Path Computation Element Communication Protocol (PCEP) Procedures and Extensions for Using the PCE as a Central Controller (PCECC) of LSPs Huawei Technologies
Huawei Bld., No.156 Beiqing Rd. Beijing 100095 China lizhenbin@huawei.com
Huawei Technologies
Huawei Bld., No.156 Beiqing Rd. Beijing 100095 China pengshuping@huawei.com
RtBrick Inc
N-17L, 18th Cross Rd, HSR Layout Bangalore Karnataka 560102 India mahend.ietf@gmail.com
Etheric Networks
1009 S Claremont St. San Mateo CA 94402 United States of America qzhao@ethericnetworks.com
HPE
chaozhou_us@yahoo.com
Routing PCE Working Group SDN CCI Central Control The Path Computation Element (PCE) is a core component of Software-Defined Networking (SDN) systems. A PCE as a Central Controller (PCECC) can simplify the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. Thus, the Label Switched Path (LSP) can be calculated/set up/initiated and the label-forwarding entries can also be downloaded through a centralized PCE server to each network device along the path while leveraging the existing PCE technologies as much as possible. This document specifies the procedures and Path Computation Element Communication Protocol (PCEP) extensions for using the PCE as the central controller for provisioning labels along the path of the static LSP.
Status of This Memo This is an Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at .
Copyright Notice Copyright (c) 2021 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents () in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
Table of Contents
  • .  Introduction
  • .  Terminology
    • .  Requirements Language
  • .  Basic PCECC Mode
  • .  PCEP Requirements
  • .  Procedures for Using the PCE as a Central Controller (PCECC)
    • .  Stateful PCE Model
    • .  New LSP Functions
    • .  New PCEP Object
    • .  PCECC Capability Advertisement
    • .  LSP Operations
      • .  PCE-Initiated PCECC LSP
      • .  PCC-Initiated PCECC LSP
      • .  Central Controller Instructions
        • .  Label Download CCI
        • .  Label Cleanup CCI
      • .  PCECC LSP Update
      • .  Re-delegation and Cleanup
      • .  Synchronization of Central Controller Instructions
      • .  PCECC LSP State Report
      • .  PCC-Based Allocations
  • .  PCEP Messages
    • .  The PCInitiate Message
    • .  The PCRpt Message
  • .  PCEP Objects
    • .  OPEN Object
      • .  PCECC Capability Sub-TLV
    • .  PATH-SETUP-TYPE TLV
    • .  CCI Object
      • .  Address TLVs
  • .  Security Considerations
    • .  Malicious PCE
    • .  Malicious PCC
  • .  Manageability Considerations
    • .  Control of Function and Policy
    • .  Information and Data Models
    • .  Liveness Detection and Monitoring
    • .  Verify Correct Operations
    • .  Requirements on Other Protocols
    • .  Impact on Network Operations
  • . IANA Considerations
    • .  PATH-SETUP-TYPE-CAPABILITY Sub-TLV Type Indicators
    • .  PCECC-CAPABILITY Sub-TLV's Flag Field
    • .  PCEP Path Setup Type Registry
    • .  PCEP Object
    • .  CCI Object Flag Field
    • .  PCEP-Error Object
  • . References
    • .  Normative References
    • .  Informative References
  • Acknowledgments
  • Contributors
  • Authors' Addresses
Introduction The Path Computation Element (PCE) was developed to offload the path computation function from routers in an MPLS traffic-engineered (TE) network. It can compute optimal paths for traffic across a network and can also update the paths to reflect changes in the network or traffic demands. Since then, the role and function of the PCE have grown to cover a number of other uses (such as GMPLS ) and to allow delegated control and PCE-initiated use of network resources . According to , Software-Defined Networking (SDN) refers to a separation between the control elements and the forwarding components so that software running in a centralized system, called a controller, can act to program the devices in the network to behave in specific ways. A required element in an SDN architecture is a component that plans how the network resources will be used and how the devices will be programmed. It is possible to view this component as performing specific computations to place traffic flows within the network given knowledge of the availability of network resources, how other forwarding devices are programmed, and the way that other flows are routed. This is the function and purpose of a PCE, and the way that a PCE integrates into a wider network control system (including an SDN system) is presented in . In early PCE implementations, where the PCE was used to derive paths for MPLS Label Switched Paths (LSPs), paths were requested by network elements (known as Path Computation Clients (PCCs)), and the results of the path computations were supplied to network elements using the Path Computation Element Communication Protocol (PCEP) . This protocol was later extended to allow a PCE to send unsolicited requests to the network for LSP establishment . The PCE was developed to derive paths for MPLS LSPs, which are supplied to the head end of the LSP using the PCEP. But SDN has a broader applicability than signaled MPLS and GMPLS TE networks, and the PCE may be used to determine paths in a range of use cases. PCEP has been proposed as a control protocol for use in these environments to allow the PCE to be fully enabled as a central controller. introduces the architecture for the PCE as a central controller as an extension to the architecture described in and assumes the continued use of PCEP as the protocol used between the PCE and PCC. further examines the motivations and applicability for PCEP as a Southbound Interface (SBI) and introduces the implications for the protocol. describes the use cases for the PCECC architecture. A PCECC can simplify the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. Thus, the LSP can be calculated/set up/initiated and the label-forwarding entries can also be downloaded through a centralized PCE server to each network device along the path while leveraging the existing PCE technologies as much as possible. This document specifies the procedures and PCEP extensions for using the PCE as the central controller for static LSPs, where LSPs can be provisioned as explicit label instructions at each hop on the end-to-end path. Each router along the path must be told what label-forwarding instructions to program and what resources to reserve. The PCE-based controller keeps a view of the network and determines the paths of the end-to-end LSPs, and the controller uses PCEP to communicate with each router along the path of the end-to-end LSP. While this document is focused on the procedures for the static LSPs (referred to as the basic PCECC mode in ), the mechanisms and protocol encodings are specified in such a way that extensions for other use cases are easy to achieve. For example, the extensions for the PCECC for Segment Routing (SR) are specified in and .
Terminology The terminology used in this document is the same as that described in the .
Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.
Basic PCECC Mode In this mode, LSPs are provisioned as explicit label instructions at each hop on the end-to-end path. Each router along the path must be told what label-forwarding instructions to program and what resources to reserve. The controller uses PCEP to communicate with each router along the path of the end-to-end LSP. examines the motivations and applicability for the PCECC and use of PCEP as an SBI. highlights the use of the PCECC for label allocation along the static LSPs, and it simplifies the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. This allows the operator to introduce the advantages of SDN (such as programmability) into the network. Further, describes some of the scenarios where the PCECC technique could be useful. also describes the implications on the protocol when used as an SDN SBI. The operator needs to evaluate the advantages offered by the PCECC against the operational and scalability needs of the PCECC. As per , the PCE-based controller will take responsibility for managing some part of the MPLS label space for each of the routers that it controls and may take wider responsibility for partitioning the label space for each router and allocating different parts for different uses. The PCC MUST NOT make allocations from the label space set aside for the PCE to avoid overlap and collisions of label allocations. It is RECOMMENDED that the PCE makes allocations (from the label space set aside for the PCE) for all nodes along the path. For the purpose of this document, it is assumed that the exclusive label range to be used by a PCE is known and set on both PCEP peers. A future extension could add the capability to advertise this range via a possible PCEP extension as well (see ). The rest of the processing is similar to the existing stateful PCE mechanism. This document also allows a case where the label space is maintained by the PCC and the labels are allocated by it. In this case, the PCE should request the allocation from the PCC, as described in .
