<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
<!ENTITY RFC2119 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml">
<!ENTITY RFC4206 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4206.xml">
<!ENTITY RFC5150 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5150.xml">
<!ENTITY RFC5151 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5151.xml">
<!ENTITY RFC5440 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5440.xml">
<!ENTITY RFC5441 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5441.xml">
<!ENTITY RFC5541 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5541.xml">
<!ENTITY RFC5376 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.5376.xml">
<!ENTITY RFC8174 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8174.xml">
<!ENTITY RFC8231 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8231.xml">
<!ENTITY RFC8281 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8281.xml">
<!ENTITY RFC8283 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8283.xml">
<!ENTITY RFC8355 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8355.xml">
<!ENTITY RFC8402 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8402.xml">
<!ENTITY RFC4364 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4364.xml">
<!ENTITY RFC7432 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7432.xml">
<!ENTITY RFC3985 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.3985.xml">
<!ENTITY RFC7665 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7665.xml">
<!ENTITY RFC8279 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8279.xml">
<!ENTITY RFC8986 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8986.xml">
<!ENTITY RFC9168 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9168.xml">
<!ENTITY RFC8821 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8821.xml">
<!ENTITY RFC4655 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4655.xml">
<!ENTITY RFC7399 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7399.xml">
<!ENTITY RFC8253 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8253.xml">
<!ENTITY RFC7491 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7491.xml">
<!ENTITY RFC9256 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9256.xml">
<!ENTITY RFC9012 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9012.xml">
<!ENTITY RFC8300 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8300.xml">

<!ENTITY I-D.chen-pce-bier SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.chen-pce-bier.xml">
<!ENTITY RFC8664 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8664.xml">
<!ENTITY RFC8751 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8751.xml">
<!ENTITY RFC8754 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8754.xml">
<!ENTITY RFC7025 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.7025.xml">
<!ENTITY RFC9087 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9087.xml">
<!ENTITY RFC9262 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9262.xml">
<!ENTITY RFC9491 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9491.xml">
<!ENTITY RFC9522 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9522.xml">
<!ENTITY RFC9552 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9552.xml">
<!ENTITY RFC8955 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8955.xml">
<!ENTITY RFC4456 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.4456.xml">
<!ENTITY RFC8408 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.8408.xml">

<!ENTITY I-D.li-pce-controlled-id-space SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.li-pce-controlled-id-space.xml">
<!ENTITY I-D.ietf-pce-stateful-interdomain SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-stateful-interdomain.xml">
<!ENTITY RFC9050 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9050.xml">
<!ENTITY I-D.ietf-pce-pcep-extension-pce-controller-sr SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-pcep-extension-pce-controller-sr.xml">
<!ENTITY I-D.cbrt-pce-stateful-local-protection SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.cbrt-pce-stateful-local-protection.xml">
<!ENTITY I-D.ietf-pce-segment-routing-ipv6 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-segment-routing-ipv6.xml">


<!ENTITY I-D.ietf-spring-sr-service-programming SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-spring-sr-service-programming.xml">



<!ENTITY I-D.ietf-pce-segment-routing-policy-cp SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-segment-routing-policy-cp.xml">
<!ENTITY I-D.ietf-spring-segment-routing-policy SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-spring-segment-routing-policy.xml">
<!ENTITY I-D.ietf-idr-segment-routing-te-policy SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-idr-segment-routing-te-policy.xml">
<!ENTITY I-D.ietf-pce-binding-label-sid  SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-binding-label-sid.xml">
<!ENTITY I-D.chen-pce-pcep-extension-pce-controller-bier  SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.chen-pce-pcep-extension-pce-controller-bier.xml">
<!ENTITY I-D.ietf-pce-pcep-extension-native-ip  SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-pce-pcep-extension-native-ip.xml">
<!ENTITY I-D.dhody-pce-pcep-extension-pce-controller-srv6  SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.dhody-pce-pcep-extension-pce-controller-srv6.xml">
<!ENTITY I-D.ietf-mpls-seamless-mpls  SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-seamless-mpls.xml">





<!ENTITY RFC1195  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.1195.xml">
<!ENTITY RFC2328  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.2328.xml">
<!ENTITY RFC5340  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.5340.xml">

<!ENTITY RFC8735  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8735.xml">


<!ENTITY RFC3209  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.3209.xml">
<!ENTITY RFC5036  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.5036.xml">
<!ENTITY RFC9262  SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.9262.xml">

]>
<rfc submissionType="IETF" docName="draft-ietf-teas-pcecc-use-cases-18" category="info" ipr="trust200902"><?rfc compact="yes"?>
	<?rfc text-list-symbols="oo*+-"?>
	<?rfc subcompact="no"?>
	<?rfc sortrefs="yes"?>
	<?rfc symrefs="yes"?>
	<?rfc strict="yes"?>
	<?rfc toc="yes"?>
	<front>
	<title abbrev="PCECC">Use Cases for a PCE as a Central Controller (PCECC)</title>



    <author fullname="Zhenbin (Robin) Li" initials="Z." surname="Li">
      <organization>Huawei Technologies</organization>
      <address>
        <postal>
          <street>Huawei Bld., No.156 Beiqing Rd.</street>
          <city>Beijing</city>
          <region></region>
          <code>100095</code>
          <country>China</country>
        </postal>
        <email>lizhenbin@huawei.com</email>
      </address>
    </author>



    <author fullname="Dhruv Dhody" initials="D."  surname="Dhody">
   <organization>Huawei Technologies</organization>
      <address>
        <postal>
          <street></street>
          <city></city>
          <region></region>
          <country>India</country>
        </postal>
        <email>dhruv.ietf@gmail.com</email>
      </address>
    </author>
    <author initials="Q"
            surname="Zhao"
            fullname="Quintin Zhao">
      <organization>Etheric Networks</organization>
      <address>
        <postal>
          <street>1009 S CLAREMONT ST</street>
          <city>SAN MATEO</city>
          <region>CA</region>
          <code>94402</code>
          <country>USA</country>
        </postal>
        <email>qzhao@ethericnetworks.com</email>
      </address>
    </author>
    <author fullname="King He" initials="K."  surname="He">
   <organization>Tencent Holdings Ltd.</organization>
      <address>
        <postal>
          <street></street>
          <city>Shenzhen</city>
          <region></region>
          <country>China</country>
        </postal>
        <email>kinghe@tencent.com</email>
      </address>
    </author>
    <author fullname="Boris Khasanov" initials="B." surname="Khasanov">
      <organization>Yandex LLC</organization>
      <address>
        <postal>
          <street>Ulitsa Lva Tolstogo 16</street>
          <city>Moscow</city>
          <region></region>
          <code></code>
          <country>Russia</country>
        </postal>
        <email>bhassanov@yahoo.com</email>
      </address>
    </author>
    <!--<author fullname="Luyuan Fang" initials="L."  surname="Fang">
   <organization>Expedia, Inc.</organization>
      <address>
        <postal>
          <street></street>
          <city></city>
          <region></region>
          <country>USA</country>
        </postal>
        <email>luyuanf@gmail.com</email>
      </address>
    </author>

    <author initials="C"
            surname="Zhou"
            fullname="Chao Zhou">
      <organization>HPE</organization>
      <address>
        <postal>
          <street></street>
          <city></city>
          <region></region>
          <code></code>
          <country></country>
        </postal>
        <email>chaozhou_us@yahoo.com</email>
      </address>
    </author>

    <author fullname="Boris Zhang" initials="B."  surname="Zhang">
   <organization>Telus Communications</organization>
      <address>
        <postal>
          <street></street>
          <city></city>
          <region></region>
          <country></country>
        </postal>
        <email>Boris.zhang@telus.com</email>
      </address>
    </author>

    <author fullname="Artem Rachitskiy" initials="A."  surname="Rachitskiy">
   <organization>Mobile TeleSystems JLLC</organization>
      <address>
        <postal>
          <street>Nezavisimosti ave., 95</street>
          <city>Minsk</city>
          <code>220043</code>
          <region></region>
          <country>Belarus</country>
        </postal>
        <email>arachitskiy@mts.by</email>
      </address>
    </author>

    <author fullname="Anton Gulida" initials="A."  surname="Gulida">
   <organization>LLC "Lifetech"</organization>
      <address>
        <postal>
          <street>Krasnoarmeyskaya str., 24</street>
          <city>Minsk</city>
          <code>220030</code>
          <region></region>
          <country>Belarus</country>
        </postal>
        <email>anton.gulida@life.com.by</email>
      </address>
    </author>  -->


	<date/>
	<workgroup>TEAS Working Group</workgroup>
	<abstract>
   <t>The PCE is a core component of
    a Software-Defined Networking (SDN) system. It can be used to compute optimal paths for network traffic and update existing paths to reflect
   changes in the network or traffic demands. PCE was developed to
   derive traffic-engineered paths in MPLS networks,
   which are supplied to the head end of the paths using the Path
   Computation Element Communication Protocol (PCEP).</t>

   <t>SDN has much broader applicability than signaled MPLS traffic-engineered
   (TE) networks, and the PCE may be used to determine paths in a range
   of use cases including static LSPs, Segment Routing (SR), Service Function
   Chaining (SFC), and most forms of a routed or switched network. It
   is, therefore, reasonable to consider PCEP as a control protocol for
   use in these environments to allow the PCE to be fully enabled as a
   central controller.</t>

   <t>A PCE as a Central Controller (PCECC) can simplify the processing of
   a distributed control plane by blending it with elements of SDN
   without necessarily completely replacing it. This document describes
   general considerations for PCECC deployment and examines its
   applicability and benefits, as well as its challenges and
   limitations, through a number of use cases.
   PCEP extensions which are required for the PCECC use cases are
   covered in separate documents.</t>

   <!--<t>This is a living document to catalog the use cases for PCECC. There is currently no intention to publish this work as an RFC. [Update: Chairs are evaluating if the document should be published instead.]</t>-->

	</abstract>
  <!--<note title="Requirements Language">

<t>
   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
   "OPTIONAL" in this document are to be interpreted as described in BCP
   14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they appear in all
   capitals, as shown here.</t>
</note>-->
	</front>

	<middle>
	<section title="Introduction" anchor="sect-1">
<t>The PCE <xref target="RFC4655"/> was developed to offload
   the path computation function from routers in an MPLS traffic-engineered (TE) network.  It can compute optimal paths for traffic
   across a network and can also update the paths to reflect changes in
   the network or traffic demands. The role and function of
   PCE have grown to cover several other uses (such as GMPLS
   <xref target="RFC7025"/> or Multicast),
   and to allow delegated stateful control <xref target="RFC8231"/> and PCE-initiated
   use of network resources <xref target="RFC8281"/>.</t>

   <t>According to <xref target="RFC7399"/>, Software-Defined Networking (SDN) refers to a
   separation between the control elements and the forwarding components
   so that software running in a centralized system, called a
   controller, can act to program the devices in the network to behave
   in specific ways.  A required element in an SDN architecture is a
   component that plans how the network resources will be used and how
   the devices will be programmed.  It is possible to view this
   component as performing specific computations to place traffic flows
   within the network given knowledge of the availability of the network
   resources, how other forwarding devices are programmed, and the way
   that other flows are routed.  This is the function and purpose of a
   PCE, and the way that a PCE integrates into a wider network control
   system (including an SDN system) is presented in <xref target="RFC7491"/>.</t>

<t><xref target="RFC8283"/> introduces the architecture for the PCE as a central
   controller as an extension to the architecture described in <xref target="RFC4655"/>
   and assumes the continued use of PCEP as the protocol used between
   the PCE and PCC.  <xref target="RFC8283"/> further examines the motivations and
   applicability of PCEP as a Southbound Interface (SBI) and introduces
   the implications for the protocol. </t>

    <!--<t>
   An Architecture for Use of PCE and PCEP  <xref target="RFC5440"/> in a Network with Central
   Control <xref target="RFC8283"/> describes a
   SDN architecture where the Path Computation Element (PCE) determines
   the paths for variety of different usecases, with PCEP as a general southbound
   communication protocol with all the nodes along the path.</t>-->

   <t><xref target="RFC9050"/> introduces the procedures and
   extensions for PCEP to support the PCECC architecture <xref target="RFC8283"/>.</t>

	<t>
   This document describes the various use cases for the PCECC architecture.</t>

    <!--<t>This is a living document to catalog the use cases for PCECC. There is currently no intention to publish this work as an RFC. [Update: Chairs are evaluating if the document should be published instead.]</t>-->

	</section>

	<section title="Terminology" anchor="sect-2">
    <t>
   The following terminology is used in this document.

	<list style="hanging" hangIndent="0">

	  <t hangText="BGP-LS:">
	Border Gateway Protocol - Link State <xref target="RFC9552"/>.
	</t>

	  <t hangText="LSP:">
	Label Switched Path.
	</t>

  <t hangText="IGP:">
	Interior Gateway Protocol. In the document, we assume either Open Shortest Path First (OSPF) <xref target="RFC2328"/><xref target="RFC5340"/> or Intermediate System
  to Intermediate System (IS-IS) <xref target="RFC1195"/> as IGP.
	</t>

	<t hangText="PCC:">
	Path Computation Client. As per <xref target="RFC4655"/>, any client application requesting a
	path computation to be performed by a Path Computation Element.
	</t>

	<t hangText="PCE:">
	Path Computation Element. As per <xref target="RFC4655"/>, an entity (component, application,
	or network node) that is capable of computing a network path or
      route based on a network graph and applying computational
      constraints.
	</t>

  <t hangText="PCECC:">
  PCE as a Central Controller. Extension of PCE to support SDN functions as per <xref target="RFC8283"/>.
  </t>

    <t hangText="PST:">
  Path Setup Type <xref target="RFC8408"/>.
  </t>

	<t hangText="RR:">
	Route Reflector <xref target='RFC4456'/>.
	</t>

	<t hangText="SID:">
	Segment Identifier <xref target='RFC8402'/>.
	</t>

	<t hangText="SR:">
	Segment Routing <xref target='RFC8402'/>.
	</t>

		<t hangText="SRGB:">
	Segment Routing Global Block <xref target='RFC8402'/>.
	</t>

		<t hangText="SRLB:">
	Segment Routing Local Block <xref target='RFC8402'/>.
	</t>

	<t hangText="TE:">
	Traffic Engineering <xref target='RFC9522'/>.
	</t>

	</list></t>

	</section>
  <section title="Use Cases">
  <t><xref target="RFC8283"/> describes various use cases for PCECC such as:
  <list style="symbols">
    <t>Use of PCECC to set up Static TE LSPs. The PCEP extension for this use case is in <xref target="RFC9050"/>.</t>
    <t>Use of PCECC in Segment Routing <xref target="RFC8402"/>.</t>
    <t>Use of PCECC to set up Multicast Point-to-Multipoint (P2MP) LSP.</t>
    <t>Use of PCECC to set up Service Function Chaining (SFC) <xref target="RFC7665"/>.</t>
    <t>Use of PCECC in Optical Networks.</t>
  </list>
  </t>
  <t><xref target="sect-3"/> describes the general case of PCECC being in charge of
 	   managing MPLS label space which is a prerequisite for further use cases.
 	   Further, various use cases (SR, Multicast etc) are described in the following sections to showcase scenarios that can benefit from the use of PCECC.
 </t>

<t>It is interesting to note that some of the use cases listed can also be supported via BGP instead of PCEP. However, within the scope of this document, the focus is on the use of PCEP.</t>


	<section title="PCECC for Label Management" anchor="sect-3">
    <t>As per <xref target="RFC8283"/>, in some cases, the PCE-based controller can take responsibility for
   managing some part of the MPLS label space for each of the routers
   that it controls, and it may take wider responsibility for
   partitioning the label space for each router and allocating different
   parts for different uses, communicating the ranges to the router
   using PCEP.</t>

   <t><xref target="RFC9050"/> describes a mode
   where LSPs are provisioned as explicit label instructions at each hop
   on the end-to-end path.  Each router along the path must be told what
   label forwarding instructions to program and what resources to
   reserve.  The controller uses PCEP to communicate with each router
   along the path of the end-to-end LSP.  For this to work, the
   PCE-based controller will take responsibility for managing some part of
   the MPLS label space for each of the routers that it controls.
   An extension to PCEP could be done to allow a PCC to
   inform the PCE of such a label space to control. (See <xref target="I-D.li-pce-controlled-id-space"/> for a possible PCEP extension to support
   the advertisement of the MPLS label space to the PCE to control.)</t>

   <t><xref target="RFC8664"/> specifies extensions to PCEP that
   allow a stateful PCE to compute, update or initiate SR-TE paths.
   <xref target="I-D.ietf-pce-pcep-extension-pce-controller-sr"/> describes the
   mechanism for PCECC to allocate and provision the node/prefix/
   adjacency label (Segment Routing Identifier (SID)) via PCEP.  To make such an allocation PCE needs to
   be aware of the label space from the Segment Routing Global Block (SRGB)
   or Segment Routing Local Block (SRLB)
   <xref target="RFC8402"/> of the node that it controls.  A
   mechanism for a PCC to inform the PCE of such a label space to
   control is needed within the PCEP.  The full SRGB/SRLB of a node could be
   learned via existing IGP or BGP-LS <xref target="RFC9552"/> mechanisms.</t>

   <t>Further, there have been proposals for a global label range in MPLS, the PCECC
    architecture could be used as a means to learn the label space of nodes, and could also be used to
	determine and provision the global label range.</t>

	<!--<t>
   This use case is based on network configuration illustrated using
   the following figure:</t>-->

	<figure title="PCECC for MPLS Label Management" anchor="fig_label"><artwork><![CDATA[
+------------------------------+    +------------------------------+
|         PCE DOMAIN 1         |    |         PCE DOMAIN 2         |
|          +--------+          |    |          +--------+          |
|          |        |          |    |          |        |          |
|          | PCECC1 |  ---------PCEP---------- | PCECC2 |          |
|          |        |          |    |          |        |          |
|          |        |          |    |          |        |          |
|          +--------+          |    |          +--------+          |
|         ^          ^         |    |         ^          ^         |
|        /            \  PCEP  |    |  PCEP  /            \        |
|       V              V       |    |       V              V       |
| +--------+        +--------+ |    | +--------+        +--------+ |
| |NODE 11 |        | NODE 1n| |    | |NODE 21 |        | NODE 2n| |
| |        | ...... |        | |    | |        | ...... |        | |
| | PCECC  |        |  PCECC | |    | | PCECC  |        |PCECC   | |
| |Enabled |        | Enabled|      | |Enabled |        |Enabled | |
| +--------+        +--------+ |    | +--------+        +--------+ |
|                              |    |                              |
+------------------------------+    +------------------------------+

]]></artwork>
	</figure>
	<t><list style="symbols"><t>As shown in <xref target="fig_label"/>, PCC will advertise the PCECC capability to the PCE central
      controller (PCECC) <xref target="RFC9050"/>.</t>

	<t>The PCECC could also learn the label range set aside by the PCC (via <xref target="I-D.li-pce-controlled-id-space"/>). </t>
  <t>Optionally, the PCECC could determine the shared MPLS global label range for the network.
  <list style="symbols">
	<t>In the case that the shared global label range needs to be
      negotiated across multiple domains, the central controllers of
      these domains will also need to negotiate a common global
      label range across domains.</t>

	<t>The PCECC will need to set the shared global label
      range to all PCC nodes in the network.</t>
    </list></t>

	</list>
	</t>
  <t>As per <xref target="RFC9050"/>, PCECC could also rely on the PCC to make label allocations initially and use PCEP to distribute it to where it is needed.</t>

	</section>

	<section title="PCECC and Segment Routing" anchor="sect-4">
    <t>Segment Routing (SR) <xref target="RFC8402"/> leverages the source routing paradigm.  Using
   SR, a source node steers a packet through a path without relying on
   hop-by-hop signalling protocols such as LDP <xref target="RFC5036"/> or RSVP-TE <xref target="RFC3209"/>.  Each path is
   specified as an ordered list of instructions called "segments".  Each
   segment is an instruction to route the packet to a specific place in
   the network, or to perform a specific service on the packet.  A
   database of segments can be distributed
   through the network using a intra-domain routing protocol (such as IS-IS or
   OSPF) or an inter-domain protocol (BGP), or by any other means.  PCEP could also be one of other protocols.</t>

   <t><xref target="RFC8664"/> specifies the
   SR-specific PCEP extension for SR-MPLS. PCECC may further use PCEP protocol
   for SR SIDs (Segment Identifiers)
   distribution to the SR nodes (PCC) with some benefits. If the
   PCECC allocates and maintains the SIDs in the network for the nodes and adjacencies;
   and further distributes them to the SR nodes directly via the
   PCEP session then it is more advantageous over the configurations on
   each SR node and flooding them via IGP, especially in an SDN environment. </t>


   <!--<t>
   For the centralized network, the performance achieved through
   distributed system can not be easy matched if all of the forwarding
   paths are computed, downloaded and maintained by the centralized
   controller.  The performance can be improved by supporting part of
   the forwarding path in the PCECC network through the segment routing
   mechanism except that node segment IDs and adjacency segment IDs for
   all the network are allocated dynamically and propagated through the
   centralized controller instead of using the IGP extensions.</t>-->

	<t>
   When the PCECC is used for the distribution of the Node-SID
   and Adj-SID for SR-MPLS, the Node-SID is allocated from the
   SRGB of the node.  For the allocation of Adj-SID, the
   allocation is from the SRLB of the node as described in <xref target="I-D.ietf-pce-pcep-extension-pce-controller-sr"/>.</t>

	 <t><xref target="RFC8355"/> identifies various protection and resiliency usecases for SR.
   Path protection lets the ingress node be in charge of the failure
   recovery (used for SR-TE <xref target="RFC8664"/>). Also, protection can be
   performed by the node adjacent to the failed component, commonly
   referred to as local protection techniques or fast-reroute (FRR) techniques.
   In the case of PCECC, the protection paths can be pre-computed
   and set up by the PCE.</t>

	<t>
   The <xref target="fig_sr"/> illustrates the use case where the Node-SID and Adj-SID are allocated by the PCECC for SR-MPLS.</t>

	<figure title="SR Topology" anchor="fig_sr"><artwork><![CDATA[
                       192.0.2.1/32
                       +----------+
                       | R1(1001) |
                       +----------+
                            |
                       +----------+
                       | R2(1002) |  192.0.2.2/32
                       +----------+
                      *   |   *    *
                     *    |   *     *
                    *link1|   *      *
     192.0.2.4/32  *      |   *link2  *  192.0.2.5/32
        +-----------+ 9001|   *     +-----------+
        | R4(1004)  |     |   *     | R5(1005)  |
        +-----------+     |   *     +-----------+
                   *      |   *9003  *   +
                    *     |   *     *    +
                     *    |   *    *     +
                     +-----------+   +-----------+
        192.0.2.3/32 | R3(1003)  |   |R6(1006)   |192.0.2.6/32
                     +-----------+   +-----------+
                          |
                     +-----------+
                     | R8(1008)  |  192.0.2.8/32
                     +-----------+
]]></artwork>
	</figure>
  <section title="PCECC SID Allocation for SR-MPLS" anchor="sect-4.1" >

   <t>Each node (PCC) is allocated a Node-SID by the PCECC. The PCECC
   needs to update the label mapping of each node to all
   the other nodes in the domain.  After receiving the label mapping, each node (PCC) uses the local
   routing information to determine the nexthop and download the label
   forwarding instructions accordingly. The forwarding behaviour and the end result
   are the same as IGP shortest-path SR forwarding based on Node-SID.  Thus, from anywhere in the domain, it enforces the
   ECMP-aware shortest-path forwarding of the packet towards the related
   node.</t>

   <t>For each adjacency in the network, a PCECC can allocate an Adj-SID. The PCECC sends a PCInitiate message to update the label mapping of each adjacency to the
   corresponding nodes in the domain.  Each node (PCC) downloads the
   label forwarding instructions accordingly. The forwarding behaviour and the end result are similar to IGP-based
   Adj-SID allocation and usage in SR.</t>

   <t>These mechanisms are described in <xref target="I-D.ietf-pce-pcep-extension-pce-controller-sr"/>.</t>
  </section>
	<section title="PCECC for SR-MPLS Best Effort (BE) Path" anchor="sect-4.2"><t>
   In this use case, the PCECC needs to allocate the
   Node-SID (without calculating the explicit
   path for the SR path).  The ingress router of the forwarding path needs
   to encapsulate the destination Node-SID on top of the packet.
   All the intermediate nodes will forward the packet based on the
   destination Node-SID.  It is similar to the LDP LSP.</t>






   <t>R1 may send a packet to R8 simply by pushing an SR label with
   segment {1008} (Node-SID for R8). The path will be based on the routing/nexthop calculation on the routers.</t>



	</section>

		<section title="PCECC for SR-MPLS TE Path" anchor="sect-4.3">


   		<t>SR-TE paths may not follow an IGP shortest path tree (SPT).  Such paths may be chosen by a
   PCECC and provisioned on the ingress node of the SR-TE path.  The SR
   header consists of a list of SIDs (or MPLS labels).  The header has
   all necessary information so that the packets can be guided from the
   ingress node to the egress node of the path. Hence, there is no need
   for any signalling protocol.  For the case where a strict traffic
   engineering path is needed, all the Adj-SID are stacked,
   otherwise, a combination of node-SID or adj-SID can be used for the
   SR-TE paths.</t>

<t>As shown in <xref target="fig-sr-te"/>, R1 may send a packet to R8 by pushing an SR header with segment
   list {1002, 9001, 1008}. Where 1002 and 1008 are the Node-SID of R2 and R8 respectively. 9001 is the Adj-SID for link1. The path should be: R1-R2-link1-R3-R8.</t>

   <t>
    To achieve this, the PCECC first allocates and distributes SIDs as
    described in <xref target="sect-4.1"/>. <xref target="RFC8664"/> describes the
    mechanism for a PCE to
   compute, update, or initiate SR-MPLS TE paths.  </t>

	<figure title="PCECC TE LSP Setup Example" anchor="fig-sr-te"><artwork><![CDATA[
                      192.0.2.1/32
                      +----------+
                      | R1 (1001)|
                      +----------+
                        |       |
                 90011  |       |90012
                 link1  |       |link2
                       +----------+
                       | R2 (1002)|  192.0.2.2/32
                       +----------+
                link3 *   |   *    * link4
               90023 *    |   *     * 90024
                    *link5|   *      *
     192.0.2.4/32  *90025 |   *link6  *  192.0.2.5/32
        +-----------+     |   *90026+-----------+
        | R4 (1004) |     |   *     | R5 (1005) |
        +-----------+     |   *     +-----------+
                   *      |   *             +
            link10  *     |   *     link7   +
                     *    |   *             +
                     +-----------+   +-----------+
        192.0.2.3/32 | R3 (1003) |   |R6 (1006)  |192.0.2.6/32
                     +-----------+   +-----------+
                      |                   |
                      |link8              |
                      |        |----------|link9
                     +-----------+
                     | R8 (1008) |  192.0.2.8/32
                     +-----------+


]]></artwork>
	</figure>
  <t>Refer to <xref target="fig-sr-te"/> for an example of TE topology, where, 100x - are Node-SIDs and 900xx - are Adj-SIDs.
	<list style="symbols">
<t>The SID allocation and distribution are done by the PCECC with all Node-SIDs (100x) and all Adj-SIDs (900xx).</t>
<t>Based on path computation request/delegation or PCE initiation, the PCECC
receives a request with constraints and optimization criteria from a PCC. </t>

<t>PCECC will calculate the optimal path according to the given constraints
   (e.g. bandwidth). </t>

<t> PCECC will provision SR-MPLS TE LSP (path R1-link1-R2-link6-R3-R8) at the ingress node: {90011,1002,90026,1003,1008}</t>
<t>For the end-to-end protection, PCECC can provision the secondary path (R1-link2-R2-link4-R5-R8): {90012,1002,90024,1005,1008}.</t>

</list></t>

  <section title="PCECC for SR Policy" anchor="sect-4.4">

<t><xref target="RFC8402"/> defines Segment Routing architecture, which uses an SR Policy
   to steer packets from a node through an ordered list of segments. The SR Policy could be
   configured on the headend or instantiated by an SR controller.
   The SR architecture does not restrict how the controller programs the
   network. In this case, the focus is on PCEP as the protocol for SR Policy delivery from PCE to PCC. </t>

   <t>An SR Policy architecture is described in <xref target="RFC9256"/>. An SR Policy is a framework that enables the
   instantiation of an ordered list of segments on a node for
   implementing a source routing policy for the steering of traffic for a
   specific purpose (e.g. for a specific SLA) from that node.</t>

   <t>An SR Policy is identified through the tuple &lt;headend, color,
   endpoint&gt;. </t>

  <t><xref target="fig-sr-te"/> is used as an example of PCECC application for SR Policy instantiation for SR-MPLS, where, 100x - are Node-SIDs and 900xx - are Adj-SIDs.</t>

   <t>Let's assume that R1 needs to have two disjoint SR Policies towards R8 based on different bandwidths, the possible paths are:
   <list>
   <t>POL1: {Headend R1, color 100, Endpoint R8; Candidate Path1: Segment List 1: {90011,1002,90023,1004,1003,1008}}</t>
   <t>POL2: {Headend R1, color 200, Endpoint R8; Candidate Path1: Segment List 1: {90012,1002,90024,1005,1006,1008}}</t>
   </list></t>
   <t>Each SR Policy (including candidate path and segment list) will be signalled to a headend (R1) via PCEP  <xref target="I-D.ietf-pce-segment-routing-policy-cp"/> with the addition of an ASSOCIATION object.
   Binding SID (BSID) <xref target="RFC8402"/> can be used for traffic steering of labelled traffic into SR Policy, BSID can be provisioned from PCECC also via PCEP <xref target="I-D.ietf-pce-binding-label-sid"/>.
   For non-labelled traffic steering into the SR Policy POL1 or POL2, a per-destination traffic steering will be used by means of the BGP Color extended community <xref target="RFC9012"/> </t>

   <t> The procedure: <list>
   <t> PCECC allocates Node-SIDs and Adj-SIDs using the mechanism described in <xref target="sect-4.1"/> for all nodes and links. </t>
   <t> PCECC will calculate disjoint paths for POL1 and POL2 and create Segment Lists for them:{90011,1002,90023,1004,1003,1008};{90012,1002,90024,1005,1006,1008}.</t>
   <t> PCECC will form both SR Policies POL1 and POL2.</t>
   <t> PCECC will send both POL1 and POl2 to R1 via PCEP. </t>
   <t> PCECC optionally can allocate BSIDs for the SR Policies.</t>

   <t>The traffic from R1 to R8 which fits to color 100 will be steered to POL1 and follows the path: R1-link1-R2-link3-R4-R3-R8. The traffic from R1 to R8 which fits color 200
   will be steered to POL2 and follows the path: R1-link2-R2-link4-R5-R6-R8. Due to the possibility of having many Segment Lists in the same Candidate Path of each POL1/POL2,
   PCECC could provision more paths towards R8 and traffic will be balanced either as ECMP or as w/ECMP. This is the advantage of SR Policy architecture. </t>
   </list></t>

   <t>Note that an SR Policy can be associated with multiple candidate paths. A candidate path is selected when it is valid and it is determined to be the best path of the SR Policy as described in <xref target="RFC9256"/>.</t>

   </section>
	</section>
	  <section title="PCECC for SRv6" anchor="sect-8">
    <t>As per <xref target="RFC8402"/>, with Segment Routing (SR),
   a node steers a packet through an ordered list of instructions,
   called segments.  Segment Routing
   can be applied to the IPv6 architecture with the Segment Routing
   Header (SRH) <xref target="RFC8754"/>.  A segment is
   encoded as an IPv6 address.  An ordered list of segments is encoded
   as an ordered list of IPv6 addresses in the routing header.  The
   active segment is indicated by the Destination Address of the packet.
   Upon completion of a segment, a pointer in the new routing header is
   incremented and indicates the next segment.</t>

   <t>As per <xref target="RFC8754"/>, an SRv6 Segment is a
   128-bit value.  "SRv6 SID" or simply "SID" are often used as a
   shorter reference for "SRv6 Segment".
   <xref target="RFC8986"/> defines the SRv6 SID as consisting of LOC:FUNCT:ARG.</t>

   <t><xref target="I-D.ietf-pce-segment-routing-ipv6"/> extends
   <xref target="RFC8664"/> to support SR for the IPv6 data plane. Further,
   a PCECC could be extended to support SRv6 SID allocation and distribution.
   An example of how PCEP extensions could be
    extended for SRv6 for PCECC is described in <xref target="I-D.dhody-pce-pcep-extension-pce-controller-srv6"/>.</t>

   <figure title="PCECC for SRv6" anchor="fig_srv6"><artwork>
   <![CDATA[
                       2001:db8::1
                       +----------+
                       | R1       |
                       +----------+
                            |
                       +----------+
                       | R2       |  2001:db8::2
                       +----------+
                      *   |   *    *
                     *    |   *     *
                    *link1|   *      *
     2001:db8::4   *      |   *link2  *  2001:db8::5
        +-----------+     |   *     +-----------+
        | R4        |     |   *     | R5        |
        +-----------+     |   *     +-----------+
                   *      |   *      *   +
                    *     |   *     *    +
                     *    |   *    *     +
                     +-----------+   +-----------+
        2001:db8::3  | R3        |   |R6         |2001:db8::6
                     +-----------+   +-----------+
                          |
                     +-----------+
                     | R8        |  2001:db8::8
                     +-----------+
]]>
</artwork></figure>

  <t>In this case, as shown in <xref target="fig_srv6"/>, PCECC could assign the SRv6 SID (in the form of an IPv6 address) to be used for node and adjacency. Later, the SRv6 path in the form of a list of SRv6 SIDs could be used at the ingress. Some examples -
    <list style="symbols">
      <t>SRv6 SID-List={2001:db8::8} - The best path towards R8</t>
      <t>SRv6 SID-List={2001:db8::5, 2001:db8::8} - The path towards R8 via R5</t>
    </list></t>
    <t>The rest of the procedures and mechanisms remain the same as SR-MPLS.</t>
  </section>
  </section>

<section title="PCECC for Static TE LSP" anchor="sect-5">


   <t>As described in Section 3.1.2 of <xref target="RFC8283"/>, PCECC architecture supports
   the provisioning of static TE LSP.  To achieve this, the
   existing PCEP can be used to communicate between the PCECC and
   nodes along the path to provision explicit label instructions at each hop on the
   end-to-end path.  Each router along the path must be told what label-forwarding instructions to program and what resources to reserve.
   The PCE-based controller keeps a view of the network and determines
   the paths of the end-to-end LSPs, and the controller uses PCEP to
   communicate with each router along the path of the end-to-end LSP.</t>

	<figure title="PCECC TE LSP Setup Example" anchor="fig-te"><artwork><![CDATA[
                       192.0.2.1/32
                      +----------+
                      | R1       |
                      +----------+
                        |       |
                        |link1  |
                        |       |link2
                       +----------+
                       | R2       |  192.0.2.2/32
                       +----------+
                link3 *   |   *    * link4
                     *    |   *     *
                    *link5|   *      *
     192.0.2.4/32  *      |   *link6  *  192.0.2.5/32
        +-----------+     |   *     +-----------+
        | R4        |     |   *     | R5        |
        +-----------+     |   *     +-----------+
                   *      |   *      *       +
            link10  *     |   *     *link7   +
                     *    |   *    *         +
                     +-----------+   +-----------+
        192.0.2.3/32 | R3        |   |R6         |192.0.2.6/32
                     +-----------+   +-----------+
                      |         |
                      |link8    |
                      |         |link9
                     +-----------+
                     | R8        |  192.0.2.8/32
                     +-----------+


]]></artwork>
	</figure>
  <t>Refer to <xref target="fig-te"/> for an example TE topology.
	<list style="symbols">
<t>Based on path computation request/delegation or PCE initiation, the PCECC
receives a request with constraints and optimization criteria. </t>

<t>PCECC will calculate the optimal path according to the given constraints
   (e.g. bandwidth).</t>

<t>PCECC will provision each node along the path and assign incoming and outgoing labels from R1 to R8 with the
   path as "R1-link1-R2-link3-R4-link10-R3-link8-R8":
   <list style="symbols">
   <t>R1: Outgoing label 1001 on link 1</t>
   <t>R2: Incoming label 1001 on link 1</t>
   <t>R2: Outgoing label 2003 on link 3</t>
   <t>R4: Incoming label 2003 on link 3</t>
   <t>R4: Outgoing label 4010 on link 10</t>
   <t>R3: Incoming label 4010 on link 10</t>
   <t>R3: Outgoing label 3008 on link 8</t>
   <t>R8: Incoming label 3008 on link 8</t>
   </list></t>
   <t>This can also be represented as
    {R1, link1, 1001}, {1001, R2, link3, 2003], {2003, R4, link10, 4010}, {4010, R3, link8, 3008}, {3008, R8}.</t>

<t>For the end-to-end protection, PCECC programs each node along the
   path from R1 to R8 with the secondary path: {R1, link2, 1002},
   {1002, R2, link4, 2004], {2004, R5, link7, 5007}, {5007, R3, link9, 3009}, {3009, R8}.</t>

<t>It is also possible to have a bypass path for the local
   protection set up by the PCECC.  For example, the primary path as above, then to protect the node
   R4 locally, PCECC can program the bypass path like this:
   {R2, link5, 2005}, {2005, R3}. By doing
   this, the node R4 is locally protected at R2.</t>
</list></t>
</section>
	<section title="PCECC for Load Balancing (LB)" anchor="sect-lb">
  <t>
   Very often many service providers use TE tunnels for solving issues
   with non-deterministic paths in their networks. One example of such
   applications is the usage of TEs in the mobile backhaul (MBH).
   Consider the topology as shown in <xref target="fig_lb"/> (AGG1...AGGN are Aggregation Routers, Core 1...Core N are Core routers) - </t>

	<figure title="PCECC Load Balancing (LB) Use Case" anchor="fig_lb"><artwork><![CDATA[
                              TE1 -------------->
+---------+    +--------+    +--------+    +--------+    +------+  +---+
| Access  |----| Access |----| AGG 1  |----| AGG N-1|----|Core 1|--|SR1|
| SubNode1|    | Node 1 |    +--------+    +--------+    +------+  +---+
+---------+    +--------+         | |           | ^          |
     |   Access    |    Access    | AGG Ring 1  | |          |
     |  SubRing 1  |    Ring 1    | |           | |          |
+---------+    +--------+    +--------+         | |          |
| Access  |    | Access |    | AGG 2  |         | |          |
| SubNode2|    | Node 2 |    +--------+         | |          |
+---------+    +--------+         | |           | |          |
     |             |              | |           | |          |
     |             |              | +----TE2----|-+          |
+---------+    +--------+    +--------+    +--------+    +------+  +---+
| Access  |    | Access |----| AGG 3  |----| AGG N  |----|Core N|--|SRn|
| SubNodeN|----| Node N |    +--------+    +--------+    +------+  +---+
+---------+    +--------+
]]></artwork>
	</figure>
	<t>
   This MBH architecture uses L2 access rings and sub-rings. L3 starts at
   the aggregation layer. For the sake of simplicity, the figure shows only one access
   sub-ring. The access ring and aggregation ring are connected
   by Nx10GE interfaces. The aggregation domain runs its own IGP. There are
   two Egress routers (AGG N-1, AGG N) that are connected to the Core
   domain (Core 1...Core N) via L2 interfaces. Core also has connections to service routers,
   RSVP-TE or SR-TE is used for MPLS transport inside the ring. There could be
   at least 2 tunnels (one way) from each AGG router to egress AGG
   routers. There are also many L2 access rings connected to AGG routers.</t>

	<t>
   Service deployment is made by means of Layer 2 Virtual Private Networks (L2VPNs) (Virtual Private LAN Services (VPLS)), Layer 3 Virtual Private Networks (L3VPNs) or Ethernet VPNs (EVPNs).
   Those services use MPLS TE (or SR-TE) as transport towards egress AGG routers.
   TE tunnels could be used as transport towards service routers in
   case of seamless MPLS (<xref target="I-D.ietf-mpls-seamless-mpls"/>) based architecture.</t>

   <t>Load balancing between TE tunnels involves distributing network traffic across multiple TE tunnels to optimize the use of available network resources, enhance performance, and ensure reliability. Some common techniques include Equal-Cost Multi-Path (ECMP) and Unequal-Cost Multi-Path (UCMP) based on the bandwidth of the TE tunnels.</t>

  <t>There is a need to solve the following tasks:
  <list style="symbols">

	<t>Perform automatic load-balance amongst TE tunnels according to current
       traffic load.</t>
	<t>TE bandwidth (BW) management: Provide guaranteed BW for specific
       services: High-Speed Data Service (HSI)), IPTV, etc., and provide time-based BW reservation (BW on demand (BoD)) for other services.</t>
  <t>Simplify the development of TE tunnels by automation without any manual intervention.</t>

	<t>Provide flexibility for Service Router placement (anywhere
       in the network by the creation of  transport LSPs to them).</t>
  </list></t>
	<t>In this section, the focus is on load balancing (LB) tasks. LB task
   could be solved by means of PCECC in the following way:
	<list style="symbols">
    <t>Application or network service or operator can ask the SDN
       controller (PCECC) for LSP-based load balancing between AGG X and AGG N/AGG N-1
       (egress AGG routers that have connections to the core).
	   Each of these will have associated constraints (i.e. bandwidth, inclusion or exclusion specific links
       or nodes, number of paths, objective function (OF), need for disjoint LSP paths etc.);</t>

	<t>PCECC could calculate multiple (say N) LSPs according to given constraints,
       the calculation is based on results of Objective Function (OF) <xref target="RFC5541"/>, constraints, endpoints, same or different
       bandwidth (BW), different links (in case of disjoint paths) and other
       constraints.</t>

	<t>Depending on the given LSP Path setup type (PST), PCECC will download
    instructions to the PCC. At this stage, it is assumed the PCECC is aware
    of the label space it controls and SID allocation and
    distribution is already done in the case of SR.</t>

	<t>PCECC will send PCInitiate message <xref target="RFC8281"/> towards ingress AGG X router(PCC) for each of N LSPs
       and receive PCRpt message <xref target="RFC8231"/> back from
       PCCs. If PST is PCECC-SR, the PCECC will include a SID stack as per <xref target="RFC8664"/>.
       If PST is PCECC (basic), then the PCECC will assign labels along the calculated path and set up the
   path by sending central controller instructions in a PCEP message to each node along the path of the
   LSP as per <xref target="RFC9050"/> and then
       send PCUpd message to the ingress AGG X router with
       information about new LSP. AGG X(PCC) will respond with PCRpt
       with LSP status.</t>

