PCE Working GroupInternet Engineering Task Force (IETF) E. CrabbeInternet-DraftRequest for Comments: 8232 OracleIntended status:Category: Standards Track I. MineiExpires: September 28, 2017ISSN: 2070-1721 Google, Inc. J. Medved Cisco Systems, Inc. R. Varga Pantheon Technologies SRO X. Zhang D. Dhody Huawei TechnologiesMarch 27,September 2017 Optimizations of Label Switched Path State Synchronization Procedures for a Stateful PCEdraft-ietf-pce-stateful-sync-optimizations-10Abstract A stateful Path Computation Element (PCE) has access to not only the information disseminated by the network's Interior Gateway Protocol(IGP),(IGP) but also the set of active paths and their reserved resources for its computation. The additional Label Switched Path (LSP) state information allows the PCE to compute constrained paths while considering individual LSPs and their interactions. This requires astate synchronizationState Synchronization mechanism between the PCE and the network, the PCE andpath computation clientsPath Computation Clients (PCCs), andbetweencooperating PCEs. The basic mechanism forstate synchronizationState Synchronization is part of the stateful PCE specification. This document presents motivations for optimizations to the basestate synchronizationState Synchronization procedure and specifies the required Path Computation Element Communication Protocol (PCEP) extensions.Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119].Status of This Memo ThisInternet-Draftissubmitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documentsan Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF).Note that other groups may also distribute working documents as Internet-Drafts. The listIt represents the consensus ofcurrent Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents validthe IETF community. It has received public review and has been approved fora maximumpublication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841. Information about the current status ofsix monthsthis document, any errata, and how to provide feedback on it may beupdated, replaced, or obsoleted by other documentsobtained atany time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on September 28, 2017.https://www.rfc-editor.org/info/rfc8232. Copyright Notice Copyright (c) 2017 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents(http://trustee.ietf.org/license-info)(https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 1.1. Requirements Language . . . . . . . . . . . . . . . . . . 4 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4 3. State Synchronization Avoidance . . . . . . . . . . . . . . . 4 3.1. Motivation . . . . . . . . . . . . . . . . . . . . . . . 4 3.2. State Synchronization Avoidance Procedure . . . . . . . . 4 3.2.1. IP AddresschangeChange duringsession re-establishmentSession Re-establishment . . 9 3.3. PCEP Extensions . . . . . . . . . . . . . . . . . . . . . 10 3.3.1.LSP State DatabaseLSP-DB Version Number TLV . . . . . . . . . . . . . . 10 3.3.2. Speaker Entity Identifier TLV . . . . . . . . . . . . 11 4. Incremental State Synchronization . . . . . . . . . . . . . . 12 4.1. Motivation . . . . . . . . . . . . . . . . . . . . . . . 12 4.2. Incremental Synchronization Procedure . . . . . . . . . . 13 5.PCE-triggeredPCE-Triggered Initial Synchronization . . . . . . . . . . . . 16 5.1. Motivation . . . . . . . . . . . . . . . . . . . . . . . 16 5.2.PCE-triggeredPCE-Triggered Initial State Synchronization Procedure . . 17 6.PCE-triggered Re-synchronizationPCE-Triggered Resynchronization . . . . . . . . . . . . . . . 18 6.1. Motivation . . . . . . . . . . . . . . . . . . . . . . . 18 6.2.PCE-triggeredPCE-Triggered StateRe-synchronizationResynchronization Procedure . . . . . 18 7. Advertising Support of Synchronization Optimizations . . . . 19 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 20 8.1. PCEP-Error Object . . . . . . . . . . . . . . . . . . . . 20 8.2. PCEP TLV Type Indicators . . . . . . . . . . . . . . . . 21 8.3. STATEFUL-PCE-CAPABILITY TLV . . . . . . . . . . . . . . . 21 9. Manageability Considerations . . . . . . . . . . . . . . . . 21 9.1. Control of Function and Policy . . . . . . . . . . . . . 21 9.2. Information and Data Models . . . . . . . . . . . . . . . 21 9.3. Liveness Detection and Monitoring . . . . . . . . . . . . 22 9.4. Verify Correct Operations . . . . . . . . . . . . . . . . 22 9.5. RequirementsOnon Other Protocols . . . . . . . . . . . . . 22 9.6. ImpactOnon Network Operations . . . . . . . . . . . . . . 22 10. Security Considerations . . . . . . . . . . . . . . . . . . . 22 11.AcknowledgmentsReferences . . . . . . . . . . . . . . . . . . . . . . . . . 2312. Contributors11.1. Normative References . . . . . . . . . . . . . . . . . . 23 11.2. Informative References . . . . . .23 13. References. . . . . . . . . . . 23 Acknowledgments . . . . . . . . . . . . . .23 13.1. Normative References. . . . . . . . . . . 24 Contributor . . . . . . . . . .23 13.2. Informative References. . . . . . . . . . . . . . . . . 24 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 24 1. Introduction The Path Computation Element Communication Protocol (PCEP) provides mechanisms for Path Computation Elements (PCEs) to perform path computations in response to Path ComputationClients (PCCs)Client (PCC) requests.[I-D.ietf-pce-stateful-pce][RFC8231] describes a set of extensions to PCEP to provide stateful control. A stateful PCE has access to not only the information carried by the network's Interior Gateway Protocol(IGP),(IGP) but also the set of active paths and their reserved resources for its computations. The additional state allows the PCE to compute constrained paths while considering individual LSPs and their interactions. This requires astate synchronizationState Synchronization mechanism between the PCE and the network, the PCE and the PCC, andbetweencooperating PCEs.