| rfc9014xml2.original.xml | rfc9014.xml | |||
|---|---|---|---|---|
| <?xml version='1.0' encoding='utf-8'?> | <?xml version="1.0" encoding="UTF-8"?> | |||
| <!DOCTYPE rfc SYSTEM "rfc2629.dtd" [ | ||||
| <!ENTITY RFC4761 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | <!DOCTYPE rfc SYSTEM "rfc2629-xhtml.ent"> | |||
| C.4761.xml"> | ||||
| <!ENTITY RFC4762 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | <rfc xmlns:xi="http://www.w3.org/2001/XInclude" submissionType="IETF" | |||
| C.4762.xml"> | category="std" consensus="true" | |||
| <!ENTITY RFC6074 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | docName="draft-ietf-bess-dci-evpn-overlay-10" number="9014" | |||
| C.6074.xml"> | ipr="trust200902" obsoletes="" updates="" xml:lang="en" symRefs="true" | |||
| <!ENTITY RFC7041 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | sortRefs="true" tocInclude="true" version="3"> | |||
| C.7041.xml"> | ||||
| <!ENTITY RFC7432 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | <!-- xml2rfc v2v3 conversion 2.45.2 --> | |||
| C.7432.xml"> | <!-- Generated by id2xml 1.5.0 on 2020-05-27T19:59:24Z --> | |||
| <!ENTITY RFC2119 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.2119.xml"> | <front> | |||
| <!ENTITY RFC8174 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.8174.xml"> | <title abbrev="Interconnect for EVPN-Overlays">Interconnect Solution for | |||
| <!ENTITY I-D.ietf-idr-tunnel-encaps SYSTEM "https://xml2rfc.ietf.org/public/rfc/ | Ethernet VPN (EVPN) Overlay Networks</title> | |||
| bibxml3/reference.I-D.ietf-idr-tunnel-encaps.xml"> | <seriesInfo name="RFC" value="9014"/> | |||
| <!ENTITY RFC7623 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | <author initials="J." surname="Rabadan" fullname="Jorge Rabadan" role="edito | |||
| C.7623.xml"> | r"> | |||
| <!ENTITY I-D.ietf-bess-evpn-overlay SYSTEM "https://xml2rfc.ietf.org/public/rfc/ | <organization>Nokia</organization> | |||
| bibxml3/reference.I-D.ietf-bess-evpn-overlay.xml"> | <address> | |||
| <!ENTITY RFC7543 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.7543.xml"> | ||||
| <!ENTITY RFC4684 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.4684.xml"> | ||||
| <!ENTITY RFC7348 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.7348.xml"> | ||||
| <!ENTITY RFC7637 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.7637.xml"> | ||||
| <!ENTITY RFC4023 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.4023.xml"> | ||||
| <!ENTITY RFC6870 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.6870.xml"> | ||||
| <!ENTITY RFC3031 SYSTEM "https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RF | ||||
| C.3031.xml"> | ||||
| <!ENTITY I-D.sajassi-bess-evpn-virtual-eth-segment SYSTEM "https://xml2rfc.ietf. | ||||
| org/public/rfc/bibxml3/reference.I-D.sajassi-bess-evpn-virtual-eth-segment.xml"> | ||||
| ]> | ||||
| <rfc submissionType="IETF" docName="draft-ietf-bess-dci-evpn-overlay-10" categor | ||||
| y="std" ipr="trust200902"> | ||||
| <!-- Generated by id2xml 1.5.0 on 2020-05-27T19:59:24Z --> | ||||
| <?rfc strict="yes"?> | ||||
| <?rfc compact="yes"?> | ||||
| <?rfc subcompact="no"?> | ||||
| <?rfc symrefs="yes"?> | ||||
| <?rfc sortrefs="no"?> | ||||
| <?rfc text-list-symbols="o++*-"?> | ||||
| <!-- | ||||
| draft-ietf-bess-dci-evpn-overlay-10-manual.txt(13): Warning: Expected an expi | ||||
| res | ||||
| indication top left, found none | ||||
| --><?rfc toc="yes"?> | ||||
| <front> | ||||
| <title abbrev="Interconnect Solution for EVPN-Overlays">Interconnect Solu | ||||
| tion for EVPN Overlay networks</title> | ||||
| <author initials="J." surname="Rabadan" fullname="Jorge Rabadan" role="ed | ||||
| itor"> | ||||
| <organization>Nokia</organization> | ||||
| <address> | ||||
| <postal> | <postal> | |||
| <street>777 E. Middlefield Road</street> | <street>777 E. Middlefield Road</street> | |||
| <city>Mountain View</city> | <city>Mountain View</city> | |||
| <region>CA</region> | <region>CA</region> | |||
| <code>94043</code> | <code>94043</code> | |||
| <country>USA</country> | <country>USA</country> | |||
| </postal> | </postal> | |||
| <email>jorge.rabadan@nokia.com</email> | <email>jorge.rabadan@nokia.com</email> | |||
| </address> | </address> | |||
| </author> | </author> | |||
| <author initials="S." surname="Sathappan" fullname="Senthil Sathappan"> | ||||
| <author initials="S." surname="Sathappan" fullname="Senthil Sathappan"> | <organization>Nokia</organization> | |||
| <organization>Nokia</organization> | <address> | |||
| <address> | <email>senthil.sathappan@nokia.com</email> | |||
| <email>senthil.sathappan@nokia.com</email> | </address> | |||
| </address> | </author> | |||
| </author> | <author initials="W." surname="Henderickx" fullname="Wim Henderickx"> | |||
| <organization>Nokia</organization> | ||||
| <author initials="W." surname="Henderickx" fullname="Wim Henderickx"> | <address> | |||
| <organization>Nokia</organization> | <email>wim.henderickx@nokia.com</email> | |||
| <address> | </address> | |||
| <email>wim.henderickx@nokia.com</email> | </author> | |||
| </address> | <author initials="A." surname="Sajassi" fullname="Ali Sajassi"> | |||
| </author> | <organization>Cisco</organization> | |||
| <address> | ||||
| <author initials="A." surname="Sajassi" fullname="Ali Sajassi"> | <email>sajassi@cisco.com</email> | |||
| <organization>Cisco</organization> | </address> | |||
| <address> | </author> | |||
| <email>sajassi@cisco.com</email> | <author initials="J." surname="Drake" fullname="John Drake"> | |||
| </address> | <organization>Juniper</organization> | |||
| </author> | <address> | |||
| <email>jdrake@juniper.net</email> | ||||
| <author initials="J." surname="Drake" fullname="John Drake"> | </address> | |||
| <organization>Juniper</organization> | </author> | |||
| <address> | <date year="2021" month="May"/> | |||
| <email>jdrake@juniper.net</email> | <workgroup>BESS Workgroup</workgroup> | |||
| </address> | ||||
| </author> | ||||
| <date year="2020" month="May"/> | <abstract> | |||
| <workgroup>BESS Workgroup</workgroup> | <t> | |||
| <abstract><t> | This document describes how Network Virtualization Overlays (NVOs) can | |||
| This document describes how Network Virtualization Overlays (NVO) can | ||||
| be connected to a Wide Area Network (WAN) in order to extend the | be connected to a Wide Area Network (WAN) in order to extend the | |||
| layer-2 connectivity required for some tenants. The solution analyzes | Layer 2 connectivity required for some tenants. The solution analyzes | |||
| the interaction between NVO networks running Ethernet Virtual Private | the interaction between NVO networks running Ethernet Virtual Private | |||
| Networks (EVPN) and other L2VPN technologies used in the WAN, such as | Networks (EVPNs) and other Layer 2 VPN (L2VPN) technologies used in the WAN, | |||
| Virtual Private LAN Services (VPLS), VPLS extensions for Provider | such as | |||
| Backbone Bridging (PBB-VPLS), EVPN or PBB-EVPN. It also describes how | Virtual Private LAN Services (VPLSs), VPLS extensions for Provider | |||
| the existing technical specifications apply to the Interconnection | Backbone Bridging (PBB-VPLS), EVPN, or PBB-EVPN. It also describes how | |||
| the existing technical specifications apply to the interconnection | ||||
| and extends the EVPN procedures needed in some cases. In particular, | and extends the EVPN procedures needed in some cases. In particular, | |||
| this document describes how EVPN routes are processed on Gateways | this document describes how EVPN routes are processed on Gateways | |||
| (GWs) that interconnect EVPN-Overlay and EVPN-MPLS networks, as well | (GWs) that interconnect EVPN-Overlay and EVPN-MPLS networks, as well | |||
| as the Interconnect Ethernet Segment (I-ES) to provide multi-homing, | as the Interconnect Ethernet Segment (I-ES), to provide multihoming. This | |||
| and the use of the Unknown MAC route to avoid MAC scale issues on | document also describes the use of the Unknown MAC Route (UMR) to avoid issue | |||
| Data Center Network Virtualization Edge (NVE) devices.</t> | s of a Media Access Control (MAC) scale on Data Center Network Virtualization Ed | |||
| ge (NVE) devices.</t> | ||||
| </abstract> | </abstract> | |||
| </front> | </front> | |||
| <middle> | ||||
| <middle> | <section anchor="sect-2" numbered="true" toc="default"> | |||
| <section title="Conventions and Terminology" anchor="sect-1"><t> | <name>Introduction</name> | |||
| The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", | <t> | |||
| "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and | <xref target="RFC8365" format="default"/> discusses the use of Ethernet Virtu | |||
