Paths in BGP", RFC 7911, DOI
10.17487/RFC7911, July 2016,<https://www.rfc-editor.org/info/rfc7911>. ๐ฃ๏ธ - [RFC8126] Cotton, M., Leiba, B., and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 8126, DOI
10.17487/RFC8126, June 2017,<https://www.rfc-editor.org/info/rfc8126>. ๐๏ธ - [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI
10.17487/RFC8174, May 2017,<https://www.rfc-editor.org/info/rfc8174>. ๐ค - [RFC8205] Lepinski, M., Ed. and K. Sriram, Ed., "BGPsec Protocol Specification", RFC 8205, DOI
10.17487/RFC8205, September 2017,<https://www.rfc-editor.org/info/rfc8205>. ๐ - [RFC8277] Rosen, E., "Using BGP to Bind MPLS Labels to Address Prefixes", RFC 8277, DOI
10.17487/RFC8277, October 2017,<https://www.rfc-editor.org/info/rfc8277>. ๐ท๏ธ - [RFC8402] Filsfils, C., Ed., Previdi, S., Ed., Ginsberg, L., Decraene, B., Litkowski, S., and R. Shakir, "Segment Routing Architecture", RFC 8402, DOI
10.17487/RFC8402, July 2018,<https://www.rfc-editor.org/info/rfc8402>. ๐งญ - [RFC8660] Bashandy, A., Ed., Filsfils, C., Ed., Previdi, S., Decraene, B., Litkowski, S., and R. Shakir, "Segment Routing with the MPLS Data Plane", RFC 8660, DOI
10.17487/RFC8660, December 2019,<https://www.rfc-editor.org/info/rfc8660>. ๐ซ
10.2. Informative References
- [BGPLS-SR-EPE] Previdi, S., Talaulikar, K., Filsfils, C., Patel, K., Ray, S., and J. Dong, "BGP-LS extensions for Segment Routing BGP Egress Peer Engineering", Work in Progress, Internet-Draft, draft-ietf-idr-bgpls-segment-routing-epe-19, 16 May 2019,
<https://tools.ietf.org/html/draft-ietf-idr-bgpls-segment-routing-epe-19>. ๐ผ - [BGPLS-SR-EXT] Previdi, S., Talaulikar, K., Filsfils, C., Gredler, H., and M. Chen, "BGP Link-State extensions for Segment Routing", Work in Progress, Internet-Draft, draft-ietf-idr-bgp-ls-segment-routing-ext-16, 27 June 2019,
<https://tools.ietf.org/html/draft-ietf-idr-bgp-ls-segment-routing-ext-16>. ๐ธ - [IPv6-SRH] Filsfils, C., Dukes, D., Previdi, S., Leddy, J., Matsushima, S., and D. Voyer, "IPv6 Segment Routing Header (SRH)", Work in Progress, Internet-Draft, draft-ietf-6man-segment-routing-header-26, 22 October 2019,
<https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-26>. ๐ฆ - [RFC3032] Rosen, E., Tappan, D., Fedorkow, G., Rekhter, Y., Farinacci, D., Li, T., and A. Conta, "MPLS Label Stack Encoding", RFC 3032, DOI
10.17487/RFC3032, January 2001,<https://www.rfc-editor.org/info/rfc3032>. ๐ท๏ธ - [RFC5004] Chen, E. and S. Sangli, "Avoid BGP Best Path Transitions from One External to Another", RFC 5004, DOI
10.17487/RFC5004, September 2007,<https://www.rfc-editor.org/info/rfc5004>. ๐ - [RFC7752] Gredler, H., Ed., Medved, J., Previdi, S., Farrel, A., and S. Ray, "North-Bound Distribution of Link-State and Traffic Engineering (TE) Information Using BGP", RFC 7752, DOI
10.17487/RFC7752, March 2016,<https://www.rfc-editor.org/info/rfc7752>. ๐บ๏ธ - [RFC8670] Filsfils, C., Ed., Previdi, S., Dawra, G., Aries, E., and P. Lapukhov, "BGP Prefix Segment in Large-Scale Data Centers", RFC 8670, DOI
10.17487/RFC8670, December 2019,<https://www.rfc-editor.org/info/rfc8670>. ๐ข
Acknowledgements ๐
Okay bestie, the authors wanna give a shoutout to everyone who helped make this doc happen ๐ซถ
The authors would like to thank Satya Mohanty for his contribution to this document ๐
The authors would like to thank Alvaro Retana for substantive comments as part of the Routing AD review โจ
The authors would like to thank Bruno Decraene for substantive comments and suggested text as part of the Routing Directorate review ๐ฅ
The authors would like to thank Shyam Sethuram for comments and discussion of TLV processing and validation ๐
The authors would like to thank Robert Raszuk for comments and suggestions regarding the MPLS data-plane behavior ๐ฆ
The authors would like to thank Krishna Deevi, Juan Alcaide, Howard Yang, and Jakob Heitz for discussions on conflicting BGP Prefix-SID label indices and BGP add paths ๐
The authors would like to thank Peter Yee, Tony Przygienda, Mirja Kuhlewind, Alexey Melnikov, Eric Rescorla, Suresh Krishnan, Warren Kumari, Ben Campbell Sue Hares, and Martin Vigoureux for IDR Working Group last call, IETF Last Call, directorate, and IESG reviews ๐๐ญ
Contributors ๐ธ
Meet the contributors, the people who put in the extra work ๐ง
Keyur Patel
Arrcus, Inc.
United States of America
Email: Keyur@arrcus.com
Saikat Ray
Unaffiliated
United States of America
Email: raysaikat@gmail.com
Authors' Addresses ๐
And here are the authors, with their contact details so you can slide into their DMs about BGP Prefix-SID stuff ๐
Stefano Previdi
Huawei Technologies
Italy
Email: stefano@previdi.net
Clarence Filsfils
Cisco Systems
Brussels
Belgium
Email: cfilsfil@cisco.com
Acee Lindem (editor)
Cisco Systems
301 Midenhall Way
Cary, NC, 27513
United States of America
Email: acee@cisco.com
Arjun Sreekantiah
Email: arjunhrs@gmail.com
Hannes Gredler
RtBrick Inc.
Email: hannes@rtbrick.com
๐ฆ where this page comes from
- ietf: rfc8669 2019-12
- ๐ girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms