1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341
|
<pre>Internet Engineering Task Force (IETF) IJ. Wijnands, Ed.
Request for Comments: 8296 Cisco Systems, Inc.
Category: Experimental E. Rosen, Ed.
ISSN: 2070-1721 Juniper Networks, Inc.
A. Dolganow
Nokia
J. Tantsura
Individual
S. Aldrin
Google, Inc.
I. Meilik
Broadcom
January 2018
<span class="h1">Encapsulation for Bit Index Explicit Replication (BIER)</span>
<span class="h1">in MPLS and Non-MPLS Networks</span>
Abstract
Bit Index Explicit Replication (BIER) is an architecture that
provides optimal multicast forwarding through a "multicast domain",
without requiring intermediate routers to maintain any per-flow state
or to engage in an explicit tree-building protocol. When a multicast
data packet enters the domain, the ingress router determines the set
of egress routers to which the packet needs to be sent. The ingress
router then encapsulates the packet in a BIER header. The BIER
header contains a bit string in which each bit represents exactly one
egress router in the domain; to forward the packet to a given set of
egress routers, the bits corresponding to those routers are set in
the BIER header. The details of the encapsulation depend on the type
of network used to realize the multicast domain. This document
specifies a BIER encapsulation that can be used in an MPLS network
or, with slight differences, in a non-MPLS network.
<span class="grey">Wijnands, et al. Experimental [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for examination, experimental implementation, and
evaluation.
This document defines an Experimental Protocol for the Internet
community. This document is a product of the Internet Engineering
Task Force (IETF). It represents the consensus of the IETF
community. It has received public review and has been approved for
publication by the Internet Engineering Steering Group (IESG). Not
all documents approved by the IESG are a candidate for any level of
Internet Standard; see <a href="./rfc7841#section-2">Section 2 of RFC 7841</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="https://www.rfc-editor.org/info/rfc8296">https://www.rfc-editor.org/info/rfc8296</a>.
Copyright Notice
Copyright (c) 2018 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="https://trustee.ietf.org/license-info">https://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
<span class="grey">Wijnands, et al. Experimental [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Table of Contents
<a href="#section-1">1</a>. Introduction ....................................................<a href="#page-3">3</a>
<a href="#section-2">2</a>. BIER Header .....................................................<a href="#page-5">5</a>
<a href="#section-2.1">2.1</a>. In MPLS Networks ...........................................<a href="#page-5">5</a>
<a href="#section-2.1.1">2.1.1</a>. Encapsulation Initial Four Octets ...................<a href="#page-5">5</a>
<a href="#section-2.1.1.1">2.1.1.1</a>. The BIER-MPLS Label ........................<a href="#page-5">5</a>
<a href="#section-2.1.1.2">2.1.1.2</a>. Other Fields of the Initial Four Octets ....<a href="#page-8">8</a>
<a href="#section-2.1.2">2.1.2</a>. Remainder of Encapsulation ..........................<a href="#page-9">9</a>
<a href="#section-2.1.3">2.1.3</a>. Further Encapsulating a BIER Packet ................<a href="#page-12">12</a>
<a href="#section-2.2">2.2</a>. In Non-MPLS Networks ......................................<a href="#page-13">13</a>
<a href="#section-2.2.1">2.2.1</a>. Encapsulation Initial Four Octets ..................<a href="#page-13">13</a>
<a href="#section-2.2.1.1">2.2.1.1</a>. The BIFT-id ...............................<a href="#page-13">13</a>
<a href="#section-2.2.1.2">2.2.1.2</a>. Other Fields of the Initial Four Octets ...<a href="#page-13">13</a>
<a href="#section-2.2.2">2.2.2</a>. Remainder of Encapsulation .........................<a href="#page-14">14</a>
<a href="#section-2.2.3">2.2.3</a>. Further Encapsulating a BIER Packet ................<a href="#page-15">15</a>
<a href="#section-3">3</a>. Imposing and Processing the BIER Encapsulation .................<a href="#page-16">16</a>
<a href="#section-4">4</a>. IANA Considerations ............................................<a href="#page-18">18</a>
<a href="#section-5">5</a>. IEEE Considerations ............................................<a href="#page-18">18</a>
<a href="#section-6">6</a>. Security Considerations ........................................<a href="#page-19">19</a>
<a href="#section-7">7</a>. References .....................................................<a href="#page-20">20</a>
<a href="#section-7.1">7.1</a>. Normative References ......................................<a href="#page-20">20</a>
<a href="#section-7.2">7.2</a>. Informative References ....................................<a href="#page-21">21</a>
Acknowledgements ..................................................<a href="#page-22">22</a>
Contributors ......................................................<a href="#page-22">22</a>
Authors' Addresses ................................................<a href="#page-24">24</a>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
[<a id="ref-RFC8279">RFC8279</a>] describes a new architecture for the forwarding of
multicast data packets. Known as "Bit Index Explicit Replication"
(BIER), that architecture provides optimal forwarding of multicast
data packets through a "multicast domain". It does so without
requiring any explicit tree-building protocol and without requiring
intermediate nodes to maintain any per-flow state.
This document will use terminology defined in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>].
A router that supports BIER is known as a "Bit-Forwarding Router"
(BFR). A "BIER domain" is a connected set of BFRs, each of which has
been assigned a BFR-prefix. A BFR-prefix is a routable IP address of
a BFR and is used by BIER to identify a BFR. A packet enters a BIER
domain at a Bit-Forwarding Ingress Router (BFIR) and leaves the BIER
domain at one or more Bit-Forwarding Egress Routers (BFERs). As
specified in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>], each BFR of a given BIER domain is
provisioned to be in one or more "sub-domains" (SDs). In the context
<span class="grey">Wijnands, et al. Experimental [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
of a given SD, each BFIR and BFER must have a BFR-id that is unique
within that SD. A BFR-id is just a number in the range [1,65535]
that, relative to a BIER SD, identifies a BFR uniquely.