		<t>AGG X as an ingress router now has N LSPs towards AGG N and AGG N-1
       which are available for installation to the router's forwarding table and load-balance traffic
       between them. Traffic distribution between those LSPs depends on
       the particular realization of the hash-function on that router.</t>

	<t>Since PCECC is aware of TEDB (TE state) and LSP-DB, it  can manage and
       prevent possible over-subscriptions and limit the number of available load-balance
       states. Via PCECC mechanism the control can take quick actions into the network by directly provisioning the central control instructions.</t>

	</list>
	</t>


	</section>

	<section title="PCECC and Inter-AS TE" anchor="sect-5.1">
    <t>
   There are various signalling options for establishing Inter-AS TE LSP:
   contiguous TE LSP <xref target="RFC5151"/>, stitched TE LSP <xref target="RFC5150"/>,
   and nested TE LSP <xref target="RFC4206"/>.</t>

	<t>
   Requirements for PCE-based Inter-AS setup <xref target="RFC5376"/> describe the approach
   and PCEP functionality that is needed for establishing Inter-AS TE LSPs.</t>

	<t>
   <xref target="RFC5376"/> also gives Inter- and Intra-AS PCE Reference Model (as shown in <xref target="fig_short"/>) that is
   provided below in shortened form for the sake of simplicity.</t>

	<figure title="Shortened form of Inter- and Intra-AS PCE Reference Model" anchor="fig_short"><artwork><![CDATA[
           Inter-AS       Inter-AS
     PCC <-->PCE1<--------->PCE2
      ::      ::             ::
      ::      ::             ::
      R1----ASBR1====ASBR3---R3---ASBR5
      |   AS1 |        |    PCC     |
      |       |        |    AS2     |
      R2----ASBR2====ASBR4---R4---ASBR6
      ::                     ::
      ::                     ::
   Intra-AS               Intra-AS
      PCE3                   PCE4


]]></artwork>
	</figure>

  <t>The PCECC belonging to the different domains can cooperate to set up inter-AS TE LSP. The stateful H-PCE <xref target="RFC8751"/> mechanism could also be used to establish a per-domain PCECC
    LSP first. These could be stitched together to form inter-AS TE LSP as described in <xref target="I-D.ietf-pce-stateful-interdomain"/>.</t>
	<t>
   For the sake of simplicity, here the focus is on a simplified Inter-AS case when both AS1 and
   AS2 belong to the same service provider administration. In that case, Inter
   and Intra-AS PCEs could be combined in one single PCE if such combined PCE
   performance is enough to handle the load.  The PCE will require
   interfaces (PCEP and BGP-LS) to both domains. PCECC redundancy
   mechanisms are described in <xref target="RFC8283"/>. Thus routers (PCCs) in AS1 and AS2
   can send PCEP messages towards the same PCECC. In <xref target="fig_inter_as_pce"/>, PCECC maintains a BGP-LS session with route reflectors (RRs) in each AS. This allows the RRs to redistribute routes to other BGP routers (clients) without requiring a full mesh. The RRs act as BGP-LS Propagator and PCECC act as a BGP-LS Consumer <xref target="RFC9552"/>.</t>

	<figure title="Particular case of Inter-AS PCE" anchor="fig_inter_as_pce"><artwork><![CDATA[
             +----BGP-LS------+ +------BGP-LS-----+
             |                | |                 |
      +-PCEP-|----++-+-------PCECC-----PCEP--++-+-|-------+
    +-:------|----::-:-+                  +--::-:-|-------:---+
    | :      |    :: : |                  |  :: : |       :   |
    | :     RR1   :: : |                  |  :: : RR2     :   |
    | v           v: : |      LSP1        |  :: v         v   |
    | R1---------ASBR1=======================ASBR3--------R3  |
    | |            v : |                  |  :v            |  |
    | +----------ASBR2=======================ASBR4---------+  |
    | |   Region 1   : |                  |  : Region 1    |  |
    |----------------:-|                  |--:-------------|--|
    | |              v |       LSP2       |  v             |  |
    | +----------ASBR5=======================ASBR6---------+  |
    |     Region 2     |                  |       Region 2    |
    +------------------+ <--------------> +-------------------+
        MPLS Domain 1          Inter-AS         MPLS Domain 2
    <=======AS1=======>                    <========AS2=======>


]]></artwork>
	</figure>
	<t>
   In the case of the PCECC Inter-AS TE scenario (as shown in <xref target="fig_inter_as_pce"/>) where the service provider
   controls both domains (AS1 and AS2), each of them has its own IGP and MPLS
   transport. There is a need to set up Inter-AS LSPs for transporting different
   services on top of them (Voice, L3VPN etc.). Inter-AS links with different
   capacities exist in several regions. The task is not only to provision
   those Inter-AS LSPs with given constraints but also to calculate the path
   and pre-setup the backup Inter-AS LSPs that will be used if the primary LSP fails.</t>

	<t>
   As per <xref target="fig_inter_as_pce"/>,  LSP1 from R1 to R3 goes via ASBR1
   and ASBR3, and it is the primary Inter-AS LSP. R1-R3 LSP2 that goes via
   ASBR5 and ASBR6 are the backup ones. In addition, there could also be a bypass LSP
   setup to protect against ASBR or inter-AS link failures.</t>

	<t>
   After the addition of PCECC functionality to PCE (SDN controller), the PCECC-based Inter-AS TE model should follow the PCECC use case for TE LSP
   including requirements of <xref target="RFC5376"/> with the following details:

	<list style="symbols">
	<t>Since PCECC needs to know the topology of both domains AS1 and AS2, PCECC
       can utilize the BGP-LS peering with BGP routers (or RRs) in both domains.</t>

	<t>PCECC needs to establish PCEP connectivity with all routers in both
       domains (see also section 4 in <xref target="RFC5376"/>).</t>

	<t>After the operator's application or service orchestrator creates a request
       for tunnel creation of a specific service, PCECC will receive that request via NBI
       (NBI type is implementation dependent, it could be NETCONF/Yang, REST etc.). Then
       PCECC will calculate the optimal path based on Objective Function (OF) and given
       constraints (i.e. path setup type, bandwidth etc.), including those from <xref target="RFC5376"/>:
       priority, AS sequence, preferred ASBR, disjoint paths, and protection type. In this
       step, we will have two paths: R1-ASBR1-ASBR3-R3, R1-ASBR5-ASBR6-R3</t>

	<t>PCECC will use central control download
    instructions to the PCC based on the PST. At this stage, it is assumed the PCECC is aware
    of the label space it controls and in the case of SR the SID allocation and
    distribution is already done.</t>

  <t>PCECC will send PCInitiate message <xref target="RFC8281"/> towards the ingress router R1 (PCC) in AS1
       and receive the PCRpt message <xref target="RFC8231"/> back from it.
       <list style="symbols">
	   <t>If the PST is SR-MPLS, the PCECC will include the SID stack as per <xref target="RFC8664"/>.
       Optionally, a binding SID or BGP Peering-SID <xref target="RFC9087"/> can also be included on the AS boundary. The backup SID stack can be installed at ingress R1 but more importantly,
       each node along the SR path could also do the local protection just based on the top segment.</t>
       <t>If the PST is PCECC, the PCECC will assign labels along the calculated paths (R1-ASBR1-ASBR3-R3, R1-ASBR5-ASBR6-R3) and sets up the
   path by sending central controller instructions in PCEP message to each node along the path of the
   LSPs as per <xref target="RFC9050"/>. After these steps, the PCECC will send a PCUpd message to the ingress R1 router with information about new LSPs and R1 will respond by PCRpt with LSP(s) status.</t></list></t>

    <!--<t>AGG X as ingress router now have N LSPs towards AGG N and AGG N-1
       which are available for installing to router's forwarding table and load-balance a traffic
       between them. Traffic distribution between those LSPs depends on
       particular realization of hash-function on that router.</t>-->

	<t>After that step, R1 now have primary and backup TEs (LSP1 and LSP2) towards
       R3. It is up to router implementation how to make switchover to backup LSP2 if LSP1 fails.</t>

  </list></t>
	</section>



	<section title="PCECC for Multicast LSPs" anchor="sect-6"><t>
   The multicast LSPs can be set up via the RSVP-TE P2MP or
   Multipoint LDP (mLDP) protocols.  The setup of these LSPs may require
   manual configurations and complex signalling when the
   protection is considered.  By using the PCECC solution, the multicast
   LSP can be computed and set up through a centralized controller which
   has the full picture of the topology and bandwidth usage for each
   link.  It not only reduces the complex configurations comparing the
   distributed RSVP-TE P2MP or mLDP signalling, but also it can
   compute the disjoint primary path and secondary P2MP path efficiently.</t>

	<section title="PCECC for P2MP/MP2MP LSPs' Setup" anchor="sect-6.1">
    <!--<t>
   With the capability of global label and local label existing at the
   same time in the PCECC network, PCECC will use compute, setup and
   maintain the P2MP and MP2MP lsp using the local label range for each
   network nodes.</t>-->
   <t>It is assumed the PCECC is aware of the label space it controls for
    all nodes and makes allocations accordingly.</t>

	<figure title="Using PCECC for P2MP/MP2MP LSPs' Setup" anchor="fig_p2mp"><artwork><![CDATA[
                       +----------+
                       |    R1    | Root node of the multicast LSP
                       +----------+
                           |9000 (L0)
                       +----------+
        Transit Node   |    R2    |
        branch         +----------+
                       *  |   *  *
                  9001*   |   *   *9002
                  L1 *    |   *    *L2
        +-----------+     |   *     +-----------+
        |    R4     |     |   *     |    R5     | Transit Nodes
        +-----------+     |   *     +-----------+
                   *      |   *      *     +
                9003*     |   *     *      +9004
                L3   *    |   *    *       +L4
                     +-----------+  +-----------+
                     |    R3     |  |    R6     | Leaf Node
                     +-----------+  +-----------+
                      9005| L5
                     +-----------+
                     |    R8     | Leaf Node
                     +-----------+

]]></artwork>
	</figure>
  <t>The P2MP examples (based on <xref target="fig_p2mp"/>) are explained here, where R1 is the root and the router R8 and R6 are the leaves.
  <list style="symbols">
<t>Based on the P2MP path computation request/delegation or PCE initiation, the PCECC
receives the request with constraints and optimization criteria. </t>

<t>PCECC will calculate the optimal P2MP path according to given constraints
   (i.e.bandwidth).</t>





