OSPF Working GroupInternet Engineering Task Force (IETF) J. TantsuraInternet-DraftRequest for Comments: 8476 Apstra, Inc.Intended status:Category: Standards Track U. ChunduriExpires: April 20, 2019ISSN: 2070-1721 Huawei Technologies S. Aldrin Google,IncInc. P. Psenak Cisco SystemsOctober 17,December 2018 SignalingMSD (MaximumMaximum SIDDepth) usingDepth (MSD) Using OSPFdraft-ietf-ospf-segment-routing-msd-25Abstract This document defines a way for an Open Shortest Path First (OSPF)Routerrouter to advertise multiple types of supported MaximumSID(Segment Identifier)SID Depths (MSDs) at node and/or link granularity. Such advertisements allow entities (e.g., centralized controllers) to determine whether a particularSIDSegment Identifier (SID) stack can be supported in a given network. This documentdefinesonlyone type of MSD,refers to the Signaling MSD as defined in RFC 8491, but it defines an encoding that can support other MSD types.HereHere, the termOSPF"OSPF" means both OSPFv2 and OSPFv3. Status of This Memo ThisInternet-Draftissubmitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documentsan Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF).Note that other groups may also distribute working documents as Internet-Drafts. The listIt represents the consensus ofcurrent Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents validthe IETF community. It has received public review and has been approved fora maximumpublication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 ofsix monthsRFC 7841. Information about the current status of this document, any errata, and how to provide feedback on it may beupdated, replaced, or obsoleted by other documentsobtained atany time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on April 20, 2019.https://www.rfc-editor.org/info/rfc8476. Copyright Notice Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction. . . . . . . . . . . . . . . . . . . . . . . . 2....................................................2 1.1. Terminology. . . . . . . . . . . . . . . . . . . . . . . 3................................................3 1.2. Requirements Language. . . . . . . . . . . . . . . . . . 4......................................4 2. Node MSD Advertisement. . . . . . . . . . . . . . . . . . . 4..........................................4 3. Link MSDsub-TLV . . . . . . . . . . . . . . . . . . . . . . 5Sub-TLV ................................................5 4. Procedures for Defining and Using Node and Link MSD Advertisements. . . . . . . . . . . . . . . . . . . . . . . 6..................................................6 5. IANA Considerations. . . . . . . . . . . . . . . . . . . . . 7.............................................7 6. Security Considerations. . . . . . . . . . . . . . . . . . . 8.........................................7 7.Contributors . . . . . . . . . . . . . . . . . . . . . . . . 8 8. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 8 9.References. . . . . . . . . . . . . . . . . . . . . . . . . 8 9.1.......................................................8 7.1. Normative References. . . . . . . . . . . . . . . . . . 9 9.2........................................8 7.2. Informative References. . . . . . . . . . . . . . . . . 9.....................................9 Acknowledgements ..................................................10 Contributors ......................................................10 Authors' Addresses. . . . . . . . . . . . . . . . . . . . . . . 11................................................10 1. Introduction When Segment Routing (SR) paths are computed by a centralized controller, it is critical that the controllerlearnslearn the Maximum SID(Segment Identifier)Depth (MSD) that can be imposed at eachnode/ linknode/link on a given SRpath to ensurepath. This ensures that the Segment Identifier (SID) stack depth of a computed path doesn't exceed the number of SIDs the node is capable of imposing.[I-D.ietf-pce-segment-routing][PCEP-EXT] defines how to signal MSD in the Path Computation ElementcommunicationCommunication Protocol (PCEP). However, if PCEP is notsupported/configuredsupported/ configured on the head-end of an SR tunnel or a Binding-SID anchornodenode, and the controller does not participate in IGP routing, it has no wayto learnof learning the MSD of nodes and links. BGP-LS (Distribution of Link-State and TE Informationusing Border Gateway Protocol)Using BGP) [RFC7752] defines a way to expose topology and associated attributes and capabilities of the nodes in that topology to a centralized controller. MSD signaling by BGP-LS has been defined in[I-D.ietf-idr-bgp-ls-segment-routing-msd].