[I-D.ietf-pce-stateful-pce][RFC8231] describes the basic mechanism forstate synchronization.State Synchronization. This document specifies following optimizations forstate synchronizationState Synchronization and the corresponding PCEP procedures and extensions: o State Synchronization Avoidance: To skipstate synchronizationState Synchronization if the state has survived and not changed during session restart. (See Section 3.) o Incremental State Synchronization: To do incremental (delta)state synchronizationState Synchronization when possible. (See Section 4.) oPCE-triggeredPCE-Triggered Initial Synchronization: To let PCE control the timing of the initialstate synchronization.State Synchronization. (See Section 5.) oPCE-triggered Re-synchronization:PCE-Triggered Resynchronization: To let PCEre-synchronizeresynchronize the state for sanity check. (See Section 6.) Support for each of the synchronization optimization capabilities is advertised during the PCEP initialization phase. See Section 7 for the new flags defined in this document. The handling of each flag is described in the relevant section.2. Terminology This document uses the following1.1. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. 2. Terminology This document uses the following terms defined in [RFC5440]: PCC, PCE, and PCEP Peer. This document uses the following terms defined in [RFC8051]: Stateful PCE, Delegation, and LSP StateDatabase.Database (LSP-DB). This document uses the following terms defined in[I-D.ietf-pce-stateful-pce]:[RFC8231]: Redelegation Timeout Interval, LSP State Report, and LSP Update Request. Within this document, when describing PCE-PCE communications,one ofthePCEsrequesting PCE fills the role of aPCC. This provides a saving in documentation without loss of function.PCC as usual. 3. State Synchronization Avoidance 3.1. Motivation The purpose ofstate synchronizationState Synchronization is to provide acheckpoint-in- timecheckpoint-in-time state replica of a PCC's LSP state in a stateful PCE. StatesynchronizationSynchronization is performed immediately after the initialization phase([RFC5440]). [I-D.ietf-pce-stateful-pce][RFC5440]. [RFC8231] describes the basic mechanism forstate synchronization.StatesynchronizationSynchronization. State Synchronization is not always necessary following a PCEP session restart. If the state of both PCEP peers did not change, the synchronization phase may be skipped. This can result in significant savings in both control-plane data exchanges and the time it takes for the stateful PCE to become fully operational. 3.2. State Synchronization Avoidance Procedure StatesynchronizationSynchronization MAY be skipped following a PCEP session restart if the state of both PCEP peers did not change during the period prior to session re-initialization. To be able to make this determination, state must be exchanged and maintained by both PCE and PCC during normal operation. This is accomplished by keeping track of the changes to theLSP state database,LSP-DB, using a version tracking field called theLSP State DatabaseLSP-DB Version Number. The INCLUDE-DB-VERSION (S) bit in thestateful PCE capabilitySTATEFUL-PCE-CAPABILITY TLV (Section 7) is advertised on a PCEP session during session startup to indicate that theLSP State DatabaseLSP-DB Version Number is to be included when the LSPs are reported to the PCE. TheLSP State DatabaseLSP-DB Version Number, carried in LSP-DB-VERSION TLV (see Section 3.3.1), is owned by aPCCPCC, and it MUST be incremented by 1 for each successive change in the PCC'sLSP state database.LSP- DB. TheLSP State DatabaseLSP-DB Version Number MUST start at 1 and may wrap around. Values 0 and 0xFFFFFFFFFFFFFFFF are reserved. If either of the two values are used during LSPstate (re)-synchronization,State (re)Synchronization, the PCE speaker receiving this value MUST send back aPCErrPCEP Error (PCErr) withError-type 20 Error-value TBD6 (suggested value - 6)Error- type=20 and Error-value=6 'Received an invalidLSP DBLSP-DB Version Number', and close the PCEP session. Operations that trigger a change to the localLSP state databaseLSP-DB include a change in the LSP operational state, delegation of an LSP, removal or setup of anLSPLSP, or change in any of the LSP attributes that would trigger a report to the PCE. If the includeLSP DBLSP-DB version capability is enabled, a PCC MUST increment itsLSP State DatabaseLSP-DB Version Number when the 'Redelegation Timeout Interval' timer expires (see[I-D.ietf-pce-stateful-pce][RFC8231] for the use of the Redelegation Timeout Interval). If both PCEP speakers set the S flag in the OPEN object'sSTATEFUL- PCE-CAPABILITYSTATEFUL-PCE-CAPABILITY TLV to 1, the PCC MUST include theLSP-DB-VERSIONLSP-DB- VERSION TLV in each LSP object of thePCRptPath Computation LSP State Report (PCRpt) message. If the LSP-DB-VERSION TLV is missing in a PCRpt message, the PCE will generate an error withError-Type 6 (mandatory objectError-type=6 (Mandatory Object missing) andError-Value TBD1 (suggested value - 12)Error-value=12 'LSP-DB-VERSION TLVmissing'missing', and close the session. If the includeLSP DBLSP-DB version capability has not been enabled on a PCEP session, the PCC SHOULD NOT include theLSP-DB- VERSIONLSP-DB-VERSION TLV in the LSPObjectObject, and the PCE MUST ignoreitit, were it to receive one. If a PCE'sLSP state databaseLSP-DB survived the restart of a PCEP session, the PCE will include the LSP-DB-VERSION TLV in its OPEN object, and the TLV will contain the lastLSP State DatabaseLSP-DB Version Number received on an LSP State Report from the PCC in the previous PCEP session. If a PCC'sLSP State DatabaseLSP-DB survived the restart of a PCEP session, the PCC will include theLSP-DB-VERSIONLSP- DB-VERSION TLV in its OPENobjectobject, and the TLV will contain the latestLSP State DatabaseLSP-DB Version Number. If a PCEP speaker'sLSP state databaseLSP-DB did not survive the restart of a PCEP session or at startup when the database is empty, the PCEP speaker MUST NOT include the LSP-DB-VERSION TLV in the OPEN object. If both PCEP speakers include the LSP-DB-VERSION TLV in the OPENObjectobject and the TLV values match, the PCC MAY skipstate synchronizationState Synchronization, and the PCE does not wait for theend ofend-of- synchronization marker[I-D.ietf-pce-stateful-pce].