1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
|
<pre>Internet Engineering Task Force (IETF) R. Bonica
Request for Comments: 8335 R. Thomas
Updates: <a href="./rfc4884">4884</a> Juniper Networks
Category: Standards Track J. Linkova
ISSN: 2070-1721 Google
C. Lenart
Verizon
M. Boucadair
Orange
February 2018
<span class="h1">PROBE: A Utility for Probing Interfaces</span>
Abstract
This document describes a network diagnostic tool called PROBE.
PROBE is similar to PING in that it can be used to query the status
of a probed interface, but it differs from PING in that it does not
require bidirectional connectivity between the probing and probed
interfaces. Instead, PROBE requires bidirectional connectivity
between the probing interface and a proxy interface. The proxy
interface can reside on the same node as the probed interface, or it
can reside on a node to which the probed interface is directly
connected. This document updates <a href="./rfc4884">RFC 4884</a>.
Status of This Memo
This is an Internet Standards Track document.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Further information on
Internet Standards is available in <a href="./rfc7841#section-2">Section 2 of RFC 7841</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="https://www.rfc-editor.org/info/rfc8335">https://www.rfc-editor.org/info/rfc8335</a>.
<span class="grey">Bonica, et al. Standards Track [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
Copyright Notice
Copyright (c) 2018 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="https://trustee.ietf.org/license-info">https://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
<a href="#section-1">1</a>. Introduction . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-3">3</a>
<a href="#section-1.1">1.1</a>. Terminology . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-1.2">1.2</a>. Requirements Language . . . . . . . . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-2">2</a>. ICMP Extended Echo Request . . . . . . . . . . . . . . . . . <a href="#page-5">5</a>
<a href="#section-2.1">2.1</a>. Interface Identification Object . . . . . . . . . . . . . <a href="#page-6">6</a>
<a href="#section-3">3</a>. ICMP Extended Echo Reply . . . . . . . . . . . . . . . . . . <a href="#page-7">7</a>
<a href="#section-4">4</a>. ICMP Message Processing . . . . . . . . . . . . . . . . . . . <a href="#page-9">9</a>
<a href="#section-4.1">4.1</a>. Code Field Processing . . . . . . . . . . . . . . . . . . <a href="#page-11">11</a>
<a href="#section-5">5</a>. Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-11">11</a>
<a href="#section-6">6</a>. Updates to <a href="./rfc4884">RFC 4884</a> . . . . . . . . . . . . . . . . . . . . . <a href="#page-12">12</a>
<a href="#section-7">7</a>. IANA Considerations . . . . . . . . . . . . . . . . . . . . . <a href="#page-12">12</a>
<a href="#section-8">8</a>. Security Considerations . . . . . . . . . . . . . . . . . . . <a href="#page-14">14</a>
<a href="#section-9">9</a>. References . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-15">15</a>
<a href="#section-9.1">9.1</a>. Normative References . . . . . . . . . . . . . . . . . . <a href="#page-15">15</a>
<a href="#section-9.2">9.2</a>. Informative References . . . . . . . . . . . . . . . . . <a href="#page-16">16</a>
<a href="#appendix-A">Appendix A</a>. The PROBE Application . . . . . . . . . . . . . . . <a href="#page-17">17</a>
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-18">18</a>
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-19">19</a>
<span class="grey">Bonica, et al. Standards Track [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
Network operators use PING [<a href="./rfc2151" title=""A Primer On Internet and TCP/ IP Tools and Utilities"">RFC2151</a>] to test bidirectional
connectivity between two interfaces. For the purposes of this
document, these interfaces are called the probing and probed
interfaces. PING sends an ICMP [<a href="./rfc792" title=""Internet Control Message Protocol"">RFC792</a>] [<a href="./rfc4443" title=""Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification"">RFC4443</a>] Echo Request
message from the probing interface to the probed interface. The
probing interface resides on a probing node while the probed
interface resides on a probed node.
