summaryrefslogtreecommitdiff
path: root/doc/rfc/rfc7737.txt
blob: 0b3b0ea120933648279917d0cebacacba7a02eaf (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
Internet Engineering Task Force (IETF)                          N. Akiya
Request for Comments: 7737                           Big Switch Networks
Updates: 7110                                                 G. Swallow
Category: Standards Track                                   C. Pignataro
ISSN: 2070-1721                                            Cisco Systems
                                                            L. Andersson
                                                                 M. Chen
                                                                  Huawei
                                                            January 2016


Label Switched Path (LSP) Ping and Traceroute Reply Mode Simplification

Abstract

   The Multiprotocol Label Switching (MPLS) Label Switched Path (LSP)
   Ping and Traceroute use the Reply Mode field to signal the method to
   be used in the MPLS echo reply.  This document updates the procedures
   for the "Reply via Specified Path" Reply Mode.  The value of this
   Reply Mode is 5.  The update creates a simple way to indicate that
   the reverse LSP should be used as the return path.  This document
   also adds an optional TLV that can carry an ordered list of Reply
   Mode values.

   This document updates RFC 7110.

Status of This Memo

   This is an Internet Standards Track document.

   This document is a product of the Internet Engineering Task Force
   (IETF).  It represents the consensus of the IETF community.  It has
   received public review and has been approved for publication by the
   Internet Engineering Steering Group (IESG).  Further information on
   Internet Standards is available in Section 2 of RFC 5741.

   Information about the current status of this document, any errata,
   and how to provide feedback on it may be obtained at
   http://www.rfc-editor.org/info/rfc7737.












Akiya, et al.                Standards Track                    [Page 1]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


Copyright Notice

   Copyright (c) 2016 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   3
     1.1.  Requirements Language . . . . . . . . . . . . . . . . . .   3
   2.  Problem Statements  . . . . . . . . . . . . . . . . . . . . .   4
   3.  Solution  . . . . . . . . . . . . . . . . . . . . . . . . . .   5
     3.1.  "Reply via Specified Path" Reply Mode Update  . . . . . .   5
     3.2.  Reply Mode Order TLV  . . . . . . . . . . . . . . . . . .   6
   4.  Relationships to Other LSP Ping and Traceroute Features . . .   8
     4.1.  Backwards Compatibility with "Reply via Specified Path"
           Reply Mode  . . . . . . . . . . . . . . . . . . . . . . .   8
     4.2.  Reply Path TLV  . . . . . . . . . . . . . . . . . . . . .   8
       4.2.1.  Example 1: Reply Mode Order TLV Usage with Reply Path
               TLV . . . . . . . . . . . . . . . . . . . . . . . . .   9
       4.2.2.  Example 2: Reply Mode Order TLV Usage with Reply Path
               TLV . . . . . . . . . . . . . . . . . . . . . . . . .  10
     4.3.  Proxy LSP Ping  . . . . . . . . . . . . . . . . . . . . .  10
       4.3.1.  Proxy LSR Sending an MPLS Echo Request  . . . . . . .  10
       4.3.2.  Proxy LSR Sending an MPLS Proxy Ping Reply  . . . . .  11
   5.  Security Considerations . . . . . . . . . . . . . . . . . . .  11
   6.  Manageability Considerations  . . . . . . . . . . . . . . . .  11
   7.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  12
     7.1.  New Reply Mode Order TLV  . . . . . . . . . . . . . . . .  12
   8.  References  . . . . . . . . . . . . . . . . . . . . . . . . .  12
     8.1.  Normative References  . . . . . . . . . . . . . . . . . .  12
     8.2.  Informative References  . . . . . . . . . . . . . . . . .  13
   Appendix A.  Reply Mode Order TLV Beneficial Scenarios  . . . . .  14
     A.1.  Incorrect Forwarding Scenario . . . . . . . . . . . . . .  14
     A.2.  Non-Co-Routed Bidirectional LSP Scenario  . . . . . . . .  15
   Acknowledgements  . . . . . . . . . . . . . . . . . . . . . . . .  16
   Contributors  . . . . . . . . . . . . . . . . . . . . . . . . . .  16
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  17




Akiya, et al.                Standards Track                    [Page 2]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


1.  Introduction

   Multiprotocol Label Switching (MPLS) Label Switched Path (LSP) Ping,
   as described in [RFC4379], allows an initiator Label Switching Router
   (LSR) to encode instructions (Reply Mode) on how a responder LSR
   should send the response back to the initiator LSR.  [RFC7110] also
   allows the initiator LSR to encode a TLV (Reply Path TLV) that can
   instruct the responder LSR to use a specific LSP to send the response
   back to the initiator LSR.  Both approaches are powerful, as they
   provide the ability for the initiator LSR to control the return path.