PCEP Requirements The following key requirements should be considered when designing the PCECC-based solution:
  1. A PCEP speaker supporting this document needs to have the capability to advertise its PCECC capability to its peers.
  2. A PCEP speaker needs means to identify PCECC-based LSPs in the PCEP messages.
  3. PCEP procedures need to allow for PCC-based label allocations.
  4. PCEP procedures need to provide a means to update (or clean up) label entries downloaded to the PCC.
  5. PCEP procedures need to provide a means to synchronize the labels between the PCE and the PCC via PCEP messages.
Procedures for Using the PCE as a Central Controller (PCECC)
Stateful PCE Model Active stateful PCE is described in . A PCE as a Central Controller (PCECC) reuses the existing active stateful PCE mechanism as much as possible to control LSPs.
New LSP Functions Several new functions are required in PCEP to support the PCECC. This document extends the existing messages to support the new functions required by the PCECC:
PCInitiate:
A PCEP message described in . A PCInitiate message is used to set up a PCE-initiated LSP based on a PCECC mechanism. It is also extended for Central Controller Instructions (CCI) (download or clean up the label-forwarding instructions in the context of this document) on all nodes along the path, as described in .
PCRpt:
A PCEP message described in . A PCRpt message is used to send the PCECC LSP Reports. It is also extended to report the set of CCI (label-forwarding instructions in the context of this document) received from the PCE, as described in . describes the use of a PCRpt message during synchronization.
PCUpd:
A PCEP message described in . A PCUpd message is used to send the PCECC LSP Updates.
The new functions defined in this document are mapped onto the PCEP messages, as shown in . Functions Mapped to the PCEP Messages
Function Message
PCECC Capability advertisement Open
Label entry Add PCInitiate
Label entry Clean up PCInitiate
PCECC-Initiated LSP PCInitiate
PCECC LSP Update PCUpd
PCECC LSP State Report PCRpt
PCECC LSP Delegation PCRpt
PCECC Label Report PCRpt
New PCEP Object This document defines a new PCEP object called CCI () to specify the Central Controller Instructions. In the scope of this document, this is limited to label-forwarding instructions. Future documents can create new CCI object-types for other types of Central Controller Instructions. The CC-ID is the unique identifier for the CCI in PCEP. The PCEP messages are extended in this document to handle the PCECC operations.
PCECC Capability Advertisement During the PCEP initialization phase, PCEP speakers (PCE or PCC) advertise their support of and willingness to use PCEP extensions for the PCECC using these elements in the OPEN message:
  • a new Path Setup Type (PST) () in the PATH-SETUP-TYPE-CAPABILITY TLV to indicate support for PCEP extensions for the PCECC - 2 (Traffic engineering path is set up using PCECC mode)
  • a new PCECC-CAPABILITY sub-TLV () with the L bit set to '1' inside the PATH-SETUP-TYPE-CAPABILITY TLV to indicate a willingness to use PCEP extensions for the PCECC-based Central Controller Instructions for label download
  • the STATEFUL-PCE-CAPABILITY TLV (with the I flag set )
The new PST is to be listed in the PATH-SETUP-TYPE-CAPABILITY TLV by all PCEP speakers that support the PCEP extensions for the PCECC in this document. The new PCECC-CAPABILITY sub-TLV is included in the PATH-SETUP-TYPE-CAPABILITY TLV in the OPEN object to indicate a willingness to use the PCEP extensions for the PCECC during the established PCEP session. Using the L bit in this TLV, the PCE shows the intention to function as a PCECC server, and the PCC shows a willingness to act as a PCECC client for label download instructions (see ). If the PCECC-CAPABILITY sub-TLV is advertised and the STATEFUL-PCE-CAPABILITY TLV is not advertised, or is advertised without the I flag set, in the OPEN object, the receiver MUST:
  • send a PCErr message with Error-Type=19 (Invalid Operation) and Error-value=17 (Stateful PCE capability was not advertised) and
  • terminate the session.
If a PCEP speaker receives the PATH-SETUP-TYPE-CAPABILITY TLV with the PCECC PST but without the PCECC-CAPABILITY sub-TLV, it MUST:
  • send a PCErr message with Error-Type=10 (Reception of an invalid object) and Error-value=33 (Missing PCECC Capability sub-TLV) and
  • terminate the PCEP session.
The PCECC-CAPABILITY sub-TLV MUST NOT be used without the corresponding PST being listed in the PATH-SETUP-TYPE-CAPABILITY TLV. If it is present without the corresponding PST listed in the PATH-SETUP-TYPE-CAPABILITY TLV, it MUST be ignored. If one or both speakers (PCE and PCC) have not indicated support and willingness to use the PCEP extensions for the PCECC, the PCEP extensions for the PCECC MUST NOT be used. If a PCECC operation is attempted when both speakers have not agreed in the OPEN messages, the receiver of the message MUST:
  • send a PCErr message with Error-Type=19 (Invalid Operation) and Error-value=16 (Attempted PCECC operations when PCECC capability was not advertised) and
  • terminate the PCEP session.
A legacy PCEP speaker (that does not recognize the PCECC Capability sub-TLV) will ignore the sub-TLV in accordance with and . As per , the legacy PCEP speaker, on receipt of an unsupported PST in a Request Parameter (RP) / Stateful PCE Request Parameter (SRP) object, will:
  • send a PCErr message with Error-Type=21 (Invalid traffic engineering path setup type) and Error-value=1 (Unsupported path setup type) and
  • terminate the PCEP session.
LSP Operations The PCEP messages pertaining to a PCECC MUST include the PATH-SETUP-TYPE TLV in the SRP object with the PST set to '2' to clearly identify that the PCECC LSP is intended.
PCE-Initiated PCECC LSP The LSP instantiation operation is defined in . In order to set up a PCE-initiated LSP based on the PCECC mechanism, a PCE sends a PCInitiate message with the PST set to '2' for the PCECC (see ) to the ingress PCC. The label-forwarding instructions (see ) from the PCECC are sent after the initial PCInitiate and PCRpt message exchange with the ingress PCC, as per (see ). This is done so that the PCEP-specific identifier for the LSP (PLSP-ID) and other LSP identifiers can be obtained from the ingress and can be included in the label-forwarding instruction in the next set of PCInitiate messages along the path, as described below. An LSP-IDENTIFIERS TLV MUST be included for the PCECC LSPs; it uniquely identifies the LSP in the network. Note that the fields in the LSP-IDENTIFIERS TLV are described for the RSVP-signaled LSPs but are applicable to the PCECC LSP as well. The LSP object is included in the CCI (label download ) to identify the PCECC LSP for this instruction. The PLSP-ID is the original identifier used by the ingress PCC, so a transit/egress Label Switching Router (LSR) could have multiple Central Controller Instructions that have the same PLSP-ID. The PLSP-ID in combination with the source (in the LSP-IDENTIFIERS TLV) MUST be unique. The PLSP-ID is included for maintainability reasons to ease debugging. As per , the LSP object could also include the SPEAKER-ENTITY-ID TLV to identify the PCE that initiated these instructions. Also, the CC-ID is unique in each PCEP session, as described in . On receipt of a PCInitiate message for the PCECC LSP, the PCC responds with a PCRpt message with the status set to 'Going-up' and carrying the assigned PLSP-ID (see ). The ingress PCC also sets the D (Delegate) flag (see ) and C (Create) flag (see ) in the LSP object. When the PCE receives this PCRpt message with the PLSP-ID, it assigns labels along the path and sets up the path by sending a PCInitiate message to each node along the path of the LSP, as per the PCECC technique. The CC-ID uniquely identifies the Central Controller Instructions within a PCEP session. Each node along the path (PCC) responds with a PCRpt message to acknowledge the CCI with the PCRpt messages including the CCI and LSP objects. The ingress node would receive one CCI object with the O bit (out-label) set. The transit node(s) would receive two CCI objects with the in-label CCI without the O bit set and the out-label CCI with the O bit set. The egress node would receive one CCI object without the O bit set (see ). A node can determine its role based on the setting of the O bit in the CCI object(s) and the LSP-IDENTIFIERS TLV in the LSP object. The LSP deletion operation for the PCE-initiated PCECC LSP is the same as defined in . The PCE should further perform the label entry cleanup operation, as described in , for the corresponding LSP.