If the probed interface receives the ICMP Echo Request message, it
returns an ICMP Echo Reply. When the probing interface receives the
ICMP Echo Reply, it has verified bidirectional connectivity between
the probing and probed interfaces. Specifically, it has verified
that:
o The probing node can reach the probed interface.
o The probed interface is active.
o The probed node can reach the probing interface.
o The probing interface is active.
This document describes a network diagnostic tool called PROBE.
PROBE is similar to PING in that it can be used to query the status
of a probed interface, but it differs from PING in that it does not
require bidirectional connectivity between the probing and probed
interfaces. Instead, PROBE requires bidirectional connectivity
between the probing interface and a proxy interface. The proxy
interface can reside on the same node as the probed interface, or it
can reside on a node to which the probed interface is directly
connected. <a href="#section-5">Section 5</a> of this document describes scenarios in which
this characteristic is useful.
Like PING, PROBE executes on a probing node. It sends an ICMP
Extended Echo Request message from a local interface, called the
probing interface, to a proxy interface. The proxy interface resides
on a proxy node.
The ICMP Extended Echo Request contains an ICMP Extension Structure
and the ICMP Extension Structure contains an Interface Identification
Object. The Interface Identification Object identifies the probed
interface. The probed interface can reside on or directly connect to
the proxy node.
<span class="grey">Bonica, et al. Standards Track [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
When the proxy interface receives the ICMP Extended Echo Request, the
proxy node executes access control procedures. If access is granted,
the proxy node determines the status of the probed interface and
returns an ICMP Extended Echo Reply message. The ICMP Extended Echo
Reply indicates the status of the probed interface.
If the probed interface resides on the proxy node, PROBE determines
the status of the probed interface as it would determine its oper-
status [<a href="./rfc7223" title=""A YANG Data Model for Interface Management"">RFC7223</a>]. If oper-status is equal to 'up' (1), PROBE reports
that the probed interface is active. Otherwise, PROBE reports that
the probed interface is inactive.
If the probed interface resides on a node that is directly connected
to the proxy node, and the probed interface appears in the IPv4
Address Resolution Protocol (ARP) table [<a href="./rfc826" title=""Ethernet Address Resolution Protocol: Or Converting Network Protocol Addresses to 48.bit Ethernet Address for Transmission on Ethernet Hardware"">RFC826</a>] or IPv6 Neighbor
Cache [<a href="./rfc4861" title=""Neighbor Discovery for IP version 6 (IPv6)"">RFC4861</a>], PROBE reports interface reachability. Otherwise,
PROBE reports that the table entry does not exist.
<span class="h3"><a class="selflink" id="section-1.1" href="#section-1.1">1.1</a>. Terminology</span>
This document uses the following terms:
o Probing interface: The interface that sends the ICMP Extended Echo
Request.
o Probing node: The node upon which the probing interface resides.
o Proxy interface: The interface to which the ICMP Extended Echo
Request message is sent.
o Proxy node: The node upon which the proxy interface resides.
o Probed interface: The interface whose status is being queried.
o Probed node: The node upon which the probed interface resides. If
the proxy interface and the probed interface reside upon the same
node, the proxy node is also the probed node. Otherwise, the
proxy node is directly connected to the probed node.
<span class="h3"><a class="selflink" id="section-1.2" href="#section-1.2">1.2</a>. Requirements Language</span>
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document are to be interpreted as described in <a href="https://www.rfc-editor.org/bcp/bcp14">BCP</a>
<a href="https://www.rfc-editor.org/bcp/bcp14">14</a> [<a href="./rfc2119" title=""Key words for use in RFCs to Indicate Requirement Levels"">RFC2119</a>] [<a href="./rfc8174" title=""Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words"">RFC8174</a>] when, and only when, they appear in all
capitals, as shown here.
<span class="grey">Bonica, et al. Standards Track [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. ICMP Extended Echo Request</span>
The ICMP Extended Echo Request message is defined for both ICMPv4 and
ICMPv6. Like any ICMP message, the ICMP Extended Echo Request
message is encapsulated in an IP header. The ICMPv4 version of the
Extended Echo Request message is encapsulated in an IPv4 header,
while the ICMPv6 version is encapsulated in an IPv6 header.