   However, it is becoming increasingly difficult for an initiator LSR
   to select a valid return path to encode in the MPLS LSP echo request
   packets.  If the initiator LSR does not select a valid return path,
   the MPLS LSP echo reply will not get back to the initiator LSR.  This
   results in a false failure of MPLS LSP Ping and Traceroute
   operations.  In an effort to minimize such false failures, different
   implementations have chosen different default return path encoding
   for different LSP types and LSP operations.  The problem with
   implementations having different default return path encoding is that
   the MPLS echo reply will not work in many cases, and the default
   value may not be the preferred choice of the operators.

   This document describes the following:

   o  In Section 2, further description of the problems;

   o  In Section 3, a solution to minimize false failures while
      accommodating operator preferences;

   o  In Section 4, relationships to other LSP Ping and Traceroute
      features;

   o  In Appendix A, examples of scenarios where the mechanism described
      in this document provides benefits.

   This document updates [RFC7110] by allowing the usage of the "Reply
   via Specified Path" (value=5) Reply Mode without including the Reply
   Path TLV.  The update creates a simple way to indicate that the
   reverse LSP should be used as the return path.

1.1.  Requirements Language

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 [RFC2119].





Akiya, et al.                Standards Track                    [Page 3]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


2.  Problem Statements

   It is becoming increasingly difficult for implementations to
   automatically supply a workable return path encoding for all MPLS LSP
   Ping and Traceroute operations across all LSP types.  There are
   several factors that contribute to this complication.

   o  Some LSPs have a control channel, and some do not.  Some LSPs have
      a reverse LSP, and some do not.  Some LSPs have IP reachability in
      the reverse direction, and some do not.

   o  LSRs on some LSPs can have different available return path(s).
      Available return path(s) can depend on whether the responder LSR
      is a transit LSR or an egress LSR.  In the case of a bidirectional
      LSP, available return path(s) on transit LSRs can also depend on
      whether the LSP is completely co-routed, partially co-routed, or
      associated (i.e., the LSPs in the two directions are not
      co-routed).

   o  MPLS echo request packets may incorrectly terminate on an
      unintended target that can have different available return path(s)
      than the intended target.

   o  The MPLS LSP Ping operation is expected to terminate on an egress
      LSR.  However, MPLS LSP Ping operations with specific TTL values
      and MPLS LSP Traceroute operations can terminate on both transit
      LSR(s) and the egress LSR.

   Except for the case where the responder LSR does not have an IP route
   back to the initiator LSR, it is possible to use the "Reply via an
   IPv4/IPv6 UDP packet" (value=2) Reply Mode value in all cases.
   However, some operators prefer the control channel and a reverse LSP
   as the default return path if they are both available, although this
   is not always the case.

   When specific return path encoding is supplied by users or
   applications, then there are no issues in choosing the return path
   encoding.  When specific return path encoding is not supplied by
   users or applications, then implementations use extra logic to
   compute, and sometimes guess, the default return path encodings.  If
   a responder LSR receives an MPLS echo request containing return path
   instructions that cannot be accommodated due to unavailability, then
   the responder LSR often drops such packets.  This failure mode
   results in the initiator LSR not receiving the intended MPLS LSP echo
   reply packets.  The scenario described here is a potentially
   acceptable result in some failure cases, like a broken LSP, where the
   MPLS echo request terminated on an unintended target.  However, if
   the initiator LSR does not receive an MPLS echo reply even after the



Akiya, et al.                Standards Track                    [Page 4]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   responder LSR receives the MPLS echo request and is able to verify
   the request, information is still sent back to the user(s); this is
   considered a false failure.

   Many operators prefer particular return path(s) over other return
   path(s) for specific LSP types.  To accommodate operator-preferred
   paths, implementations may default to operator-preferred return paths
   for particular operations or allow a default return path to be
   configured.  It would not be considered beneficial to use a preferred
   return path for an intended target LSR if there is previous knowledge
   at the initiator LSR that the return path is not available.  Using an
   unavailable preferred return path would undesirably result in the
   initiator LSR not receiving the MPLS echo return packets.  It would
   be considered beneficial, for given operations, if the sender of the
   MPLS echo request would be able to determine return path availability
   before the operation is initiated.