As described in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>], BIER requires that multicast data packets
be encapsulated with a header that provides the information needed to
support the BIER forwarding procedures. This information includes
the SD to which the packet has been assigned, a Set Identifier (SI),
a BitString, and a BitStringLength (BSL). Together, these values are
used to identify the set of BFERs to which the packet must be
delivered.
This document defines an encapsulation that can be used in either
MPLS networks or non-MPLS networks. However, the construction and
processing of the BIER header are slightly different in MPLS networks
than in non-MPLS networks. In particular:
o The handling of certain fields in the encapsulation header (the
"BIER header") is different, depending upon whether the underlying
network is an MPLS network or not.
o In an MPLS network, the first four octets of a BIER header are
also the bottom entry (the last four octets) of an MPLS label
stack.
The MPLS-based encapsulation is explained in detail in <a href="#section-2.1">Section 2.1</a>.
The differences between the MPLS-based encapsulation and the non-MPLS
encapsulation are explained in <a href="#section-2.2">Section 2.2</a>.
Following the BIER header is the "payload". The payload may be an
IPv4 packet, an IPv6 packet, an Ethernet frame, an MPLS packet, or an
Operations, Administration, and Maintenance (OAM) packet. (The use
of BIER with other payload types is also possible but is not further
discussed in this document.) The BIER header contains information
(the Next Protocol field) identifying the type of the payload.
If the payload is an MPLS packet, then an MPLS label stack
immediately follows the BIER header. The top label of this MPLS
label stack may be either a downstream-assigned label [<a href="./rfc3031" title=""Multiprotocol Label Switching Architecture"">RFC3031</a>] or an
upstream-assigned label [<a href="./rfc5331" title=""MPLS Upstream Label Assignment and Context-Specific Label Space"">RFC5331</a>].
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document are to be interpreted as described in
<a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a> [<a href="./rfc2119" title=""Key words for use in RFCs to Indicate Requirement Levels"">RFC2119</a>] [<a href="./rfc8174" title=""Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words"">RFC8174</a>] when, and only when, they appear in all
capitals, as shown here.
<span class="grey">Wijnands, et al. Experimental [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. BIER Header</span>
The BIER header is shown in Figure 1.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| BIFT-id | TC |S| TTL |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|Nibble | Ver | BSL | Entropy |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|OAM|Rsv| DSCP | Proto | BFIR-id |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| BitString (first 32 bits) ~
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
~ ~
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
~ BitString (last 32 bits) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Figure 1: BIER Header
The BIFT-id represents a particular Bit Index Forwarding
Table (BIFT); see <a href="./rfc8279#section-6.4">Section 6.4 of [RFC8279]</a>. As explained in
[<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>], each BIFT corresponds to a particular combination of SD,
BSL, and SI.
<a href="#section-2.1">Section 2.1</a> explains how the fields of the encapsulation header are
used in MPLS networks. For those fields that are used differently in
non-MPLS networks, <a href="#section-2.2">Section 2.2</a> explains the differences.
The default BitStringLength value for the encapsulations defined in
this document is 256. See <a href="./rfc8279#section-3">Section 3 of [RFC8279]</a> for a discussion of
the default BitStringLength value.
<span class="h3"><a class="selflink" id="section-2.1" href="#section-2.1">2.1</a>. In MPLS Networks</span>
<span class="h4"><a class="selflink" id="section-2.1.1" href="#section-2.1.1">2.1.1</a>. Encapsulation Initial Four Octets</span>
<span class="h5"><a class="selflink" id="section-2.1.1.1" href="#section-2.1.1.1">2.1.1.1</a>. The BIER-MPLS Label</span>
As stated in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>], when a BIER domain is also an IGP domain, IGP
extensions can be used by each BFR to advertise the BFR-id and
BFR-prefix. The extensions for OSPF are given in
[<a href="#ref-OSPF_BIER_EXTENSIONS">OSPF_BIER_EXTENSIONS</a>]. The extensions for IS-IS are given in
[<a href="#ref-ISIS_BIER_EXTENSIONS">ISIS_BIER_EXTENSIONS</a>].
<span class="grey">Wijnands, et al. Experimental [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
When a particular BIER domain is both an IGP domain and an MPLS
network, we assume that each BFR will also use IGP extensions to
advertise a set of one or more "BIER-MPLS" labels. When the domain
contains a single SD, a given BFR needs to advertise one such label
for each combination of SI and BSL. If the domain contains multiple
SDs, a BFR needs to advertise one such label per SI per BSL for
each SD.
In some environments, the only routing protocol in a BIER domain
might be BGP; in this case, the BGP extensions described in
[<a href="#ref-BGP_BIER_EXTENSIONS">BGP_BIER_EXTENSIONS</a>] can be used to advertise the necessary set of
BIER-MPLS labels.
The BIER-MPLS labels are locally significant (i.e., unique only to
the BFR that advertises them) downstream-assigned MPLS labels.
Penultimate hop popping [<a href="./rfc3031" title=""Multiprotocol Label Switching Architecture"">RFC3031</a>] MUST NOT be applied to a BIER-MPLS
label.
Suppose, for example, that there is a single SD (the default SD),
that the network is using a BSL of 256, and that all BFERs in the SD
have BFR-ids in the range [1,512]. Since each BIER BitString is 256
bits long, this requires the use of two SIs: SI=0 and SI=1. So each
BFR will advertise, via IGP extensions, two MPLS labels for BIER: one
corresponding to SI=0 and one corresponding to SI=1. The
advertisements of these labels will also bind each label to the
default SD and to BSL 256.
As another example, suppose a particular BIER domain contains two SDs
(SD 0 and SD 1), supports two BSLs (256 and 512), and contains
1024 BFRs. A BFR that is provisioned for both SDs, and that supports
both BSLs, would have to advertise the following set of BIER-MPLS
labels:
L1: corresponding to SD 0, BSL 256, SI 0.
L2: corresponding to SD 0, BSL 256, SI 1.
L3: corresponding to SD 0, BSL 256, SI 2.