PCE-Initiated PCECC LSP +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | |<--PCInitiate,PLSP-ID=0,PST=2---------| PCECC LSP |PCC +--------+ | | Initiate |egress | | |----PCRpt,PLSP-ID=2,D=1,C=1---------->| PCECC LSP +--------+ | | (GOING-UP) | | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=2----------------| Label | | | | download |--------PCRpt,CC-ID=X,PLSP-ID=2-------------------->| CCI | | | | | |<------PCInitiate,CC-ID=Y1,Y2,PLSP-ID=2-----| Label | | | | download | |-------PCRpt,CC-ID=Y1,Y2,PLSP-ID=2--------->| CCI | | | | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=2-----| Label | | | | download | | |-----PCRpt,CC-ID=Z,PLSP-ID=2--------->| CCI | | | | | | |<---PCUpd,PLSP-ID=2,PST=2,D=1---------| PCECC LSP | | | (UP) | Update | | |----PCRpt,PLSP-ID=2,D=1,C=1---------->| | | | (UP) |
Once the label operations are completed, the PCE MUST send a PCUpd message to the ingress PCC. As per , the PCUpd message is with the D flag set. The PCECC LSPs are considered to be 'up' by default (on receipt of a PCUpd message from the PCE). The ingress could further choose to deploy a data-plane check mechanism and report the status back to the PCE via a PCRpt message to make sure that the correct label instructions are made along the path of the PCECC LSP (and it is ready to carry traffic). The exact mechanism is out of scope of this document. In the case where the label allocations are made by the PCC itself (see ), the PCE could request an allocation to be made by the PCC; then, the PCC would send a PCRpt message with the allocated label encoded in the CC-ID object (as shown in ) in the configuration sequence from the egress towards the ingress along the path.
PCE-Initiated PCECC LSP (PCC Allocation) +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | |<--PCInitiate,PLSP-ID=0,PST=2,--------| PCECC LSP |PCC +--------+ | | Initiate |egress | | |----PCRpt,PLSP-ID=2,D=1,C=1---------->| PCECC LSP +--------+ | | (GOING-UP) | | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=2----------------| Label | | | C=1,O=0 | download |--------PCRpt,CC-ID=X,PLSP-ID=2-------------------->| CCI | | | Label=L1 | | |<------PCInitiate,PLSP-ID=2,----------------| Labels | | | CC-ID=Y1,C=1,O=0 | download | | | CC-ID=Y2,C=0,O=1,L1 | CCI | |-------PCRpt,PLSP-ID=2--------------------->| | | | CC-ID=Y1,O=0,Label=L2 | | | | CC-ID=Y2,O=1 | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=2-----| Label | | | C=0,O=1,L2 | download | | |-----PCRpt,CC-ID=Z,PLSP-ID=2--------->| CCI | | | | | | |<---PCUpd,PLSP-ID=2,PST=2,D=1---------| PCECC LSP | | | (UP) | Update
In this example, it should be noted that the request is made to the egress node with the C bit set in the CCI object to indicate that the label allocation needs to be done by the egress, and the egress responds with the allocated label to the PCE. The PCE further informs the transit PCC without setting the C bit to '1' in the CCI object for the out-label, but the C bit is set to '1' for the in-label, so the transit node makes the label allocation (for the in-label) and reports to the PCE. Similarly, the C bit is unset towards the ingress to complete all the label allocations for the PCECC LSP.
PCC-Initiated PCECC LSP In order to set up an LSP based on the PCECC mechanism where the LSP is configured at the PCC, a PCC MUST delegate the LSP by sending a PCRpt message with the PST set for the PCECC (see ) and D (Delegate) flag (see ) set in the LSP object (see ). When a PCE receives the initial PCRpt message with the D flag and PST set to '2', it SHOULD calculate the path and assign labels along the path in addition to setting up the path by sending a PCInitiate message to each node along the path of the LSP, as per the PCECC technique (see ). The CC-ID uniquely identifies the CCI within a PCEP session. Each PCC further responds with the PCRpt messages, including the CCI and LSP objects. Once the CCI (label operations) are completed, the PCE MUST send the PCUpd message to the ingress PCC. As per , this PCUpd message should include the path information calculated by the PCE. Note that the PCECC LSPs MUST be delegated to a PCE at all times. The LSP deletion operation for the PCECC LSPs is the same as defined in . If the PCE receives a PCRpt message for LSP deletion, then it does label the cleanup operation, as described in , for the corresponding LSP. The basic PCECC LSP setup sequence is as shown in .
PCC-Initiated PCECC LSP +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | |---PCRpt,PLSP-ID=1,PST=2,D=1-------->| PCECC LSP |PCC +--------+ | | |egress | | | | +--------+ | | | | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=1---------------| Label | | | L1,O=0 | download |--------PCRpt,CC-ID=X,PLSP-ID=1------------------->| CCI | | | | | |<------PCInitiate,PLSP-ID=1,---------------| Labels | | | CC-ID=Y1,O=0,L2 | download | | | CC-ID=Y2,O=1,L1 | CCI | |-------PCRpt,CC-ID=Y1,Y2,PLSP-ID=1-------->| | | | | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=1----| Label | | | L2,O=1 | download | | |-----PCRpt,CC-ID=Z,PLSP-ID=1-------->| CCI | | | | | | |<---PCUpd,PLSP-ID=1,PST=2,D=1--------| PCECC LSP | | | | Update | | | |
In the case where the label allocations are made by the PCC itself (see ), the PCE could request an allocation to be made by the PCC; then, the PCC would send a PCRpt message with the allocated label encoded in the CC-ID object, as shown in .
PCC-Initiated PCECC LSP (PCC Allocation) +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | |---PCRpt,PLSP-ID=1,PST=2,D=1-------->| PCECC LSP |PCC +--------+ | | |egress | | | | +--------+ | | | | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=1---------------| Label | | | C=1 | download |--------PCRpt,CC-ID=X,PLSP-ID=1------------------->| CCI | | | Label=L1 | | |<------PCInitiate,PLSP-ID=1,---------------| Labels | | | CC-ID=Y1,C=1 | download | | | CC-ID=Y2,C=0,L1 | CCI | |-------PCRpt,PLSP-ID=1-------------------->| | | | CC-ID=Y1,Label=L2 | | | | CC-ID=Y2 | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=1----| Label | | | C=0,L2 | download | | |-----PCRpt,CC-ID=Z,PLSP-ID=1-------->| CCI | | | | | | |<---PCUpd,PLSP-ID=1,PST=2,D=1--------| PCECC LSP | | | | Update | | | |
In the case where the label allocations are made by the PCC itself (see ), the procedure remains the same, with just an additional constraint on the configuration sequence. The rest of the PCC-initiated PCECC LSP setup operations are the same as those described in .
Central Controller Instructions The new CCI for the label operations in PCEP are done via the PCInitiate message () by defining a new PCEP object for CCI operations. The local label range of each PCC is assumed to be known by both the PCC and the PCE.
Label Download CCI In order to set up an LSP based on the PCECC, the PCE sends a PCInitiate message to each node along the path to download the label instructions, as described in Sections and . The CCI object MUST be included, along with the LSP object in the PCInitiate message. The LSP-IDENTIFIERS TLV MUST be included in the LSP object. The SPEAKER-ENTITY-ID TLV SHOULD be included in the LSP object. If a node (PCC) receives a PCInitiate message that includes a label to download (as part of CCI) that is out of the range set aside for the PCE, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=1 (Label out of range) and MUST include the SRP object to specify the error is for the corresponding label update via a PCInitiate message. If a PCC receives a PCInitiate message but fails to download the label entry, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=2 (Instruction failed) and MUST include the SRP object to specify the error is for the corresponding label update via a PCInitiate message. A new PCEP object for CCI is defined in .