   This document (1) updates the procedures for the "Reply via Specified
   Path" Reply Mode to easily indicate the reverse LSP and (2) adds one
   optional TLV to describe an ordered list of Reply Modes.  Based on
   operational needs, the TLV can list multiple Reply Mode values in a
   preferred order to allow the responder LSR to use the first available
   Reply Mode from the list.  This eliminates the need for the initiator
   LSR to compute, or sometimes guess, the default return path encoding.
   This new mode of operation would result in simplified implementations
   across the various vendors and improve both usability and operational
   needs.

3.  Solution

   This document updates the procedures for the "Reply via Specified
   Path" Reply Mode to easily indicate the reverse LSP.  This document
   also adds an optional TLV that can carry an ordered list of Reply
   Modes.

3.1.  "Reply via Specified Path" Reply Mode Update

   Some LSP types are capable of having a related LSP in the reverse
   direction, through signaling or other association mechanisms.
   Examples of such LSP types are bidirectional Resource Reservation
   Protocol-Traffic Engineering (RSVP-TE) LSPs [RFC3473] and MPLS
   Transport Profile (MPLS-TP) LSPs [RFC5960].  This document uses the
   term "reverse LSP" to refer to the LSP in the reverse direction of
   such LSP types.  Note that this document restricts the scope of
   "reverse LSP" applicability to those reverse LSPs that are capable
   and allowed to carry the IP encapsulated MPLS echo reply.





Akiya, et al.                Standards Track                    [Page 5]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   [RFC7110] has defined the Reply Mode "Reply via Specified Path",
   which allows the initiator LSR to instruct the responder LSR to send
   the MPLS echo reply message on the reverse LSP.  However, the
   instruction also requires the initiator LSR to include the Reply Path
   TLV with the B bit (Bidirectional bit) set in the Flags field.
   Additionally, [RFC7110] specifies that if the "Reply via Specified
   Path" Reply Mode is used the Reply Path TLV MUST be present.

   This document updates the procedures for the "Reply via Specified
   Path" Reply Mode as follows:

   o  The "Reply via Specified Path" Reply Mode MAY be used without
      including a Reply Path TLV.

   o  The usage of the "Reply via Specified Path" Reply Mode without the
      inclusion of a Reply Path TLV implies the reverse LSP.  In other
      words, the usage of the "Reply via Specified Path" Reply Mode
      without the inclusion of a Reply Path TLV has the same semantics
      as the usage of the "Reply via Specified Path" Reply Mode with the
      inclusion of a Reply Path TLV with the B bit set in the Flags
      field.

   This document updates the first sentence of Section 5.1 of [RFC7110]
   as follows:

   o  When sending an echo request, in addition to the rules and
      procedures defined in Section 4.3 of [RFC4379], the Reply Mode of
      the echo request MUST be set to "Reply via Specified Path", and a
      Reply Path TLV SHOULD be carried in the echo request message
      correspondingly; if the Reply Path TLV is not carried in the
      message, then it indicates the reverse LSP as the reply path.

   Note that the reverse LSP is in relation to the last Forwarding
   Equivalence Class (FEC) specified in the Target FEC Stack TLV.

3.2.  Reply Mode Order TLV

   This document also introduces a new optional TLV to describe a list
   of Reply Mode values.  The new TLV will contain one or more Reply
   Mode values in preferred order.  The first Reply Mode value is the
   most preferred, and the last Reply Mode value is the least preferred.
   The following rules apply when using the Reply Mode Order TLV:

   1.  The Reply Mode Order TLV MUST NOT be included in any MPLS echo
       reply.  If the initiator LSR receives an MPLS echo reply with the
       Reply Mode Order TLV, the initiator LSR MUST ignore the whole
       Reply Mode Order TLV and MUST only use the value from the Reply




Akiya, et al.                Standards Track                    [Page 6]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


       Mode field of the received MPLS echo reply.  It may be beneficial
       for implementations to provide counters and/or logs, with
       appropriate log dampening, to record this error case.

   2.  The Reply Mode Order TLV MAY be included in MPLS echo requests.

   3.  The Reply Mode field of an MPLS echo request MUST be set to a
       valid value even when supplying the Reply Mode Order TLV.  The
       initiator LSR SHOULD set the Reply Mode field of an MPLS echo
       request to a value that corresponds to a return path that is most
       likely to be available, in case the responder LSR does not
       understand the Reply Mode Order TLV.