L4: corresponding to SD 0, BSL 256, SI 3.
L5: corresponding to SD 0, BSL 512, SI 0.
L6: corresponding to SD 0, BSL 512, SI 1.
L7: corresponding to SD 1, BSL 256, SI 0.
L8: corresponding to SD 1, BSL 256, SI 1.
<span class="grey">Wijnands, et al. Experimental [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
L9: corresponding to SD 1, BSL 256, SI 2.
L10: corresponding to SD 1, BSL 256, SI 3.
L11: corresponding to SD 1, BSL 512, SI 0.
L12: corresponding to SD 1, BSL 512, SI 1.
The above example should not be taken as implying that the BFRs need
to advertise 12 individual labels. For instance, instead of
advertising a label for <SD 1, BSL 512, SI 0> and a label for
<SD 1, BSL 512, SI 1>, a BFR could advertise a contiguous range of
labels (in this case, a range containing exactly two labels)
corresponding to <SD 1, BSL 512>. The first label in the range could
correspond to SI 0, and the second to SI 1. The precise mechanism
for generating and forming the advertisements is outside the scope of
this document; see [<a href="#ref-OSPF_BIER_EXTENSIONS">OSPF_BIER_EXTENSIONS</a>] and [<a href="#ref-ISIS_BIER_EXTENSIONS">ISIS_BIER_EXTENSIONS</a>].
The BIER-MPLS label corresponding to a particular combination of SD,
SI, and BSL is interpreted as representing the BIFT that corresponds
to that same combination of SD, SI, and BSL. That is, the BIER-MPLS
label performs the function of a BIFT-id. This label value is
carried in the BIFT-id field of the BIER encapsulation.
It is crucial to understand that in an MPLS network the first
four octets of the BIER encapsulation header are also the last
four octets of the MPLS header. Therefore, any prior MPLS label
stack entries MUST have the S bit (see [<a href="./rfc3032" title=""MPLS Label Stack Encoding"">RFC3032</a>]) clear (i.e., the
S bit must be 0).
When a BFR receives an MPLS packet and the next label to be processed
is one of its BIER-MPLS labels, it will assume that the remainder of
the BIER header (see <a href="#section-2.1.2">Section 2.1.2</a>) immediately follows the stack.
Note that in practice, labels only have to be assigned if they are
going to be used. If a particular BIER domain supports BSLs 256 and
512, but some SD, say SD 1, only uses BSL 256, then it is not
necessary to assign labels that correspond to the combination of SD 1
and BSL 512.
<span class="grey">Wijnands, et al. Experimental [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h5"><a class="selflink" id="section-2.1.1.2" href="#section-2.1.1.2">2.1.1.2</a>. Other Fields of the Initial Four Octets</span>
TC:
The "Traffic Class" field [<a href="./rfc5462" title=""Multiprotocol Label Switching (MPLS) Label Stack Entry: "">RFC5462</a>] has its usual meaning in an
MPLS label stack entry.
S bit:
When a BIER packet is traveling through an MPLS network, the
high-order 20 bits of the initial four octets of the BIER
encapsulation contain an MPLS label in the BIFT-id field. These
four octets are treated as the final entry in the packet's MPLS
label stack. Hence, the S bit (see [<a href="./rfc3032" title=""MPLS Label Stack Encoding"">RFC3032</a>]) MUST be set to 1.
If there are any MPLS label stack entries immediately preceding
the BIER encapsulation, the S bit of those label stack entries
MUST be set to 0.
TTL:
This is the usual MPLS "Time to Live" field [<a href="./rfc3032" title=""MPLS Label Stack Encoding"">RFC3032</a>]. When a
BIER packet is received, its "incoming TTL" (see below) is taken
from this TTL field.
When a BIER packet is forwarded to one or more BFR adjacencies,
the BIER-MPLS label carried by the forwarded packet MUST have a
TTL field whose value is one less than that of the packet's
incoming TTL.
If a BIER packet's incoming TTL is 1 or greater and one of the
bits in its BitString identifies the current BFR, then the current
BFR is a BFER for the packet. Therefore, the current BFR MUST
process the packet as a BFER, e.g., by removing the BIER
encapsulation and processing the payload based on the contents of
the Proto (Next Protocol) field.
If the incoming TTL is 0, the packet is considered to be
"expired". If the incoming TTL is 1 and the BitString has a bit
set that does not identify the current BFR, the packet is also
considered to be expired. Expired packets SHOULD be passed to an
error-handling procedure. (Optional implementation-specific
rate limiting may be applied to control the rate at which packets
are passed to the error-handling procedure.) Specification of the
error-handling procedure is outside the scope of this document.
<span class="grey">Wijnands, et al. Experimental [Page 8]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-9" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Note that if a received BIER packet has an incoming TTL of 1 and
its BitString has a bit set identifying the current BFR, the
payload MUST be processed by the current BFR, but the packet
MUST NOT be forwarded further, and the packet SHOULD also be
passed to the error-handling procedures for expired packets
(subject to any implementation-specific rate limiting).
<span class="h4"><a class="selflink" id="section-2.1.2" href="#section-2.1.2">2.1.2</a>. Remainder of Encapsulation</span>
Nibble:
This field is set to the binary value 0101; this ensures that the
MPLS ECMP logic will not confuse the remainder of the BIER header
with an IP header or with the header of a pseudowire packet. In
an MPLS network, if a BFR receives a BIER packet with any other
value in the first nibble after the label stack, it SHOULD discard
the packet and log an error.
Ver:
This 4-bit field identifies the version of the BIER header. This
document specifies version 0 of the BIER header. If a packet is
received by a particular BFR and that BFR does not support the
specified version of the BIER header, the BFR MUST discard the
packet and log an error.
The value 0xF is reserved for experimental use; that value
MUST NOT be assigned by any future IETF document or by IANA.
BSL:
This 4-bit field encodes the length in bits of the BitString.