Label Cleanup CCI In order to delete an LSP based on the PCECC, the PCE sends Central Controller Instructions via a PCInitiate message to each node along the path of the LSP to clean up the label-forwarding instruction. If the PCC receives a PCInitiate message but does not recognize the label in the CCI, the PCC MUST generate a PCErr message with Error-Type=19 (Invalid operation) and Error-value=18 (Unknown Label) and MUST include the SRP object to specify the error is for the corresponding label cleanup (via a PCInitiate message). The R flag in the SRP object defined in specifies the deletion of the label entry in the PCInitiate message.
Label Cleanup +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | | | |PCC +--------+ | | |egress | | | | +--------+ | | | | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=2----------------| Label | | | R=1 | cleanup |--------PCRpt,CC-ID=X,PLSP-ID=2-------------------->| CCI | | | R=1 | | |<------PCInitiate,CC-ID=Y1,Y2,PLSP-ID=2-----| Label | | | R=1 | cleanup | |-------PCRpt,CC-ID=Y1,Y2,PLSP-ID=2--------->| CCI | | | R=1 | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=2-----| Label | | | R=1 | cleanup | | |-----PCRpt,CC-ID=Z,PLSP-ID=2--------->| CCI | | | R=1 | | | |<--PCInitiate,PLSP-ID=2,PST=2,R=1-----| PCECC LSP | | | | remove
As per , following the removal of the label-forwarding instruction, the PCC MUST send a PCRpt message. The SRP object in the PCRpt message MUST include the SRP-ID-number from the PCInitiate message that triggered the removal. The R flag in the SRP object MUST be set. In the case where the label allocation is made by the PCC itself (see ), the removal procedure remains the same, adding the sequence constraint.
PCECC LSP Update The update is done as per the make-before-break procedures, i.e., the PCECC first updates new label instructions based on the updated path and then informs the ingress to switch traffic before cleaning up the former instructions. New CC-IDs are used to identify the updated instructions; the identifiers in the LSP object uniquely identify the existing LSP. Once new instructions are downloaded, the PCE further updates the new path at the ingress, which triggers the traffic switch on the updated path. The ingress PCC acknowledges with a PCRpt message, on receipt of the PCRpt message, the PCE does the cleanup operation for the former LSP, as described in .
PCECC LSP Update +-------+ +-------+ |PCC | | PCE | |ingress| +-------+ +------| | | | PCC +-------+ | | transit| | | +------| | | | |PCC +--------+ | | |egress | | | | +--------+ | | | | | | | New Path |<------ PCInitiate,CC-ID=XX,PLSP-ID=1 -------------| for LSP | | | | trigger |--------PCRpt,CC-ID=XX,PLSP-ID=1------------------>| new CCI | | | | | |<------PCInitiate,CC-ID=YY1,YY2,PLSP-ID=1--| Label | | | | download | |-------PCRpt,CC-ID=YY1,YY2,PLSP-ID=1------>| CCI | | | | | | |<----PCInitiate,CC-ID=ZZ,PLSP-ID=1---| Label | | | | download | | |-----PCRpt,CC-ID=ZZ,PLSP-ID=1------->| CCI | | | | | | |<---PCUpd,PLSP-ID=1,PST=2,D=1--------| PCECC | | | SRP=S | LSP Update | | | | | | |---PCRpt,PLSP-ID=1,PST=2,D=1-------->| Trigger | | | (SRP=S) | Delete | | | | former CCI | | | | |<-------PCInitiate,CC-ID=X,PLSP-ID=1---------------| Label | | | R=1 | cleanup |--------PCRpt,CC-ID=X,PLSP-ID=1------------------->| CCI | | | R=1 | | |<------PCInitiate,CC-ID=Y1,Y2,PLSP-ID=1----| Label | | | R=1 | cleanup | |-------PCRpt,CC-ID=Y1,Y2,PLSP-ID=1-------->| CCI | | | R=1 | | | |<----PCInitiate,CC-ID=Z,PLSP-ID=1----| Label | | | R=1 | cleanup | | |-----PCRpt,CC-ID=Z,PLSP-ID=1-------->| CCI | | | R=1 |
The modified PCECC LSPs are considered to be 'up' by default. The ingress could further choose to deploy a data-plane check mechanism and report the status back to the PCE via a PCRpt message. The exact mechanism is out of scope of this document. In the case where the label allocations are made by the PCC itself (see ), the procedure remains the same.
Re-delegation and Cleanup As described in , a new PCE can gain control over an orphaned LSP. In the case of a PCECC LSP, the new PCE MUST also gain control over the CCI in the same way by sending a PCInitiate message that includes the SRP, LSP, and CCI objects and carries the CC-ID and PLSP-ID identifying the instructions that it wants to take control of. Further, as described in , the State Timeout Interval timer ensures that a PCE crash does not result in automatic and immediate disruption for the services using PCE-initiated LSPs. Similarly the Central Controller Instructions are not removed immediately upon PCE failure. Instead, they are cleaned up on the expiration of this timer. This allows for network cleanup without manual intervention. The PCC MUST support the removal of CCI as one of the behaviors applied on expiration of the State Timeout Interval timer. In the case of the PCC-initiated PCECC LSP, the control over the orphaned LSP at the ingress PCC is taken over by the mechanism specified in to request delegation. The control over the CCI is described above using .
Synchronization of Central Controller Instructions The purpose of CCI synchronization (labels in the context of this document) is to make sure that the PCE's view of CCI (labels) matches with the PCC's label allocation. This synchronization is performed as part of the LSP State Synchronization, as described in and . As per LSP State Synchronization , a PCC reports the state of its LSPs to the PCE using PCRpt messages and, as per , the PCE would initiate any missing LSPs and/or remove any LSPs that are not wanted. The same PCEP messages and procedures are also used for the CCI synchronization. The PCRpt message includes the CCI and the LSP object to report the label-forwarding instructions. The PCE would further remove any unwanted instructions or initiate any missing instructions.
PCECC LSP State Report As mentioned before, an ingress PCC MAY choose to apply any Operations, Administration, and Maintenance (OAM) mechanism to check the status of the LSP in the data plane and MAY further send its status in a PCRpt message to the PCE.
PCC-Based Allocations The PCE can request the PCC to allocate the label using the PCInitiate message. The C flag in the CCI object is set to '1' to indicate that the allocation needs to be made by the PCC. The PCC MUST try to allocate the label and MUST report to the PCE via a PCRpt or PCErr message. If the value of the label is 0 and the C flag is set to '1', it indicates that the PCE is requesting the allocation to be made by the PCC. If the label is 'n' and the C flag is set to '1' in the CCI object, it indicates that the PCE requests a specific value 'n' for the label. If the allocation is successful, the PCC MUST report via the PCRpt message with the CCI object. If the value of the label in the CCI object is invalid, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=3 (Invalid CCI). If it is valid but the PCC is unable to allocate it, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=4 (Unable to allocate the specified CCI). If the PCC wishes to withdraw or modify the previously assigned label, it MUST send a PCRpt message without any label or with the label containing the new value, respectively, in the CCI object. The PCE would further trigger the label cleanup of the older label, as per .
PCEP Messages As defined in , a PCEP message consists of a common header followed by a variable-length body made of a set of objects that can be either mandatory or optional. An object is said to be mandatory in a PCEP message when the object must be included for the message to be considered valid. For each PCEP message type, a set of rules is defined, which specifies the set of objects that the message can carry. An implementation MUST form the PCEP messages using the object ordering specified in this document. The LSP-IDENTIFIERS TLV MUST be included in the LSP object for the PCECC LSP. The message formats in this document are specified using Routing Backus-Naur Form (RBNF) encoding, as specified in .