<t>PCECC will provision each node along the path and assign incoming and outgoing labels from R1 to {R6, R8} with the
   path as "R1-L0-R2-L2-R5-L4-R6" and "R1-L0-R2-L1-R4-L3-R3-L5-R8":
      <list style="symbols">
   <t>R1: Outgoing label 9000 on link L0</t>
   <t>R2: Incoming label 9000 on link L0</t>
   <t>R2: Outgoing label 9001 on link L1 (*)</t>
   <t>R2: Outgoing label 9002 on link L2 (*)</t>
   <t>R5: Incoming label 9002 on link L2</t>
   <t>R5: Outgoing label 9004 on link L4</t>
   <t>R6: Incoming label 9004 on link L4</t>
   <t>R4: Incoming label 9001 on link L1</t>
   <t>R4: Outgoing label 9003 on link L3</t>
   <t>R3: Incoming label 9003 on link L3</t>
   <t>R3: Outgoing label 9005 on link L5</t>
   <t>R8: Incoming label 9005 on link L5</t>
   </list></t>

   <t>This can also be represented as
   : {R1, 6000}, {6000, R2, {9001,9002}}, {9001, R4, 9003}, {9002, R5, 9004} {9003, R3, 9005}, {9004, R6}, {9005, R8}. The main difference (*)
   is in the branch node instruction at R2 where two copies of a packet are sent towards R4 and R5 with 9001 and 9002 labels respectively.</t>





  </list></t>
  <t>The packet forwarding involves -
  <list>
	<t>
   Step 1: R1 sends a packet to R2 simply by pushing the label of
   9000 to the packet.</t>

	<t>
   Step 2: When R2 receives the packet with label 9000, it will
   forward it to R4 by swapping label 9000 to 9001 and at the same time,
   it will replicate the packet and swap the label 9000 to 9002 and forward it to R5.</t>

	<t>
   Step 3: When R4 receives the packet with label 9001, it will
   forward it to R3 by swapping 9001 to 9003. When R5 receives the
   packet with the label 9002, it will forward it to R6 by swapping 9002 to
   9004.</t>

	<t>
   Step 4: When R3 receives the packet with label 9003, it will
   forward it to R8 by swapping it to 9005 and when R5 receives the
   packet with label 9002, it will be swapped to 9004 and sent to R6.</t>

   <t>Step 5: When R8 receives the packet with label 9005, it will pop the label; when R6 receives the packet with label 9004, it will pop the label.</t>
  </list></t>
	</section>

	<section title="PCECC for the  End-to-End Protection of P2MP/MP2MP LSPs" anchor="sect-6.2"><t>
   In this section, the end-to-end managed path protection
   service as well as the local protection with the operation management in the
   PCECC network for the P2MP/MP2MP LSP.</t>

	<t>
   An end-to-end protection principle can be
   applied for computing backup P2MP or MP2MP LSPs.  During the computation
   of the primary multicast trees, PCECC could also take the computation of a secondary tree into
   consideration.  A PCECC could compute the
   primary and backup P2MP (or MP2MP) LSPs together or sequentially.</t>

	<figure title="PCECC for the End-to-End Protection of the P2MP/MP2MP LSPs" anchor="fig_p2mp-res"><artwork><![CDATA[
                            +----+  +----+
           Root node of LSP | R1 |--| R11|
                            +----+  +----+
                              /         +
                           10/           +20
                            /             +
                    +----------+        +-----------+
     Transit Node   |    R2    |        |     R3    |
                    +----------+        +-----------+
                      |        \       +         +
                      |         \     +          +
                    10|        10\   +20       20+
                      |           \ +            +
                      |            \             +
                      |           + \            +
                    +-----------+      +-----------+ Leaf Nodes
                    |    R4     |      |    R5     | (Downstream LSR)
                    +-----------+      +-----------+
]]></artwork>
	</figure>
	<t>
   In <xref target="fig_p2mp-res"/>, when the PCECC setups the primary multicast tree
   from the root node R1 to the leaves, which is R1-&gt;R2-&gt;{R4, R5}, at the
   same time, it can setup the backup tree, which is R1-&gt;R11-&gt;R3-&gt;{R4, R5}.
   Both of them (primary forwarding tree and secondary forwarding
   tree) will be downloaded to each router along the primary path and
   the secondary path.  The traffic will be forwarded through the
   R1-&gt;R2-&gt;{R4, R5} path normally,  but when a node in the
   primary tree fails (say R2) the root node R1 will switch the flow to the
   backup tree, which is R1-&gt;R11-&gt;R3-&gt;{R4, R5}. By using the PCECC a
   path computation, label downloading and finally forwarding can be done
   without complex signalling used in the P2MP RSVP-TE or mLDP.</t>

	</section>

	<section title="PCECC for the Local Protection of the P2MP/MP2MP LSPs" anchor="sect-6.3"><t>
   In this section, we describe the local protection service in the PCECC
   network for the P2MP/MP2MP LSP.</t>

	<t>
   While the PCECC sets up the primary multicast tree, it can also build
   the backup LSP between the Point of Local Repair (PLR), the protected node and Merge Points (MPs) (the downstream
   nodes of the protected node).  In the cases where the amount of
   downstream nodes is huge, this mechanism can avoid unnecessary
   packet duplication on PLR and protect the network from traffic
   congestion risk.</t>

	<figure title="PCECC for the Local Protection of the P2MP/MP2MP LSPs" anchor="fig_p2mp-loc"><artwork><![CDATA[
                            +------------+
                            |     R1     | Root Node
                            +------------+
                                   .
                                   .
                                   .
                            +------------+ Point of Local Repair/
                            |     R10     | Switchover Point
                            +------------+ (Upstream LSR)
                              /         +
                           10/           +20
                            /             +
                    +----------+        +-----------+
     Protected Node |    R20   |        |     R30   |
                    +----------+        +-----------+
                      |        \       +         +
                      |         \     +          +
                    10|        10\   +20       20+
                      |           \ +            +
                      |            \             +
                      |           + \            +
                    +-----------+      +-----------+ Merge Point
                    |    R40    |      |    R50    | (Downstream LSR)
                    +-----------+      +-----------+
                          .                  .
                          .                  .
]]></artwork>
	</figure>
	<t>
   In <xref target="fig_p2mp-loc"/>, when the PCECC setups the primary multicast path
   around the PLR node R10 to protect node R20, which is R10-&gt;R20-&gt;{R40,
   R50}, at the same time, it can set up the backup path R10-&gt;R30-&gt;{R40,
   R50}.  Both the primary forwarding path and secondary bypass
   forwarding path will be downloaded to each router along the primary
   path and the secondary bypass path.  The traffic will be forwarded through
   the R10-&gt;R20-&gt;{R40, R50} path normally and when there is a node
   failure for node R20,  the PLR node R10 will switch the flow to
   the backup path, which is R10-&gt;R30-&gt;{R40, R50}.  By using the PCECC,
   path computation, label downloading and finally forwarding can be done
   without complex signalling used in the P2MP RSVP-TE or mLDP.</t>

	</section>

	</section>







	<section title="PCECC for Traffic Classification" anchor="sect-7">
   <t>As described in <xref target="RFC8283"/>, traffic classification is an important part of traffic engineering.
   It is the process of looking into a packet to determine how it should
   be treated while it is forwarded through the network.  It applies in
   many scenarios including the following:
   <list><t>MPLS traffic engineering (where it
   determines what traffic is forwarded into which LSPs),</t>
   <t>Segment Routing (where it is used to select which set of forwarding
   instructions (SIDs) to add to a packet),</t>
   <t>SFC (where it indicates how a packet should be forwarded across
   which service function path ).</t></list></t>
   <t>In conjunction with traffic engineering, traffic classification is an
   important enabler for load balancing. Traffic classification is closely linked to the computational
   elements of planning for the network functions because it
   determines how traffic is balanced and distributed through the
   network.  Therefore, selecting what traffic classification mechanism should be
   performed by a router is an important part of the work done by a
   PCECC.</t>

   <t>The description of traffic flows by the combination of multiple Flow Specification components and their dissemination as traffic flow specifications (Flow Specifications) is described for BGP in <xref target="RFC8955"/>. When a PCECC is used to initiate tunnels (such as TE-LSPs or SR paths) using PCEP, it is important that the head end of the tunnels understands what traffic to place on each tunnel. <xref target="RFC9168"/> specifies a set of extensions to PCEP to support the dissemination of Flow Specification components where the instructions are passed from the PCECC to the routers using PCEP.</t>

    <t>
   Along with traffic classification, there are a few more questions that need to be considered after path setup:

	<list style="symbols"><t>how to use it</t>

	<t>Whether it is a virtual link</t>

	<t>Whether to advertise it in the IGP as a virtual link</t>

	<t>What bits of this information to signal to the tail end</t>

	</list>
	</t>
  <t>These are out of the scope of this document.</t>


	</section>

  <section title="PCECC for SFC" anchor="sect-9" >
    <t>Service Function Chaining (SFC) is described in <xref target="RFC7665"/>.  It is the process of directing
   traffic in a network such that it passes through specific hardware
   devices or virtual machines (known as service function nodes) that
   can perform particular desired functions on the traffic.  The set of
   functions to be performed and the order in which they are to be
   performed is known as a service function chain.  The chain is
   enhanced with the locations at which the service functions are to be
   performed to derive a Service Function Path (SFP).  Each packet is
   marked as belonging to a specific SFP, and that marking lets each
   successive service function node know which functions to perform and
   to which service function node to send the packet next. To operate an SFC network, the service function nodes must be
   configured to understand the packet markings, and the edge nodes must
   be told how to mark packets entering the network.  Additionally, it
   may be necessary to establish tunnels between service function nodes
   to carry the traffic. Planning an SFC network requires load balancing between service
   function nodes and traffic engineering across the network that
   connects them.  As per <xref target="RFC8283"/>, these are operations that can be performed by a
   PCE-based controller, and that controller can use PCEP to program the
   network and install the service function chains and any required
   tunnels.</t>
   <t>A possible mechanism could add support for SFC-based central control instructions. PCECC will be able to instruct each SFF along the SFP.
    <list style="symbols">
      <t>Service Path Identifier (SPI): Uniquely identifies an SFP. </t>
      <t>Service Index (SI): Provides location within the SFP.</t>
      <t>SFC Proxy handling</t>
    </list>
   </t>
   <t>PCECC can play the role of setting the traffic classification rules (as per <xref target="sect-7"/>) at the classifier to impose the Network Service Header (NSH) <xref target="RFC8300"/> as well as downloading the forwarding instructions to each SFF along the way so that they could process the NSH and forward accordingly. Including instructions for the service classifier that handles the context header, metadata etc. This metadata/context is shared amongst SFs and classifiers, between SFs, and between external systems (such as PCECC) and SFs. As described in <xref target="RFC7665"/>, the SFC encapsulation enables the sharing of metadata/context information along the SFP.</t>

   <t>It is also possible to support SFC with SR in conjunction with or without NSH such as <xref target="RFC9491"/> and <xref target="I-D.ietf-spring-sr-service-programming"/>. PCECC technique can also be used for service function-related segments and SR service policies. </t>