Note: When parsing the BIER header, a BFR MUST infer the length of
the BitString from the BIFT-id and MUST NOT infer it from the
value of this field. This field is present only to enable offline
tools (such as LAN analyzers) to parse the BIER header.
<span class="grey">Wijnands, et al. Experimental [Page 9]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-10" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
If k is the length of the BitString, the value of this field is
log2(k)-5. However, only certain values are supported:
1: 64 bits
2: 128 bits
3: 256 bits
4: 512 bits
5: 1024 bits
6: 2048 bits
7: 4096 bits
The value of this field MUST NOT be set to any value other than
those listed above. A received packet containing another value in
this field SHOULD be discarded and an error logged. If the value
in this field is other than what is expected based on the
BIER-MPLS label, the packet SHOULD be discarded and an error
logged.
Entropy:
This 20-bit field specifies an "entropy" value that can be used
for load-balancing purposes. The BIER forwarding process may do
equal-cost load balancing, in which case the load-balancing
procedure MUST choose the same path for any two packets that have
the same entropy value and the same BitString. Please see
<a href="#section-6.7">Section 6.7</a> ("Equal-Cost Multipath Forwarding") of [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>] for a
more detailed discussion of BIER load-balancing procedures.
If a BFIR is encapsulating (as the payload) MPLS packets that have
entropy labels, the BFIR MUST ensure that if two such packets have
the same MPLS entropy label they also have the same value of the
BIER entropy field.
<span class="grey">Wijnands, et al. Experimental [Page 10]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-11" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
OAM:
By default, these two bits are set to 0 by the BFIR and are not
modified by other BFRs. These two bits have no effect on the path
taken by a BIER packet and have no effect on the quality of
service applied to a BIER packet.
The use of these bits in other than the default manner is
OPTIONAL. Specification of the non-default use or uses of these
bits is outside the scope of this document; see [<a href="#ref-BIER-PMM" title=""Performance Measurement (PM) with Marking Method in Bit Index Explicit Replication (BIER) Layer"">BIER-PMM</a>] for an
example of such a specification.
Rsv:
These two bits are currently unused. They SHOULD be set to 0 upon
transmission and MUST be ignored upon reception.
DSCP:
By default, this 6-bit field is not used in MPLS networks. The
default behavior is that all six bits SHOULD be set to 0 upon
transmission and MUST be ignored upon reception.
Non-default use of this field in MPLS networks is outside the
scope of this document.
Proto:
This 6-bit "Next Protocol" field identifies the type of the
payload. (The "payload" is the packet or frame immediately
following the BIER header.) IANA has created a registry called
"BIER Next Protocol Identifiers". This field is to be populated
with the appropriate entry from that registry.
If a BFER receives a BIER packet but does not recognize (or does
not support) the value of the Next Protocol field, the BFER SHOULD
discard the packet and log an error.
BFIR-id:
By default, this is the BFR-id of the BFIR, in the SD to which the
packet has been assigned. The BFR-id is encoded in the 16-bit
field as an unsigned integer in the range [1,65535].
Certain applications may require that the BFIR-id field contain
the BFR-id of a BFR other than the BFIR. However, that usage of
the BFIR-id field is outside the scope of this document.
<span class="grey">Wijnands, et al. Experimental [Page 11]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-12" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
BitString:
This field holds the BitString that, together with the packet's SI
and SD, identifies the destination BFERs for this packet. Note
that the SI and SD for the packet are not carried explicitly in
the BIER header, as a particular BIFT-id always corresponds to a
particular SI and SD.
<span class="h4"><a class="selflink" id="section-2.1.3" href="#section-2.1.3">2.1.3</a>. Further Encapsulating a BIER Packet</span>
Sending a BIER packet from one BFR to another may require the packet
to be further encapsulated. For example, in some scenarios it may be
necessary to encapsulate a BIER packet in an Ethernet frame; in other
scenarios it may be necessary to encapsulate a BIER packet in a UDP
packet. In such cases, the BIER packet itself is the payload of an
"outer" encapsulation.
In this document, we assume that the frame or packet carrying a BIER
packet as its payload is a unicast frame or packet. That is,
although a BIER packet is a multicast packet, we assume that the
frame or packet carrying the BIER packet as its payload is unicast
from one BFR to the next.
Generally, the outer encapsulation has a codepoint identifying the
"next protocol". The outer encapsulation's "next protocol" codepoint
for MPLS MUST be used. If a particular outer encapsulation has a
codepoint for "MPLS with downstream-assigned label" and a different
codepoint for "MPLS with upstream-assigned label", the codepoint for
"MPLS with downstream-assigned label" MUST be used.
For example, if a BIER packet is encapsulated in an Ethernet frame,
the Ethertype MUST be 0x8847 [<a href="./rfc5332" title=""MPLS Multicast Encapsulations"">RFC5332</a>], which is the Ethertype for a
unicast Ethernet frame that carries an MPLS packet whose label stack
begins with a downstream-assigned label.
In the special case where the outer encapsulation is MPLS, the outer
encapsulation has no "next protocol" codepoint. All that is needed
to encapsulate the BIER packet is to push more MPLS label stack
entries (with the S bit clear) on the BIER packet's label stack.
If two BIER packets have the same value in the entropy field of their
respective BIER headers and if both are placed in an outer
encapsulation, it is desirable for the outer encapsulation to
preserve the fact that the two packets have the same entropy. If the
outer encapsulation is MPLS and if the MPLS entropy label [<a href="./rfc6790" title=""The Use of Entropy Labels in MPLS Forwarding"">RFC6790</a>]
is in use in a given deployment, one way to do this is to copy the
value of the BIER header entropy field into an MPLS entropy label.