The PCInitiate Message The PCInitiate message can be used to download or remove the labels; this document extends the message, as shown below. <PCInitiate Message> ::= <Common Header> <PCE-initiated-lsp-list> Where:
  • <Common Header> is defined in .
<PCE-initiated-lsp-list> ::= <PCE-initiated-lsp-request> [<PCE-initiated-lsp-list>] <PCE-initiated-lsp-request> ::= (<PCE-initiated-lsp-instantiation>| <PCE-initiated-lsp-deletion>| <PCE-initiated-lsp-central-control>) <PCE-initiated-lsp-central-control> ::= <SRP> <LSP> <cci-list> <cci-list> ::= <CCI> [<cci-list>] Where:
  • <PCE-initiated-lsp-instantiation> and <PCE-initiated-lsp-deletion> are as per .
  • The LSP and SRP object is defined in .
When a PCInitiate message is used for the CCI (labels), the SRP, LSP, and CCI objects MUST be present. The SRP object is defined in ; if the SRP object is missing, the receiving PCC MUST send a PCErr message with Error-Type=6 (Mandatory Object missing) and Error-value=10 (SRP object missing). The LSP object is defined in , and if the LSP object is missing, the receiving PCC MUST send a PCErr message with Error-Type=6 (Mandatory Object missing) and Error-value=8 (LSP object missing). The CCI object is defined in , and if the CCI object is missing, the receiving PCC MUST send a PCErr message with Error-Type=6 (Mandatory Object missing) and Error-value=17 (CCI object missing). More than one CCI object MAY be included in the PCInitiate message for a transit LSR. To clean up entries, the R (remove) bit MUST be set in the SRP object to be encoded along with the LSP and CCI objects. The CCI object received at the ingress node MUST have the O bit (out-label) set. The CCI object received at the egress MUST have the O bit unset. If this is not the case, the PCC MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=3 (Invalid CCI). Other instances of the CCI object, if present, MUST be ignored. For the point-to-point (P2P) LSP setup via the PCECC technique, at the transit LSR, two CCI objects are expected for incoming and outgoing labels associated with the LSP object. If any other CCI object is included in the PCInitiate message, it MUST be ignored. If the transit LSR did not receive two CCI objects, with one of them having the O bit set and another with the O bit unset, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=3 (Invalid CCI). Note that, on receipt of the PCInitiate message with CCI object, the ingress, egress, or transit role of the PCC is identified via the ingress and egress IP address encoded in the LSP-IDENTIFIERS TLV.
The PCRpt Message The PCRpt message can be used to report the labels that were allocated by the PCE to be used during the State Synchronization phase or as an acknowledgment to a PCInitiate message. <PCRpt Message> ::= <Common Header> <state-report-list> Where: <state-report-list> ::= <state-report>[<state-report-list>] <state-report> ::= (<lsp-state-report>| <central-control-report>) <lsp-state-report> ::= [<SRP>] <LSP> <path> <central-control-report> ::= [<SRP>] <LSP> <cci-list> <cci-list> ::= <CCI> [<cci-list>] Where:
  • <path> is as per , and the LSP and SRP objects are also defined in .
When a PCRpt message is used to report the CCI (labels), the LSP and CCI objects MUST be present. The LSP object is defined in , and if the LSP object is missing, the receiving PCE MUST send a PCErr message with Error-Type=6 (Mandatory Object missing) and Error-value=8 (LSP object missing). The CCI object is defined in , and if the CCI object is missing, the receiving PCE MUST send a PCErr message with Error-Type=6 (Mandatory Object missing) and Error-value=17 (CCI object missing). Two CCI objects can be included in the PCRpt message for a transit LSR.
PCEP Objects The PCEP objects defined in this document are compliant with the PCEP object format defined in .
OPEN Object This document defines a new PST (2) to be included in the PATH-SETUP-TYPE-CAPABILITY TLV in the OPEN object. Further, a new sub-TLV for the PCECC capability exchange is also defined.
PCECC Capability Sub-TLV The PCECC-CAPABILITY sub-TLV is an optional TLV for use in the OPEN object in the PATH-SETUP-TYPE-CAPABILITY TLV when the Path Setup Type list includes the PCECC Path Setup Type 2. A PCECC-CAPABILITY sub-TLV MUST be ignored if the PST list does not contain PST=2. Its format is shown in .
PCECC Capability Sub-TLV 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type=1 | Length=4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Flags |L| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The type of the TLV is 1, and it has a fixed length of 4 octets. The value comprises a single field: Flags (32 bits). Currently, the following flag bit is defined:
L bit (Label):
If set to '1' by a PCEP speaker, the L flag indicates that the PCEP speaker will support and is willing to handle the PCEC-based Central Controller Instructions for label download. The bit MUST be set to '1' by both a PCC and a PCE for the PCECC label download/report on a PCEP session.
Unassigned bits MUST be set to '0' on transmission and MUST be ignored on receipt.
PATH-SETUP-TYPE TLV The PATH-SETUP-TYPE TLV is defined in ; this document defines a new PST value:
PST=2:
Path is set up via the PCECC mode.
On a PCRpt/PCUpd/PCInitiate message, the PST=2 in the PATH-SETUP-TYPE TLV in the SRP object MUST be included for an LSP set up via the PCECC-based mechanism.
CCI Object The CCI object is used by the PCE to specify the forwarding instructions (label information in the context of this document) to the PCC and MAY be carried within a PCInitiate or PCRpt message for label download/report. CCI Object-Class is 44. CCI Object-Type is 1 for the MPLS label.
CCI Object 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | CC-ID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved1 | Flags |C|O| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Label | Reserved2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | // Optional TLV // | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The fields in the CCI object are as follows:
CC-ID:
A PCEP-specific identifier for the CCI information. A PCE creates a CC-ID for each instruction; the value is unique within the scope of the PCE and is constant for the lifetime of a PCEP session. The values 0 and 0xFFFFFFFF are reserved and MUST NOT be used. Note that gives advice on assigning transient numeric identifiers, such as the CC-ID, so as to minimize security risks.
Reserved1 (16 bit):
Set to 'zero' while sending; ignored on receipt.
Flags (16 bit):
A field used to carry any additional information pertaining to the CCI. Currently, the following flag bits are defined:
  • O bit (out-label) : If the bit is set to '1', it specifies the label is the out-label, and it is mandatory to encode the next-hop information (via Address TLVs () in the CCI object). If the bit is not set, it specifies the label is the in-label, and it is optional to encode the local interface information (via Address TLVs in the CCI object).
  • C Bit (PCC allocation): If the bit is set to '1', it indicates that the label allocation needs to be done by the PCC for the Central Controller Instruction. A PCE sets this bit to request the PCC to make an allocation from its label space. A PCC would set this bit to indicate that it has allocated the label and report it to the PCE.
  • All unassigned bits MUST be set to 'zero' at transmission and ignored at receipt.
Label (20-bit):
The label information.
Reserved2 (12 bit):
Set to 'zero' while sending; ignored on receive.
Address TLVs defines the IPV4-ADDRESS, IPV6-ADDRESS, and UNNUMBERED-ENDPOINT TLVs for the use of Generalized Endpoint. The same TLVs can also be used in the CCI object to associate the next-hop information in the case of an outgoing label and local interface information in the case of an incoming label. The next-hop information encoded in these TLVs needs to be a directly connected IP address/interface information. If the PCC is not able to resolve the next-hop information, it MUST reject the CCI and respond with a PCErr message with Error-Type=31 (PCECC failure) and Error-value=5 (Invalid next-hop information).