  </section>
  <section title="PCECC for Native IP" anchor="sect-10" >
    <t><xref target="RFC8735"/> describes the scenarios and simulation results for
   the "Centrally Control Dynamic Routing (CCDR)" solution, which
   integrates the advantage of using distributed protocols (IGP/BGP) and the power of a centralized control technology (PCE/SDN), providing traffic engineering for native IP networks. <xref target="RFC8821"/> defines the framework for CCDR traffic engineering
   within a Native IP network, using multiple BGP sessions and a PCE as the centralized controller. It requires the PCECC to send the instructions to the
   PCCs, to build multiple BGP sessions, distribute different prefixes
   on the established BGP sessions and assign the different paths to the
   BGP next hops. PCEP protocol is used to transfer
   the key parameters between PCE and the underlying network
   devices (PCC) using the PCECC technique. The central control instructions from PCECC to PCC will identify which prefix should be advertised on which BGP session. There are PCEP extensions defined in <xref target="I-D.ietf-pce-pcep-extension-native-ip"/> for it.</t>

   <figure title="PCECC for Native IP" anchor="fig_native_ip"><artwork>
   <![CDATA[
                                  +------+
                       +----------+ PCECC+-------+
                       |          +------+       |
                       |                         |
                  PCEP | BGP Session 1(lo11/lo21)| PCEP
                       +-------------------------+
                       |                         |
                       | BGP Session 2(lo12/lo22)|
                       +-------------------------+
   PF12                |                         |                 PF22
   PF11                |                         |                 PF21
   +---+         +-----+-----+             +-----+-----+           +---+
   |SW1+---------+(lo11/lo12)+-------------+(lo21/lo22)+-----------+SW2|
   +---+         |    R1     +-------------+    R2     |           +---+
                 +-----------+             +-----------+

   ]]>
</artwork></figure>

<t>In the case, as shown in <xref target="fig_native_ip"/>, PCECC will instruct both R1 and R2 via PCEP how to form BGP sessions with each other and which IP prefixes
need to be advertised via which BGP session.</t>

  </section>

  <section title="PCECC for BIER" anchor="sect-11">
   <t>Bit Index Explicit Replication (BIER) <xref target="RFC8279"/> defines an
   architecture where all intended multicast receivers are encoded as a
   bitmask in the multicast packet header within different
   encapsulations.  A router that
   receives such a packet will forward that packet based on the bit
   position in the packet header towards the receiver(s) following a
   precomputed tree for each of the bits in the packet.  Each receiver
   is represented by a unique bit in the bitmask.</t>

   <t>BIER-TE <xref target="RFC9262"/> shares architecture and
   packet formats with BIER.  BIER-TE forwards
   and replicates packets based on a BitString in the packet header, but
   every BitPosition of the BitString of a BIER-TE packet indicates one
   or more adjacencies. BIER-TE paths can be derived from a PCE and used at the ingress ( a possible mechanism is described in <xref target="I-D.chen-pce-bier"/>).</t>

   <t>PCECC mechanism could be used for the allocation of bits for the BIER router for BIER as well as for the adjacencies for BIER-TE. PCECC-based controllers
   	can use PCEP to instruct the BIER-capable routers on the meaning of the bits as well as other fields needed for BIER encapsulation. The PCECC could be used to program the BIER router with various parameters used in the BIER encapsulation such as BIER subdomain-ID, BFR-ID, BIER Encapsulation etc. for both node and adjacency.</t>
<t> A possible way for the PCECC usage and PCEP extension is described in <xref target="I-D.chen-pce-pcep-extension-pce-controller-bier"/>.</t>

  </section>

</section>


	<section title="IANA Considerations" anchor="sect-12"><t>
   This document does not require any action from IANA.</t>

	</section>

	<section title="Security Considerations" anchor="sect-13">
    <t><xref target="RFC8283"/> describes how the security considerations for a PCE-based controller are a little different from those for any other PCE system.  PCECC operations rely heavily on the use and security of PCEP, so
   due consideration should be given to the security features discussed in
   <xref target="RFC5440"/> and the additional mechanisms described in <xref target="RFC8253"/>. It further lists the vulnerability of a
   central controller architecture, such as a central point of failure,
   denial of service, and a focus on interception and modification of
   messages sent to individual Network Elements (NEs).</t>
   <t>As per <xref target="RFC9050"/>, the use of
   Transport Layer Security (TLS) in PCEP is recommended, as it provides support for
   peer authentication, message encryption, and integrity.  It further
   provides mechanisms for associating peer identities with different
   levels of access and/or authoritativeness via an attribute in X.509
   certificates or a local policy with a specific accept-list of X.509
   certificates.  This can be used to check the authority for the PCECC
   operations.</t>
   <t>It is expected that each new document that is produced for a specific
   use case will also include considerations of the security impacts of
   the use of a PCE-based central controller on the network type and
   services being managed.</t>

	</section>

	<section title="Acknowledgments" anchor="sect-14"><t>
   Thanks to Adrian Farrel, Aijun Wang, Robert Tao,
   Changjiang Yan, Tieying Huang, Sergio Belotti, Dieter Beller, Andrey Elperin
   and Evgeniy Brodskiy for their useful comments and suggestions.</t>
   <t>Thanks to Mach Chen and Carlos Pignataro for the RTGDIR review. Thanks to Derrell Piper for the SECDIR review. Thanks to Sue Hares for GENART review.</t>
   <t>Thanks to Vishnu Pavan Beeram for being the document shepherd and Jim Guichard for being the responsible AD.</t>
   <t>Thanks to Roman Danyliw for the IESG review comments.</t>

	</section>

	</middle>

	<back>

	<references title="Normative References">
	<!--&RFC2119;-->
	&RFC5440;
  <!--&RFC8174;-->
  &RFC7665;
    &RFC8231;
    &RFC8281;
	&RFC8283;
  &RFC8253;

  &RFC8402;
  </references>
	<references title="Informative References">
  &RFC1195;

  &RFC2328;
  &RFC5340;
  &RFC3209;
  &RFC5036;

  &RFC3985;
  &RFC4206;
  &RFC4364;
  &RFC4456;
  &RFC4655;
  &RFC5150;
  &RFC5151;
  &RFC5541;
  &RFC5376;
  &RFC7025;
  &RFC7399;
  &RFC7432;
  &RFC7491;


  &RFC8279;

  &RFC8300;
  &RFC8355;
  &RFC8408;



  &RFC8664;
  &RFC8735;
  &RFC8751;
  &RFC8754;
  &RFC8821;
  &RFC8955;
  &RFC8986;
  &RFC9050;
  &RFC9168;
  &RFC9256;
  &RFC9012;
  &RFC9087;
  &RFC9262;
  &RFC9491;
  &RFC9522;
  &RFC9552;




  &I-D.ietf-pce-pcep-extension-pce-controller-sr;
  &I-D.li-pce-controlled-id-space;
  &I-D.ietf-pce-stateful-interdomain;
  &I-D.cbrt-pce-stateful-local-protection;
  &I-D.ietf-pce-segment-routing-ipv6;
  &I-D.ietf-mpls-seamless-mpls;



  &I-D.chen-pce-bier;
  &I-D.ietf-spring-sr-service-programming;


  &I-D.ietf-pce-segment-routing-policy-cp;

  &I-D.ietf-pce-binding-label-sid;
  &I-D.chen-pce-pcep-extension-pce-controller-bier;
  &I-D.ietf-pce-pcep-extension-native-ip;
  &I-D.dhody-pce-pcep-extension-pce-controller-srv6;





	    <reference anchor="MAP-REDUCE" target="http://leeky.me/publications/mapreduce_p2p.pdf">
        <front>
            <title>Parallel Processing Framework on a P2P System Using Map and Reduce Primitives</title>
            <author initials="K" surname="Lee" fullname="Kyungyong Lee">
                <organization />
            </author>
            <author initials="T" surname="Choi" fullname="Tae Woong Choi">
                <organization />
            </author>
            <author initials="A" surname="Ganguly" fullname="Arijit Ganguly">
                <organization />
            </author>
            <author initials="D" surname="Wolinsky" fullname="David I. Wolinsky">
                <organization />
            </author>
            <author initials="P" surname="Boykin" fullname="P.Oscar Boykin">
                <organization />
            </author>
            <author initials="R" surname="Figueiredo" fullname="Renato Figueiredo">
                <organization />
            </author>
            <date month="may" year="2011" />
        </front>
        <seriesInfo name="" value="" />
    </reference>
      <reference anchor="MPLS-DC" target="https://www.slideshare.net/DmitryAfanasiev1/yandex-nag201320131031">
        <front>
            <title>MPLS in DC and inter-DC
              networks: the unified forwarding mechanism for network
              programmability at scale</title>
            <author initials="D" surname="Afanasiev" fullname="Dimitry Afanasiev">
                <organization />
            </author>
            <author initials="D" surname="Ginsburg" fullname="Daniel Ginsburg">
                <organization />
            </author>
            <date month="march" year="2014" />
        </front>
        <seriesInfo name="" value="" />
    </reference>

	</references>
<section title="Other Use Cases of PCECC" anchor="sect-15">
<t>This section lists some more use cases of PCECC that were proposed by operators and discussed within the working group, but are not in active development at the time of publication. They are listed here for future consideration.</t>
<section title="PCECC for Network Migration" anchor="sect-15.1"><t>
   One of the main advantages of the PCECC solution is its backward
   compatibility. The PCE server can function as a
   proxy node of the MPLS network for all the new nodes that no longer support
   the signalling protocols.</t>

  <t>
   As illustrated in the following example, the current network
   could migrate to a total PCECC-controlled network gradually by
   replacing the legacy nodes.  During the migration, the legacy nodes
   still need to  use the existing MPLS protocols signalling such as LDP and
   RSVP-TE, and the new nodes will set up their portion of the forwarding path
   through PCECC directly.  With the PCECC function as the proxy of
   these new nodes, MPLS signalling can populate through the network for both: old and new nodes.</t>

  <t>
   The example described in this section is based on network configurations
   illustrated using <xref target="fig_mig"/>:</t>

  <figure title="PCECC Initiated LSP Setup In the Network Migration" anchor="fig_mig"><artwork><![CDATA[
+------------------------------------------------------------------+
|                         PCE DOMAIN                               |
|    +-----------------------------------------------------+       |
|    |                       PCECC                         |       |
|    +-----------------------------------------------------+       |
|     ^              ^                      ^            ^         |
|     |      PCEP    |                      |   PCEP     |         |
|     V              V                      V            V         |
| +--------+   +--------+   +--------+   +--------+   +--------+   |
| | NODE 1 |   | NODE 2 |   | NODE 3 |   | NODE 4 |   | NODE 5 |   |
| |        |...|        |...|        |...|        |...|        |   |
| | Legacy |if1| Legacy |if2|Legacy  |if3| PCECC  |if4| PCECC  |   |
| |  Node  |   |  Node  |   |Enabled |   |Enabled |   | Enabled|   |
| +--------+   +--------+   +--------+   +--------+   +--------+   |
|                                                                  |
+------------------------------------------------------------------+