[RFC8231]. Otherwise, the PCC MUST perform fullstate synchronizationState Synchronization (see[I-D.ietf-pce-stateful-pce])[RFC8231]) or incrementalstate synchronizationState Synchronization (see Section 4 if this capability is advertised) to the stateful PCE. In other words, if the incrementalstate synchronizationState Synchronization capability is not advertised by the peers, based on theLSP database version number matchLSP-DB Version Number match, either thestate synchronizationState Synchronization is skipped or a fullstate synchronizationState Synchronization is performed. If the PCC attempts to skipstate synchronization,State Synchronization, by setting the SYNCFlagflag to 0 and PLSP-ID to a non-zero value on the first LSP State Report from the PCC as per[I-D.ietf-pce-stateful-pce],[RFC8231], the PCE MUST send back a PCErr withError-Type 20 Error-Value TBD2 (suggested value - 2) 'LSP DatabaseError- type=20 and Error-value=2 'LSP-DB version mismatch', and close the PCEP session. Ifstate synchronizationState Synchronization is required, then prior to completing the initialization phase, the PCE MUST mark any LSPs in theLSP databaseLSP-DB that were previously reported by the PCC as stale. When the PCC reports an LSP duringstate synchronization,State Synchronization, if the LSP already exists in theLSP database,LSP-DB, the PCE MUST update theLSP databaseLSP-DB and clear the stale marker from the LSP. When it has finishedstate synchronization,State Synchronization, the PCC MUST immediately send anend of synchronizationend-of-synchronization marker. Theend ofend-of- synchronization marker is aPath Computation State Report (PCRpt)PCRpt message with an LSP object containing a PLSP-ID of 0 and with the SYNC flag set to 0([I-D.ietf-pce-stateful-pce]).[RFC8231]. The LSP-DB-VERSION TLV MUST be included in this PCRpt message. On receiving this state report, the PCE MUST purge any LSPs from theLSP databaseLSP-DB that are still marked as stale. Note that a PCE/PCC MAY forcestate synchronizationState Synchronization by not including the LSP-DB-VERSION TLV in its OPEN object. Since a PCE does not make changes to theLSP State DatabaseLSP-DB Version Number, a PCC should never encounter this TLV in a message from the PCE (other than the OPEN message). A PCC SHOULD ignore theLSP-DB- VERSIONLSP-DB-VERSION TLV, were it to receive one from a PCE. Figure 1 shows an example sequence where thestate synchronizationState Synchronization is skipped. +-+-+ +-+-+ |PCC| |PCE| +-+-+ +-+-+ | | |--Open--, | | DBv=42 \ ,---Open--| | S=1 \ / DBv=42 | | \/ S=1 | | /\ | | / `-------->| (OK to skip sync) (Skip sync) |<--------` | | . | | . | | . | | | |--PCRpt,DBv=43,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=44,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=45,SYNC=0-->| | | Figure 1: State Synchronization Skipped Figure 2 shows an example sequence where thestate synchronizationState Synchronization is performed due toLSP state databaseLSP-DB version mismatch during the PCEP session setup. Note that the samestate synchronizationState Synchronization sequence would happen if either the PCC or the PCE would not include theLSP- DB-VERSIONLSP-DB- VERSION TLV in their respective Open messages. +-+-+ +-+-+ |PCC| |PCE| +-+-+ +-+-+ | | |--Open--, | | DBv=46 \ ,---Open--| | S=1 \ / DBv=42 | | \/ S=1 | | /\ | | / `-------->| (Expect sync) (Do sync) |<--------` | | | |--PCRpt,DBv=46,SYNC=1-->| (Sync start) | . | | . | | . | |--PCRpt,DBv=46,SYNC=0-->| (Sync done) | .|(Purge| (Purge LSPStatestate | . | if applicable) | . | |--PCRpt,DBv=47,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=48,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=49,SYNC=0-->| | | Figure 2: State Synchronization Performed Figure 3 shows an example sequence where thestate synchronizationState Synchronization is skipped, but because one or both PCEP speakers set the SFlagflag to 0, the PCC does not send LSP-DB-VERSION TLVs in subsequent PCRpt messages to the PCE. If the current PCEP session restarts, the PCEP speakers will have to performstate synchronization,State Synchronization, since the PCE does not know the PCC's latestLSP State DatabaseLSP-DB Version Number information. +-+-+ +-+-+ |PCC| |PCE| +-+-+ +-+-+ | | |--Open--, | | DBv=42 \ ,---Open--| | S=0 \ / DBv=42 | | \/ S=0 | | /\ | | / `-------->| (OK to skip sync) (Skip sync) |<--------` | | . | | . | | . | |------PCRpt,SYNC=0----->| (Regular | | LSP State Report) |------PCRpt,SYNC=0----->| (Regular | | LSP State Report) |------PCRpt,SYNC=0----->| | | Figure 3: State SynchronizationSkipped, noSkipped; No LSP-DB-VERSION TLVssentSent from the PCC 3.2.1. IP AddresschangeChange duringsession re-establishmentSession Re-establishment There could be a case during PCEP session re-establishment when the PCC's or PCE's IP address can change. This includes, but is not limited to, the following cases: o A PCC could use a physical interface IP address to connect to the PCE. In this case, if the line card that the PCC connects from changes, then the PCEP session goes down and comes back up again, with a different IP address associated with a new line card. o The PCC or PCE may move in the network, either physically or logically, which may cause its IP address to change. For example, the PCE may be deployed as a virtual network function(VNF)(VNF), and another virtualized instance of the PCE may be populated with the original PCE instance's state, but it may be given a different IP address. To ensure that a PCEP peer can recognize a previously connected peer, each PCEP peer includes the SPEAKER-ENTITY-ID TLV described in Section3.3.2,3.3.2 in the OPEN message. This TLV is used during thestate synchronizationState Synchronization procedure to identify the PCEP session as a re-establishment of a previous session that went down. Thenstate synchronizationState Synchronization optimizations such as state sync avoidance can be applied to this session. Note that this usage is only applicable within the State Timeout Interval[I-D.ietf-pce-stateful-pce].