Security Considerations As per , the security considerations for a PCE-based controller are a little different from those for any other PCE system. That is, the operation relies heavily on the use and security of PCEP, so consideration should be given to the security features discussed in and the additional mechanisms described in . It further lists the vulnerability of a central controller architecture, such as a central point of failure, denial of service, and a focus for interception and modification of messages sent to individual Network Elements (NEs). In the PCECC operations, the PCEP sessions are also required to the internal routers, thus increasing the resources required for the session management at the PCE. The PCECC extension builds on the existing PCEP messages; thus, the security considerations described in , , and continue to apply. specifies the support of Transport Layer Security (TLS) in PCEP, as it provides support for peer authentication, message encryption, and integrity. It further provides mechanisms for associating peer identities with different levels of access and/or authoritativeness via an attribute in X.509 certificates or a local policy with a specific accept-list of X.509 certificates. This can be used to check the authority for the PCECC operations. Additional considerations are discussed in following sections.
Malicious PCE In this extension, the PCE has complete control over the PCC to download/remove the labels and can cause the LSPs to behave inappropriately and cause a major impact to the network. As a general precaution, it is RECOMMENDED that this PCEP extension be activated on mutually authenticated and encrypted sessions across PCEs and PCCs belonging to the same administrative authority, using TLS , as per the recommendations and best current practices in BCP 195 . Further, an attacker may flood the PCC with the PCECC-related messages at a rate that exceeds either the PCC's ability to process them or the network's ability to send them, by either spoofing messages or compromising the PCE itself. provides a mechanism to protect the PCC by imposing a limit. The same can be used for the PCECC operations as well. As specified in , a PCC needs to check if the label in the CCI object is in the range set aside for the PCE; otherwise, it MUST send a PCErr message with Error-Type=31 (PCECC failure) and Error-value=1 (Label out of range).
Malicious PCC The PCECC mechanism described in this document requires the PCE to keep labels (CCI) that it downloads and relies on the PCC responding (with either an acknowledgment or an error message) to request for LSP instantiation. This is an additional attack surface by placing a requirement for the PCE to keep a CCI/label replica for each PCC. It is RECOMMENDED that PCE implementations provide a limit on resources (in this case the CCI) a single PCC can occupy. provides a notification mechanism when such threshold is reached.
Manageability Considerations
Control of Function and Policy A PCE or PCC implementation SHOULD allow the PCECC capability to be enabled/disabled as part of the global configuration. list various controlling factors regarding the Path Setup Type. They are also applicable to the PCECC Path Setup Types. Further, describes the migration steps when the Path Setup Type of an existing LSP is changed.
Information and Data Models describes the PCEP MIB; this MIB can be extended to get the PCECC capability status. The PCEP YANG module could be extended to enable/disable the PCECC capability.
Liveness Detection and Monitoring Mechanisms defined in this document do not imply any new liveness detection and monitoring requirements in addition to those already listed in .
Verify Correct Operations The operator needs the following information to verify that PCEP is operating correctly with respect to the PCECC Path Setup Type.
  • An implementation SHOULD allow the operator to view whether the PCEP speaker sent the PCECC PST capability to its peer.
  • An implementation SHOULD allow the operator to view whether the peer sent the PCECC PST capability.
  • An implementation SHOULD allow the operator to view whether the PCECC PST is enabled on a PCEP session.
  • If one PCEP speaker advertises the PCECC PST capability, but the other does not, then the implementation SHOULD create a log to inform the operator of the capability mismatch.
  • If a PCEP speaker rejects a CCI, then it SHOULD create a log to inform the operator, giving the reason for the decision (local policy, label issues, etc.).
Requirements on Other Protocols PCEP extensions defined in this document do not put new requirements on other protocols.
Impact on Network Operations PCEP extensions defined in this document do not put new requirements on network operations.
IANA Considerations
PATH-SETUP-TYPE-CAPABILITY Sub-TLV Type Indicators detailed the creation of the "PATH-SETUP-TYPE-CAPABILITY Sub-TLV Type Indicators" subregistry. Further, IANA has allocated the following codepoint: PATH-SETUP-TYPE-CAPABILITY Sub-TLV Type Indicators Subregistry Addition
Value Meaning Reference
1 PCECC-CAPABILITY RFC 9050
PCECC-CAPABILITY Sub-TLV's Flag Field This document defines the PCECC-CAPABILITY sub-TLV; IANA has created a new subregistry to manage the value of the PCECC-CAPABILITY sub-TLV's 32-bit Flag field. New values are to be assigned by Standards Action . Each bit should be tracked with the following qualities:
  • bit number (counting from bit 0 as the most significant bit)
  • capability description
  • defining RFC
Currently, there is one allocation in this registry. Initial Contents of the PCECC-CAPABILITY Sub-TLV Subregistry
Bit Name Reference
0-30 Unassigned RFC 9050
31 Label RFC 9050
PCEP Path Setup Type Registry created a subregistry within the "Path Computation Element Protocol (PCEP) Numbers" registry called "PCEP Path Setup Types". IANA has allocated a new codepoint within this registry, as follows: Path Setup Type Registry Codepoint Addition
Value Description Reference
2 Traffic engineering path is set up using PCECC mode RFC 9050
PCEP Object IANA has allocated new codepoints in the "PCEP Objects" subregistry for the CCI object as follows: PCEP Objects Subregistry Additions
Object-Class Value Name Object-Type Reference
44 CCI Object-Type
  • 0: Reserved
  • 1: MPLS Label
  • 2-15: Unassigned
 RFC 9050
CCI Object Flag Field IANA has created a new subregistry to manage the Flag field of the CCI object called "CCI Object Flag Field for MPLS Label". New values are to be assigned by Standards Action . Each bit should be tracked with the following qualities:
  • bit number (counting from bit 0 as the most significant bit)
  • capability description
  • defining RFC
Two bits are defined for the CCI Object flag field in this document as follows: CCI Object Flag Field for MPLS Label Initial Contents
Bit Description Reference
0-13 Unassigned
14 C Bit - PCC allocation RFC 9050
15 O Bit - Specifies label is out-label RFC 9050
PCEP-Error Object IANA has allocated new error types and error values within the "PCEP-ERROR Object Error Types and Values" subregistry of the "Path Computation Element Protocol (PCEP) Numbers" registry for the following errors: PCEP-ERROR Object Error Types and Values Additions
Error-Type Meaning Error-value Reference
6 Mandatory Object missing 17: CCI object missing RFC 9050
10 Reception of an invalid object 33: Missing PCECC Capability sub-TLV RFC 9050
19 Invalid Operation 16: Attempted PCECC operations when PCECC capability was not advertised 17: Stateful PCE capability was not advertised 18: Unknown Label RFC 9050
31 PCECC failure 1: Label out of range 2: Instruction failed 3: Invalid CCI 4: Unable to allocate the specified CCI 5: Invalid next-hop information RFC 9050
References Normative References Key words for use in RFCs to Indicate Requirement Levels In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Path Computation Element (PCE) Communication Protocol (PCEP) This document specifies the Path Computation Element (PCE) Communication Protocol (PCEP) for communications between a Path Computation Client (PCC) and a PCE, or between two PCEs. Such interactions include path computation requests and path computation replies as well as notifications of specific states related to the use of a PCE in the context of Multiprotocol Label Switching (MPLS) and Generalized MPLS (GMPLS) Traffic Engineering. PCEP is designed to be flexible and extensible so as to easily allow for the addition of further messages and objects, should further requirements be expressed in the future. [STANDARDS-TRACK] Routing Backus-Naur Form (RBNF): A Syntax Used to Form Encoding Rules in Various Routing Protocol Specifications Several protocols have been specified in the Routing Area of the IETF using a common variant of the Backus-Naur Form (BNF) of representing message syntax. However, there is no formal definition of this version of BNF. There is value in using the same variant of BNF for the set of protocols that are commonly used together. This reduces confusion and simplifies implementation. Updating existing documents to use some other variant of BNF that is already formally documented would be a substantial piece of work. This document provides a formal definition of the variant of BNF that has been used (that we call Routing BNF) and makes it available for use by new protocols. [STANDARDS-TRACK] Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) are