   4.  If a responder LSR understands the Reply Mode Order TLV but the
       TLV is not valid (due to the conditions described in items 6, 7,
       8, and 9 below), then the responder LSR MUST ignore the whole
       Reply Mode Order TLV and MUST only use the value from the Reply
       Mode field of the received MPLS echo request.  It may be
       beneficial for implementations to provide counters and/or logs,
       with appropriate log dampening, to record this error case.

   5.  If a responder LSR understands the Reply Mode Order TLV and the
       TLV is valid, then the responder LSR MUST consider the Reply Mode
       values specified in the TLV and MUST NOT use the value specified
       in the Reply Mode field of the received MPLS echo request.  In
       other words, a valid Reply Mode Order TLV overrides the value
       specified in the Reply Mode field of the received MPLS echo
       request.

   6.  The Reply Mode Order TLV MUST contain at least one Reply Mode
       value.

   7.  A Reply Mode value, except for Reply Mode value 5 (Reply via
       Specified Path), MUST NOT be repeated (i.e., MUST NOT appear
       multiple times) in the Reply Mode Order TLV.

   8.  Reply Mode value 5 (Reply via Specified Path) MAY be included
       more than once in the Reply Mode Order TLV.  However, in such a
       case, a Reply Path TLV MUST be included for all instances of
       Reply Mode value 5 that are included in the Reply Mode Order TLV.
       In other words, three instances of Reply Mode value 5 in the
       Reply Mode Order TLV will each require a Reply Path TLV.

   9.  The Reply Mode value 1 (Do not reply) MUST NOT be used in the
       Reply Mode Order TLV.






Akiya, et al.                Standards Track                    [Page 7]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   The responder LSR SHOULD select the first available return path in
   this TLV.  The Reply Mode value corresponding to the selected return
   path MUST be set in the Reply Mode field of the MPLS echo reply to
   communicate back to the initiator LSR which return path was chosen.

   The format of the TLV is as follows:

      0                   1                   2                   3
      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     | Reply Mode Order TLV Type     |          Length               |
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
     ~ Reply Mode 1  | Reply Mode 2  | Reply Mode 3  | Reply Mode 4  ~
     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                      Figure 1: Reply Mode Order TLV

   This is a variable-length optional TLV.  The Reply Mode Order TLV
   Type is 32770.

   The Length field is 2 octets in length.  It defines the length, in
   octets, of the list of Reply Mode values.

   Each Reply Mode field is 1 octet, and there is no padding.

4.  Relationships to Other LSP Ping and Traceroute Features

4.1.  Backwards Compatibility with "Reply via Specified Path" Reply Mode

   [RFC7110] introduces the "Reply via Specified Path" (value=5) Reply
   Mode.  [RFC7110] also specifies that if this Reply Mode is used the
   Reply Path TLV MUST be included.  This document relaxes the semantics
   and specifies that this Reply Mode MAY be used without the Reply Path
   TLV.  This MAY be done to indicate that the reverse LSP SHALL be used
   as the return path.

   If an initiator LSR that sent an MPLS echo request message with the
   "Reply via Specified Path" Reply Mode but without including the Reply
   Path TLV receives back an MPLS echo reply message with a return code
   of "Malformed echo request received", then the initiator LSR SHOULD
   assume that the responder LSR does not support the mechanism defined
   in this document.

4.2.  Reply Path TLV

   A Reply Path TLV [RFC7110] is defined to identify a single return
   path.  When the initiator LSR wants to use the Reply Mode Order TLV
   to specify multiple return paths, then the initiator LSR SHOULD



Akiya, et al.                Standards Track                    [Page 8]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   include multiple "Reply via Specified Path" (value=5) Reply Mode
   values and multiple corresponding Reply Path TLV objects (one Reply
   Path TLV corresponding to a "Reply via Specified Path" Reply Mode and
   one Reply Path TLV identifying a return path).