<span class="grey">Wijnands, et al. Experimental [Page 12]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-13" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h3"><a class="selflink" id="section-2.2" href="#section-2.2">2.2</a>. In Non-MPLS Networks</span>
<span class="h4"><a class="selflink" id="section-2.2.1" href="#section-2.2.1">2.2.1</a>. Encapsulation Initial Four Octets</span>
<span class="h5"><a class="selflink" id="section-2.2.1.1" href="#section-2.2.1.1">2.2.1.1</a>. The BIFT-id</span>
In non-MPLS networks, a BIFT-id MUST be assigned for every
combination of <SD, SI, BSL> that is to be used in that network. The
correspondence between a BIFT-id and a particular <SD, SI, BSL>
triple is unique throughout the BIER domain and is known to all the
BFRs in the BIER domain.
The means by which the BIFT-ids are assigned, and the means by which
these assignments are made known to the BFRs, are outside the scope
of this document.
In an MPLS network, since the BIFT-id is an MPLS label, its value may
be changed as a BIER packet goes from BFR to BFR. In a non-MPLS
network, since the BIFT-id is domain-wide unique, it is not expected
to change as a BIER packet travels.
<span class="h5"><a class="selflink" id="section-2.2.1.2" href="#section-2.2.1.2">2.2.1.2</a>. Other Fields of the Initial Four Octets</span>
TC:
By default, the TC field has no significance in a non-MPLS
network. The default behavior is that this field SHOULD be set to
the binary value 000 upon transmission and MUST be ignored upon
reception.
Non-default use of this field in non-MPLS networks is outside the
scope of this document.
S bit:
The S bit has no significance in a non-MPLS network. It SHOULD be
set to 1 upon transmission, but it MUST be ignored upon reception.
TTL:
This is the BIER "Time to Live" field. Its purpose is to prevent
BIER packets from looping indefinitely in the event of improper
operation of the control plane. When a BIER packet is received,
its "incoming TTL" (see below) is taken from this TTL field.
The effect of this field on the processing of a BIER packet is
described in <a href="#section-2.1.1.2">Section 2.1.1.2</a>.
<span class="grey">Wijnands, et al. Experimental [Page 13]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-14" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h4"><a class="selflink" id="section-2.2.2" href="#section-2.2.2">2.2.2</a>. Remainder of Encapsulation</span>
Nibble:
This field SHOULD be set to 0000 upon transmission but MUST be
ignored upon reception.
Ver:
See <a href="#section-2.1.2">Section 2.1.2</a>.
BSL:
See <a href="#section-2.1.2">Section 2.1.2</a>.
Entropy:
See <a href="#section-2.1.2">Section 2.1.2</a>.
OAM:
See <a href="#section-2.1.2">Section 2.1.2</a>.
Rsv:
See <a href="#section-2.1.2">Section 2.1.2</a>.
DSCP:
This 6-bit field MAY be used to hold a Differentiated Services
Codepoint [<a href="./rfc2474" title=""Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers"">RFC2474</a>]. The significance of this field is outside
the scope of this document.
Proto:
See <a href="#section-2.1.2">Section 2.1.2</a>.
BFIR-id:
See <a href="#section-2.1.2">Section 2.1.2</a>.
BitString:
See <a href="#section-2.1.2">Section 2.1.2</a>.
<span class="grey">Wijnands, et al. Experimental [Page 14]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-15" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h4"><a class="selflink" id="section-2.2.3" href="#section-2.2.3">2.2.3</a>. Further Encapsulating a BIER Packet</span>
Sending a BIER packet from one BFR to another may require the packet
to be further encapsulated. For example, in some scenarios it may be
necessary to encapsulate a BIER packet in an Ethernet frame; in other
scenarios it may be necessary to encapsulate a BIER packet in a UDP
packet. In such cases, the BIER packet itself is the payload of an
"outer" encapsulation.
In this document, we assume that the frame or packet carrying a BIER
packet as its payload is a unicast frame or packet. That is,
although a BIER packet is a multicast packet, we assume that the
frame or packet carrying the BIER packet as its payload is unicast
from one BFR to the next.
Generally, the outer encapsulation has a codepoint identifying the
"next protocol". This codepoint MUST be set to a value that means
"non-MPLS BIER". In particular, a codepoint that means "MPLS" (with
either upstream-assigned or downstream-assigned labels) MUST NOT
be used.
By requiring the use of a distinct codepoint for "non-MPLS BIER", we
allow for deployment scenarios where non-MPLS BIER can coexist with
non-BIER MPLS. The BIFT-id values used by the former will not
conflict with MPLS label values used by the latter.
Therefore, if a non-MPLS BIER packet is encapsulated in an Ethernet
header, the Ethertype MUST NOT be 0x8847 or 0x8848 [<a href="./rfc5332" title=""MPLS Multicast Encapsulations"">RFC5332</a>]. IEEE
has assigned Ethertype 0xAB37 for non-MPLS BIER packets.
In the special case where the outer encapsulation is MPLS, the outer
encapsulation has no "next protocol" codepoint. If it is necessary
to use MPLS as an outer encapsulation for BIER packets, it is
RECOMMENDED to use the MPLS encapsulation for BIER. Procedures for
encapsulating a non-MPLS BIER packet in MPLS are outside the scope of
this document.
If two BIER packets have the same value in the entropy field of their
respective BIER headers and if both are placed in an outer
encapsulation, it is desirable for the outer encapsulation to
preserve the fact that the two packets have the same entropy.
<span class="grey">Wijnands, et al. Experimental [Page 15]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-16" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. Imposing and Processing the BIER Encapsulation</span>
Each BFIR is expected to know the Maximum Transmission Unit (MTU) of
the BIER domain. This may be known by provisioning, or by some other
method outside the scope of this document. Each BFIR also knows the
size of the BIER encapsulation. Thus, each BFIR can deduce the
maximum size of the payload that can be encapsulated in a BIER
packet. We will refer to this payload size as the BIER-MTU.
If a BFIR receives a multicast packet from outside the BIER domain
and the packet size exceeds the BIER-MTU, the BFIR takes whatever
action is appropriate to take when receiving a multicast packet that
is too large to be forwarded to all its next hops. If the
appropriate action is to drop the packet and advertise an MTU to the
source, then the BFIR drops the packet and advertises the BIER-MTU.