[RFC8231]. After the State Timeout Interval expires, all state associated with the PCEP session is removed, which includes the SPEAKER-ENTITY-ID received. Note that the PCEP session initialization [RFC5440] procedure remains unchanged. 3.3. PCEP Extensions A new INCLUDE-DB-VERSION (S) bit is added in the stateful capabilities TLV (see Section 7 for details). 3.3.1.LSP State DatabaseLSP-DB Version Number TLV TheLSP State DatabaseLSP-DB Version Number (LSP-DB-VERSION) TLV is an optional TLV that MAY be included in the OPEN object and the LSP object. This TLV is included in the LSP object in the PCRpt message to indicate theLSP DBLSP-DB version at the PCC. This TLV SHOULD NOT be included in other PCEP messages(PCUpd, PcReq, PCRep)(Path Computation Update Request (PCUpd), Path Computation Request (PCReq), and Path Computation Reply (PCRep)) and MUST be ignored if received. The format of the LSP-DB-VERSION TLV is shown in the following figure: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Type=TBD5Type=23 | Length=8 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |LSP State DBLSP-DB Version Number | | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 4: LSP-DB-VERSION TLVformatFormat The type of the TLV isTBD523, and it has a fixed length of 8 octets. The value contains a 64-bit unsigned integer, carried in network byte order, representing theLSP State DBLSP-DB Version Number. 3.3.2. Speaker Entity Identifier TLV The Speaker Entity Identifier TLV (SPEAKER-ENTITY-ID) is an optional TLV that MAY be included in the OPENObjectobject when a PCEP speaker wishes to determine ifstate synchronizationState Synchronization can be skipped when a PCEP session is restarted. It contains a unique identifier for the node that does not change during the lifetime of the PCEP speaker. It identifies the PCEP speaker to its peers even if the speaker's IP address is changed. In case of a remote peer IP address change, a PCEP speaker would learn thespeaker entity identifierSpeaker Entity Identifier on receiving the openmessagemessage, but it MAY have already sent its open message without realizing that it is a known PCEP peer. In such a case, either a full synchronization is done or the PCEP session is terminated. This may be a local policy decision. The new IP address is associated with thespeaker entity identifierSpeaker Entity Identifier for the future either way. In the latter case when the PCEP session is re-established, it would be correctly associated withspeaker entity identifierthe Speaker Entity Identifier and not be considered as an unknown peer. The format of the SPEAKER-ENTITY-ID TLV is shown in the following figure: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Type=TBD13Type=24 | Length (variable) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | // Speaker Entity Identifier // | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 5: SPEAKER-ENTITY-ID TLVformatFormat The type of the TLV isTBD1324, and it has a variable length, which MUST be greater than 0. TheValuevalue is padded to a 4-octet alignment. The padding is not included in the Length field. The value contains theentitySpeaker Entity Identifier (an identifier of the PCEP speaker transmitting thisTLV.TLV). This identifier is required to be unique within its scope of visibility, which is usually limited to a single domain. It MAY be configured by the operator. Alternatively, it can be derived automatically from asuitably-stablesuitably stable unique identifier, such as aMACMedia Access Control (MAC) address, serial number, Traffic Engineering Router ID, or similar. In the case of inter-domain connections, the speaker SHOULD prefix its usual identifier with the domain identifier of its residence, such as an Autonomous System number, an IGP area identifier, or similar to make sure it remains unique. The relationship between this identifier and entities in the Traffic Engineering database is intentionally left undefined. From a manageability point of view, a PCE or PCC implementation SHOULD allow the operator to configure this Speaker Entity Identifier. If a PCEP speaker receives the SPEAKER-ENTITY-ID on a new PCEP session, that matches with an existing alive PCEP session, the PCEP speaker MUST send a PCErr withError-type 20 Error-value TBD7 (suggested value - 7)Error-type=20 and Error-value=7 'Received an invalid Speaker Entity Identifier', and close the PCEP session. 4. Incremental State Synchronization[I-D.ietf-pce-stateful-pce][RFC8231] describes the LSPstate synchronizationState Synchronization mechanism between PCCs and stateful PCEs. During thestate synchronization,State Synchronization, a PCC sends the information of all its LSPs (i.e., the full LSP-DB) to the stateful PCE. In order to reduce thestate synchronizationState Synchronization overhead when there is a small number of LSP statechangechanges in the network between the PCEP session restart, this section defines a mechanism for incremental (Delta)LSP Database (LSP-DB)LSP-DB synchronization. 4.1. Motivation According to[I-D.ietf-pce-stateful-pce],[RFC8231], if a PCE restarts and its LSP-DB survived, PCCs with a mismatchedLSP State DatabaseLSP-DB Version Number will send all their LSPs information (full LSP-DB) to the stateful PCE, even if only a small number of LSPs underwent state change. It can take a long time and consume large communication channel bandwidth. Figure 6 shows an example of LSPstate synchronization.State Synchronization. +-----+ | PCE | +-----+ / / / / +------+ +------+ | PCC1 |------------| PCC2 | +------+ +------+ | | | | +------+ +------+ | PCC3 |------------| PCC4 | +------+ +------+ Figure 6: Topology ExampleAssumingAssume that there are 320 LSPs in the network, with each PCC having 80 LSPs. During the time when the PCEP session is down, 20 LSPs of each PCC (i.e., 80 LSPs in total), are changed.HenceHence, when the PCEP session restarts, the stateful PCE needs to synchronize 320 LSPs with all PCCs. But actually, 240 LSPs stay the same. If performing full LSPstate synchronization,State