| "OPTIONAL" in this document are to be interpreted as described in BCP | al Private | |||
| 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, the | Networks (EVPNs) <xref target="RFC7432" format="default"/> as the control pla | |||
| y appear in all | ne for Network | |||
| capitals, as shown here.</t> | Virtualization Overlays (NVOs), where VXLAN <xref target="RFC7348" | |||
| format="default"/>, NVGRE <xref target="RFC7637" format="default"/>, or | ||||
| <t> | MPLS over GRE <xref target="RFC4023" format="default"/> can be used as | |||
| AC: Attachment Circuit.</t> | possible data plane encapsulation options.</t> | |||
| <t> | ||||
| <t> | While this model provides a scalable and efficient multitenant solution | |||
| ARP: Address Resolution Protocol.</t> | ||||
| <t> | ||||
| BUM: refers to Broadcast, Unknown unicast and Multicast traffic.</t> | ||||
| <t> | ||||
| CE: Customer Equipment.</t> | ||||
| <t> | ||||
| CFM: Connectivity Fault Management.</t> | ||||
| <t> | ||||
| DC and DCI: Data Center and Data Center Interconnect.</t> | ||||
| <t> | ||||
| DC RR(s) and WAN RR(s): refers to the Data Center and Wide Area | ||||
| Network Route Reflectors, respectively.</t> | ||||
| <t> | ||||
| DF and NDF: Designated Forwarder and Non-Designated Forwarder.</t> | ||||
| <t> | ||||
| EVPN: Ethernet Virtual Private Network, as in <xref target="RFC7432"/>.</t> | ||||
| <t> | ||||
| EVI: EVPN Instance.</t> | ||||
| <t> | ||||
| EVPN Tunnel binding: refers to a tunnel to a remote PE/NVE for a | ||||
| given EVI. Ethernet packets in these bindings are encapsulated with | ||||
| the Overlay or MPLS encapsulation and the EVPN label at the bottom of | ||||
| the stack.</t> | ||||
| <t> | ||||
| ES and vES: Ethernet Segment and virtual Ethernet Segment.</t> | ||||
| <t> | ||||
| ESI: Ethernet Segment Identifier.</t> | ||||
| <t> | ||||
| GW: Gateway or Data Center Gateway.</t> | ||||
| <t> | ||||
| I-ES and I-ESI: Interconnect Ethernet Segment and Interconnect Ethernet | ||||
| Segment Identifier. An I-ES is defined on the GWs for multi-homing to/from | ||||
| the WAN.</t> | ||||
| <t> | ||||
| MAC-VRF: refers to an EVI instance in a particular node.</t> | ||||
| <t> | ||||
| MP2P and LSM tunnels: refer to Multi-Point to Point and Label | ||||
| Switched Multicast tunnels.</t> | ||||
| <t> | ||||
| ND: Neighbor Discovery protocol.</t> | ||||
| <t> | ||||
| NVE: Network Virtualization Edge.</t> | ||||
| <t> | ||||
| NVGRE: Network Virtualization using Generic Routing Encapsulation.</t> | ||||
| <t> | ||||
| NVO: refers to Network Virtualization Overlays.</t> | ||||
| <t> | ||||
| OAM: Operations and Maintenance.</t> | ||||
| <t> | ||||
| PBB: Provider Backbone Bridging.</t> | ||||
| <t> | ||||
| PE: Provider Edge.</t> | ||||
| <t> | ||||
| PW: Pseudowire.</t> | ||||
| <t> | ||||
| RD: Route-Distinguisher.</t> | ||||
| <t> | ||||
| RT: Route-Target.</t> | ||||
| <t> | ||||
| S/C-TAG: refers to a combination of Service Tag and Customer Tag in a | ||||
| 802.1Q frame.</t> | ||||
| <t> | ||||
| TOR: Top-Of-Rack switch.</t> | ||||
| <t> | ||||
| UMR: Unknown MAC Route.</t> | ||||
| <t> | ||||
| VNI/VSID: refers to VXLAN/NVGRE virtual identifiers.</t> | ||||
| <t> | ||||
| VPLS: Virtual Private LAN Service.</t> | ||||
| <t> | ||||
| VSI: Virtual Switch Instance or VPLS instance in a particular PE.</t> | ||||
| <t> | ||||
| VXLAN: Virtual eXtensible LAN.</t> | ||||
| </section> | ||||
| <section title="Introduction" anchor="sect-2"><t> | ||||
| <xref target="I-D.ietf-bess-evpn-overlay"/> discusses the use of Ethernet Vir | ||||
| tual Private | ||||
| Networks (EVPN) <xref target="RFC7432"/> as the control plane for Network | ||||
| Virtualization Overlays (NVO), where VXLAN <xref target="RFC7348"/>, NVGRE <x | ||||
| ref target="RFC7637"/> | ||||
| or MPLS over GRE <xref target="RFC4023"/> can be used as possible data plane | ||||
| encapsulation options.</t> | ||||
| <t> | ||||
| While this model provides a scalable and efficient multi-tenant solution | ||||
| within the Data Center, it might not be easily extended to the Wide Area | within the Data Center, it might not be easily extended to the Wide Area | |||
| Network (WAN) in some cases due to the requirements and existing deployed | Network (WAN) in some cases, due to the requirements and existing deployed | |||
| technologies. For instance, a Service Provider might have an already | technologies. For instance, a Service Provider might have an already | |||
| deployed Virtual Private LAN Service (VPLS) <xref target="RFC4761"/><xref tar | deployed Virtual Private LAN Service (VPLS) <xref target="RFC4761" format="de | |||
| get="RFC4762"/>, VPLS | fault"/> <xref target="RFC4762" format="default"/>, VPLS | |||
| extensions for Provider Backbone Bridging (PBB-VPLS) <xref target="RFC7041"/> | extensions for Provider Backbone Bridging (PBB-VPLS) <xref target="RFC7041" | |||
| , EVPN | format="default"/>, EVPN | |||
| <xref target="RFC7432"/> or PBB-EVPN <xref target="RFC7623"/> network that ha | <xref target="RFC7432" format="default"/>, or PBB-EVPN <xref | |||
| s to be used to interconnect | target="RFC7623" format="default"/> network that has to be used to | |||
| interconnect | ||||
| Data Centers and WAN VPN users. A Gateway (GW) function is required in | Data Centers and WAN VPN users. A Gateway (GW) function is required in | |||
| these cases. In fact, <xref target="I-D.ietf-bess-evpn-overlay"/> discusses t | these cases. In fact, <xref target="RFC8365" format="default"/> discusses two | |||
| wo main Data Center | main Data Center | |||
| Interconnect solution groups: "DCI using GWs" and "DCI using ASBRs". This | Interconnect (DCI) solution groups: "DCI using GWs" and "DCI using ASBRs". Th | |||
| is | ||||
| document specifies the solutions that correspond to the "DCI using GWs" | document specifies the solutions that correspond to the "DCI using GWs" | |||
| group.</t> | group.</t> | |||
| <t> | ||||
| <t> | It is assumed that the NVO GW and the WAN Edge functions | |||
| It is assumed that the NVO Gateway (GW) and the WAN Edge functions | can be decoupled into two separate systems or integrated into the same | |||
| can be decoupled in two separate systems or integrated into the same | system. The former option will be referred to as "decoupled interconnect | |||
| system. The former option will be referred as "Decoupled Interconnect solutio | solution" throughout the document, whereas the latter one will be | |||
| n" throughout the document, whereas the latter one will be | referred to as "integrated interconnect solution".</t> | |||
| referred as "Integrated Interconnect solution".</t> | <t> | |||
| <t> | ||||
| The specified procedures are local to the redundant GWs connecting a | The specified procedures are local to the redundant GWs connecting a | |||
| DC to the WAN. The document does not preclude any combination across | DC to the WAN. The document does not preclude any combination across | |||
| different DCs for the same tenant. For instance, a "Decoupled" | different DCs for the same tenant. For instance, a "Decoupled" | |||
| solution can be used in GW1 and GW2 (for DC1) and an "Integrated" | solution can be used in GW1 and GW2 (for DC1), and an "Integrated" | |||
| solution can be used in GW3 and GW4 (for DC2).</t> | solution can be used in GW3 and GW4 (for DC2).</t> | |||
| <t> | ||||
| <t> | While the Gateways and WAN Provider Edges (PEs) use existing specifications i | |||
| While the Gateways and WAN PEs use existing specifications in some | n some | |||
| cases, the document also defines extensions that are specific to DCI. | cases, the document also defines extensions that are specific to DCI. | |||
| In particular, those extensions are:</t> | In particular, those extensions are:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"><t>The Interconnect Ethernet Segment (I-ES), an | <li>The Interconnect Ethernet Segment (I-ES), an Ethernet Segment that | |||
| Ethernet Segment that | can be associated to a set of pseudowires (PWs) or other tunnels. The I-ES | |||
| can be associated to a set of PWs or other tunnels. I-ES defined in | defined in | |||
| this document is not associated with a set of Ethernet links, as | this document is not associated with a set of Ethernet links, as | |||
| per <xref target="RFC7432"/>, but rather with a set of virtual tunnels (e.g ., a | per <xref target="RFC7432" format="default"/>, but rather with a set of vir tual tunnels (e.g., a | |||
| set of PWs). This set of virtual tunnels is referred to as vES | set of PWs). This set of virtual tunnels is referred to as vES | |||