   As described in Section 3.1, it is valid to use the "Reply via
   Specified Path" Reply Mode without inclusion in a Reply Path TLV.
   For the Reply Mode Order TLV, it is also valid to include a "Reply
   via Specified Path" Reply Mode value without a corresponding Reply
   Path TLV; this implies that the reverse LSP is the preferred return
   path.  When multiple consecutive "Reply via Specified Path" Reply
   Mode values are included but fewer corresponding Reply Path TLV
   objects exist, the responder LSR SHOULD think that the former "Reply
   via Specified Path" Reply Mode values have corresponding Reply Path
   TLVs.  The latter "Reply via Specified Path" Reply Mode values have
   no corresponding Reply Path TLVs.  For example, if the Reply Mode
   Order TLV carries Reply Modes {5, 5, 5} and only two Reply Path TLVs
   carry FEC X and FEC Y, respectively, then the reply path order is as
   follows:

   1.  Reply via Specified Path (FEC X)

   2.  Reply via Specified Path (FEC Y)

   3.  Reply via Specified Path (reverse LSP)

4.2.1.  Example 1: Reply Mode Order TLV Usage with Reply Path TLV

   If the initiator LSR was interested in encoding the following return
   paths:

   1.  Reply via application level control channel

   2.  FEC X

   3.  FEC Y

   4.  Reply via an IPv4/IPv6 UDP packet

   Then the MPLS echo request message is to carry:

   o  The Reply Mode Order TLV carrying Reply Modes {4, 5, 5, 2}

   o  One Reply Path TLV carrying FEC X

   o  One Reply Path TLV carrying FEC Y





Akiya, et al.                Standards Track                    [Page 9]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   The encoding specified by the Reply Mode Order TLV and the Reply Path
   TLV in the MPLS echo request message will cause the responder LSR to
   prefer "Reply via application level control channel (4)", followed by
   FEC X, FEC Y, and then "Reply via an IPv4/IPv6 UDP packet (2)".

4.2.2.  Example 2: Reply Mode Order TLV Usage with Reply Path TLV

   If the initiator LSR was interested in encoding the following return
   paths:

   1.  Reverse LSP

   2.  Reply via an IPv4/IPv6 UDP packet

   3.  FEC X

   4.  FEC Y

   Then the MPLS echo request message is to carry:

   o  The Reply Mode Order TLV carrying Reply Modes {5, 2, 5, 5}

   o  One Reply Path TLV with the B bit set

   o  One Reply Path TLV carrying FEC X

   o  One Reply Path TLV carrying FEC Y

   The encoding specified by the Reply Mode Order TLV and the Reply Path
   TLV in the MPLS echo request message will cause the responder LSR to
   prefer the reverse LSP, followed by "Reply via an IPv4/IPv6 UDP
   packet (2)", FEC X, and then FEC Y.

4.3.  Proxy LSP Ping

   The mechanism defined in this document will work with Proxy LSP Ping
   as defined by [RFC7555].  The MPLS proxy ping request message can
   carry a Reply Mode value in the header and one or more Reply Mode
   values in the Reply Mode Order TLV.  It is RECOMMENDED that Reply
   Mode 2 (Reply via an IPv4/IPv6 UDP packet) be used in the Reply Mode
   field of the MPLS proxy ping request message.

4.3.1.  Proxy LSR Sending an MPLS Echo Request

   If the proxy LSR is sending an MPLS echo request, then the proxy LSR
   MUST copy the following elements from the MPLS proxy ping request
   message to the MPLS echo request message:




Akiya, et al.                Standards Track                   [Page 10]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   o  The Reply Mode field.

   o  The Reply Mode Order TLV.

   o  The Reply Path TLV(s).  If there is more than one Reply Path TLV,
      then the ordering of the TLVs MUST be preserved when copying.

4.3.2.  Proxy LSR Sending an MPLS Proxy Ping Reply

   If the proxy LSR is sending an MPLS proxy ping reply, then it is
   RECOMMENDED that the Reply Mode Order TLV be ignored and the Reply
   Mode field in the MPLS proxy ping request message be used.

5.  Security Considerations

   The security considerations specified in [RFC4379] and [RFC7110] also
   apply for this document.

   In addition, this document introduces the Reply Mode Order TLV.  It
   provides a new way for an unauthorized source to gather more network
   information, especially information regarding the potential return
   path(s) of an LSP.  To protect against unauthorized sources using
   MPLS echo request messages with the Reply Mode Order TLV to obtain
   network information, as also specified in [RFC4379], it is
   RECOMMENDED that implementations provide a means of checking the
   source addresses of MPLS echo request messages against an access list
   before accepting the message.