If the appropriate action is to fragment the packet, then the
procedures of this section are applied, in sequence, to each
fragment.
When a BFIR processes a multicast packet (or fragment thereof) from
outside the BIER domain, the BFIR carries out the following
procedure:
1. By consulting the "multicast flow overlay" [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>], it
determines the value of the Proto field.
2. By consulting the multicast flow overlay, it determines the set
of BFERs that must receive the packet.
3. If more than one SD is supported, the BFIR assigns the packet to
a particular SD. Procedures for determining the SD to which a
particular packet should be assigned are outside the scope of
this document.
4. The BFIR looks up the BFR-id, in the given SD, of each of the
BFERs.
5. The BFIR converts each such BFR-id into "SI:BitString" format, as
described in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>].
<span class="grey">Wijnands, et al. Experimental [Page 16]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-17" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
6. All such BFR-ids that have the same SI can be encoded into the
same BitString. Details of this encoding can be found in
[<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>]. For each distinct SI that occurs in the list of the
packet's destination BFERs:
a. The BFIR makes a copy of the multicast data packet and
encapsulates the copy in a BIER header (see <a href="#section-2">Section 2</a>). The
BIER header contains the BitString that represents all the
destination BFERs whose BFR-ids (in the given SD) correspond
to the given SI. It also contains the BFIR's BFR-id in the
SD to which the packet has been assigned.
Note well that for certain applications it may be necessary
for the BFIR-id field to contain the BFR-id of a BFR other
than the BFIR that is creating the header. Such uses are
outside the scope of this document.
b. The BFIR then applies to that copy the forwarding procedure
of [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>]. This may result in one or more copies of the
packet (possibly with a modified BitString) being transmitted
to a neighboring BFR.
c. If the non-MPLS BIER encapsulation is being used, the BIFT-id
field is set to the BIFT-id that corresponds to the packet's
<SD, SI, BSL>. The TTL is set according to policy.
If the MPLS BIER encapsulation is being used, the BFIR finds
the BIER-MPLS label that was advertised by the neighbor as
corresponding to the given <SD, SI, BSL>. An MPLS label
stack is then prepended to the packet. This label stack
[<a href="./rfc3032" title=""MPLS Label Stack Encoding"">RFC3032</a>] will contain one label -- the aforementioned
BIER-MPLS label. The S bit MUST be set, indicating the end
of the MPLS label stack. The TTL field of this label stack
entry is set according to policy.
d. The packet may then be transmitted to the neighboring BFR.
(In an MPLS network, this may result in additional MPLS
labels being pushed on the stack. For example, if an RSVP-TE
tunnel is used to transmit packets to the neighbor, a label
representing that tunnel would be pushed onto the stack.)
When an intermediate BFR is processing a received MPLS packet and one
of the BFR's own BIER-MPLS labels rises to the top of the label
stack, the BFR infers the BSL from the label. The SI and SD are also
implicitly identified by the label. The BFR then follows the
forwarding procedures of [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>]. If it forwards a copy of the
packet to a neighboring BFR, it first swaps the label at the top of
the label stack with the BIER-MPLS label, advertised by that
<span class="grey">Wijnands, et al. Experimental [Page 17]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-18" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
neighbor, that corresponds to the same <SD, SI, BSL>. Note that when
this swap operation is done, the TTL field of the BIER-MPLS label of
the outgoing packet MUST be one less than the "incoming TTL" of the
packet, as defined in <a href="#section-2.1.1.2">Section 2.1.1.2</a>.
When an intermediate BFR is processing a received non-MPLS BIER
packet, the BFR infers the BSL from the BIFT-id. The SI and SD are
also implicitly identified by the BIFT-id. The BFR then follows the
forwarding procedures of [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>].
If the BIER payload is an MPLS packet, the BIER header is followed by
an MPLS label stack. This stack is separate from any MPLS stack that
may precede the BIER header. For an example of an application where
it is useful to carry an MPLS packet as the BIER payload, see
[<a href="#ref-BIER_MVPN">BIER_MVPN</a>]. If the BIER encapsulation's Proto field indicates that
the payload is an MPLS packet with an upstream-assigned label at the
top of the stack, the upstream-assigned label is interpreted in the
context of <BFIR-id, sub-domain-id>. Note that the sub-domain-id
must be inferred from the BIFT-id.
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. IANA Considerations</span>
IANA has set up a registry called "BIER Next Protocol Identifiers".
The registration policy for this registry is "IETF Review" [<a href="./rfc8126" title="">RFC8126</a>]
[<a href="./rfc7120" title=""Early IANA Allocation of Standards Track Code Points"">RFC7120</a>].
The initial values in the "BIER Next Protocol Identifiers"
registry are:
0: Reserved
1: MPLS packet with downstream-assigned label at top of stack
2: MPLS packet with upstream-assigned label at top of stack
3: Ethernet frame
4: IPv4 packet
5: OAM packet (Reference: [<a href="#ref-BIER_PING">BIER_PING</a>])
6: IPv6 packet
63: Reserved
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. IEEE Considerations</span>
IEEE has assigned Ethertype 0xAB37 for non-MPLS BIER packets.
<span class="grey">Wijnands, et al. Experimental [Page 18]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-19" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. Security Considerations</span>
Insofar as this document makes use of MPLS, it inherits any security
considerations that apply to the use of the MPLS data plane.
If a BIER encapsulation header is modified in ways other than those
specified in [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>] and in this document, packets may be lost,
stolen, or otherwise misdelivered. Such modifications are likely to
go undetected, as the BIER encapsulation does not provide
cryptographic integrity protection.
Layer 2 encryption can be used to ensure that a BIER-encapsulated
packet is not altered while in transit between adjacent BFRs. If a
BFR itself is compromised, there is no way to prevent the compromised
BFR from making illegitimate modifications to the BIER header or to
prevent it from misforwarding or misdelivering the BIER-encapsulated
packet.