| <xref target="I-D.sajassi-bess-evpn-virtual-eth-segment"/>.</t> | <xref target="I-D.ietf-bess-evpn-virtual-eth-segment" format="default"/>.</ | |||
| li> | ||||
| <t>The use of the Unknown MAC route in a DCI scenario.</t> | <li>The use of the Unknown MAC Route (UMR) in a DCI scenario.</li> | |||
| <li>The processing of EVPN routes on Gateways with MAC-VRFs connecting | ||||
| <t>The processing of EVPN routes on Gateways with MAC-VRFs connecting | ||||
| EVPN-Overlay and EVPN-MPLS networks, or EVPN-Overlay and EVPN-Overlay | EVPN-Overlay and EVPN-MPLS networks, or EVPN-Overlay and EVPN-Overlay | |||
| networks.</t> | networks.</li> | |||
| </ul> | ||||
| </list> | </section> | |||
| </t> | <section anchor="sect-1" numbered="true" toc="default"> | |||
| <name>Conventions and Terminology</name> | ||||
| </section> | <t> | |||
| The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQU | ||||
| IRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL | ||||
| NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14> | ||||
| RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>", | ||||
| "<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to | ||||
| be interpreted as | ||||
| described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> | ||||
| when, and only when, they appear in all capitals, as shown here. | ||||
| </t> | ||||
| <dl> | ||||
| <dt>AC:</dt><dd> Attachment Circuit</dd> | ||||
| <dt>ARP:</dt><dd>Address Resolution Protocol</dd> | ||||
| <dt>BUM:</dt><dd>Broadcast, Unknown Unicast and Multicast (traffic)</dd> | ||||
| <dt>CE:</dt><dd>Customer Equipment</dd> | ||||
| <dt>CFM:</dt><dd>Connectivity Fault Management</dd> | ||||
| <dt>DC:</dt><dd>Data Center</dd> | ||||
| <dt>DCI:</dt><dd>Data Center Interconnect</dd> | ||||
| <dt>DF:</dt><dd>Designated Forwarder</dd> | ||||
| <dt>EVI:</dt><dd>EVPN Instance</dd> | ||||
| <dt>EVPN:</dt><dd>Ethernet Virtual Private Network, as in <xref | ||||
| target="RFC7432" format="default"/></dd> | ||||
| <dt>EVPN Tunnel binding:</dt><dd>refers to a tunnel to a remote PE/NVE | ||||
| for a given EVI. Ethernet packets in these bindings are encapsulated with | ||||
| the Overlay or MPLS encapsulation and the EVPN label at the bottom of | ||||
| the stack.</dd> | ||||
| <dt>ES:</dt><dd>Ethernet Segment</dd> | ||||
| <dt>ESI:</dt><dd>Ethernet Segment Identifier</dd> | ||||
| <dt>GW:</dt><dd>Gateway or Data Center Gateway</dd> | ||||
| <dt>I-ES and I-ESI:</dt><dd>Interconnect Ethernet Segment and | ||||
| Interconnect Ethernet Segment Identifier. An I-ES is defined on the GWs | ||||
| for multihoming to/from the WAN.</dd> | ||||
| <dt>MAC</dt><dd>Media Access Control</dd> | ||||
| <dt>MAC-VRF:</dt><dd>refers to an EVI instance in a particular node</dd> | ||||
| <dt>MP2P and LSM tunnels:</dt><dd>refer to multipoint-to-point and label | ||||
| switched multicast tunnels</dd> | ||||
| <dt>ND:</dt><dd>Neighbor Discovery</dd> | ||||
| <dt>NDF:</dt><dd>Non-Designated Forwarder</dd> | ||||
| <dt>NVE:</dt><dd>Network Virtualization Edge</dd> | ||||
| <dt>NVGRE:</dt><dd>Network Virtualization using Generic Routing | ||||
| Encapsulation</dd> | ||||
| <dt>NVO:</dt><dd>Network Virtualization Overlay</dd> | ||||
| <dt>OAM:</dt><dd>Operations, Administration, and Maintenance</dd> | ||||
| <dt>PBB:</dt><dd>Provider Backbone Bridging</dd> | ||||
| <dt>PE:</dt><dd>Provider Edge</dd> | ||||
| <dt>PW:</dt><dd>Pseudowire</dd> | ||||
| <dt>RD:</dt><dd>Route Distinguisher</dd> | ||||
| <dt>RR:</dt><dd>Route Reflector</dd> | ||||
| <dt>RT:</dt><dd>Route Target</dd> | ||||
| <dt>S/C-TAG:</dt><dd>refers to a combination of Service Tag and Customer | ||||
| Tag in a 802.1Q frame</dd> | ||||
| <dt>TOR:</dt><dd>Top-Of-Rack</dd> | ||||
| <dt>UMR:</dt><dd>Unknown MAC Route</dd> | ||||
| <dt>vES:</dt><dd>virtual Ethernet Segment</dd> | ||||
| <dt>VNI/VSID:</dt><dd>refers to VXLAN/NVGRE virtual identifiers</dd> | ||||
| <dt>VPLS:</dt><dd>Virtual Private LAN Service</dd> | ||||
| <dt>VSI:</dt><dd>Virtual Switch Instance or VPLS instance in a | ||||
| particular PE</dd> | ||||
| <dt>VXLAN:</dt><dd>Virtual eXtensible LAN</dd> | ||||
| </dl> | ||||
| </section> | ||||
| <section title="Decoupled Interconnect solution for EVPN overlay networks | <section anchor="sect-3" numbered="true" toc="default"> | |||
| " anchor="sect-3"><t> | <name>Decoupled Interconnect Solution for EVPN-Overlay Networks</name> | |||
| <t> | ||||
| This section describes the interconnect solution when the GW and WAN | This section describes the interconnect solution when the GW and WAN | |||
| Edge functions are implemented in different systems. Figure 1 depicts | Edge functions are implemented in different systems. <xref target="fig-1"/> d epicts | |||
| the reference model described in this section. Note that, although | the reference model described in this section. Note that, although | |||
| not shown in Figure 1, GWs may have local ACs (Attachment Circuits).</t> | not shown in <xref target="fig-1"/>, GWs may have local Attachment Circuits | |||
| (ACs).</t> | ||||
| <figure title="Decoupled Interconnect model" anchor="ure-decoupled-interc | <figure anchor="fig-1"> | |||
| onnect-model"><artwork><![CDATA[ | <name>Decoupled Interconnect Model</name> | |||
| <artwork name="" type="" align="left" alt=""><![CDATA[ | ||||
| +--+ | +--+ | |||
| |CE| | |CE| | |||
| +--+ | +--+ | |||
| | | | | |||
| +----+ | +----+ | |||
| +----| PE |----+ | +----| PE |----+ | |||
| +---------+ | +----+ | +---------+ | +---------+ | +----+ | +---------+ | |||
| +----+ | +---+ +----+ +----+ +---+ | +----+ | +----+ | +---+ +----+ +----+ +---+ | +----+ | |||
| |NVE1|--| | | |WAN | |WAN | | | |--|NVE3| | |NVE1|--| | | |WAN | |WAN | | | |--|NVE3| | |||
| +----+ | |GW1|--|Edge| |Edge|--|GW3| | +----+ | +----+ | |GW1|--|Edge| |Edge|--|GW3| | +----+ | |||
| | +---+ +----+ +----+ +---+ | | | +---+ +----+ +----+ +---+ | | |||
| | NVO-1 | | WAN | | NVO-2 | | | NVO-1 | | WAN | | NVO-2 | | |||
| | +---+ +----+ +----+ +---+ | | | +---+ +----+ +----+ +---+ | | |||
| | | | |WAN | |WAN | | | | | | | | |WAN | |WAN | | | | | |||
| +----+ | |GW2|--|Edge| |Edge|--|GW4| | +----+ | +----+ | |GW2|--|Edge| |Edge|--|GW4| | +----+ | |||
| |NVE2|--| +---+ +----+ +----+ +---+ |--|NVE4| | |NVE2|--| +---+ +----+ +----+ +---+ |--|NVE4| | |||
| +----+ +---------+ | | +---------+ +----+ | +----+ +---------+ | | +---------+ +----+ | |||
| +--------------+ | +--------------+ | |||
| |<-EVPN-Overlay-->|<-VLAN->|<-WAN L2VPN->|<--PW-->|<--EVPN-Overlay->| | |<-EVPN-Overlay-->|<-VLAN->|<-WAN L2VPN->|<--PW-->|<--EVPN-Overlay->| | |||
| hand-off hand-off | handoff handoff | |||
| ]]></artwork> | ]]></artwork> | |||
| </figure> | </figure> | |||
| <t> | <t> | |||
| The following section describes the interconnect requirements for | The following section describes the interconnect requirements for | |||
| this model.</t> | this model.</t> | |||
| <section anchor="sect-3.1" numbered="true" toc="default"> | ||||
| <section title="Interconnect requirements" anchor="sect-3.1"><t> | <name>Interconnect Requirements</name> | |||
| The Decoupled Interconnect architecture is intended to be deployed in | <t> | |||
| The decoupled interconnect architecture is intended to be deployed in | ||||
| networks where the EVPN-Overlay and WAN providers are different | networks where the EVPN-Overlay and WAN providers are different | |||
| entities and a clear demarcation is needed. This solution solves the | entities and a clear demarcation is needed. This solution solves the | |||
| following requirements:</t> | following requirements:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"><t>A simple connectivity hand-off between the EV | <li>A simple connectivity handoff between the EVPN-Overlay network | |||
| PN-Overlay network | ||||
| provider and the WAN provider so that QoS and security enforcement | provider and the WAN provider so that QoS and security enforcement | |||
| is easily accomplished.</t> | are easily accomplished.</li> | |||
| <li>Independence of the L2VPN technology deployed in | ||||
| <t>Independence of the Layer Two VPN (L2VPN) technology deployed in | the WAN.</li> | |||
| the WAN.</t> | <li>Multihoming between GW and WAN Edge routers, including per-service | |||
| load balancing. Per-flow load balancing is not a strong requirement, | ||||
| <t>Multi-homing between GW and WAN Edge routers, including per-service | ||||
| load balancing. Per-flow load balancing is not a strong requirement | ||||
| since a deterministic path per service is usually required for an | since a deterministic path per service is usually required for an | |||
| easy QoS and security enforcement.</t> | easy QoS and security enforcement.</li> | |||