Synchronization, it can take a long time to carry out the synchronization of all LSPs. It is especially true when only a low bandwidth communication channel is available (e.g., in-band control channel for optical transportnetworks)networks), and there is a substantial number of LSPs in the network. Another disadvantage of full LSP synchronization is that it is a waste of communication bandwidth to perform full LSP synchronization given the fact that the number of LSP changes can be small during the time when the PCEP session is down. An incremental (Delta)LSP Database (LSP-DB) state synchronizationLSP-DB State Synchronization is described in this section, where only the LSPs that underwent state change are synchronized between the session restart. This may include new/modified/deleted LSPs. 4.2. Incremental Synchronization Procedure[I-D.ietf-pce-stateful-pce][RFC8231] describesstate synchronizationState Synchronization and Section 3 of thisdocument,document describesstate synchronizationState Synchronization avoidance by using LSP-DB-VERSION TLV in its OPEN object. This section extends this idea to only synchronize the delta (changes) in case of version mismatch. If both PCEP speakers include the LSP-DB-VERSION TLV in the OPEN object and the LSP-DB-VERSION TLV values match, the PCC MAY skipstate synchronization.State Synchronization. Otherwise, the PCC MUST performstate synchronization.State Synchronization. Incremental StatesynchronizationSynchronization capability is advertised on a PCEP session during session startup using theDELTA- LSP-SYNC-CAPABILITYDELTA-LSP-SYNC-CAPABILITY (D) bit in the capabilities TLV (see Section 7). Instead of dumping full LSP-DB to the stateful PCE again, the PCC synchronizes the delta (changes) as described in Figure 7 when the Dflagand Sflag isflags are set to 1 by both the PCC and PCE. Other combinations of D and S flagssettingset by the PCC and PCE result in full LSP-DB synchronizationprocedureprocedures as described in[I-D.ietf-pce-stateful-pce].[RFC8231]. By setting the D flag to zero in the OPEN message, a PCEP speaker can skip the incremental synchronization optimization, resulting in a fullLSP DBLSP-DB synchronization. +-+-+ +-+-+ |PCC| |PCE| +-+-+ +-+-+ | | |--Open--, | | DBv=46 \ ,---Open--| | S=1 \ / DBv=42 | | D=1 \/ S=1 | | /\ D=1 | | / \ | | / `-------->| (ExpectDeltadelta sync) (Do sync)|<--------` |(DONOT Purge(DO NOT purge LSP (Delta) | |State)state) | | (DeltaSyncsync starts) |--PCRpt,DBv=46,SYNC=1-->| | . | | . | | . | | . | |--PCRpt,DBv=46,SYNC=0-->| (Sync done, | | PLSP-ID=0) | | |--PCRpt,DBv=47,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=48,SYNC=0-->| (Regular | | LSP State Report) |--PCRpt,DBv=49,SYNC=0-->| | | Figure 7: Incremental Synchronization Procedure As per Section 3, theLSP State DatabaseLSP-DB Version Number is incremented each time a change is made to the PCC's localLSP State Database.LSP-DB. Each LSP is associated with the DB version at the time of its state change. This is needed to determine which LSP and what information needs to be synchronized in incrementalstate synchronization.State Synchronization. The incremental state sync is done from the lastLSP DBLSP-DB version received by the PCE to the latest DB version at the PCC. Note that theLSP State DatabaseLSP-DB Version Number can wrap around,andin which case the incremental state sync would also wrap till the latestDB version numberLSP-DB Version Number at the PCC. In order to carry out incrementalstate synchronization,State Synchronization, it is not necessary for a PCC to store a complete history ofLSP DatabaseLSP-DB change for all time, but remember the LSP state changes (including LSP modification,setupsetup, anddeletion),deletion) that the PCE did not get to process during the session down. Note that, a PCC would be unaware that a particular LSP report has been processed by the PCE before the session to the PCE went down. So a PCC implementation MAY choose to store theLSP State DatabaseLSP-DB Version Number with each LSP at the time its status changed, so that when a session isre-establishedre-established, an incremental synchronization can be attempted based on the PCE's lastLSP State DatabaseLSP-DB Version Number. For an LSP that is deleted at the PCC, the PCC implementation would need to remember the deleted LSP in some way to make sure this could be reported as part of incremental synchronization later. The PCC would discard this information based on a localpolicy,policy or when it determines that this information is no longer needed with sufficient confidence. In the example shown in Figure 7, the PCC needs to store the LSP state changes that happened between DBVersionVersions 43 to 46 andsynchronizessynchronize these changes, when performing incremental LSP state update. If a PCC finds out it does not have sufficient information to complete incremental synchronization after advertising incremental LSPstate synchronizationState Synchronization capability, it MUST send a PCErr withError-Type 20Error-type=20 andError-Value 5Error-value=5 'A PCC indicates to a PCE that it can not complete thestate synchronization'State Synchronization' (defined in[I-D.ietf-pce-stateful-pce])[RFC8231]), and terminate the session. The PCC SHOULD re-establish the session with the D bit set to 0 in the OPEN message. The other procedures and error checks remain unchanged from the fullstate synchronization ([I-D.ietf-pce-stateful-pce]).State Synchronization [RFC8231]. 5.PCE-triggeredPCE-Triggered Initial Synchronization 5.1. Motivation In networks such as optical transport networks, the control channel between network nodes can be realized through in-bandoverheadoverhead, thus it has limited bandwidth. With a stateful PCE connected to the network via one network node, it is desirable to control the timing of PCCstate synchronizationState Synchronization so as not to overload the low communication channel available in the network during the initial synchronization (be it incremental or full) when the sessionrestarts ,restarts, when there is a comparatively large amount of control information needing to be synchronized between the stateful PCE and the network. The method proposed, i.e., allowing PCE to trigger thestate synchronization,State Synchronization, is similar to the function proposed in Section 6 but is used in different scenarios and for different purposes. 