If the routing underlay (see <a href="./rfc8279#section-4.1">Section 4.1 of [RFC8279]</a>) is based on a
unicast routing protocol, BIER assumes that the routers participating
in the unicast routing protocol have not been compromised. BIER has
no procedures to ensure that the unicast routing adjacencies have not
been compromised; that falls within the scope of whatever unicast
routing protocols are being used.
BIER-encapsulated packets should generally not be accepted from
untrusted interfaces or tunnels. For example, an operator may wish
to have a policy of accepting BIER-encapsulated packets only from
interfaces to trusted routers, and not from customer-facing
interfaces.
There may be applications that require a BFR to accept a
BIER-encapsulated packet from an interface to a system that is not
controlled by the network operator. For instance, there may be an
application in which a virtual machine in a data center submits
BIER-encapsulated packets to a router. In such a case, it is
desirable to verify that the packet is from a legitimate source and
that its BitString denotes only systems to which that source is
allowed to send. However, the BIER encapsulation itself does not
provide a way to verify that the source is (1) legitimate, (2) really
the system denoted by the BFIR-id, or (3) allowed to set any
particular set of bits in the BitString.
Insofar as this document relies upon IGP extensions, it inherits any
security considerations that apply to the IGP.
The security considerations of [<a href="./rfc8279" title=""Multicast Using Bit Index Explicit Replication (BIER)"">RFC8279</a>] also apply.
<span class="grey">Wijnands, et al. Experimental [Page 19]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-20" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. References</span>
<span class="h3"><a class="selflink" id="section-7.1" href="#section-7.1">7.1</a>. Normative References</span>
[<a id="ref-RFC2119">RFC2119</a>] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc2119">RFC 2119</a>,
DOI 10.17487/RFC2119, March 1997,
<<a href="https://www.rfc-editor.org/info/rfc2119">https://www.rfc-editor.org/info/rfc2119</a>>.
[<a id="ref-RFC2474">RFC2474</a>] Nichols, K., Blake, S., Baker, F., and D. Black,
"Definition of the Differentiated Services Field
(DS Field) in the IPv4 and IPv6 Headers", <a href="./rfc2474">RFC 2474</a>,
DOI 10.17487/RFC2474, December 1998,
<<a href="https://www.rfc-editor.org/info/rfc2474">https://www.rfc-editor.org/info/rfc2474</a>>.
[<a id="ref-RFC3031">RFC3031</a>] Rosen, E., Viswanathan, A., and R. Callon, "Multiprotocol
Label Switching Architecture", <a href="./rfc3031">RFC 3031</a>,
DOI 10.17487/RFC3031, January 2001,
<<a href="https://www.rfc-editor.org/info/rfc3031">https://www.rfc-editor.org/info/rfc3031</a>>.
[<a id="ref-RFC3032">RFC3032</a>] Rosen, E., Tappan, D., Fedorkow, G., Rekhter, Y.,
Farinacci, D., Li, T., and A. Conta, "MPLS Label Stack
Encoding", <a href="./rfc3032">RFC 3032</a>, DOI 10.17487/RFC3032, January 2001,
<<a href="https://www.rfc-editor.org/info/rfc3032">https://www.rfc-editor.org/info/rfc3032</a>>.
[<a id="ref-RFC5331">RFC5331</a>] Aggarwal, R., Rekhter, Y., and E. Rosen, "MPLS Upstream
Label Assignment and Context-Specific Label Space",
<a href="./rfc5331">RFC 5331</a>, DOI 10.17487/RFC5331, August 2008,
<<a href="https://www.rfc-editor.org/info/rfc5331">https://www.rfc-editor.org/info/rfc5331</a>>.
[<a id="ref-RFC5332">RFC5332</a>] Eckert, T., Rosen, E., Ed., Aggarwal, R., and Y. Rekhter,
"MPLS Multicast Encapsulations", <a href="./rfc5332">RFC 5332</a>,
DOI 10.17487/RFC5332, August 2008,
<<a href="https://www.rfc-editor.org/info/rfc5332">https://www.rfc-editor.org/info/rfc5332</a>>.
[<a id="ref-RFC5462">RFC5462</a>] Andersson, L. and R. Asati, "Multiprotocol Label Switching
(MPLS) Label Stack Entry: "EXP" Field Renamed to "Traffic
Class" Field", <a href="./rfc5462">RFC 5462</a>, DOI 10.17487/RFC5462,
February 2009, <<a href="https://www.rfc-editor.org/info/rfc5462">https://www.rfc-editor.org/info/rfc5462</a>>.
[<a id="ref-RFC7120">RFC7120</a>] Cotton, M., "Early IANA Allocation of Standards Track Code
Points", <a href="https://www.rfc-editor.org/bcp/bcp100">BCP 100</a>, <a href="./rfc7120">RFC 7120</a>, DOI 10.17487/RFC7120,
January 2014, <<a href="https://www.rfc-editor.org/info/rfc7120">https://www.rfc-editor.org/info/rfc7120</a>>.
[<a id="ref-RFC8126">RFC8126</a>] Cotton, M., Leiba, B., and T. Narten, "Guidelines for
Writing an IANA Considerations Section in RFCs", <a href="https://www.rfc-editor.org/bcp/bcp26">BCP 26</a>,
<a href="./rfc8126">RFC 8126</a>, DOI 10.17487/RFC8126, June 2017,
<<a href="https://www.rfc-editor.org/info/rfc8126">https://www.rfc-editor.org/info/rfc8126</a>>.
<span class="grey">Wijnands, et al. Experimental [Page 20]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-21" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
[<a id="ref-RFC8174">RFC8174</a>] Leiba, B., "Ambiguity of Uppercase vs Lowercase in
<a href="./rfc2119">RFC 2119</a> Key Words", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc8174">RFC 8174</a>,
DOI 10.17487/RFC8174, May 2017,
<<a href="https://www.rfc-editor.org/info/rfc8174">https://www.rfc-editor.org/info/rfc8174</a>>.