Figure 1 depicts the ICMP Extended Echo Request message.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Code | Checksum |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Identifier |Sequence Number| Reserved |L|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| ICMP Extension Structure
Figure 1: ICMP Extended Echo Request Message
IP Header fields:
o Source Address: The Source Address identifies the probing
interface. It MUST be a valid IPv4 or IPv6 unicast address.
o Destination Address: The Destination Address identifies the proxy
interface. It MUST be a unicast address.
ICMP fields:
o Type: Extended Echo Request. The value for ICMPv4 is 42. The
value for ICMPv6 is 160.
o Code: MUST be set to 0 and MUST be ignored upon receipt.
o Checksum: For ICMPv4, see <a href="./rfc792">RFC 792</a>. For ICMPv6, see <a href="./rfc4443">RFC 4443</a>.
o Identifier: An Identifier to aid in matching Extended Echo Replies
to Extended Echo Requests. May be 0.
o Sequence Number: A Sequence Number to aid in matching Extended
Echo Replies to Extended Echo Requests. May be 0.
o Reserved: This field MUST be set to 0 and ignored upon receipt.
<span class="grey">Bonica, et al. Standards Track [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
o L (local): The L-bit is set if the probed interface resides on the
proxy node. The L-bit is clear if the probed interface is
directly connected to the proxy node.
o ICMP Extension Structure: The ICMP Extension Structure identifies
the probed interface.
<a href="./rfc4884#section-7">Section 7 of [RFC4884]</a> defines the ICMP Extension Structure. As per
<a href="./rfc4884">RFC 4884</a>, the Extension Structure contains exactly one Extension
Header followed by one or more objects. When applied to the ICMP
Extended Echo Request message, the ICMP Extension Structure MUST
contain exactly one instance of the Interface Identification Object
(see <a href="#section-2.1">Section 2.1</a>).
If the L-bit is set, the Interface Identification Object can identify
the probed interface by name, index, or address. If the L-bit is
clear, the Interface Identification Object MUST identify the probed
interface by address.
If the Interface Identification Object identifies the probed
interface by address, that address can be a member of any address
family. For example, an ICMPv4 Extended Echo Request message can
carry an Interface Identification Object that identifies the probed
interface by IPv4, IPv6, or IEEE 802 address. Likewise, an ICMPv6
Extended Echo Request message can carry an Interface Identification
Object that identifies the probed interface by IPv4, IPv6, or IEEE
802 address.
<span class="h3"><a class="selflink" id="section-2.1" href="#section-2.1">2.1</a>. Interface Identification Object</span>
The Interface Identification Object identifies the probed interface
by name, index, or address. Like any other ICMP Extension Object, it
contains an Object Header and Object Payload. The Object Header
contains the following fields:
o Class-Num: Interface Identification Object. The value is 3.
o C-Type: Values are (1) Identifies Interface by Name, (2)
Identifies Interface by Index, and (3) Identifies Interface by
Address.
o Length: Length of the object, measured in octets, including the
Object Header and Object Payload.
<span class="grey">Bonica, et al. Standards Track [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
If the Interface Identification Object identifies the probed
interface by name, the Object Payload MUST be the interface name as
defined in [<a href="./rfc7223" title=""A YANG Data Model for Interface Management"">RFC7223</a>]. If the Object Payload would not otherwise
terminate on a 32-bit boundary, it MUST be padded with ASCII NULL
characters.
If the Interface Identification Object identifies the probed
interface by index, the length is equal to 8 and the payload contains
the if-index [<a href="./rfc7223" title=""A YANG Data Model for Interface Management"">RFC7223</a>].
If the Interface Identification Object identifies the probed
interface by address, the payload is as depicted in Figure 2.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| AFI | Address Length| Reserved |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Address ....