| <li>Support of Ethernet OAM and Connectivity Fault Management (CFM) | ||||
| <t>Support of Ethernet OAM and Connectivity Fault Management (CFM) | <xref target="IEEE.802.1AG" format="default"/> <xref target="Y.1731" format | |||
| <xref target="IEEE.802.1AG"/><xref target="Y.1731"/> functions between the | ="default"/> functions between the GW and the WAN Edge router | |||
| GW and the WAN Edge router | to detect individual AC failures.</li> | |||
| to detect individual AC failures.</t> | <li> | |||
| <t>Support for the following optimizations at the GW:</t> | ||||
| <t>Support for the following optimizations at the GW:<list style="symbols | <ul spacing="normal"> | |||
| "><t>Flooding reduction of unknown unicast traffic sourced from the DC | <li>Flooding reduction of unknown unicast traffic sourced from the | |||
| Network Virtualization Edge devices (NVEs).</t> | DC | |||
| Network Virtualization Edge (NVE) devices.</li> | ||||
| <t>Control of the WAN MAC addresses advertised to the DC.</t> | <li>Control of the WAN MAC addresses advertised to the DC.</li> | |||
| <li>Address Resolution Protocol (ARP) and Neighbor Discovery (ND) | ||||
| <t>Address Resolution Protocol (ARP) and Neighbor Discovery (ND) | flooding control for the requests coming from the WAN.</li> | |||
| flooding control for the requests coming from the WAN.</t> | </ul> | |||
| </li> | ||||
| </list> | </ul> | |||
| </t> | </section> | |||
| <section anchor="sect-3.2" numbered="true" toc="default"> | ||||
| </list> | <name>VLAN-Based Handoff</name> | |||
| </t> | <t> | |||
| In this option, the handoff between the GWs and the WAN Edge routers | ||||
| </section> | is based on VLANs <xref target="IEEE.802.1Q" format="default"/>. This | |||
| is illustrated in <xref target="fig-1"/> | ||||
| <section title="VLAN-based hand-off" anchor="sect-3.2"><t> | ||||
| In this option, the hand-off between the GWs and the WAN Edge routers | ||||
| is based on VLANs <xref target="IEEE.802.1Q-2014"/>. This is illustrated in F | ||||
| igure 1 | ||||
| (between the GWs in NVO-1 and the WAN Edge routers). Each MAC-VRF in | (between the GWs in NVO-1 and the WAN Edge routers). Each MAC-VRF in | |||
| the GW is connected to a different VSI/MAC-VRF instance in the WAN | the GW is connected to a different VSI/MAC-VRF instance in the WAN | |||
| Edge router by using a different C-TAG VLAN ID or a different | Edge router by using a different C-TAG VLAN ID or a different | |||
| combination of S/C-TAG VLAN IDs that matches at both sides.</t> | combination of S/C-TAG VLAN IDs that matches at both sides.</t> | |||
| <t> | ||||
| <t> | ||||
| This option provides the best possible demarcation between the DC and | This option provides the best possible demarcation between the DC and | |||
| WAN providers and it does not require control plane interaction | WAN providers, and it does not require control plane interaction | |||
| between both providers. The disadvantage of this model is the | between both providers. The disadvantage of this model is the | |||
| provisioning overhead since the service has to be mapped to a C-TAG | provisioning overhead, since the service has to be mapped to a C-TAG | |||
| or S/C-TAG VLAN ID combination at both GW and WAN Edge routers.</t> | or S/C-TAG VLAN ID combination at both GW and WAN Edge routers.</t> | |||
| <t> | ||||
| <t> | ||||
| In this model, the GW acts as a regular Network Virtualization Edge | In this model, the GW acts as a regular Network Virtualization Edge | |||
| (NVE) towards the DC. Its control plane, data plane procedures and | (NVE) towards the DC. Its control plane, data plane procedures, and | |||
| interactions are described in <xref target="I-D.ietf-bess-evpn-overlay"/>.</t | interactions are described in <xref target="RFC8365" format="default"/>.</t> | |||
| > | <t> | |||
| <t> | ||||
| The WAN Edge router acts as a (PBB-)VPLS or (PBB-)EVPN PE with | The WAN Edge router acts as a (PBB-)VPLS or (PBB-)EVPN PE with | |||
| attachment circuits (ACs) to the GWs. Its functions are described in | Attachment Circuits (ACs) to the GWs. | |||
| <xref target="RFC4761"/>, <xref target="RFC4762"/>, <xref target="RFC6074"/> | ||||
| or <xref target="RFC7432"/>, <xref target="RFC7623"/>.</t> | ||||
| </section> | ||||
| <section title="PW-based (Pseudowire-based) hand-off" anchor="sect-3.3">< | Its functions are described in | |||
| t> | <xref target="RFC4761" format="default"/>, <xref target="RFC4762" | |||
| format="default"/>, <xref target="RFC6074" format="default"/>, <xref | ||||
| target="RFC7432" format="default"/>, and <xref target="RFC7623" | ||||
| format="default"/>.</t> | ||||
| </section> | ||||
| <section anchor="sect-3.3" numbered="true" toc="default"> | ||||
| <name>PW-Based Handoff</name> | ||||
| <t> | ||||
| If MPLS between the GW and the WAN Edge router is an option, a PW-based | If MPLS between the GW and the WAN Edge router is an option, a PW-based | |||
| Interconnect solution can be deployed. In this option the hand-off between | interconnect solution can be deployed. In this option, the handoff between | |||
| both routers is based on FEC128-based PWs <xref target="RFC4762"/> or FEC129- | both routers is based on FEC128-based PWs <xref target="RFC4762" format="defa | |||
| based PWs | ult"/> or FEC129-based PWs | |||
| (for a greater level of network automation) <xref target="RFC6074"/>. Note th | (for a greater level of network automation) <xref target="RFC6074" format="de | |||
| at this model | fault"/>. Note that this model | |||
| still provides a clear demarcation boundary between DC and WAN (since there | still provides a clear demarcation between DC and WAN (since there | |||
| is a single PW between each MAC-VRF and peer VSI), and security/QoS | is a single PW between each MAC-VRF and peer VSI), and security/QoS | |||
| policies may be applied on a per PW basis. This model provides better | policies may be applied on a per-PW basis. This model provides better | |||
| scalability than a C-TAG based hand-off and less provisioning overhead than | scalability than a C-TAG-based handoff and less provisioning overhead than | |||
| a combined C/S-TAG hand-off. The PW-based hand-off interconnect is | a combined C/S-TAG handoff. The PW-based handoff interconnect is | |||
| illustrated in Figure 1 (between the NVO-2 GWs and the WAN Edge routers).</t> | illustrated in <xref target="fig-1"/> (between the NVO-2 GWs and the WAN Edge | |||
| routers).</t> | ||||
| <t> | <t> | |||
| In this model, besides the usual MPLS procedures between GW and WAN | In this model, besides the usual MPLS procedures between GW and WAN | |||
| Edge router <xref target="RFC3031"/>, the GW MUST support an interworking fun ction | Edge router <xref target="RFC3031" format="default"/>, the GW <bcp14>MUST</bc p14> support an interworking function | |||
| in each MAC-VRF that requires extension to the WAN:</t> | in each MAC-VRF that requires extension to the WAN:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"><t>If a FEC128-based PW is used between the MAC- | <li>If a FEC128-based PW is used between the MAC-VRF (GW) and the VSI | |||
| VRF (GW) and the VSI (WAN | (WAN | |||
| Edge), the corresponding VCID MUST be provisioned on the MAC-VRF and | Edge), the corresponding Virtual Connection Identifier (VCID) <bcp14>MUST</ | |||
| match the VCID used in the peer VSI at the WAN Edge router.</t> | bcp14> be provisioned on the MAC-VRF and | |||
| match the VCID used in the peer VSI at the WAN Edge router.</li> | ||||
| <t>If BGP Auto-discovery <xref target="RFC6074"/> and FEC129-based PWs ar | <li>If BGP Auto-discovery <xref target="RFC6074" format="default"/> an | |||
| e used | d FEC129-based PWs are used | |||
| between the GW MAC-VRF and the WAN Edge VSI, the provisioning of | between the GW MAC-VRF and the WAN Edge VSI, the provisioning of | |||
| the VPLS-ID MUST be supported on the MAC-VRF and MUST match the | the VPLS-ID <bcp14>MUST</bcp14> be supported on the MAC-VRF and <bcp14>MUST | |||
| VPLS-ID used in the WAN Edge VSI.</t> | </bcp14> match the | |||
| VPLS-ID used in the WAN Edge VSI.</li> | ||||
| </list> | </ul> | |||
| </t> | <t> | |||
| <t> | ||||
| If a PW-based handoff is used, the GW's AC (or point of attachment to | If a PW-based handoff is used, the GW's AC (or point of attachment to | |||
| the EVPN Instance) uses a combination of a PW label and VLAN IDs. PWs | the EVPN instance) uses a combination of a PW label and VLAN IDs. PWs | |||
| are treated as service interfaces defined in <xref target="RFC7432"/>.</t> | are treated as service interfaces, defined in <xref target="RFC7432" format=" | |||
| default"/>.</t> | ||||