[MSD-BGP]. Typically, BGP-LS is configured on a small number of nodes that do not necessarily act as head-ends. In order for BGP-LS to signal MSD for all the nodes and links in the network for which MSD is relevant, MSD capabilities SHOULD be advertised by every OSPF router in the network. Other types ofMSDMSDs are known to be useful. For example,[I-D.ietf-ospf-mpls-elc][ELC-ISIS] defines Entropy Readable Label DepthCapability (RLDC) that(ERLD), which is used by a head-end to insert an Entropy Label (EL) at a depththat couldwhere it can be read by transit nodes. This document defines an extension to OSPF used to advertise one or more types ofMSDMSDs at node and/or link granularity. In thefuturefuture, it isexpected,expected that newMSD-typesMSD-Types will be defined to signal additionalcapabilitiescapabilities, e.g.,entropy labels,ELs, SIDs that can be imposed through recirculation, or SIDs associated with anotherdataplane e.g.,data plane such as IPv6. MSD advertisements MAY be useful even ifSegment RoutingSR itself is not enabled. For example, in a non-SR MPLS network, MSD defines the maximum label depth. 1.1. Terminology This memo makes use of the terms defined in[RFC7770][RFC7770]. BGP-LS: Distribution of Link-State and TE Informationusing Border Gateway ProtocolUsing BGP OSPF: Open Shortest Path First MSD: Maximum SID Depth - the number of SIDs supported by a node or a link on a node SID: Segment Identifier as defined in [RFC8402] Label Imposition: Imposition is the act of modifying and/or adding labels to the outgoing label stack associated with a packet. This includes:o* replacing the label at the top of the label stack with a new labelo* pushing one or more new labels onto the label stack The number of labels imposed is then the sum of the number of labelswhichthat are replaced and the number of labelswhichthat are pushed. See [RFC3031] for further details.PCC: Path Computation Client PCE: Path Computation ElementPCEP: Path Computation Element Communication Protocol SR: Segment RoutingSID: Segment IdentifierLSA: Linkstate advertisementState Advertisement RI:OSPFRouter InformationLSA1.2. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. 2. Node MSD Advertisement ThenodeNode MSD TLV within the body of the OSPF RI Opaque LSA [RFC7770] is defined to carry the provisioned SID depth of the router originating the RI LSA. Node MSD is the smallest MSD supported by the node on the set of interfaces configured for use by the advertising IGP instance. MSD values may be learned via a hardware API or may be provisioned. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | MSD-Type | MSD-Value | MSD-Type... | MSD-Value... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 1: Node MSD TLV Type: 12 Length: variable (multiple of 2octets) andoctets); represents the total length of the value field in octets. Value: consists of one or more pairs of a1 octet MSD-type1-octet MSD-Type and1 octet1-octet MSD-Value. MSD-Type: one of the values defined in theIGP MSD-Types"IGP MSD-Types" registry defined in[I-D.ietf-isis-segment-routing-msd].[RFC8491]. MSD-Value: a number in the range of 0-255. For all MSD-Types, 0 represents the lack oftheability to impose an MSD stack of any depth; any other value represents that of the node. This value MUST represent the lowest value supported by any link configured for use by the advertising OSPF instance. This TLV is optional and is applicable to both OSPFv2 andto OSPFv3 and is optional.OSPFv3. The scope of the advertisement is specific to the deployment. When multiple Node MSD TLVs are received from a given router, the receiver MUST use the first occurrence of the TLV in the Router Information (RI) LSA. If the Node MSD TLV appears in multipleRouter InformationRI LSAs that have different flooding scopes, the Node MSD TLV in theRouter InformationRI LSA with the area-scoped flooding scope MUST be used. If the Node MSD TLV appears in multipleRouter InformationRI LSAs that have the same flooding scope, the Node MSD TLV in theRouter Information (RI)RI LSA with the numerically smallest Instance ID MUST be used and other instances of the Node MSD TLV MUST be ignored. The RI LSA can be advertised at any of the defined opaque flooding scopes (link, area, or Autonomous System (AS)). For the purpose of Node MSD TLV advertisement, area-scoped flooding is RECOMMENDED. 3. Link MSDsub-TLVSub-TLV ThelinkLink MSD sub-TLV is defined to carry the MSD of the interface associated with the link. MSD values may be learned via a hardware API or may be provisioned. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | MSD-Type | MSD-Value | MSD-Type... | MSD-Value... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 2: Link MSD Sub-TLV Type: For OSPFv2, theLink levellink-level MSD-Value is advertised as an optionalSub-TLVsub-TLV of the OSPFv2 Extended Link TLV as defined in[RFC7684],[RFC7684] and has a type of 6. For OSPFv3, theLink levellink-level MSD-Value is advertised as an optionalSub-TLVsub-TLV of the E-Router-LSA TLV as defined in[RFC8362],[RFC8362] and has a type of 9. Length:variable andvariable; same as defined in Section 2. Value: consists of one or more pairs of a1 octet MSD-type1-octet MSD-Type and1 octet1-octet MSD-Value. MSD-Type: one of the values defined in theMSD-Types"IGP MSD-Types" registry defined in[I-D.ietf-isis-segment-routing-msd].[RFC8491]. The MSD-Value field contains the Link MSD of the router originating the corresponding LSA as specified for OSPFv2 and OSPFv3. The Link MSD is a number in the range of 0-255. For all MSD-Types, 0 represents the lack oftheability to impose an MSD stack of any depth; any other value represents that of the particular link when used as an outgoing interface. If this sub-TLV is advertised multiple timesin the same OSPFv2 Extended Link Opaque LSA/E-Router-LSA, only the first instance of the TLV MUST be used by receiving OSPF routers. This situation SHOULD be logged as an error. If this sub-TLV is advertised multiple timesfor the same link in different OSPF Extended Link OpaqueLSAs/E-Router-LSAsLSAs / E-Router-LSAs originated by the same OSPF router, theOSPFv2 Extended Link TLVsub-TLV in the OSPFv2 Extended Link Opaque LSA with the smallest Opaque ID or in the OSPFv3 E-Router-LSA with the smallest Link State ID MUST be used by receiving OSPF routers. This situationMAYSHOULD be logged asa warning.an error. 4. Procedures for Defining and Using Node and Link MSD Advertisements When Link MSD is present for a givenMSD-type,MSD-Type, the value of the Link MSD MUST take precedence over the Node MSD. When a LinkMSD-typeMSD-Type is not signaled but the NodeMSD-typeMSD-Type is, then the NodeMSD-typeMSD-Type value MUST be considered as the MSD value for that link. In order to increase flooding efficiency, it is RECOMMENDED that routers with homogenouslinkLink MSD values advertise just the Node MSD value. The meaning of the absence of both Node and Link MSD advertisements for a givenMSD-typeMSD-Type is specific to theMSD-type. GenerallyMSD-Type. Generally, it can only be inferred that the advertising node does not support advertisement of thatMSD-type.MSD-Type. However, in some cases the lack of advertisement might imply that the functionality associated with theMSD-typeMSD-Type is not supported.ThePer [RFC8491], the correct interpretation MUST be specified when anMSD-typeMSD-Type isdefined in [I-D.ietf-isis-segment-routing-msd].defined. 5. IANA Considerations This specification updates several existing OSPF registries. IANA has allocated TLV type 12 from theOSPF"OSPF Router Information (RI)TLVs RegistryTLVs" registry as defined by [RFC7770]. Value Description Reference ----- --------------- ------------- 12 Node MSD This document Figure 3: RI Node MSD IANA has allocated sub-TLV type 6 from theOSPFv2"OSPFv2 Extended Link TLVSub-TLVsSub-TLVs" registry. Value Description Reference ----- --------------- ------------- 6 OSPFv2 Link MSD This document Figure 4: OSPFv2 Link MSD IANA has allocated sub-TLV type 9 from theOSPFv3"OSPFv3 Extended-LSASub- TLVSub-TLVs" registry. Value Description Reference ----- --------------- ------------- 9 OSPFv3 Link MSD This document Figure 5: OSPFv3 Link MSD 6. Security Considerations Security concerns for OSPF are addressed in [RFC7474],[RFC4552][RFC4552], and [RFC7166]. Further security analysis for the OSPF protocol is done in [RFC6863]. Securityconsiderations,considerations as specified by [RFC7770],[RFC7684][RFC7684], and [RFC8362] are applicable to this document. Implementations MUSTassureensure that malformedTLVTLVs andSub-TLVsub-TLVs defined in this document are detected and do not provide a vulnerability for attackers to crash the OSPF router or routing process. Reception of malformedTLVTLVs orSub-TLVsub-TLVs SHOULD be counted and/or logged for further analysis. Logging of malformed TLVs andSub-TLVssub-TLVs SHOULD berate- limitedrate-limited to prevent aDenial of ServiceDenial-of-Service (DoS) attack (distributed or otherwise) from overloading the OSPF control plane. Advertisement of an incorrect MSD value may have negative consequences. If the value is smaller than supported, path computation may fail to compute a viable path. If the value is larger than supported, an attempt to instantiate a path that can't be supported by the head-end (the node performing the SID imposition) may occur. The presence of this informationalsomay also inform an attacker of how to induce any of the aforementioned conditions. There's noDenial of ServiceDoS risk specific to this extension, and it is not vulnerable to replay attacks.9.7. References9.1.7.1. Normative References[I-D.ietf-isis-segment-routing-msd] Tantsura, J., Chunduri, U., Aldrin, S., and L. Ginsberg, "Signaling MSD (Maximum SID Depth) using IS-IS", draft- ietf-isis-segment-routing-msd-19 (work in progress), October 2018.