Figure 2: Interface Identification Object - C-Type 3 Payload
Payload fields are defined as follows:
o Address Family Identifier (AFI): This 16-bit field identifies the
type of address represented by the Address field. All values
found in the IANA registry of Address Family Numbers (available
from <<a href="https://www.iana.org/assignments/address-family-numbers">https://www.iana.org/assignments/address-family-numbers</a>>)
are valid in this field.
o Address Length: Number of significant bytes contained by the
Address field. (The Address field contains significant bytes and
padding bytes.)
o Reserved: This field MUST be set to 0 and ignored upon receipt.
o Address: This variable-length field represents an address
associated with the probed interface. If the address field would
not otherwise terminate on a 32-bit boundary, it MUST be padded
with zeroes.
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. ICMP Extended Echo Reply</span>
The ICMP Extended Echo Reply message is defined for both ICMPv4 and
ICMPv6. Like any ICMP message, the ICMP Extended Echo Reply message
is encapsulated in an IP header. The ICMPv4 version of the Extended
Echo Reply message is encapsulated in an IPv4 header, while the
ICMPv6 version is encapsulated in an IPv6 header.
<span class="grey">Bonica, et al. Standards Track [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
Figure 3 depicts the ICMP Extended Echo Reply message.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Code | Checksum |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Identifier |Sequence Number|State|Res|A|4|6|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Figure 3: ICMP Extended Echo Reply Message
IP Header fields:
o Source Address: Copied from the Destination Address field of the
invoking Extended Echo Request message.
o Destination Address: Copied from the Source Address field of the
invoking Extended Echo Request message.
ICMP fields:
o Type: Extended Echo Reply. The value for ICMPv4 is 43. The value
for ICMPv6 is 161.
o Code: Values are (0) No Error, (1) Malformed Query, (2) No Such
Interface, (3) No Such Table Entry, and (4) Multiple Interfaces
Satisfy Query.
o Checksum: For ICMPv4, see <a href="./rfc792">RFC 792</a>. For ICMPv6, see <a href="./rfc4443">RFC 4443</a>.
o Identifier: Copied from the Identifier field of the invoking
Extended Echo Request packet.
o Sequence Number: Copied from the Sequence Number field of the
invoking Extended Echo Request packet.
o State: If Code is not equal to 0, this field MUST be set to 0 and
ignored upon receipt. Likewise, if the probed interface resides
upon the proxy node, this field MUST be set to 0 and ignored upon
receipt. Otherwise, this field reflects the state of the ARP
table or Neighbor Cache entry associated with the probed
interface. Values are (0) Reserved, (1) Incomplete, (2)
Reachable, (3) Stale, (4) Delay, (5) Probe, and (6) Failed.
o Res: This field MUST be set to 0 and ignored upon receipt.
<span class="grey">Bonica, et al. Standards Track [Page 8]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-9" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
o A (Active): The A-bit is set if the Code is equal to 0, the probed
interface resides on the proxy node, and the probed interface is
active. Otherwise, the A-bit is clear.
o 4 (IPv4): The 4-bit is set if the A-bit is also set and IPv4 is
running on the probed interface. Otherwise, the 4-bit is clear.
o 6 (IPv6): The 6-bit is set if the A-bit is also set and IPv6 is
running on the probed interface. Otherwise, the 6-bit is clear.
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. ICMP Message Processing</span>
When a node receives an ICMP Extended Echo Request message and any of
the following conditions apply, the node MUST silently discard the
incoming message:
o The node does not recognize ICMP Extended Echo Request messages.
o The node has not explicitly enabled ICMP Extended Echo
functionality.
o The incoming ICMP Extend Echo Request carries a Source Address
that is not explicitly authorized for the L-bit setting of the
incoming ICMP Extended Echo Request.
o The incoming ICMP Extend Echo Request carries a Source Address
that is not explicitly authorized for the incoming ICMP Extended
Echo Request type (i.e., by ifName, by IfIndex, or by Address).
o The Source Address of the incoming message is not a unicast
address.
o The Destination Address of the incoming message is a multicast
address.