widely used to protect data exchanged over application protocols such as HTTP, SMTP, IMAP, POP, SIP, and XMPP. Over the last few years, several serious attacks on TLS have emerged, including attacks on its most commonly used cipher suites and their modes of operation. This document provides recommendations for improving the security of deployed services that use TLS and DTLS. The recommendations are applicable to the majority of use cases. Guidelines for Writing an IANA Considerations Section in RFCs Many protocols make use of points of extensibility that use constants to identify various protocol parameters. To ensure that the values in these fields do not have conflicting uses and to promote interoperability, their allocations are often coordinated by a central record keeper. For IETF protocols, that role is filled by the Internet Assigned Numbers Authority (IANA). To make assignments in a given registry prudently, guidance describing the conditions under which new values should be assigned, as well as when and how modifications to existing values can be made, is needed. This document defines a framework for the documentation of these guidelines by specification authors, in order to assure that the provided guidance for the IANA Considerations is clear and addresses the various issues that are likely in the operation of a registry. This is the third edition of this document; it obsoletes RFC 5226. Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Path Computation Element Communication Protocol (PCEP) Extensions for Stateful PCE The Path Computation Element Communication Protocol (PCEP) provides mechanisms for Path Computation Elements (PCEs) to perform path computations in response to Path Computation Client (PCC) requests. Although PCEP explicitly makes no assumptions regarding the information available to the PCE, it also makes no provisions for PCE control of timing and sequence of path computations within and across PCEP sessions. This document describes a set of extensions to PCEP to enable stateful control of MPLS-TE and GMPLS Label Switched Paths (LSPs) via PCEP. PCEPS: Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP) The Path Computation Element Communication Protocol (PCEP) defines the mechanisms for the communication between a Path Computation Client (PCC) and a Path Computation Element (PCE), or among PCEs. This document describes PCEPS -- the usage of Transport Layer Security (TLS) to provide a secure transport for PCEP. The additional security mechanisms are provided by the transport protocol supporting PCEP; therefore, they do not affect the flexibility and extensibility of PCEP. This document updates RFC 5440 in regards to the PCEP initialization phase procedures. Path Computation Element Communication Protocol (PCEP) Extensions for PCE-Initiated LSP Setup in a Stateful PCE Model The Path Computation Element Communication Protocol (PCEP) provides mechanisms for Path Computation Elements (PCEs) to perform path computations in response to Path Computation Client (PCC) requests. The extensions for stateful PCE provide active control of Multiprotocol Label Switching (MPLS) Traffic Engineering Label Switched Paths (TE LSPs) via PCEP, for a model where the PCC delegates control over one or more locally configured LSPs to the PCE. This document describes the creation and deletion of PCE-initiated LSPs under the stateful PCE model. Conveying Path Setup Type in PCE Communication Protocol (PCEP) Messages A Path Computation Element (PCE) can compute Traffic Engineering (TE) paths through a network; these paths are subject to various constraints. Currently, TE paths are Label Switched Paths (LSPs) that are set up using the RSVP-TE signaling protocol. However, other TE path setup methods are possible within the PCE architecture. This document proposes an extension to the PCE Communication Protocol (PCEP) to allow support for different path setup methods over a given PCEP session. Path Computation Element Communication Protocol (PCEP) Extensions for Segment Routing Segment Routing (SR) enables any head-end node to select any path without relying on a hop-by-hop signaling technique (e.g., LDP or RSVP-TE). It depends only on "segments" that are advertised by link-state Interior Gateway Protocols (IGPs). An SR path can be derived from a variety of mechanisms, including an IGP Shortest Path Tree (SPT), an explicit configuration, or a Path Computation Element (PCE). This document specifies extensions to the Path Computation Element Communication Protocol (PCEP) that allow a stateful PCE to compute and initiate Traffic-Engineering (TE) paths, as well as a Path Computation Client (PCC) to request a path subject to certain constraints and optimization criteria in SR networks. This document updates RFC 8408. Path Computation Element Communication Protocol (PCEP) Extensions for GMPLS A Path Computation Element (PCE) provides path computation functions for Multiprotocol Label Switching (MPLS) and Generalized MPLS (GMPLS) networks. Additional requirements for GMPLS are identified in RFC 7025. This memo provides extensions to the Path Computation Element Communication Protocol (PCEP) for the support of the GMPLS control plane to address those requirements. Informative References A Path Computation Element (PCE)-Based Architecture Requirements for GMPLS Applications of PCE The initial effort of the PCE (Path Computation Element) WG focused mainly on MPLS. As a next step, this document describes functional requirements for GMPLS applications of PCE. Unanswered Questions in the Path Computation Element Architecture The Path Computation Element (PCE) architecture is set out in RFC 4655. The architecture is extended for multi-layer networking with the introduction of the Virtual Network Topology Manager (VNTM) in RFC 5623 and generalized to Hierarchical PCE (H-PCE) in RFC 6805. These three architectural views of PCE deliberately leave some key questions unanswered, especially with respect to the interactions between architectural components. This document draws out those questions and discusses them in an architectural context with reference to other architectural components, existing protocols, and recent IETF efforts. This document does not update the architecture documents and does not define how protocols or components must be used. It does, however, suggest how the architectural components might be combined to provide advanced PCE function. Path Computation Element Communication Protocol (PCEP) Management Information Base (MIB) Module This memo defines a portion of the Management Information Base (MIB) for use with network management protocols in the Internet community. In particular, it describes managed objects for modeling of the Path Computation Element Communication Protocol (PCEP) for communications between a Path Computation Client (PCC) and a Path Computation Element (PCE), or between two PCEs. A PCE-Based Architecture for Application-Based Network Operations Services such as content distribution, distributed databases, or inter-data center connectivity place a set of new requirements on the operation of networks. They need on-demand and application-specific reservation of network connectivity, reliability, and resources (such as bandwidth) in a variety of network applications (such as point-to-point connectivity, network virtualization, or mobile back-haul) and in a range of network technologies from packet (IP/MPLS) down to optical. An environment that operates to meet these types of requirements is said to have Application-Based Network Operations (ABNO). ABNO brings together many existing technologies and may be seen as the use of a toolbox of existing components enhanced with a few new elements. This document describes an architecture and framework for ABNO, showing how these components fit together. It provides a cookbook of existing technologies to satisfy the architecture and meet the needs of the applications. Optimizations of Label Switched Path State Synchronization Procedures for a Stateful PCE A stateful Path Computation Element (PCE) has access to not only the information disseminated by the network's Interior Gateway Protocol (IGP) but also the set of active paths and their reserved resources for its computation. The additional Label Switched Path (LSP) state information allows the PCE to compute constrained paths while considering individual LSPs and their interactions. This requires a State Synchronization mechanism between the PCE and the network, the PCE and Path Computation Clients (PCCs), and cooperating PCEs. The basic mechanism for State Synchronization is part of the stateful PCE specification. This document presents motivations for optimizations to the base State Synchronization procedure and specifies the required Path Computation Element Communication Protocol (PCEP) extensions. An Architecture for Use of PCE and the PCE Communication Protocol (PCEP) in a Network with Central Control The Path Computation Element (PCE) is a core component of Software- Defined Networking (SDN) systems. It can compute optimal paths for traffic across a network and can also update the paths to reflect changes in the network or traffic demands. PCE was developed to derive paths for MPLS Label Switched Paths (LSPs), which are supplied to the head end of the LSP using the Path Computation Element Communication Protocol (PCEP). SDN has a broader applicability than signaled