S-BFD IETF 88, Vancouver, Canada

Slides:



Advertisements
Similar presentations
MPLS-TP BFD for CC-CV proactive and RDI functionalities
Advertisements

OLD DOG CONSULTING Challenges and Solutions for OAM in Point-to-Multipoint MPLS Adrian Farrel, Old Dog Consulting Ltd. Zafar Ali, Cisco Systems, Inc.
BIER Ping IETF 92 draft-kumarzheng-bier-ping-00
IPv6 The New Internet Protocol Integrated Network Services Almerindo Graziano.
IPv6 – IPv4 Network Address, Port & Protocol Translation & Multithreaded DNS Gateway Navpreet Singh, Abhinav Singh, Udit Gupta, Vinay Bajpai, Toshu Malhotra.
IPv4 - The Internet Protocol Version 4
Dynamic Tunnel Management Protocol for IPv4 Traversal of IPv6 Mobile Network Jaehoon Jeong Protocol Engineering Center, ETRI
1 Internet Protocol Version 6 (IPv6) What the caterpillar calls the end of the world, nature calls a butterfly. - Anonymous.
Umut Girit  One of the core members of the Internet Protocol Suite, the set of network protocols used for the Internet. With UDP, computer.
Routing Security Capabilities draft-zhao-opsec-routing-capabilities-02.txt OPSEC WG, IETF #66.
BFD protocol update IETF 62
IPv4 and IPv6 Mobility Support Using MPLS and MP-BGP draft-berzin-malis-mpls-mobility-00 Oleg Berzin, Andy Malis {oleg.berzin,
SBFD for VCCV (draft-gp-pals-seamless-vccv, draft-gp-l2tpext-sbfd-discriminator) IETF-82, Dallas, TX Vengada Prasad Govindan Carlos Pignataro Presented.
ICN Packet Format Design Requirements presented by Alex Afanasyev Alex Afanasyev (UCLA), Ravi Ravindran (Huawei), GQ Wang (Huawei), Lan Wang (University.
1 Link Layer & Network Layer Some slides are from lectures by Nick Mckeown, Ion Stoica, Frans Kaashoek, Hari Balakrishnan, and Sam Madden Prof. Dina Katabi.
TCP/IP Protocol Suite 1 Chapter 11 Upon completion you will be able to: User Datagram Protocol Be able to explain process-to-process communication Know.
1 DNS Name Service based on Secure Multicast DNS for IPv6 Mobile Ad-hoc Network Jaehoon Jeong, ETRI ICACT.
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. 6 Packet Filtering By Whitman, Mattord, & Austin© 2008 Course Technology.
Generic Overlay OAM and Datapath Failure Detection
1 MPLS Architecture. 2 MPLS Network Model MPLS LSR = Label Switched Router LER = Label Edge Router LER LSR LER LSR IP MPLS IP Internet LSR.
IP/ICMP Translation Algorithm (IIT) Xing Li, Congxiao Bao, Fred Baker
Draft-akiya-mpls-lsp-ping-reply-mode-simple Nobo Akiya George Swallow Carlos Pignataro Loa Andersson Mach Chen Shaleen Saxena IETF 88, Vancouver, Canada.
Computer Science and Engineering Computer System Security CSE 5339/7339 Session 24 November 11, 2004.
Packet Filtering. 2 Objectives Describe packets and packet filtering Explain the approaches to packet filtering Recommend specific filtering rules.
1 Multi-Protocol Label Switching (MPLS). 2 MPLS Overview A forwarding scheme designed to speed up IP packet forwarding (RFC 3031) Idea: use a fixed length.
Chapter 6: Packet Filtering
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public BSCI Module 8 Lessons 1 and 2 1 BSCI Module 8 Lessons 1 and 2 Introducing IPv6 and Defining.
1 MIPv6 CN-Targeted Location Privacy and Optimized Routing draft-weniger-mobopts-mip6-cnlocpriv-01 IETF #68, Prague, March 2007.
Packet Filtering Chapter 4. Learning Objectives Understand packets and packet filtering Understand approaches to packet filtering Set specific filtering.