   Another potential security issue is that the MPLS echo request and
   reply messages are not encrypted; the contents of the MPLS echo
   request and reply messages may therefore be potentially exposed.
   Although the exposure is within the MPLS domain, if such exposure is
   a concern, some encryption mechanisms [MPLS-OPP-ENCR] may be
   employed.

6.  Manageability Considerations

   Section 2 described problems that increase complexity with respect to
   operations and implementations.  In order to simplify operations and
   to allow LSP Ping and Traceroute to function efficiently whilst
   preserving code simplicity, it is RECOMMENDED that implementations
   allow devices to have configuration options to set operator-preferred
   Reply Modes.  For example:

   o  For those operators who are more interested in MPLS echo reply
      packets reaching the initiator LSR:

      1.  Reply via an IPv4/IPv6 UDP packet (2)



Akiya, et al.                Standards Track                   [Page 11]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


      2.  Reply via application level control channel (4)

      3.  Reply via Specified Path (5)

   o  For those operators who are more interested in MPLS echo reply
      packets testing the paths related to the forward LSP:

      1.  Reply via Specified Path (5)

      2.  Reply via application level control channel (4)

      3.  Reply via an IPv4/IPv6 UDP packet (2)

7.  IANA Considerations

7.1.  New Reply Mode Order TLV

   IANA has assigned a new TLV type value from the "TLVs" sub-registry
   within the "Multiprotocol Label Switching Architecture (MPLS) Label
   Switched Paths (LSPs) Ping Parameters" registry, for the Reply Mode
   Order TLV.

   The new TLV Type value has been assigned from the range 32768-49161,
   as specified in Sections 3 and 7.2 of [RFC4379]; this range is for
   optional TLVs that can be silently dropped if not recognized.

     Type    Meaning                            Reference
     -----   -------                            ---------
     32770   Reply Mode Order TLV               RFC 7737

8.  References

8.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119,
              DOI 10.17487/RFC2119, March 1997,
              <http://www.rfc-editor.org/info/rfc2119>.

   [RFC4379]  Kompella, K. and G. Swallow, "Detecting Multi-Protocol
              Label Switched (MPLS) Data Plane Failures", RFC 4379,
              DOI 10.17487/RFC4379, February 2006,
              <http://www.rfc-editor.org/info/rfc4379>.

   [RFC7110]  Chen, M., Cao, W., Ning, S., Jounay, F., and S. Delord,
              "Return Path Specified Label Switched Path (LSP) Ping",
              RFC 7110, DOI 10.17487/RFC7110, January 2014,
              <http://www.rfc-editor.org/info/rfc7110>.



Akiya, et al.                Standards Track                   [Page 12]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


8.2.  Informative References

   [MPLS-OPP-ENCR]
              Farrel, A. and S. Farrell, "Opportunistic Security in MPLS
              Networks", Work in Progress, draft-ietf-mpls-
              opportunistic-encrypt-00, July 2015.

   [RFC3473]  Berger, L., Ed., "Generalized Multi-Protocol Label
              Switching (GMPLS) Signaling Resource ReserVation Protocol-
              Traffic Engineering (RSVP-TE) Extensions", RFC 3473,
              DOI 10.17487/RFC3473, January 2003,
              <http://www.rfc-editor.org/info/rfc3473>.

   [RFC5960]  Frost, D., Ed., Bryant, S., Ed., and M. Bocci, Ed., "MPLS
              Transport Profile Data Plane Architecture", RFC 5960,
              DOI 10.17487/RFC5960, August 2010,
              <http://www.rfc-editor.org/info/rfc5960>.

   [RFC7555]  Swallow, G., Lim, V., and S. Aldrin, "Proxy MPLS Echo
              Request", RFC 7555, DOI 10.17487/RFC7555, June 2015,
              <http://www.rfc-editor.org/info/rfc7555>.






























Akiya, et al.                Standards Track                   [Page 13]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


Appendix A.  Reply Mode Order TLV Beneficial Scenarios

   This section lists examples of how the Reply Mode Order TLV can be
   beneficial.

A.1.  Incorrect Forwarding Scenario

   As shown in Figure 2, a network has an LSP with the forwarding path
   A-B-C-D-E.  The LSP has a control channel.