MPLS traffic-engineered (TE) networks, and the PCE may be used to determine paths in a range of use cases including static LSPs, segment routing, Service Function Chaining (SFC), and most forms of a routed or switched network. It is, therefore, reasonable to consider PCEP as a control protocol for use in these environments to allow the PCE to be fully enabled as a central controller. This document briefly introduces the architecture for PCE as a central controller, examines the motivations and applicability for PCEP as a control protocol in this environment, and introduces the implications for the protocol. A PCE-based central controller can simplify the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. This document does not describe use cases in detail and does not define protocol extensions: that work is left for other documents. Ability for a Stateful Path Computation Element (PCE) to Request and Obtain Control of a Label Switched Path (LSP) A stateful Path Computation Element (PCE) retains information about the placement of Multiprotocol Label Switching (MPLS) Traffic Engineering Label Switched Paths (TE LSPs). When a PCE has stateful control over LSPs, it may send indications to LSP head-ends to modify the attributes (especially the paths) of the LSPs. A Path Computation Client (PCC) that has set up LSPs under local configuration may delegate control of those LSPs to a stateful PCE. There are use cases in which a stateful PCE may wish to obtain control of locally configured LSPs that it is aware of but have not been delegated to the PCE. This document describes an extension to the Path Computation Element Communication Protocol (PCEP) to enable a PCE to make requests for such control. The Use Cases for Path Computation Element (PCE) as a Central Controller (PCECC). Huawei Technologies Huawei Technologies Etheric Networks Tencent Holdings Ltd. Yandex LLC Expedia, Inc. HPE Telus Communications Mobile TeleSystems JLLC LLC "Lifetech" The Path Computation Element (PCE) is a core component of a Software- Defined Networking (SDN) system. It can compute optimal paths for traffic across a network and can also update the paths to reflect changes in the network or traffic demands. PCE was developed to derive paths for MPLS Label Switched Paths (LSPs), which are supplied to the head end of the LSP using the Path Computation Element Communication Protocol (PCEP). SDN has a broader applicability than signaled MPLS traffic-engineered (TE) networks, and the PCE may be used to determine paths in a range of use cases including static LSPs, segment routing (SR), Service Function Chaining (SFC), and most forms of a routed or switched network. It is, therefore, reasonable to consider PCEP as a control protocol for use in these environments to allow the PCE to be fully enabled as a central controller. This document describes general considerations for PCECC deployment and examines its applicability and benefits, as well as its challenges and limitations, through a number of use cases. PCEP extensions required for stateful PCE usage are covered in separate documents. This is a living document to catalog the use cases for PCECC. There is currently no intention to publish this work as an RFC. [Update: Chairs are evaluating if the document should be published instead.] Work in Progress A YANG Data Model for Path Computation Element Communications Protocol (PCEP) Work in Progress PCEP Procedures and Protocol Extensions for Using PCE as a Central Controller (PCECC) for Segment Routing (SR) MPLS Segment Identifier (SID) Allocation and Distribution. Huawei Technologies Huawei Technologies RtBrick Inc Etheric Networks HPE The Path Computation Element (PCE) is a core component of Software- Defined Networking (SDN) systems. A PCE-based Central Controller (PCECC) can simplify the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. Thus, the LSP can be calculated/set up/initiated and the label forwarding entries can also be downloaded through a centralized PCE server to each network device along the path while leveraging the existing PCE technologies as much as possible. This document specifies the procedures and PCEP extensions when a PCE-based controller is also responsible for configuring the forwarding actions on the routers, in addition to computing the paths for packet flows in a segment routing (SR) network and telling the edge routers what instructions to attach to packets as they enter the network. PCECC is further enhanced for SR-MPLS SID (Segment Identifier) allocation and distribution. Work in Progress PCEP Procedures and Protocol Extensions for Using PCE as a Central Controller (PCECC) for SRv6 Huawei Technologies Huawei Technologies Huawei Technologies RtBrick Inc The Path Computation Element (PCE) is a core component of Software- Defined Networking (SDN) systems. It can compute optimal paths for traffic across a network and can also update the paths to reflect changes in the network or traffic demands. PCE was developed to derive paths for MPLS Label Switched Paths (LSPs), which are supplied to the head end of the LSP using the Path Computation Element Communication Protocol (PCEP). But SDN has a broader applicability than signaled (G)MPLS traffic-engineered (TE) networks, and the PCE may be used to determine paths in a range of use cases. PCEP has been proposed as a control protocol for use in these environments to allow the PCE to be fully enabled as a central controller. A PCE-based Central Controller (PCECC) can simplify the processing of a distributed control plane by blending it with elements of SDN and without necessarily completely replacing it. This document specifies the procedures and PCEP protocol extensions when a PCE-based controller is also responsible for configuring the forwarding actions on the routers for Segment Routing (SR) in IPv6 (SRv6), in addition to computing the SRv6 paths for packet flows and telling the edge routers what instructions to attach to packets as they enter the network. Work in Progress PCE Controlled ID Space Huawei Technologies Huawei Technologies China Telecom China Mobile HPE The Path Computation Element Communication Protocol (PCEP) provides a mechanisms for the Path Computation Elements (PCEs) to perform path computations in response to Path Computation Clients (PCCs) requests. The Stateful PCE extensions allow stateful control of Multiprotocol Label Switching (MPLS) Traffic Engineering (TE) Label Switched Paths (LSPs) using PCEP. Furthermore, PCE can be used for computing paths in the SR networks. Stateful PCE provide active control of MPLS-TE LSPs via PCEP, for a model where the PCC delegates control over one or more locally configured LSPs to the PCE. Further, stateful PCE could also create and remove PCE-initiated LSPs by itself. A PCE-based Central Controller (PCECC) simplify the processing of a distributed control plane by integrating with elements of Software-Defined Networking (SDN). In some use cases, such as PCECC or Binding Segment Identifier (SID) for Segment Routing (SR), there are requirements for a stateful PCE to make allocation of labels, SIDs, etc. These use cases require PCE aware of various identifier spaces from where to make allocations on behalf of a PCC. This document describes a mechanism for a PCC to inform the PCE of the identifier space set aside for the PCE control via PCEP. The identifier could be an MPLS label, a SID or any other to-be-defined identifier that can be allocated by a PCE. Work in Progress Security Considerations for Transient Numeric Identifiers Employed in Network Protocols SI6 Networks Quarkslab Poor selection of transient numerical identifiers in protocols such as the TCP/IP suite has historically led to a number of attacks on implementations, ranging from Denial of Service (DoS) to data injection and information leakage that can be exploited by pervasive monitoring. To prevent such flaws in future protocols and implementations, this document updates RFC 3552, requiring future RFCs to contain analysis of the security and privacy properties of any transient numeric identifiers specified by the protocol. Work in Progress
Acknowledgments We would like to thank , , , , and for their useful comments and suggestions. Thanks to for shepherding this document and providing valuable comments. Thanks to for being the responsible AD. Thanks to for a very detailed RTGDIR review. Thanks to for the SECDIR review. Thanks to for the Gen-ART review. Thanks to , , , , , , and for the IESG review.
Contributors Huawei Technologies
Divyashree Techno Park, Whitefield Bangalore Karnataka 560066 India dhruv.ietf@gmail.com
Huawei Technologies
Divyashree Techno Park, Whitefield Bangalore Karnataka 560066 India satishk@huawei.com
Old Dog Consulting
United Kingdom adrian@olddog.co.uk
Huawei Technologies
China gengxuesong@huawei.com
udayasreereddy@gmail.com
Futurewei Technologies
katherine.zhao@futurewei.com
Telus Ltd.
Toronto Canada boris.zhang@telus.com
Cisco Systems
Slovakia atokar@cisco.com
Authors' Addresses Huawei Technologies
Huawei Bld., No.156 Beiqing Rd. Beijing 100095 China lizhenbin@huawei.com
Huawei Technologies
Huawei Bld., No.156 Beiqing Rd. Beijing 100095 China pengshuping@huawei.com
RtBrick Inc
N-17L, 18th Cross Rd, HSR Layout Bangalore Karnataka 560102 India mahend.ietf@gmail.com
Etheric Networks
1009 S Claremont St. San Mateo CA 94402 United States of America qzhao@ethericnetworks.com
HPE
chaozhou_us@yahoo.com