5.2.PCE-triggeredPCE-Triggered Initial State Synchronization Procedure Support of PCE-triggered initialstate synchronizationState Synchronization is advertised during session startup using the TRIGGERED-INITIAL-SYNC (F) bit in the STATEFUL-PCE-CAPABILITY TLV (see Section 7). In order to allow a stateful PCE to control the LSP-DB synchronization after establishing a PCEP session, both PCEP speakers MUST set the F bit to 1 in the OPEN message. If the LSP-DB-VERSION TLV is included by both PCEP speakers and the TLV value matches, thestate synchronizationState Synchronization can be skipped as described in Section 3.2. If the TLV is not included or the LSP-DB Version ismis-matched,mismatched, the PCE can trigger thestate synchronizationState Synchronization process by sending a PCUpd message with PLSP-ID = 0 and SYNC = 1. The PCUpd message SHOULD include an emptyEROExplicit Route Object (ERO) (with no ERO sub-object and object length of 4) as its intended path and SHOULD NOT include the optional objects for its attributes for any parameter update. The PCC MUST ignore such an update when the SYNC flag is set. If the TRIGGERED-INITIAL-SYNC capability is not advertised by a PCE and the PCC receives a PCUpd with the SYNC flag set to 1, the PCC MUST send a PCErr with theSRP- ID-numberSRP-ID-number of the PCUpd,Error-Type 20Error-type=20, andError-Value TBD4 (suggested value - 4)Error-value=4 'Attempt to trigger a synchronization when theTRIGGERED- SYNCPCE triggered synchronization capability has not been advertised' (see Section 8.1). If the TRIGGERED-INITIAL-SYNC capability is advertised by a PCE and the PCC, the PCC MUST NOT triggerstate synchronizationState Synchronization on its own. If the PCE receives a PCRpt message before the PCE has triggered thestate synchronization,State Synchronization, the PCE MUST send a PCErr withError-Type 20Error-type=20 andError-Value TBD3 (suggested value - 3)Error-value=3 'Attempt to trigger synchronization before PCE trigger' (see Section 8.1). In this way, the PCE can control the sequence of LSP synchronization among all the PCCs that are re-establishing PCEP sessions with it. When the capability of PCE control is enabled, only after a PCC receives this message, it will start sending information to the PCE. This PCE-triggering capability can be applied to both full and incrementalstate synchronization.State Synchronization. If applied to the latter, the PCCs only send information that PCE does not possess, which is inferred from the LSP-DB version information exchanged in the OPEN message (see Section 4.2 for a detailed procedure). Once the initialstate synchronizationState Synchronization is triggered by the PCE, the procedures and error checks remain unchanged([I-D.ietf-pce-stateful-pce]).[RFC8231]. If a PCC implementation that does not implement this extension should not receive a PCUpd message to triggerstate synchronizationState Synchronization as per the capability advertisement, but if it were to receive it, it will behave as per[I-D.ietf-pce-stateful-pce].[RFC8231]. 6.PCE-triggered Re-synchronizationPCE-Triggered Resynchronization 6.1. Motivation The accuracy of the computations performed by the PCE is tied to the accuracy of the view the PCE has on the state of the LSPs. Therefore, it can be beneficial to be able tore-synchronizeresynchronize this state even after the session has been established. The PCE may use this approach to continuously sanity check its state against thenetwork,network or to recover from error conditions without having to tear down sessions. 6.2.PCE-triggeredPCE-Triggered StateRe-synchronizationResynchronization Procedure Support of PCE-triggered statere-synchronizationresynchronization is advertised by both PCEP speakers during session startup using the TRIGGERED-RESYNC (T) bit in the STATEFUL-PCE-CAPABILITY TLV (see Section 7). The PCE can choose tore-synchronizeresynchronize its entireLSP databaseLSP-DB or a single LSP. To triggerre-synchronizationresynchronization for an LSP, the PCE sends a Path Computation State Update (PCUpd) for the LSP, with the SYNC flag in the LSP object set to 1. The PCE SHOULD NOT include any parameter updates for the LSP, and the PCC MUST ignore such an update when the SYNC flag is set. The PCC MUST respond with a PCRpt message with the LSP state, SYNCFlagflag set to 0 and MUST include the SRP-ID-number of the PCUpd message that triggered the resynchronization. If the PCC cannot find the LSP in its database, PCC MUST also set the R (remove) flag[I-D.ietf-pce-stateful-pce][RFC8231] in the LSP object in the PCRpt message. The PCE can also triggerre-synchronizationresynchronization of the entireLSP database.LSP-DB. The PCE MUST first mark all LSPs in theLSP databaseLSP-DB that were previously reported by the PCC asstalestale, and then send a PCUpd with an LSP object containing a PLSP-ID of 0 and with the SYNC flag set to 1. The PCUpd message MUST include an empty ERO (with no ERO sub-object and object length of 4) as its intended path and SHOULD NOT include the optional objects for its attributes for any parameter update. The PCC MUST ignore such update if the SYNC flag is set. This PCUpd message is the trigger for the PCC to enter the synchronization phase as described in[I-D.ietf-pce-stateful-pce][RFC8231] and start sending PCRpt messages. After the receipt of theend-of- synchronizationend-of-synchronization marker, the PCE will purge LSPswhichthat were not refreshed. The SRP-ID-number of the PCUpd that triggered there- synchronizationresynchronization SHOULD be included in each of the PCRpt messages. If the PCC cannotre-synchronizeresynchronize the entireLSP database,LSP-DB, the PCC MUST respond with a PCErr message withError-type 20 Error-value 5Error-type=20 and