© Jörg Liebeherr (modified by M. Veeraraghavan) 1 ICMP: A helper protocol to IP The Internet Control Message Protocol (ICMP) is the protocol used for error.
Protection and Restoration Definitions A major application for MPLS.
Draft-akiya-mpls-entropy-lsp-ping Nobo Akiya George Swallow Carlos Pignataro Nagendra Kumar IETF 88, Vancouver, Canada.
CSC 600 Internetworking with TCP/IP Unit 7: IPv6 (ch. 33) Dr. Cheer-Sun Yang Spring 2001.
Internet Protocols (chapter 18) CSE 3213 Fall 2011.
ICN Packet Format Design Requirements presented by Alex Afanasyev Alex Afanasyev (UCLA), Ravi Ravindran (Huawei), GQ Wang (Huawei), Lan Wang (University.
6lowpan ND Optimization draft Update Samita Chakrabarti Erik Nordmark IETF 69, 2007 draft-chakrabarti-6lowpan-ipv6-nd-03.txt.
Internet Control Message Protocol (ICMP) Chapter 7.
1 MPLS-TP BFD for CC- CV proactive and RDI functionalities draft-asm-mpls-tp-bfd-cc-cv-02 MPLS WG, 77th IETF - Anaheim.
Computer Science and Engineering Computer System Security CSE 5339/7339 Session 25 November 16, 2004.
Lecture 6 Networked Systems Network Operating Systems Introduction to Sockets HTTP – FTP – TCP - UDP Client-Server Model.
THE CLASSIC INTERNET PROTOCOL (RFC 791) Dr. Rocky K. C. Chang 20 September
© Jörg Liebeherr (modified by M. Veeraraghavan) 1 ICMP The PING Tool Traceroute program IGMP.
Upstream LSR Redundancy for Multi-point LDP Tunnels draft-pdutta-mpls-mldp-up-redundancy-00.txt IETF-81 Pranjal Kumar Dutta Wim Henderickx Alcatel-Lucent.
S-BFD Alert Discriminator draft-akiya-bfd-seamless-alert-discrim Nobo Akiya Carlos Pignataro Dave Ward IETF 92, Dallas, USA.
Generic Overlay OAM and Datapath Failure Detection Kanwar Singh (Nuage Networks) Pradeep Jain, Florin Balus Nuage Networks Wim Henderickx Alcatel-Lucent,
© 2006 Cisco Systems, Inc. All rights reserved. BSCI v3.0—8-1 Implementing IPv6 Defining IPv6 Addressing.
Flow OAM Requirements Janardhanan Pathangi Balaji Venkat Venkataswami DELL Richard Groves – Microsoft Peter Hoose – Facebook
IETF 67, Nov 2006Slide 1 VCCV Extensions for Multi- Segment Pseudo-Wire draft-hart-pwe3-segmented-pw-vccv-01.txt draft-ietf-pwe3-segmented-pw-04.txt Mustapha.
draft-nitish-vrrp-bfd-02
On-demand Continuity Check (CC) and Connectivity Verification(CV) for OverlayNetworks draft-ooamdt-rtgwg-demand-cc-cv-01 Greg Mirsky Erik Nordmark Nagendra.
Connectionless OAM yang model
MPLS-TP Fault Management Draft draft-boutros-mpls-tp-fault-01
PANA Issues and Resolutions
Next Generation: Internet Protocol, Version 6 (IPv6) RFC 2460
Overlay OAM Design Team Report
IPv6 Router Alert Option for MPLS OAM
ND-Shield: Protecting against Neighbor Discovery Attacks
RESOLVING IP ALIASES USING DISTRIBUTED SYSTEMS
Multi-layer OAM for SFC Networks draft-wang-sfc-multi-layer-oam-09
Greg Mirsky IETF-99 July 2017, Prague
Greg Mirsky Jeff Tantsura Mach Chen Ilya Varlashkin
draft-ali-spring-bfd-sr-policy-00
BFD for VXLAN draft-spallagatti-bfd-vxlan
1 Multi-Protocol Label Switching (MPLS). 2 MPLS Overview A forwarding scheme designed to speed up IP packet forwarding (RFC 3031) Idea: use a fixed length.
Technical Issues with draft-ietf-mpls-bfd-directed
Computer Networks Protocols
How OAM Identified in Overlay Protocols draft-mirsky-rtgwg-oam-identify Greg Mirsky IETF-104 March 2019, Prague.
Supporting Flexible Algorithm Prefix SIDs in LSP Ping/Traceroute
IESG LC: BFD for VXLAN draft-ietf-bfd-vxlan
Presentation transcript:

S-BFD IETF 88, Vancouver, Canada Nobo Akiya David Ward Carlos Pignataro Nagendra Kumar Manav Bhatia Mallik Mudigonda Santosh P K Tarek Saad Siva Sivabalan Aswatnarayan Raghuram Glenward Hayden

Why Another Flavor of BFD? Existing BFD is excellent for bi-directional reachability validation scenarios S-BFD provides improved control, flexibility and simplified operations to initiator for even wider range of scenarios and use-cases Why? Faster reachability verifications Reduction of false failures Built-in fault isolation Better fits those difficult with existing BFD: anycast, centralized controller initiation, etc Faster reachability verifications - No bootstrap/handshake -> SDN RSVP LSP requires all participating nodes to setup label forwarding, LSP proving with BFD is critical. But service delay is something brought up by operators. False failure reduction -> Ability for initiator to stop/resume/slow-down at will, multiple sessions.

Reflector session handles S-BFD coming in with your_discrim=0x01010103 How S-BFD Works? [1] Pre-create reflector sessions in the network Allocate discrim for local network identifier Create reflector session to listen for S-BFD packets coming in with your_discrim = allocated discrim A allocates 0x01010101 discrim for 1.1.1.1 IPv4 address B allocates 0x01010102 discrim for 1.1.1.2 IPv4 address Etc Reflector session handles S-BFD coming in with your_discrim=0x01010103 A B C D E F 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 1.1.1.6

How S-BFD Works? [2] Initiator to send S-BFD packet to reflector session Any transport your_discrim=<discrim of intended target> my_discrim=<locally allocated for this initiator instance> Transport your_discrim=0x01010103 my_discrim=xxx_on_A Transport your_discrim=0x01010103 my_discrim=yyy_on_F A B C D E F 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 1.1.1.6

Swap discrim on response How S-BFD Works? [3] Reflector session to send response S-BFD packets Only handles your_discrim for me, otherwise drop Send response S-BFD packets back to initiator Single reflector session can handle multiple initiators Swap discrim on response Transport your_discrim=xxx_on_A my_discrim=0x01010103 Transport your_discrim=yyy_on_F my_discrim=0x01010103 A B C D E F 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 1.1.1.6

Yes … S-BFD is like one-sided echo S-BFD is like demand mode But … works for IP multihop, “loop” only on intended target and preserves minimal communication between end points S-BFD is like demand mode But … no per session state on egress, no bootstrapping, and allows one-to-many (many initiators to one reflector session) S-BFD is like ping/traceroute But … comes w/ great performance and scalability of BFD as result of still using fixed BFD header, and supports multiple transports

S-BFD Alert Discriminator Same discriminator allocated as reflection point in multiple network nodes, called Alert Discrim Your_discr=<alert discrim> can solicit response from those network nodes S-BFD Path Tracing Example Multihop S-BFD detects failure … Send S-BFD packets with your_discr=<alert discrim>, with incrementing TTL Record source IP address from received responses. Using anything else may traverse ECMP differently! (Alert Discrim + Diag) can indicate various hints

S-BFD Drafts draft-akiya-bfd-seamless-base-02 draft-akiya-bfd-seamless-ip-00 draft-akiya-bfd-seamless-sr-00 draft-akiya-bfd-seamless-alert-discrim-00

Major Changes in Base Versions -00 -> -01 In addition, reflector BFD session SHOULD transmit response BFD control packet on the same interface on which it received the packet from initiator. -01-> -02 New single UDP destination port for S-BFD Separate discriminator pool MAY be implemented Initiator state machine (Down/Up/AdminDown)

Next Steps Add more contents for security aspect in base Spoofed packets can cause loops, D bit to fix? Clarifications on authentications on S-BFD Polish up IP/SR/AlertDiscrim documents Would like WG review Request for WG adoption [near future]

Thank you! Questions/Comments?

Backup Slide (in case we need to discuss with topology) 1.1.1.1 1.1.1.2 1.1.1.3 A B C 1.1.1.5 1.1.1.6 D E F 1.1.1.4 G H I 1.1.1.7 1.1.1.8 1.1.1.9