| </section> | </section> | |||
| <section anchor="sect-3.4" numbered="true" toc="default"> | ||||
| <section title="Multi-homing solution on the GWs" anchor="sect-3.4"><t> | <name>Multihoming Solution on the GWs</name> | |||
| EVPN single-active multi-homing, i.e. per-service load-balancing | <t> | |||
| multi-homing is required in this type of interconnect.</t> | EVPN single-active multihoming -- i.e., per-service load-balancing | |||
| multihoming -- is required in this type of interconnect.</t> | ||||
| <t> | ||||
| <t> | The GWs will be provisioned with a unique ES for each WAN interconnect, | |||
| The GWs will be provisioned with a unique ES per WAN interconnect, | and the handoff attachment circuits or PWs between the GW and the | |||
| and the hand-off attachment circuits or PWs between the GW and the | WAN Edge router will be assigned an ESI for each such ES. The ESI will be | |||
| WAN Edge router will be assigned an ESI for such ES. The ESI will be | ||||
| administratively configured on the GWs according to the procedures in | administratively configured on the GWs according to the procedures in | |||
| <xref target="RFC7432"/>. This Interconnect ES will be referred as "I-ES" her | <xref target="RFC7432" format="default"/>. This I-ES will be | |||
| eafter, | referred to as "I-ES" hereafter, | |||
| and its identifier will be referred as "I-ESI". <xref target="RFC7432"/> desc | and its identifier will be referred to as "I-ESI". Different ESI types are de | |||
| ribes | scribed in <xref target="RFC7432" | |||
| different ESI Types. The use of Type 0 for the I-ESI is RECOMMENDED | format="default"/>. The use of Type 0 for the I-ESI is <bcp14>RECOMMENDED</bc | |||
| p14> | ||||
| in this document.</t> | in this document.</t> | |||
| <t> | ||||
| <t> | The solution (on the GWs) <bcp14>MUST</bcp14> follow the single-active multih | |||
| The solution (on the GWs) MUST follow the single-active multi-homing | oming | |||
| procedures as described in <xref target="I-D.ietf-bess-evpn-overlay"/> for th | procedures as described in <xref target="RFC8365" format="default"/> for | |||
| e provisioned I-ESI, | the provisioned I-ESI -- i.e., Ethernet A-D routes per ES and per EVI will be | |||
| i.e. Ethernet A-D routes per ES and per EVI will be advertised to the DC | advertised to the DC | |||
| NVEs for the multi-homing functions, ES routes will be advertised so that | NVEs for the multihoming functions, and ES routes will be advertised so that | |||
| ES discovery and Designated Forwarder (DF) procedures can be followed. The | ES discovery and Designated Forwarder (DF) procedures can be followed. The | |||
| MAC addresses learned (in the data plane) on the hand-off links will be | MAC addresses learned (in the data plane) on the handoff links will be | |||
| advertised with the I-ESI encoded in the ESI field.</t> | advertised with the I-ESI encoded in the ESI field.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-3.5" numbered="true" toc="default"> | |||
| <name>Gateway Optimizations</name> | ||||
| <section title="Gateway Optimizations" anchor="sect-3.5"><t> | <t> | |||
| The following GW features are optional and optimize the control plane | The following GW features are optional and optimize the control plane | |||
| and data plane in the DC.</t> | and data plane in the DC.</t> | |||
| <section anchor="sect-3.5.1" numbered="true" toc="default"> | ||||
| <section title="MAC Address Advertisement Control" anchor="sect-3.5.1"><t | <name>MAC Address Advertisement Control</name> | |||
| > | <t> | |||
| The use of EVPN in NVO networks brings a significant number of | The use of EVPN in NVO networks brings a significant number of | |||
| benefits as described in <xref target="I-D.ietf-bess-evpn-overlay"/>. However , if multiple DCs | benefits, as described in <xref target="RFC8365" format="default"/>. However, if multiple DCs | |||
| are interconnected into a single EVI, each DC will have to import all | are interconnected into a single EVI, each DC will have to import all | |||
| of the MAC addresses from each of the other DCs.</t> | of the MAC addresses from each of the other DCs.</t> | |||
| <t> | ||||
| <t> | Even if optimized BGP techniques like RT constraint <xref target="RFC4684" fo | |||
| Even if optimized BGP techniques like RT-constraint <xref target="RFC4684"/> | rmat="default"/> are | |||
| are | ||||
| used, the number of MAC addresses to advertise or withdraw (in case | used, the number of MAC addresses to advertise or withdraw (in case | |||
| of failure) by the GWs of a given DC could overwhelm the NVEs within | of failure) by the GWs of a given DC could overwhelm the NVEs within | |||
| that DC, particularly when the NVEs reside in the hypervisors.</t> | that DC, particularly when the NVEs reside in the hypervisors.</t> | |||
| <t> | ||||
| <t> | The solution specified in this document uses the Unknown MAC Route (UMR) | |||
| The solution specified in this document uses the 'Unknown MAC Route' (UMR) | that is advertised into a given DC by each of the DC's GWs. This route is | |||
| which is advertised into a given DC by each of the DC's GWs. This route is | defined in <xref target="RFC7543" format="default"/> and is a regular EVPN MA | |||
| defined in <xref target="RFC7543"/> and is a regular EVPN MAC/IP Advertisemen | C/IP Advertisement route in | |||
| t route in | ||||
| which the MAC Address Length is set to 48, the MAC address is set to 0, and | which the MAC Address Length is set to 48, the MAC address is set to 0, and | |||
| the ESI field is set to the DC GW's I-ESI.</t> | the ESI field is set to the DC GW's I-ESI.</t> | |||
| <t> | ||||
| <t> | An NVE within that DC that understands and processes the UMR will send | |||
| An NVE within that DC that understands and process the UMR will send | unknown unicast frames to one of the DC's GWs, which will then forward | |||
| unknown unicast frames to one of the DCs GWs, which will then forward | ||||
| that packet to the correct egress PE. Note that, because the ESI is | that packet to the correct egress PE. Note that, because the ESI is | |||
| set to the DC GW's I-ESI, all-active multi-homing can be applied to | set to the DC GW's I-ESI, all-active multihoming can be applied to | |||
| unknown unicast MAC addresses. An NVE that does not understand the | unknown unicast MAC addresses. An NVE that does not understand the | |||
| Unknown MAC route will handle unknown unicast as described in | Unknown MAC Route will handle unknown unicast as described in | |||
| <xref target="RFC7432"/>.</t> | <xref target="RFC7432" format="default"/>.</t> | |||
| <t> | ||||
| <t> | This document proposes that local policy determine whether MAC | |||
| This document proposes that local policy determines whether MAC | ||||
| addresses and/or the UMR are advertised into a given DC. As an | addresses and/or the UMR are advertised into a given DC. As an | |||
| example, when all the DC MAC addresses are learned in the | example, when all the DC MAC addresses are learned in the | |||
| control/management plane, it may be appropriate to advertise only the | control/management plane, it may be appropriate to advertise only the | |||
| UMR. Advertising all the DC MAC addresses in the control/management | UMR. Advertising all the DC MAC addresses in the control/management | |||
| plane is usually the case when the NVEs reside in hypervisors. Refer | plane is usually the case when the NVEs reside in hypervisors. Refer | |||
| to <xref target="I-D.ietf-bess-evpn-overlay"/> section 7.</t> | to <xref target="RFC8365" sectionFormat="comma" section="7"/>.</t> | |||
| <t> | ||||
| <t> | It is worth noting that the UMR usage in <xref target="RFC7543" | |||
| It is worth noting that the UMR usage in <xref target="RFC7543"/> and the UMR | format="default"/> and the UMR usage in | |||
| usage in | ||||
| this document are different. In the former, a Virtual Spoke (V-spoke) does | this document are different. In the former, a Virtual Spoke (V-spoke) does | |||
| not necessarily learn all the MAC addresses pertaining to hosts in other | not necessarily learn all the MAC addresses pertaining to hosts in other | |||
| V-spokes of the same network. The communication between two V-spokes is | V-spokes of the same network. The communication between two V-spokes is | |||
| done through the DMG, until the V-spokes learn each other's MAC | done through the Default MAC Gateway (DMG) until the V-spokes learn each othe r's MAC | |||
| addresses. In this document, two leaf switches in the same DC are | addresses. In this document, two leaf switches in the same DC are | |||