Otherwise, when a node receives an ICMPv4 Extended Echo Request, it
MUST format an ICMP Extended Echo Reply as follows:
o Don't Fragment (DF) flag is 1
o More Fragments flag is 0
o Fragment Offset is 0
o TTL is 255
o Protocol is ICMP
<span class="grey">Bonica, et al. Standards Track [Page 9]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-10" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
When a node receives an ICMPv6 Extended Echo Request, it MUST format
an ICMPv6 Extended Echo Reply as follows:
o Hop Limit is 255
o Next Header is ICMPv6
In either case, the responding node MUST do the following:
o Copy the Source Address from the Extended Echo Request message to
the Destination Address of the Extended Echo Reply.
o Copy the Destination Address from the Extended Echo Request
message to the Source Address of the Extended Echo Reply.
o Set the DiffServ codepoint to CS0 [<a href="./rfc4594" title=""Configuration Guidelines for DiffServ Service Classes"">RFC4594</a>].
o Set the ICMP Type to Extended Echo Reply.
o Copy the Identifier from the Extended Echo Request message to the
Extended Echo Reply.
o Copy the Sequence Number from the Extended Echo Request message to
the Extended Echo Reply.
o Set the Code field as described in <a href="#section-4.1">Section 4.1</a>.
o Set the State field to 0.
o Clear the A-bit, the 4-bit, and the 6-bit.
o If (1) the Code Field is equal to (0) No Error, (2) the L-bit is
set, and (3) the probed interface is active, set the A-bit. Also,
set the 4-bit and the 6-bit as appropriate.
o If the Code field is equal to (0) No Error and the L-bit is clear,
then set the State field to reflect the state of the ARP table or
Neighbor Cache entry that represents the probed interface.
o Set the Checksum appropriately.
o Forward the ICMP Extended Echo Reply to its destination.
<span class="grey">Bonica, et al. Standards Track [Page 10]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-11" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
<span class="h3"><a class="selflink" id="section-4.1" href="#section-4.1">4.1</a>. Code Field Processing</span>
The Code field MUST be set to (1) Malformed Query if any of the
following conditions apply:
o The ICMP Extended Echo Request does not include an ICMP Extension
Structure.
o The ICMP Extension Structure does not include exactly one
Interface Identification Object.
o The L-bit is clear and the Interface Identification Object
identifies the probed interface by ifName or ifIndex.
o The query is otherwise malformed.
The Code field MUST be set to (2) No Such Interface if the L-bit is
set and the ICMP Extension Structure does not identify an interface
that resides on the proxy node.
The Code field MUST be set to (3) No Such Table Entry if the L-bit is
clear and the address found in the Interface Identification Object
does not appear in the IPv4 Address Resolution Protocol (ARP) table
or the IPv6 Neighbor Cache.
The Code field MUST be set to (4) Multiple Interfaces Satisfy Query
if any of the following conditions apply:
o The L-bit is set and the ICMP Extension Structure identifies more
than one interface that resides in the proxy node.
o The L-bit is clear and the address found in the Interface
Identification Object maps to multiple IPv4 ARP or IPv6 Neighbor
Cache entries.
Otherwise, the Code field MUST be set to (0) No Error.
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. Use Cases</span>
In the scenarios listed below, network operators can use PROBE to
determine the status of a probed interface but cannot use PING for
the same purpose. In all scenarios, assume bidirectional
connectivity between the probing and proxy interfaces. However,
bidirectional connectivity between the probing and probed interfaces
is lacking.
o The probed interface is unnumbered.
<span class="grey">Bonica, et al. Standards Track [Page 11]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-12" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
o The probing and probed interfaces are not directly connected to
one another. The probed interface has an IPv6 link-local address
but does not have a more globally scoped address.
o The probing interface runs IPv4 only while the probed interface
runs IPv6 only.
o The probing interface runs IPv6 only while the probed interface
runs IPv4 only.
o For lack of a route, the probing node cannot reach the probed
interface.
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. Updates to <a href="./rfc4884">RFC 4884</a></span>
<a href="./rfc4884#section-4.6">Section 4.6 of [RFC4884]</a> provides a list of extensible ICMP messages
(i.e., messages that can carry the ICMP Extension Structure). This
document adds the ICMP Extended Echo Request message and the ICMP
Extended Echo Reply message to that list.