[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, <https://www.rfc-editor.org/info/rfc2119>. [RFC3031] Rosen, E., Viswanathan, A., and R. Callon, "Multiprotocol Label Switching Architecture", RFC 3031, DOI 10.17487/RFC3031, January 2001, <https://www.rfc-editor.org/info/rfc3031>. [RFC7684] Psenak, P., Gredler, H., Shakir, R., Henderickx, W., Tantsura, J., and A. Lindem, "OSPFv2 Prefix/Link Attribute Advertisement", RFC 7684, DOI 10.17487/RFC7684, November 2015, <https://www.rfc-editor.org/info/rfc7684>. [RFC7770] Lindem, A., Ed., Shen, N., Vasseur, JP., Aggarwal, R., and S. Shaffer, "Extensions to OSPF for Advertising Optional Router Capabilities", RFC 7770, DOI 10.17487/RFC7770, February 2016, <https://www.rfc-editor.org/info/rfc7770>. [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, <https://www.rfc-editor.org/info/rfc8174>. [RFC8362] Lindem, A., Roy, A., Goethals, D., Reddy Vallem, V., and F. Baker, "OSPFv3 Link State Advertisement (LSA) Extensibility", RFC 8362, DOI 10.17487/RFC8362, April 2018, <https://www.rfc-editor.org/info/rfc8362>. [RFC8402] Filsfils, C., Ed., Previdi, S., Ed., Ginsberg, L., Decraene, B., Litkowski, S., and R. Shakir, "Segment Routing Architecture", RFC 8402, DOI 10.17487/RFC8402, July 2018, <https://www.rfc-editor.org/info/rfc8402>.9.2. Informative References [I-D.ietf-idr-bgp-ls-segment-routing-msd][RFC8491] Tantsura, J., Chunduri, U.,Mirsky, G.,Aldrin, S., andS. Sivabalan,L. Ginsberg, "SignalingMSD (MaximumMaximum SIDDepth) using Border Gateway Protocol Link-State", draft-ietf-idr-bgp-ls-segment- routing-msd-02 (work in progress), August 2018. [I-D.ietf-ospf-mpls-elc]Depth (MSD) Using IS-IS", RFC 8491, DOI 10.17487/RFC8491, November 2018, <https://www.rfc-editor.org/info/rfc8491>. 7.2. Informative References [ELC-ISIS] Xu, X., Kini, S., Sivabalan, S., Filsfils, C., and S. Litkowski, "Signaling Entropy Label Capability and Entropy Readable Label-stack Depth Using OSPF",draft-ietf-ospf- mpls-elc-07 (workWork inprogress),Progress, draft-ietf-ospf-mpls-elc-07, September 2018.[I-D.ietf-pce-segment-routing][MSD-BGP] Tantsura, J., Chunduri, U., Mirsky, G., and S. Sivabalan, "Signaling MSD (Maximum SID Depth) using Border Gateway Protocol Link-State", Work in Progress, draft-ietf-idr- bgp-ls-segment-routing-msd-02, August 2018. [PCEP-EXT] Sivabalan, S., Filsfils, C., Tantsura, J., Henderickx, W., and J. Hardwick, "PCEP Extensions for Segment Routing",draft-ietf-pce-segment-routing-12 (workWork inprogress), JuneProgress, draft-ietf-pce-segment-routing-14, October 2018. [RFC4552] Gupta, M. and N. Melam, "Authentication/Confidentiality for OSPFv3", RFC 4552, DOI 10.17487/RFC4552, June 2006, <https://www.rfc-editor.org/info/rfc4552>. [RFC6863] Hartman, S. and D. Zhang, "Analysis of OSPF Security According to the Keying and Authentication for Routing Protocols (KARP) Design Guide", RFC 6863, DOI 10.17487/RFC6863, March 2013, <https://www.rfc-editor.org/info/rfc6863>. [RFC7166] Bhatia, M., Manral, V., and A. Lindem, "Supporting Authentication Trailer for OSPFv3", RFC 7166, DOI 10.17487/RFC7166, March 2014, <https://www.rfc-editor.org/info/rfc7166>. [RFC7474] Bhatia, M., Hartman, S., Zhang, D., and A. Lindem, Ed., "Security Extension for OSPFv2 When Using Manual Key Management", RFC 7474, DOI 10.17487/RFC7474, April 2015, <https://www.rfc-editor.org/info/rfc7474>. [RFC7752] Gredler, H., Ed., Medved, J., Previdi, S., Farrel, A., and S. Ray, "North-Bound Distribution of Link-State and Traffic Engineering (TE) Information Using BGP", RFC 7752, DOI 10.17487/RFC7752, March 2016, <https://www.rfc-editor.org/info/rfc7752>.8. AcknowledgmentsAcknowledgements The authors would like to thank Acee Lindem, Ketan Talaulikar, Tal Mizrahi, StephaneLitkowskiLitkowski, and Bruno Decraene for their reviews and valuable comments.7.Contributors The followingpeopleperson contributed to this document: Les Ginsberg Email: ginsberg@cisco.com Authors' Addresses Jeff Tantsura Apstra, Inc. Email: jefftant.ietf@gmail.com Uma Chunduri Huawei Technologies Email: uma.chunduri@huawei.com Sam Aldrin Google,IncInc. Email: aldrin.ietf@gmail.com Peter Psenak Cisco Systems Email: ppsenak@cisco.com