| recommended to learn each other's MAC addresses for the same EVI. The leaf | recommended for V-spokes to learn each other's MAC addresses for the same EVI | |||
| to leaf communication is always direct and does not go through the GW.</t> | . The | |||
| leaf-to-leaf communication is always direct and does not go through | ||||
| </section> | the GW.</t> | |||
| </section> | ||||
| <section title="ARP/ND flooding control" anchor="sect-3.5.2"><t> | <section anchor="sect-3.5.2" numbered="true" toc="default"> | |||
| <name>ARP/ND Flooding Control</name> | ||||
| <t> | ||||
| Another optimization mechanism, naturally provided by EVPN in the | Another optimization mechanism, naturally provided by EVPN in the | |||
| GWs, is the Proxy ARP/ND function. The GWs should build a Proxy | GWs, is the Proxy ARP/ND function. The GWs should build a Proxy | |||
| ARP/ND cache table as per <xref target="RFC7432"/>. When the active GW receiv | ARP/ND cache table, as per <xref target="RFC7432" format="default"/>. When | |||
| es an | the active GW receives an | |||
| ARP/ND request/solicitation coming from the WAN, the GW does a Proxy | ARP/ND request/solicitation coming from the WAN, the GW does a Proxy | |||
| ARP/ND table lookup and replies as long as the information is | ARP/ND table lookup and replies as long as the information is | |||
| available in its table.</t> | available in its table.</t> | |||
| <t> | ||||
| <t> | ||||
| This mechanism is especially recommended on the GWs, since it | This mechanism is especially recommended on the GWs, since it | |||
| protects the DC network from external ARP/ND-flooding storms.</t> | protects the DC network from external ARP/ND-flooding storms.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-3.5.3" numbered="true" toc="default"> | |||
| <name>Handling Failures between GW and WAN Edge Routers</name> | ||||
| <section title="Handling failures between GW and WAN Edge routers" anchor | <t> | |||
| ="sect-3.5.3"><t> | Link/PE failures are handled on the GWs as specified in <xref target="RFC7432 | |||
| Link/PE failures are handled on the GWs as specified in <xref target="RFC7432 | " format="default"/>. | |||
| "/>. | The GW detecting the failure will withdraw the EVPN routes, as per | |||
| The GW detecting the failure will withdraw the EVPN routes as per | <xref target="RFC7432" format="default"/>.</t> | |||
| <xref target="RFC7432"/>.</t> | <t> | |||
| <t> | ||||
| Individual AC/PW failures may be detected by OAM mechanisms. For | Individual AC/PW failures may be detected by OAM mechanisms. For | |||
| instance:</t> | instance:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"><t>If the Interconnect solution is based on a VL | <li>If the interconnect solution is based on a VLAN handoff, Etherne | |||
| AN hand-off, Ethernet-CFM | t-CFM | |||
| <xref target="IEEE.802.1AG"/><xref target="Y.1731"/> may be used to detect | <xref target="IEEE.802.1AG" format="default"/> <xref target="Y.1731" format | |||
| individual AC failures on both, | ="default"/> may be used to detect individual AC failures on both | |||
| the GW and WAN Edge router. An individual AC failure will trigger the | the GW and WAN Edge router. An individual AC failure will trigger the | |||
| withdrawal of the corresponding A-D per EVI route as well as the MACs | withdrawal of the corresponding A-D per EVI route as well as the MACs | |||
| learned on that AC.</t> | learned on that AC.</li> | |||
| <li>If the interconnect solution is based on a PW handoff, the Label | ||||
| <t>If the Interconnect solution is based on a PW hand-off, the Label | Distribution Protocol (LDP) PW Status bits TLV <xref target="RFC6870" forma | |||
| Distribution Protocol (LDP) PW Status bits TLV <xref target="RFC6870"/> may | t="default"/> may be | |||
| be | used to detect individual PW failures on both the GW and WAN Edge | |||
| used to detect individual PW failures on both, the GW and WAN Edge | router.</li> | |||
| router.</t> | </ul> | |||
| </section> | ||||
| </list> | </section> | |||
| </t> | </section> | |||
| <section anchor="sect-4" numbered="true" toc="default"> | ||||
| </section> | <name>Integrated Interconnect Solution for EVPN-Overlay Networks</name> | |||
| <t> | ||||
| </section> | ||||
| </section> | ||||
| <section title="Integrated Interconnect solution for EVPN overlay network | ||||
| s" anchor="sect-4"><t> | ||||
| When the DC and the WAN are operated by the same administrative | When the DC and the WAN are operated by the same administrative | |||
| entity, the Service Provider can decide to integrate the GW and WAN | entity, the Service Provider can decide to integrate the GW and WAN | |||
| Edge PE functions in the same router for obvious CAPEX and OPEX | Edge PE functions in the same router for obvious reasons to save as relates t | |||
| saving reasons. This is illustrated in Figure 2. Note that this model | o Capital Expenditure (CAPEX) and Operating Expenses (OPEX). This is illustrated | |||
| in <xref target="fig-2"/>. Note that this | ||||
| model | ||||
| does not provide an explicit demarcation link between DC and WAN | does not provide an explicit demarcation link between DC and WAN | |||
| anymore. Although not shown in Figure 2, note that the GWs may have | anymore. Although not shown in <xref target="fig-2"/>, note that the GWs may have | |||
| local ACs.</t> | local ACs.</t> | |||
| <figure anchor="fig-2"> | ||||
| <figure title="Integrated Interconnect model" anchor="ure-integrated-inte | <name>Integrated Interconnect Model</name> | |||
| rconnect-model"><artwork><![CDATA[ | <artwork name="" type="" align="left" alt=""><![CDATA[ | |||
| +--+ | +--+ | |||
| |CE| | |CE| | |||
| +--+ | +--+ | |||
| | | | | |||
| +----+ | +----+ | |||
| +----| PE |----+ | +----| PE |----+ | |||
| +---------+ | +----+ | +---------+ | +---------+ | +----+ | +---------+ | |||
| +----+ | +---+ +---+ | +----+ | +----+ | +---+ +---+ | +----+ | |||
| |NVE1|--| | | | | |--|NVE3| | |NVE1|--| | | | | |--|NVE3| | |||
| +----+ | |GW1| |GW3| | +----+ | +----+ | |GW1| |GW3| | +----+ | |||
| skipping to change at line 566 ¶ | skipping to change at line 472 ¶ | |||
| +----+ | |GW2| |GW4| | +----+ | +----+ | |GW2| |GW4| | +----+ | |||
| |NVE2|--| +---+ +---+ |--|NVE4| | |NVE2|--| +---+ +---+ |--|NVE4| | |||
| +----+ +---------+ | | +---------+ +----+ | +----+ +---------+ | | +---------+ +----+ | |||
| +--------------+ | +--------------+ | |||
| |<--EVPN-Overlay--->|<-----VPLS--->|<---EVPN-Overlay-->| | |<--EVPN-Overlay--->|<-----VPLS--->|<---EVPN-Overlay-->| | |||
| |<--PBB-VPLS-->| | |<--PBB-VPLS-->| | |||
| Interconnect -> |<-EVPN-MPLS-->| | Interconnect -> |<-EVPN-MPLS-->| | |||
| options |<--EVPN-Ovl-->|* | options |<--EVPN-Ovl-->|* | |||
| |<--PBB-EVPN-->| | |<--PBB-EVPN-->| | |||
| ]]></artwork> | ||||
| </figure> | ||||
| <t>* EVPN-Ovl stands for EVPN-Overlay (and it's an Interconnect optio | ||||
| n).</t> | ||||
| <section title="Interconnect requirements" anchor="sect-4.1"><t> | * EVPN-Ovl stands for EVPN-Overlay (and it's an interconnect option). | |||
| The Integrated Interconnect solution meets the following | ]]></artwork> | |||
| </figure> | ||||
| <section anchor="sect-4.1" numbered="true" toc="default"> | ||||
| <name>Interconnect Requirements</name> | ||||
| <t> | ||||
| The integrated interconnect solution meets the following | ||||
| requirements:</t> | requirements:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"><t>Control plane and data plane interworking bet | <li>Control plane and data plane interworking between the EVPN-Overlay | |||
| ween the EVPN-overlay | ||||
| network and the L2VPN technology supported in the WAN, irrespective | network and the L2VPN technology supported in the WAN, irrespective | |||
| of the technology choice, i.e. (PBB-)VPLS or (PBB-)EVPN, as | of the technology choice -- i.e., (PBB-)VPLS or (PBB-)EVPN, as | |||
| depicted in Figure 2.</t> | depicted in <xref target="fig-2"/>.</li> | |||
| <li>Multihoming, including single-active multihoming with per-service | ||||
| <t>Multi-homing, including single-active multi-homing with per-service lo | load | |||
| ad | balancing or all-active multihoming -- i.e., per-flow load-balancing -- as | |||
| balancing or all-active multi-homing, i.e. per-flow load-balancing, as | long as the technology deployed in the WAN supports it.</li> | |||
| long as the technology deployed in the WAN supports it.</t> | <li>Support for end-to-end MAC Mobility, Static MAC protection and | |||
| other procedures (e.g., proxy-arp) described in <xref target="RFC7432" form | ||||
| <t>Support for end-to-end MAC Mobility, Static MAC protection and | at="default"/> as long as | |||