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. IANA Considerations</span>
IANA has performed the following actions:
o Added the following to the "ICMP Type Numbers" registry:
42 Extended Echo Request
Added the following to the "Type 42 - Extended Echo Request"
subregistry:
(0) No Error
o Added the following to the "ICMPv6 'type' Numbers" registry:
160 Extended Echo Request
As ICMPv6 distinguishes between informational and error
messages, and this is an informational message, the value has
been assigned from the range 128-255.
Added the following to the "Type 160 - Extended Echo Request"
subregistry:
(0) No Error
<span class="grey">Bonica, et al. Standards Track [Page 12]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-13" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
o Added the following to the "ICMP Type Numbers" registry:
43 Extended Echo Reply
Added the following to the "Type 43 - Extended Echo Reply"
subregistry:
(0) No Error
(1) Malformed Query
(2) No Such Interface
(3) No Such Table Entry
(4) Multiple Interfaces Satisfy Query
o Added the following to the "ICMPv6 'type' Numbers" registry:
161 Extended Echo Reply
As ICMPv6 distinguishes between informational and error
messages, and this is an informational message, the value has
been assigned from the range 128-255.
Added the following to the "Type 161 - Extended Echo Reply"
subregistry:
(0) No Error
(1) Malformed Query
(2) No Such Interface
(3) No Such Table Entry
(4) Multiple Interfaces Satisfy Query
o Added the following to the "ICMP Extension Object Classes and
Class Sub-types" registry:
(3) Interface Identification Object
Added the following C-types to the "Sub-types - Class 3 -
Interface Identification Object" subregistry:
(0) Reserved
(1) Identifies Interface by Name
(2) Identifies Interface by Index
(3) Identifies Interface by Address
C-Type values are assigned on a First Come First Serve (FCFS)
basis with a range of 0-255.
All codes mentioned above are assigned on an FCFS basis with a range
of 0-255.
<span class="grey">Bonica, et al. Standards Track [Page 13]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-14" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
<span class="h2"><a class="selflink" id="section-8" href="#section-8">8</a>. Security Considerations</span>
The following are legitimate uses of PROBE:
o to determine the operational status of an interface.
o to determine which protocols (e.g., IPv4 or IPv6) are active on an
interface.
However, malicious parties can use PROBE to obtain additional
information. For example, a malicious party can use PROBE to
discover interface names. Having discovered an interface name, the
malicious party may be able to infer additional information.
Additional information may include:
o interface bandwidth
o the type of device that supports the interface (e.g., vendor
identity)
o the operating system version that the above-mentioned device
executes
Understanding this risk, network operators establish policies that
restrict access to ICMP Extended Echo functionality. In order to
enforce these policies, nodes that support ICMP Extended Echo
functionality MUST support the following configuration options:
o Enable/disable ICMP Extended Echo functionality. By default, ICMP
Extend Echo functionality is disabled.
o Define enabled L-bit settings. By default, the option to set the
L-bit is enabled and the option to clear the L-bit is disabled.
o Define enabled query types (i.e., by name, by index, or by
address); by default, all query types are disabled.
o For each enabled query type, define the prefixes from which ICMP
Extended Echo Request messages are permitted.
o For each interface, determine whether ICMP Echo Request messages
are accepted.
When a node receives an ICMP Extended Echo Request message that it is
not configured to support, it MUST silently discard the message. See
<a href="#section-4">Section 4</a> for details.
<span class="grey">Bonica, et al. Standards Track [Page 14]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-15" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
PROBE must not leak information about one Virtual Private Network
(VPN) into another. Therefore, when a node receives an ICMP Extended
Echo Request and the proxy interface is in a different VPN than the
probed interface, the node MUST return an ICMP Extended Echo Reply
with error code equal to (2) No Such Interface.
In order to protect local resources, implementations SHOULD rate-
limit incoming ICMP Extended Echo Request messages.