]]></artwork>
  </figure>
  <t>
   In this example, there are five nodes for the TE LSP from the head end
   (Node1) to the tail end (Node5). Where Node4 and Node5 are centrally
   controlled and other nodes are legacy nodes.</t>

  <t><list style="symbols"><t>Node1 sends a path request message for the setup of LSP
      with the destination as Node5.</t>

  <t>PCECC sends to Node1 a reply message for LSP setup with the path:
    (Node1, if1),(Node2, if2), (Node3, if3), (Node4, if4), Node5.</t>

  <t>Node1, Node2, and Node3 will set up the LSP to Node5 using the local
     labels as usual. Node 3 with the help of PCECC could proxy the signalling.</t>

  <t>Then the PCECC will program the out-segment of Node3, the in-segment/
      out-segment of Node4, and the in-segment for Node5.</t>

  </list>
  </t>

  </section>

  <section title="PCECC for L3VPN and PWE3" anchor="sect-15.2">
   <t>As described in <xref target="RFC8283"/>, various network services may be offered over a network.  These
   include protection services (including
   Virtual Private Network (VPN) services (such as Layer 3 VPNs
   <xref target="RFC4364"/> or Ethernet VPNs <xref target="RFC7432"/>); or Pseudowires <xref target="RFC3985"/>.
   Delivering services over a network in an optimal way requires
   coordination in the way where network resources are allocated to
   support the services.  A PCE-based central controller can consider
   the whole network and all components of a service at once when
   planning how to deliver the service.  It can then use PCEP to manage
   the network resources and to install the necessary associations
   between those resources.</t>
    <!--<t>
   The existing services using MPLS LSP tunnels based on MPLS signaling
   mechanism such L3VPN, PWE3 and IPv6 can be simplified by using the
   PCECC for label assignments for the L3VPN, PWE3 and
   IPv6 as well.</t>-->

  <t>
   In the case of L3VPN, VPN labels could also be assigned and distributed
   through PCEP among the PE router instead of using the BGP
   protocols.</t>

  <t>
   The example described in this section is based on network configurations
   illustrated using <xref target="fig_l3vpn"/>:</t>

  <figure title="PCECC for L3VPN and PWE3" anchor="fig_l3vpn"><artwork><![CDATA[
            +-------------------------------------------+
            |                   PCE DOMAIN              |
            |    +-----------------------------------+  |
            |    |                PCECC              |  |
            |    +-----------------------------------+  |
            |           ^          ^              ^     |
            |PWE3/L3VPN | PCEP PCEP|LSP PWE3/L3VPN|PCEP |
            |           V          V              V     |
 +--------+ |     +--------+   +--------+   +--------+  |  +--------+
 |  CE    | |     | PE1    |   | NODE x |   | PE2    |  |  |   CE   |
 |        |...... |        |...|        |...|        |.....|        |
 | Legacy | |if1  | PCECC  |if2|PCCEC   |if3| PCECC  |if4  | Legacy |
 |  Node  | |     | Enabled|   |Enabled |   |Enabled |  |  |  Node  |
 +--------+ |     +--------+   +--------+   +--------+  |  +--------+
            |                                           |
            +-------------------------------------------+

]]></artwork>
  </figure>
  <t>
   In the case of PWE3, instead of using the LDP signalling protocols, the
   label and port pairs assigned to each pseudowire can be assigned
   through PCECC among the PE routers and the corresponding forwarding
   entries will be distributed into each PE router through the extended
   PCEP and PCECC mechanism.</t>

  </section>
  <section title="PCECC for Local Protection (RSVP-TE)" anchor="sect-15.3">
    <t><xref target="I-D.cbrt-pce-stateful-local-protection"/> claim that there is a need for the PCE to maintain and associate the local protection paths for the RSVP-TE LSP.
   Local protection requires the setup of a bypass at the PLR.  This
   bypass can be PCC-initiated and delegated, or PCE-initiated.  In
   either case, the PLR needs to maintain a PCEP session with the PCE. The Bypass LSPs
   need to be mapped to the primary LSP. This could be done locally at the PLR based on a local policy
   but there is a need for a PCE to do the mapping as well to exert greater control. </t>

   <t>This mapping can be done via PCECC procedures where the PCE could instruct the PLR to the mapping and
    identify the primary LSP for which bypass should be used.
    </t>
  </section>
  <section title="Using reliable P2MP TE based multicast delivery for distributed computations (MapReduce-Hadoop)" anchor="sect-15.4">
   <t>
   MapReduce model of distributed computations in computing clusters is
   widely deployed. In <eref target="https://hadoop.apache.org/">Hadoop</eref> 1.0 architecture MapReduce operations on
   big data <!--performs by means of Master-Slave architecture-->in the Hadoop
   Distributed File System (HDFS), where NameNode knows about
   resources of the cluster and where actual data (chunks) for a particular
   task are located (which DataNode). Each chunk of data (64MB or more)
   should have 3 saved copies in different DataNodes based on their
   proximity.</t>

  <t>
   The proximity level currently has a semi-manual allocation and is based on
   Rack IDs (The assumption is that closer data are better because of access
   speed/smaller latency).</t>

  <t>
   JobTracker node is responsible for computation tasks, and scheduling across
   DataNodes and also has Rack-awareness. Currently, transport protocols
   between NameNode/JobTracker and DataNodes are based on IP unicast.
   It has simplicity as an advantage but has numerous drawbacks related to
   its flat approach.</t>

  <t>
   There is a need to go beyond one data centre (DC) for Hadoop cluster creation
   and move towards distributed clusters. In that case, one needs to handle
   performance and latency issues.
   Latency depends on the speed of light in the fibre links and on the latency
   introduced by intermediate devices in between. The latter is
   closely correlated with network device architecture and performance.
   The current performance of NPU-based routers should be enough for creating
   distributed Hadoop clusters with predicted latency. The performance of software-based routers (mainly virtual network functions (VNF)) with additional hardware features such
   as the Data Plane Development Kit (DPDK) is promising but requires additional research and testing.</t>

  <t>
   The main question is how to create a simple but effective architecture for
   a distributed Hadoop cluster.</t>

  <t>
   There is research <xref target="MAP-REDUCE"/> that show
   how usage of the multicast tree could improve the speed of resource or cluster
   members' discovery inside the cluster as well as increased redundancy in
   communications between cluster nodes.</t>

  <t>
   The traditional IP-based multicast may not be appropriate because it
   requires an additional control plane (IGMP, PIM) and a lot of signalling, that
   is not suitable for high-performance computations, that are very sensitive
   to latency.</t>

  <t>
   P2MP TE tunnels are more suitable as a potential solution for the creation
   of multicast-based communications between NameNode as root and DataNodes as leaves inside the
   cluster. These P2MP tunnels could be dynamically created and
   turned down (with no manual intervention). Here, the PCECC comes into play with
    the main objective of creating an optimal topology for each particular request for
   MapReduce computation and creating P2MP tunnels with needed parameters
   such as bandwidth and delay.</t>

  <t>
   This solution will require the use of MPLS label-based forwarding inside the
   cluster. The usage of label-based forwarding inside DC was proposed by Yandex
   <xref target="MPLS-DC"/>. Technically it is already possible because MPLS on switches
   is already supported by some vendors, MPLS also exists on Linux and OVS.</t>

  <t>A possible framework for this task is shown in <xref target="fig_mapred"/>:
  </t>

  <figure title="Using reliable P2MP TE based multicast delivery for distributed computations (MapReduce-Hadoop)" anchor="fig_mapred"><artwork><![CDATA[
                   +--------+
                   |  APP   |
                   +--------+
                        | NBI (REST API,...)
                        |
            PCEP       +----------+  REST API
     +---------+   +---|  PCECC   |----------+
     | Client  |---|---|          |          |
     +---------+   |   +----------+          |
             |     |       | |  |            |
             +-----|---+   |PCEP|            |
          +--------+   |   | |  |            |
          |            |   | |  |            |
          | REST API   |   | |  |            |
          |            |   | |  |            |
+-------------+        |   | |  |           +----------+
| Job Tracker |        |   | |  |           | NameNode |
|             |        |   | |  |           |          |
+-------------+        |   | |  |           +----------+
        +------------------+ |  +-----------+
        |              |     |              |
    |---+-----P2MP TE--+-----|-----------|  |
+----------+       +----------+      +----------+
| DataNode1|       | DataNode2|      | DataNodeN|
|TaskTraker|       |TaskTraker| .... |TaskTraker|
+----------+       +----------+      +----------+
]]></artwork>
  </figure>
  <t>
   Communication between JobTracker, NameNode
   and PCECC can be done via REST API directly or via
   cluster manager such as Mesos.</t>

  <t>
   Phase 1: Distributed cluster resources discovery
   During this phase, JobTracker and NameNode should identify and find available
   DataNodes according to computing requests from the application (APP).
   NameNode should query PCECC about available DataNodes, NameNode may
   provide additional constraints to PCECC such as topological proximity,
   and redundancy level.</t>

  <t>
   PCECC should analyze the topology of the distributed cluster and perform
   constraint-based path calculation from the client towards the most
   suitable NameNodes. PCECC should reply to NameNode with the list of the most
   suitable DataNodes and their resource capabilities. The topology discovery
   mechanism for PCECC will be added later to that framework.</t>

  <t>
   Phase 2: PCECC should create P2MP LSP from the client towards those
   DataNodes by means of PCEP messages following the previously calculated path.</t>


  <t>Phase 3. NameNode should send this information to the client, and PCECC should inform
  the client about the optimal P2MP path towards DataNodes via PCEP message.
  </t>


  <t>
   Phase 4. The Client sends data blocks to those DataNodes for writing via
   the created P2MP tunnel.</t>

  <t>
   When this task is finished, the P2MP tunnel could be turned down.</t>

  </section>
</section>
    <section title="Contributor Addresses" toc="default">
      <t><figure align="left" alt="" height="" suppress-title="false" title=""
          width="">
          <artwork align="left" alt="" height="" name="" type="" width=""
                   xml:space="preserve"><![CDATA[

   Luyuan Fang
   United States of America

   Email: luyuanf@gmail.com

   Chao Zhou
   HPE

   Email: chaozhou_us@yahoo.com

   Boris Zhang
   Amazon

   Email: zhangyud@amazon.com

   Artsiom Rachytski
   Belarus

   Email: arachyts@gmail.com

   Anton Gulida
   EPAM Systems, Inc.
   Belarus

   Email: Anton_Hulida@epam.com
                           ]]></artwork>
        </figure></t>
    </section>
  </back>

	</rfc>