| other procedures (e.g. proxy-arp) described in <xref target="RFC7432"/> as | EVPN-MPLS is the technology of choice in the WAN.</li> | |||
| long as | <li>Independent inclusive multicast trees in the WAN and in the DC. | |||
| EVPN-MPLS is the technology of choice in the WAN.</t> | ||||
| <t>Independent inclusive multicast trees in the WAN and in the DC. | ||||
| That is, the inclusive multicast tree type defined in the WAN does | That is, the inclusive multicast tree type defined in the WAN does | |||
| not need to be the same as in the DC.</t> | not need to be the same as in the DC.</li> | |||
| </ul> | ||||
| </list> | </section> | |||
| </t> | <section anchor="sect-4.2" numbered="true" toc="default"> | |||
| <name>VPLS Interconnect for EVPN-Overlay Networks</name> | ||||
| </section> | <section anchor="sect-4.2.1" numbered="true" toc="default"> | |||
| <name>Control/Data Plane Setup Procedures on the GWs</name> | ||||
| <section title="VPLS Interconnect for EVPN-Overlay networks" anchor="sect | <t> | |||
| -4.2"><section title="Control/Data Plane setup procedures on the GWs" anchor="se | Regular MPLS tunnels and Targeted LDP (tLDP) / BGP sessions will be set up to | |||
| ct-4.2.1"><t> | the WAN | |||
| Regular MPLS tunnels and TLDP/BGP sessions will be setup to the WAN | PEs and RRs as per <xref target="RFC4761" format="default"/>, <xref | |||
| PEs and RRs as per <xref target="RFC4761"/>, <xref target="RFC4762"/>, <xref | target="RFC4762" format="default"/>, and <xref target="RFC6074" format="defau | |||
| target="RFC6074"/> and overlay | lt"/>, and overlay | |||
| tunnels and EVPN will be setup as per <xref target="I-D.ietf-bess-evpn-overla | tunnels and EVPN will be set up as per <xref target="RFC8365" format="default | |||
| y"/>. Note that | "/>. Note that | |||
| different route-targets for the DC and for the WAN are normally | different route targets for the DC and the WAN are normally | |||
| required (unless <xref target="RFC4762"/> is used in the WAN, in which case n | required (unless <xref target="RFC4762" format="default"/> is used in the WAN | |||
| o WAN | , in which case no WAN | |||
| route-target is needed). A single type-1 RD per service may be used.</t> | route target is needed). A single type-1 RD per service may be used.</t> | |||
| <t> | ||||
| <t> | In order to support multihoming, the GWs will be provisioned with an | |||
| In order to support multi-homing, the GWs will be provisioned with an | I-ESI (see <xref target="sect-3.4"/>), which will be unique for each | |||
| I-ESI (see section 3.4), that will be unique per interconnection. The | interconnection. In this case, the I-ES will represent the | |||
| I-ES in this case will represent the group of PWs to the WAN PEs and | group of PWs to the WAN PEs and | |||
| GWs. All the <xref target="RFC7432"/> procedures are still followed for the I | GWs. All the <xref target="RFC7432" format="default"/> procedures are still | |||
| -ES, | followed for the I-ES -- e.g., any MAC address learned from the WAN will be a | |||
| e.g. any MAC address learned from the WAN will be advertised to the | dvertised to the | |||
| DC with the I-ESI in the ESI field.</t> | DC with the I-ESI in the ESI field.</t> | |||
| <t> | ||||
| <t> | ||||
| A MAC-VRF per EVI will be created in each GW. The MAC-VRF will have | A MAC-VRF per EVI will be created in each GW. The MAC-VRF will have | |||
| two different types of tunnel bindings instantiated in two different | two different types of tunnel bindings instantiated in two different | |||
| split-horizon-groups:</t> | split-horizon groups:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li> VPLS PWs will be instantiated in the WAN split-horizon group.</ | |||
| li> | ||||
| <t> VPLS PWs will be instantiated in the "WAN split-horizon-group".</t> | <li> Overlay tunnel bindings (e.g., VXLAN, NVGRE) will be instantiat | |||
| ed | ||||
| <t> Overlay tunnel bindings (e.g. VXLAN, NVGRE) will be instantiated | in the DC split-horizon group.</li> | |||
| in the "DC split-horizon-group".</t> | </ul> | |||
| <t> | ||||
| </list> | ||||
| </t> | ||||
| <t> | ||||
| Attachment circuits are also supported on the same MAC-VRF (although | Attachment circuits are also supported on the same MAC-VRF (although | |||
| not shown in Figure 2), but they will not be part of any of the above | not shown in <xref target="fig-2"/>), but they will not be part of any of the | |||
| split-horizon-groups.</t> | above | |||
| split-horizon groups.</t> | ||||
| <t> | <t> | |||
| Traffic received in a given split-horizon-group will never be | Traffic received in a given split-horizon group will never be | |||
| forwarded to a member of the same split-horizon-group.</t> | forwarded to a member of the same split-horizon group.</t> | |||
| <t> | ||||
| <t> | ||||
| As far as BUM flooding is concerned, a flooding list will be composed | As far as BUM flooding is concerned, a flooding list will be composed | |||
| of the sub-list created by the inclusive multicast routes and the | of the sublist created by the inclusive multicast routes and the | |||
| sub-list created for VPLS in the WAN. BUM frames received from a | sublist created for VPLS in the WAN. BUM frames received from a | |||
| local Attachment Circuit (AC) will be forwarded to the flooding list. | local Attachment Circuit (AC) will be forwarded to the flooding list. | |||
| BUM frames received from the DC or the WAN will be forwarded to the | BUM frames received from the DC or the WAN will be forwarded to the | |||
| flooding list observing the split-horizon-group rule described above.</t> | flooding list, observing the split-horizon group rule described above.</t> | |||
| <t> | ||||
| <t> | ||||
| Note that the GWs are not allowed to have an EVPN binding and a PW to | Note that the GWs are not allowed to have an EVPN binding and a PW to | |||
| the same far-end within the same MAC-VRF, so that loops and packet | the same far end within the same MAC-VRF, so that loops and packet | |||
| duplication are avoided. In case a GW can successfully establish | duplication are avoided. In case a GW can successfully establish | |||
| both, an EVPN binding and a PW to the same far-end PE, the EVPN | both an EVPN binding and a PW to the same far-end PE, the EVPN | |||
| binding will prevail and the PW will be brought operationally down.</t> | binding will prevail, and the PW will be brought down operationally.</t> | |||
| <t> | ||||
| <t> | The optimization procedures described in <xref target="sect-3.5"/> can | |||
| The optimizations procedures described in section 3.5 can also be | also be applied to this model.</t> | |||
| applied to this model.</t> | </section> | |||
| <section anchor="sect-4.2.2" numbered="true" toc="default"> | ||||
| </section> | <name>Multihoming Procedures on the GWs</name> | |||
| <t> | ||||
| <section title="Multi-homing procedures on the GWs" anchor="sect-4.2.2">< | This model supports single-active multihoming on the GWs. All-active | |||
| t> | multihoming is not supported by VPLS; therefore, it cannot be used on | |||
| This model supports single-active multi-homing on the GWs. All-active | ||||
| multi-homing is not supported by VPLS, therefore it cannot be used on | ||||
| the GWs.</t> | the GWs.</t> | |||
| <t> | ||||
| <t> | In this case, for a given EVI, all the PWs in the WAN split-horizon group | |||
| In this case, for a given EVI, all the PWs in the WAN split-horizon-group | are assigned to I-ES. All the single-active multihoming procedures as | |||
| are assigned to I-ES. All the single-active multi-homing procedures as | described by <xref target="RFC8365" format="default"/> will be followed for t | |||
| described by <xref target="I-D.ietf-bess-evpn-overlay"/> will be followed for | he I-ES.</t> | |||
| the I-ES.</t> | <t> | |||
| <t> | ||||
| The non-DF GW for the I-ES will block the transmission and reception | The non-DF GW for the I-ES will block the transmission and reception | |||
| of all the PWs in the "WAN split-horizon-group" for BUM and unicast | of all the PWs in the WAN split-horizon group for BUM and unicast | |||
| traffic.</t> | traffic.</t> | |||
| </section> | ||||
| </section> | </section> | |||
| <section anchor="sect-4.3" numbered="true" toc="default"> | ||||
| </section> | <name>PBB-VPLS Interconnect for EVPN-Overlay Networks</name> | |||
| <section anchor="sect-4.3.1" numbered="true" toc="default"> | ||||
| <section title="PBB-VPLS Interconnect for EVPN-Overlay networks" anchor=" | <name>Control/Data Plane Setup Procedures on the GWs</name> | |||
| sect-4.3"><section title="Control/Data Plane setup procedures on the GWs" anchor | <t> | |||
| ="sect-4.3.1"><t> | ||||