                      A------B------C------D------E
                                           |
                                           |
                                           F

                      Forward Path: A-B-C-D-E

                      Figure 2: Incorrect Forwarding

   If D is incorrectly label switching to F (instead of E), then LSP
   Traceroute with "Reply via application level control channel (4)"
   will result in the following:

      Success (Reply from B)
      Success (Reply from C)
      Success (Reply from D)
      Timeout...
      Complete

   This is because F does not have a control channel on which to send
   the MPLS echo reply message.  With the extensions described in this
   document, the same procedures can be performed with the Reply Mode
   Order TLV carrying {4, 2}. When LSP Traceroute is issued, then the
   following output may be displayed without any unnecessary timeout:

      Success (Reply from B, Reply Mode: 4)
      Success (Reply from C, Reply Mode: 4)
      Success (Reply from D, Reply Mode: 4)
      FEC Mismatch (Reply from F, Reply Mode: 2)
      Complete

   The result provides more diagnostic information to the initiator LSR,
   and without any delay (i.e., timeout from one or more downstream
   LSRs).







Akiya, et al.                Standards Track                   [Page 14]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


A.2.  Non-Co-Routed Bidirectional LSP Scenario

   As shown in Figure 3, a network has a bidirectional LSP where the
   forward LSP and the reverse LSP are not fully co-routed.

                           +----C------D----+
                          /                  \
                  A------B                    G------H
                          \                  /
                           +----E------F----+

                  Forward Path: A-B-C-D-G-H (upper path)
                  Reverse Path: H-G-F-E-B-A (lower path)

                 Figure 3: Non-Co-Routed Bidirectional LSP

   Some operators may prefer and configure "Reply via Specified Path" as
   the default Reply Mode but without including the Reply Path TLV, to
   indicate that the reverse LSP is used as the return path when MPLS
   echo request messages are sent on bidirectional LSPs.  Without the
   extensions described in this document, the following behaviors will
   be seen:

   o  When LSP Ping is issued from A, the reply will come back on the
      reverse LSP from H.

   o  When LSP Traceroute is issued from A, the replies will come back
      on the reverse LSP from B, G, and H but will encounter a timeout
      from C and D, as there are no reverse LSPs on those nodes.

   o  When LSP Ping with a specific TTL value is issued from A, whether
      a timeout will be encountered depends on the value of the TTL used
      (i.e., whether or not the MPLS echo request terminates on a node
      that has a reverse LSP).

   One can argue that the initiator LSR can automatically generate the
   same MPLS echo request with a different Reply Mode value to those
   nodes that time out.  However, such a mechanism will result in an
   extended time for the entire operation to complete (i.e., multiple
   seconds to multiple minutes).  This is undesirable, and perhaps
   unacceptable if the "user" is an application.










Akiya, et al.                Standards Track                   [Page 15]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


   With the extensions described in this document, the same procedures
   can be performed with the Reply Mode Order TLV carrying {5, 2}.  When
   LSP Traceroute is issued, then the following output may be displayed
   without any unnecessary timeout:

      Success (Reply Mode: 5)
      Success (Reply Mode: 2)
      Success (Reply Mode: 2)
      Success (Reply Mode: 5)
      Success (Reply Mode: 5)
      Complete

Acknowledgements

   The authors especially thank Tom Taylor, who passed away close to the
   time of publication of this RFC.  Tom did a careful review of the
   document and provided useful comments.

   The authors would also like to thank Santiago Alvarez and Faisal
   Iqbal for discussions that motivated the creation of this document;
   Sam Aldrin, Curtis Villamizar, Ross Callon, Jeffrey Zhang, Jeremy
   Whittaker, Mustapha Alissaoui, Qin Wu, Jie Dong, and Adrian Farrel
   for providing valuable comments that influenced the content of the
   document; and Dan Frost, Victor Kuarsingh, and Deborah Brungard for
   reviewing the document and providing useful comments.

Contributors

   Shaleen Saxena
   Brocade

   Email: ssaxena@brocade.com



















Akiya, et al.                Standards Track                   [Page 16]
^L
RFC 7737           LSP Ping Reply Mode Simplification       January 2016


Authors' Addresses

   Nobo Akiya
   Big Switch Networks

   Email: nobo.akiya.dev@gmail.com


   George Swallow
   Cisco Systems

   Email: swallow@cisco.com


   Carlos Pignataro
   Cisco Systems

   Email: cpignata@cisco.com


   Loa Andersson
   Huawei

   Email: loa@mail01.huawei.com


   Mach(Guoyi) Chen
   Huawei

   Email: mach.chen@huawei.com





















Akiya, et al.                Standards Track                   [Page 17]
^L