Error-value=5 'cannot complete thestate synchronization' [I-D.ietf-pce-stateful-pce],State Synchronization' [RFC8231], and it MAY terminate the session. The PCE MUST remove the stale mark for theLSPLSPs that were previously reported by the PCC. Based on the local policy, the PCE MAY reattempt synchronization at a later time. If the TRIGGERED-RESYNC capability is not advertised by a PCE and the PCC receives a PCUpd with the SYNC flag set to 1, it MUST send a PCErr with the SRP-ID-number of the PCUpd,Error-Type 20Error-type=20, andError- Value TBD4 (suggested value - 4)Error-value=4 'Attempt to trigger a synchronization when theTRIGGERED-SYNCPCE triggered synchronization capability has not been advertised' (see Section 8.1). Once the statere-synchronizationresynchronization is triggered by the PCE, the procedures and error checks remain unchanged from the full state synchronization([I-D.ietf-pce-stateful-pce]).[RFC8231]. This would also include the PCE triggering multiple statere-synchronizationresynchronization requests while synchronization is in progress. If a PCC implementation that does not implement this extension should not receive a PCUpd message to triggerre-synchronizationresynchronization as per the capability advertisement, but if it were to receive it, it will behave as per[I-D.ietf-pce-stateful-pce].[RFC8231]. 7. Advertising Support of Synchronization Optimizations Support for each of the optimizations described in this document requires advertising the corresponding capabilities during session establishment time. The STATEFUL-PCE-CAPABILITY TLV is defined in[I-D.ietf-pce-stateful-pce].[RFC8231]. This document defines the following new flags in the STATEFUL-PCE-CAPABILITY TLV: Bit DescriptionTBD9 (suggested value 30)------------------------- --------------------------------- 30 S bit (INCLUDE-DB-VERSION)TBD10 (suggested value 27)27 D bit (DELTA-LSP-SYNC-CAPABILITY)TBD11 (suggested value 26)26 F bit (TRIGGERED-INITIAL-SYNC)TBD12 (suggested value 28)28 T bit (TRIGGERED-RESYNC) If the S(INCLUDE-DB-VERSION)bit (INCLUDE-DB-VERSION) is set to 1 by both PCEPSpeakers,speakers, the PCC will include the LSP-DB-VERSION TLV in each LSPObject.object. See Section 3.2 for details. If the D(DELTA-LSP-SYNC-CAPABILITY)bit (DELTA-LSP-SYNC-CAPABILITY) is set to 1 by a PCEP speaker, it indicates that the PCEP speaker allows incremental (delta)state synchronization.State Synchronization. See Section 4.2 for details. If the F(TRIGGERED-INITIAL-SYNC)bit (TRIGGERED-INITIAL-SYNC) is set to 1 by both PCEPSpeakers,speakers, the PCE SHOULD trigger initial (first)state synchronization.State Synchronization. See Section 5.2 for details. If the T(TRIGGERED-RESYNC)bit (TRIGGERED-RESYNC) is set to 1 by both PCEPSpeakers,speakers, the PCE can triggerre-synchronizationresynchronization of LSPs at any point in the life of the session. See Section 6.2 for details. See Section 8.3 for IANA allocations. 8. IANA ConsiderationsThis document requestsIANAactions to allocatehas allocated code points for the protocol elements defined in this document. 8.1. PCEP-Error Object IANAis requested to makehas allocated the followingallocationvalues in the "PCEP-ERROR Object Error Types and Values" registry. Error-Type Meaning Reference ------------------------------------------------------------ 6 Mandatory Object missing [RFC5440]Error-Value= TBD1(suggested This document value 12):Error-value 12: LSP-DB-VERSION TLV missing20 LSP State synchronization [I-D.ietf-pce-stateful-pce] error Error-Value= TBD2(suggestedThis documentvalue 2):20 LSPDatabaseState Synchronization Error [RFC8231] Error-value 2: LSP-DB version mismatch.Error-Value=TBD3(suggestedThis documentvalue 3):3: Attempt to trigger This document synchronization before PCE trigger.Error-Value=TBD4(suggested This document value 4):4: Attempt to trigger a This document synchronization when the PCE triggered synchronization capability has not been advertised.Error-Value=TBD6(suggested This document value 6):6: Received an invalidLSP DB Version Number. Error-Value=TBD7(suggestedThis documentvalue 7):LSP-DB Version Number. 7: Received an invalid This document Speaker Entity Identifier. 8.2. PCEP TLV Type Indicators IANAis requested to makehas allocated the followingallocationvalues in the "PCEP TLV Type Indicators" registry. Value Meaning ReferenceTBD5(suggested value 23)------------------------- ----------------- ------------- 23 LSP-DB-VERSION This documentTBD13(suggested value 24)24 SPEAKER-ENTITY-ID This document 8.3. STATEFUL-PCE-CAPABILITY TLV The STATEFUL-PCE-CAPABILITY TLV is defined in[I-D.ietf-pce-stateful-pce] and a[RFC8231]. The "STATEFUL-PCE-CAPABILITY TLV Flag Field" registryis requested to behas been created to manage the flags in the TLV. IANAis requested to makehas allocated the followingallocationvalues inthe aforementionedthis registry. Bit Description ReferenceTBD11 (suggested value 26)-------------------------- -------------------------- ------------- 26 TRIGGERED-INITIAL-SYNC This documentTBD10 (suggested value 27)27 DELTA-LSP-SYNC-CAPABILITY This documentTBD12 (suggested value 28)28 TRIGGERED-RESYNC This documentTBD9 (suggested value 30)30 INCLUDE-DB-VERSION This document 9. Manageability Considerations All manageability requirements and considerations listed in [RFC5440] and[I-D.ietf-pce-stateful-pce][RFC8231] apply to PCEP protocol extensions defined in this document. In addition, requirements and considerations listed in this section apply. 9.1. Control of Function and Policy A PCE or PCC implementation MUST allow configuring thestate synchronizationState Synchronization optimization capabilities as described in this document. The implementation SHOULD also allow the operator to configure the Speaker Entity Identifier( Section(Section 3.3.2). Further, the operator SHOULD be to be allowed to trigger there- synchronizationresynchronization procedures as per Section 6.2. 