<span class="h2"><a class="selflink" id="section-9" href="#section-9">9</a>. References</span>
<span class="h3"><a class="selflink" id="section-9.1" href="#section-9.1">9.1</a>. Normative References</span>
[<a id="ref-RFC792">RFC792</a>] Postel, J., "Internet Control Message Protocol", STD 5,
<a href="./rfc792">RFC 792</a>, DOI 10.17487/RFC0792, September 1981,
<<a href="https://www.rfc-editor.org/info/rfc792">https://www.rfc-editor.org/info/rfc792</a>>.
[<a id="ref-RFC826">RFC826</a>] Plummer, D., "Ethernet Address Resolution Protocol: Or
Converting Network Protocol Addresses to 48.bit Ethernet
Address for Transmission on Ethernet Hardware", STD 37,
<a href="./rfc826">RFC 826</a>, DOI 10.17487/RFC0826, November 1982,
<<a href="https://www.rfc-editor.org/info/rfc826">https://www.rfc-editor.org/info/rfc826</a>>.
[<a id="ref-RFC2119">RFC2119</a>] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc2119">RFC 2119</a>,
DOI 10.17487/RFC2119, March 1997,
<<a href="https://www.rfc-editor.org/info/rfc2119">https://www.rfc-editor.org/info/rfc2119</a>>.
[<a id="ref-RFC4443">RFC4443</a>] Conta, A., Deering, S., and M. Gupta, Ed., "Internet
Control Message Protocol (ICMPv6) for the Internet
Protocol Version 6 (IPv6) Specification", STD 89,
<a href="./rfc4443">RFC 4443</a>, DOI 10.17487/RFC4443, March 2006,
<<a href="https://www.rfc-editor.org/info/rfc4443">https://www.rfc-editor.org/info/rfc4443</a>>.
[<a id="ref-RFC4861">RFC4861</a>] Narten, T., Nordmark, E., Simpson, W., and H. Soliman,
"Neighbor Discovery for IP version 6 (IPv6)", <a href="./rfc4861">RFC 4861</a>,
DOI 10.17487/RFC4861, September 2007,
<<a href="https://www.rfc-editor.org/info/rfc4861">https://www.rfc-editor.org/info/rfc4861</a>>.
[<a id="ref-RFC4884">RFC4884</a>] Bonica, R., Gan, D., Tappan, D., and C. Pignataro,
"Extended ICMP to Support Multi-Part Messages", <a href="./rfc4884">RFC 4884</a>,
DOI 10.17487/RFC4884, April 2007,
<<a href="https://www.rfc-editor.org/info/rfc4884">https://www.rfc-editor.org/info/rfc4884</a>>.
[<a id="ref-RFC7223">RFC7223</a>] Bjorklund, M., "A YANG Data Model for Interface
Management", <a href="./rfc7223">RFC 7223</a>, DOI 10.17487/RFC7223, May 2014,
<<a href="https://www.rfc-editor.org/info/rfc7223">https://www.rfc-editor.org/info/rfc7223</a>>.
<span class="grey">Bonica, et al. Standards Track [Page 15]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-16" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
[<a id="ref-RFC8174">RFC8174</a>] Leiba, B., "Ambiguity of Uppercase vs Lowercase in <a href="./rfc2119">RFC</a>
<a href="./rfc2119">2119</a> Key Words", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc8174">RFC 8174</a>, DOI 10.17487/RFC8174,
May 2017, <<a href="https://www.rfc-editor.org/info/rfc8174">https://www.rfc-editor.org/info/rfc8174</a>>.
<span class="h3"><a class="selflink" id="section-9.2" href="#section-9.2">9.2</a>. Informative References</span>
[<a id="ref-RFC2151">RFC2151</a>] Kessler, G. and S. Shepard, "A Primer On Internet and TCP/
IP Tools and Utilities", FYI 30, <a href="./rfc2151">RFC 2151</a>,
DOI 10.17487/RFC2151, June 1997,
<<a href="https://www.rfc-editor.org/info/rfc2151">https://www.rfc-editor.org/info/rfc2151</a>>.