[<a id="ref-RFC8279">RFC8279</a>] Wijnands, IJ., Ed., Rosen, E., Ed., Dolganow, A.,
Przygienda, T., and S. Aldrin, "Multicast Using Bit Index
Explicit Replication (BIER)", <a href="./rfc8279">RFC 8279</a>,
DOI 10.17487/RFC8279, November 2017,
<<a href="https://www.rfc-editor.org/info/rfc8279">https://www.rfc-editor.org/info/rfc8279</a>>.
<span class="h3"><a class="selflink" id="section-7.2" href="#section-7.2">7.2</a>. Informative References</span>
[<a id="ref-BGP_BIER_EXTENSIONS">BGP_BIER_EXTENSIONS</a>]
Xu, X., Ed., Chen, M., Patel, K., Wijnands, IJ., and A.
Przygienda, "BGP Extensions for BIER", Work in Progress,
<a href="./draft-ietf-bier-idr-extensions-04">draft-ietf-bier-idr-extensions-04</a>, January 2018.
[<a id="ref-BIER-PMM">BIER-PMM</a>] Mirsky, G., Zheng, L., Chen, M., and G. Fioccola,
"Performance Measurement (PM) with Marking Method in Bit
Index Explicit Replication (BIER) Layer", Work in
Progress, <a href="./draft-ietf-bier-pmmm-oam-03">draft-ietf-bier-pmmm-oam-03</a>, October 2017.
[<a id="ref-BIER_MVPN">BIER_MVPN</a>]
Rosen, E., Ed., Sivakumar, M., Aldrin, S., Dolganow, A.,
and T. Przygienda, "Multicast VPN Using BIER", Work in
Progress, <a href="./draft-ietf-bier-mvpn-09">draft-ietf-bier-mvpn-09</a>, November 2017.
[<a id="ref-BIER_PING">BIER_PING</a>]
Kumar, N., Pignataro, C., Akiya, N., Zheng, L., Chen, M.,
and G. Mirsky, "BIER Ping and Trace", Work in Progress,
<a href="./draft-ietf-bier-ping-02">draft-ietf-bier-ping-02</a>, July 2017.
[<a id="ref-ISIS_BIER_EXTENSIONS">ISIS_BIER_EXTENSIONS</a>]
Ginsberg, L., Ed., Przygienda, A., Aldrin, S., and J.
Zhang, "BIER support via ISIS", Work in Progress,
<a href="./draft-ietf-bier-isis-extensions-06">draft-ietf-bier-isis-extensions-06</a>, October 2017.
[<a id="ref-OSPF_BIER_EXTENSIONS">OSPF_BIER_EXTENSIONS</a>]
Psenak, P., Ed., Kumar, N., Wijnands, IJ., Dolganow, A.,
Przygienda, T., Zhang, J., and S. Aldrin, "OSPF Extensions
for BIER", Work in Progress, <a href="./draft-ietf-bier-ospf-bier-extensions-10">draft-ietf-bier-ospf-bier-</a>
<a href="./draft-ietf-bier-ospf-bier-extensions-10">extensions-10</a>, December 2017.
[<a id="ref-RFC6790">RFC6790</a>] Kompella, K., Drake, J., Amante, S., Henderickx, W., and
L. Yong, "The Use of Entropy Labels in MPLS Forwarding",
<a href="./rfc6790">RFC 6790</a>, DOI 10.17487/RFC6790, November 2012,
<<a href="https://www.rfc-editor.org/info/rfc6790">https://www.rfc-editor.org/info/rfc6790</a>>.
<span class="grey">Wijnands, et al. Experimental [Page 21]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-22" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Acknowledgements
The authors wish to thank Rajiv Asati, John Bettink, Nagendra Kumar,
Christian Martin, Neale Ranns, Greg Shepherd, Ramji Vaithianathan,
Xiaohu Xu, and Jeffrey Zhang for their ideas and contributions to
this work.
Contributors
The following people (listed in alphabetical order) contributed
significantly to the content of this document and should be
considered co-authors:
Mach(Guoyi) Chen
Huawei
Email: mach.chen@huawei.com
Arkadiy Gulko
Thomson Reuters
195 Broadway
New York, NY 10007
United States of America
Email: arkadiy.gulko@thomsonreuters.com
Wim Henderickx
Nokia
Copernicuslaan 50
Antwerp 2018
Belgium
Email: wim.henderickx@nokia.com
Martin Horneffer
Deutsche Telekom
Hammer Str. 216-226
Muenster 48153
Germany
Email: Martin.Horneffer@telekom.de
<span class="grey">Wijnands, et al. Experimental [Page 22]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-23" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Uwe Joorde
Deutsche Telekom
Hammer Str. 216-226
Muenster D-48153
Germany
Email: Uwe.Joorde@telekom.de
Tony Przygienda
Juniper Networks, Inc.
1194 N. Mathilda Ave.
Sunnyvale, California 94089
United States of America
Email: prz@juniper.net
<span class="grey">Wijnands, et al. Experimental [Page 23]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-24" ></span>
<span class="grey"><a href="./rfc8296">RFC 8296</a> BIER MPLS Encapsulation January 2018</span>
Authors' Addresses
IJsbrand Wijnands (editor)
Cisco Systems, Inc.
De Kleetlaan 6a
Diegem 1831
Belgium
Email: ice@cisco.com
Eric C. Rosen (editor)
Juniper Networks, Inc.
10 Technology Park Drive
Westford, Massachusetts 01886
United States of America
Email: erosen@juniper.net
Andrew Dolganow
Nokia
438B Alexandra Rd #08-07/10
Alexandra Technopark
Singapore 119968
Singapore
Email: andrew.dolganow@nokia.com
Jeff Tantsura
Individual
Email: jefftant.ietf@gmail.com
Sam K. Aldrin
Google, Inc.
1600 Amphitheatre Parkway
Mountain View, California 94043
United States of America
Email: aldrin.ietf@gmail.com
Israel Meilik
Broadcom
Email: israel@broadcom.com
Wijnands, et al. Experimental [Page 24]
</pre>
|