9.2. Information and Data Models An implementation SHOULD allow the operator to view the stateful capabilities advertised by eachpeer,peer and the current synchronization status with each peer. To serve this purpose, the PCEP YANG module[I-D.ietf-pce-pcep-yang][PCEP-YANG] can be extended to include advertised statefulcapabilities,capabilities and synchronization status. 9.3. Liveness Detection and Monitoring Mechanisms defined in this document do not imply any new liveness detection and monitoring requirements in addition to those already listed in [RFC5440]. 9.4. Verify Correct Operations Mechanisms defined in this document do not imply any new operation verification requirements in addition to those already listed in [RFC5440] and[I-D.ietf-pce-stateful-pce].[RFC8231]. 9.5. RequirementsOnon Other Protocols Mechanisms defined in this document do not imply any new requirements on other protocols. 9.6. ImpactOnon Network Operations Mechanisms defined in [RFC5440] and[I-D.ietf-pce-stateful-pce][RFC8231] also apply to PCEP extensions defined in this document. Thestate synchronizationState Synchronization optimizations described in this document can result in a reduction of the amount of data exchanged and the time taken for a stateful PCE to be fully operational when a PCEP session is re-established. The ability to triggerre-synchronizationresynchronization by the PCE can be utilized by the operator to sanity check its state and recover from any mismatch in state without tearing down the session. 10. Security Considerations The security considerations listed in[I-D.ietf-pce-stateful-pce][RFC8231] apply to this document as well. However, this document also introduces some new attack vectors. An attacker could spoof the SPEAKER-ENTITY-ID and pretend to be another PCEP speaker. An attacker may flood the PCC with triggeredre-synchronization requestresynchronization requests at a ratewhichthat exceeds the PCC's ability to processthem, eitherthem by either spoofing messages orbycompromising the PCE itself. The PCC can respond with a PCErr message as described in Section 6.2 and terminate the session.ThusThus, securing the PCEP session using Transport Layer Security (TLS)[I-D.ietf-pce-pceps],[PCEPS], as per the recommendations and best current practices in [RFC7525], is RECOMMENDED. An administrator could also expose thespeaker entity idSpeaker Entity Identifier as part of the certificate, for the peer identity verification.13.11. References13.1.11.1. Normative References[I-D.ietf-pce-stateful-pce] Crabbe, E., Minei, I., Medved, J., and R. Varga, "PCEP Extensions for Stateful PCE", draft-ietf-pce-stateful- pce-18 (work in progress), December 2016.[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997,<http://www.rfc-editor.org/info/rfc2119>.<https://www.rfc-editor.org/info/rfc2119>. [RFC5440] Vasseur, JP., Ed. and JL. Le Roux, Ed., "Path Computation Element (PCE) Communication Protocol (PCEP)", RFC 5440, DOI 10.17487/RFC5440, March 2009,<http://www.rfc-editor.org/info/rfc5440>. 13.2.<https://www.rfc-editor.org/info/rfc5440>. [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, <https://www.rfc-editor.org/info/rfc8174>. [RFC8231] Crabbe, E., Minei, I., Medved, J., and R. Varga, "Path Computation Element Communication Protocol (PCEP) Extensions for Stateful PCE", RFC 8231, DOI 10.17487/RFC8231, September 2017, <http://www.rfc-editor.org/info/rfc8231>. 11.2. Informative References [PCEP-YANG] Dhody, D., Hardwick, J., Beeram, V., and j. jefftant@gmail.com, "A YANG Data Model for Path Computation Element Communications Protocol (PCEP)", Work in Progress, draft-ietf-pce-pcep-yang-05, July 2017. [PCEPS] Lopez, D., Dios, O., Wu, Q., and D. Dhody, "Secure Transport for PCEP", Work in Progress, draft-ietf-pce- pceps-18, September 2017. [RFC7525] Sheffer, Y., Holz, R., and P. Saint-Andre, "Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)", BCP 195, RFC 7525, DOI 10.17487/RFC7525, May 2015,<http://www.rfc-editor.org/info/rfc7525>.<https://www.rfc-editor.org/info/rfc7525>. [RFC8051] Zhang, X., Ed. and I. Minei, Ed., "Applicability of a Stateful Path Computation Element (PCE)", RFC 8051, DOI 10.17487/RFC8051, January 2017,<http://www.rfc-editor.org/info/rfc8051>. [I-D.ietf-pce-pcep-yang] Dhody, D., Hardwick, J., Beeram, V., and j. jefftant@gmail.com, "A YANG Data Model for Path Computation Element Communications Protocol (PCEP)", draft-ietf-pce-pcep-yang-02 (work in progress), March 2017. [I-D.ietf-pce-pceps] Lopez, D., Dios, O., Wu, W., and D. Dhody, "Secure Transport for PCEP", draft-ietf-pce-pceps-11 (work in progress), January 2017. 11.<https://www.rfc-editor.org/info/rfc8051>. Acknowledgments We would like to thank Young Lee, SergioBelottiBelotti, and Cyril Margaria for their comments and discussions. Thanks to Jonathan Hardwick for being the document shepherd andprovideproviding comments and guidance. Thanks to Tomonori Takeda for the Routing Area Directorate review. Thanks to Adrian Farrel for the TSVART review and providing detailed comments and suggestions. Thanks to Daniel Franke for the SECDIR review. Thanks to Alvaro Retana, Kathleen Moriarty, and Stephen Farrell for comments during the IESG evaluation. Thanks to Deborah Brungard for being the responsible AD and guiding the authors as needed.12. ContributorsContributor Gang Xie Huawei Technologies F3-5-B R&D Center, Huawei Industrial Base, Bantian, Longgang District Shenzhen, Guangdong, 518129P.R.China Email: xiegang09@huawei.com Authors' Addresses Edward Crabbe OracleEMail:Email: edward.crabbe@gmail.com Ina Minei Google, Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043US EMail:United States of America Email: inaminei@google.com Jan Medved Cisco Systems, Inc. 170 West Tasman Dr. San Jose, CA 95134US EMail:United States of America Email: jmedved@cisco.com Robert Varga Pantheon Technologies SRO Mlynske Nivy 56 Bratislava 821 05 SlovakiaEMail:Email: robert.varga@pantheon.tech Xian Zhang Huawei Technologies F3-5-B R&D Center, Huawei Industrial Base, Bantian, Longgang District Shenzhen, Guangdong 518129P.R.China EMail:China Email: zhang.xian@huawei.com Dhruv Dhody Huawei Technologies Divyashree Techno Park, Whitefield Bangalore, Karnataka 560066 IndiaEMail:Email: dhruv.ietf@gmail.com