[<a id="ref-RFC4594">RFC4594</a>] Babiarz, J., Chan, K., and F. Baker, "Configuration
Guidelines for DiffServ Service Classes", <a href="./rfc4594">RFC 4594</a>,
DOI 10.17487/RFC4594, August 2006,
<<a href="https://www.rfc-editor.org/info/rfc4594">https://www.rfc-editor.org/info/rfc4594</a>>.
<span class="grey">Bonica, et al. Standards Track [Page 16]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-17" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
<span class="h2"><a class="selflink" id="appendix-A" href="#appendix-A">Appendix A</a>. The PROBE Application</span>
The PROBE application accepts input parameters, sets a counter, and
enters a loop to be exited when the counter is equal to 0. On each
iteration of the loop, PROBE emits an ICMP Extended Echo Request,
decrements the counter, sets a timer, and waits. The ICMP Extended
Echo Request includes an Identifier and a Sequence Number.
If an ICMP Extended Echo Reply carrying the same Identifier and
Sequence Number arrives, PROBE relays information returned by that
message to its user. However, on each iteration of the loop, PROBE
waits for the timer to expire regardless of whether an Extended Echo
Reply message arrives.
PROBE accepts the following parameters:
o Count
o Wait
o Probing Interface Address
o Hop Count
o Proxy Interface Address
o Local
o Probed Interface Identifier
Count is a positive integer whose default value is 3. Count
determines the number of times that PROBE iterates through the above-
mentioned loop.
Wait is a positive integer whose minimum and default values are 1.
Wait determines the duration of the above-mentioned timer, measured
in seconds.
Probing Interface Address specifies the Source Address of the ICMP
Extended Echo Request. The Probing Interface Address MUST be a
unicast address and MUST identify an interface that resides on the
probing node.
The Proxy Interface Address identifies the interface to which the
ICMP Extended Echo Request message is sent. It must be an IPv4 or
IPv6 unicast address. If it is an IPv4 address, PROBE emits an
ICMPv4 message. If it is an IPv6 address, PROBE emits an ICMPv6
message.
<span class="grey">Bonica, et al. Standards Track [Page 17]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-18" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
Local is a boolean value. It is TRUE if the proxy and probed
interfaces both reside on the same node. Otherwise, it is FALSE.
The Probed Interface Identifier identifies the probed interface. It
is one of the following:
o an interface name;
o an address from any address family (e.g., IPv4, IPv6, IEEE 802,
48-bit MAC, or 64-bit MAC); or
o an if-index.
If the Probed Interface Identifier is an address, it does not need to
be of the same address family as the proxy interface address. For
example, PROBE accepts an IPv4 Proxy Interface Address and an IPv6
Probed Interface Identifier.
Acknowledgments
Thanks to Sowmini Varadhan, Jeff Haas, Carlos Pignataro, Jonathan
Looney, Dave Thaler, Mikio Hara, Joel Halpern, Yaron Sheffer, Stefan
Winter, Jean-Michel Combes, Amanda Barber, and Joe Touch for their
thoughtful review of this document.
<span class="grey">Bonica, et al. Standards Track [Page 18]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-19" ></span>
<span class="grey"><a href="./rfc8335">RFC 8335</a> PROBE February 2018</span>
Authors' Addresses
Ron Bonica
Juniper Networks
2251 Corporate Park Drive
Herndon, Virginia 20171
United States of America
Email: rbonica@juniper.net
Reji Thomas
Juniper Networks
Elnath-Exora Business Park Survey
Bangalore, Karnataka 560103
India
Email: rejithomas@juniper.net
Jen Linkova
Google
1600 Amphitheatre Parkway
Mountain View, California 94043
United States of America
Email: furry@google.com
Chris Lenart
Verizon
22001 Loudoun County Parkway
Ashburn, Virginia 20147
United States of America
Email: chris.lenart@verizon.com
Mohamed Boucadair
Orange
Rennes 35000
France
Email: mohamed.boucadair@orange.com
Bonica, et al. Standards Track [Page 19]
</pre>
|