| In this case, there is no impact on the procedures described in | In this case, there is no impact on the procedures described in | |||
| <xref target="RFC7041"/> for the B-component. However the I-component instanc | <xref target="RFC7041" format="default"/> for the B-component. However, the | |||
| es | I-component instances | |||
| become EVI instances with EVPN-Overlay bindings and potentially local | become EVI instances with EVPN-Overlay bindings and potentially local | |||
| attachment circuits. A number of MAC-VRF instances can be multiplexed | attachment circuits. A number of MAC-VRF instances can be multiplexed | |||
| into the same B-component instance. This option provides significant | into the same B-component instance. This option provides significant | |||
| savings in terms of PWs to be maintained in the WAN.</t> | savings in terms of PWs to be maintained in the WAN.</t> | |||
| <t> | ||||
| <t> | The I-ESI concept described in <xref target="sect-4.2.1"/> will also be | |||
| The I-ESI concept described in section 4.2.1 will also be used for | used for the PBB-VPLS-based interconnect.</t> | |||
| the PBB-VPLS-based Interconnect.</t> | <t> | |||
| B-component PWs and I-component EVPN-Overlay bindings established to | ||||
| <t> | the same far end will be compared. The following rules will be | |||
| B-component PWs and I-component EVPN-overlay bindings established to | ||||
| the same far-end will be compared. The following rules will be | ||||
| observed:</t> | observed:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li> Attempts to set up a PW between the two GWs within the B-compon | |||
| ent | ||||
| <t> Attempts to setup a PW between the two GWs within the B-component | context will never be blocked.</li> | |||
| context will never be blocked.</t> | <li> If a PW exists between two GWs for the B-component and an attem | |||
| pt | ||||
| <t> If a PW exists between two GWs for the B-component and an attempt | is made to set up an EVPN binding on an I-component linked to that | |||
| is made to setup an EVPN binding on an I-component linked to that | B-component, the EVPN binding will be kept down operationally. Note | |||
| B-component, the EVPN binding will be kept operationally down. Note | that the BGP EVPN routes will still be valid but not used.</li> | |||
| that the BGP EVPN routes will still be valid but not used.</t> | <li> The EVPN binding will only be up and used as long as there is n | |||
| o | ||||
| <t> The EVPN binding will only be up and used as long as there is no | PW to the same far end in the corresponding B-component. The EVPN | |||
| PW to the same far-end in the corresponding B-component. The EVPN | ||||
| bindings in the I-components will be brought down before the PW in the | bindings in the I-components will be brought down before the PW in the | |||
| B-component is brought up.</t> | B-component is brought up.</li> | |||
| </ul> | ||||
| </list> | <t> | |||
| </t> | The optimization procedures described in <xref target="sect-3.5"/> can also b | |||
| e | ||||
| <t> | applied to this interconnect option.</t> | |||
| The optimizations procedures described in section 3.5 can also be | </section> | |||
| applied to this Interconnect option.</t> | <section anchor="sect-4.3.2" numbered="true" toc="default"> | |||
| <name>Multihoming Procedures on the GWs</name> | ||||
| </section> | <t> | |||
| This model supports single-active multihoming on the GWs. All-active | ||||
| <section title="Multi-homing procedures on the GWs" anchor="sect-4.3.2">< | multihoming is not supported by this scenario.</t> | |||
| t> | <t> | |||
| This model supports single-active multi-homing on the GWs. All-active | The single-active multihoming procedures as described by <xref target="RFC836 | |||
| multi-homing is not supported by this scenario.</t> | 5" format="default"/> | |||
| <t> | ||||
| The single-active multi-homing procedures as described by <xref target="I-D.i | ||||
| etf-bess-evpn-overlay"/> | ||||
| will be followed for the I-ES for each EVI instance connected to the | will be followed for the I-ES for each EVI instance connected to the | |||
| B-component. Note that in this case, for a given EVI, all the EVPN bindings | B-component. Note that in this case, for a given EVI, all the EVPN bindings | |||
| in the I-component are assigned to the I-ES. The non-DF GW for the I-ES | in the I-component are assigned to the I-ES. The non-DF GW for the I-ES | |||
| will block the transmission and reception of all the I-component EVPN | will block the transmission and reception of all the I-component EVPN | |||
| bindings for BUM and unicast traffic. When learning MACs from the WAN, the | bindings for BUM and unicast traffic. When learning MACs from the WAN, the | |||
| non-DF MUST NOT advertise EVPN MAC/IP routes for those MACs.</t> | non-DF <bcp14>MUST NOT</bcp14> advertise EVPN MAC/IP routes for those MACs.</ | |||
| t> | ||||
| </section> | </section> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.4" numbered="true" toc="default"> | |||
| <name>EVPN-MPLS Interconnect for EVPN-Overlay Networks</name> | ||||
| <section title="EVPN-MPLS Interconnect for EVPN-Overlay networks" anchor= | <t> | |||
| "sect-4.4"><t> | If EVPN for MPLS tunnels (referred to as "EVPN-MPLS" hereafter) are supported | |||
| If EVPN for MPLS tunnels, EVPN-MPLS hereafter, is supported in the | in the | |||
| WAN, an end-to-end EVPN solution can be deployed. The following | WAN, an end-to-end EVPN solution can be deployed. The following | |||
| sections describe the proposed solution as well as the impact | sections describe the proposed solution as well as its impact | |||
| required on the <xref target="RFC7432"/> procedures.</t> | on the procedures from <xref target="RFC7432" format="default"/>.</t> | |||
| <section anchor="sect-4.4.1" numbered="true" toc="default"> | ||||
| <section title="Control Plane setup procedures on the GWs" anchor="sect-4 | <name>Control plane Setup Procedures on the GWs</name> | |||
| .4.1"><t> | <t> | |||
| The GWs MUST establish separate BGP sessions for sending/receiving | The GWs <bcp14>MUST</bcp14> establish separate BGP sessions for sending/recei | |||
| EVPN routes to/from the DC and to/from the WAN. Normally each GW will | ving | |||
| setup one BGP EVPN session to the DC RR (or two BGP EVPN sessions if | EVPN routes to/from the DC and to/from the WAN. Normally, each GW will | |||
| set up one BGP EVPN session to the DC RR (or two BGP EVPN sessions if | ||||
| there are redundant DC RRs) and one session to the WAN RR (or two | there are redundant DC RRs) and one session to the WAN RR (or two | |||
| sessions if there are redundant WAN RRs).</t> | sessions if there are redundant WAN RRs).</t> | |||
| <t> | ||||
| <t> | ||||
| In order to facilitate separate BGP processes for DC and WAN, EVPN | In order to facilitate separate BGP processes for DC and WAN, EVPN | |||
| routes sent to the WAN SHOULD carry a different route-distinguisher | routes sent to the WAN <bcp14>SHOULD</bcp14> carry a different Route Distingu isher | |||
| (RD) than the EVPN routes sent to the DC. In addition, although | (RD) than the EVPN routes sent to the DC. In addition, although | |||
| reusing the same value is possible, different route-targets are | reusing the same value is possible, different route targets are | |||
| expected to be handled for the same EVI in the WAN and the DC. Note | expected to be handled for the same EVI in the WAN and the DC. Note | |||
| that the EVPN service routes sent to the DC RRs will normally include | that the EVPN service routes sent to the DC RRs will normally include | |||
| a <xref target="I-D.ietf-idr-tunnel-encaps"/> BGP encapsulation extended comm unity with a | a <xref target="RFC9012" format="default"/> BGP encapsulation extended commun ity with a | |||
| different tunnel type than the one sent to the WAN RRs.</t> | different tunnel type than the one sent to the WAN RRs.</t> | |||
| <t> | ||||
| <t> | ||||
| As in the other discussed options, an I-ES and its assigned I-ESI | As in the other discussed options, an I-ES and its assigned I-ESI | |||
| will be configured on the GWs for multi-homing. This I-ES represents | will be configured on the GWs for multihoming. This I-ES represents | |||
| the WAN EVPN-MPLS PEs to the DC but also the DC EVPN-Overlay NVEs to | the WAN EVPN-MPLS PEs to the DC but also the DC EVPN-Overlay NVEs to | |||
| the WAN. Optionally, different I-ESI values are configured for | the WAN. Optionally, different I-ESI values are configured for | |||
| representing the WAN and the DC. If different EVPN-Overlay networks | representing the WAN and the DC. If different EVPN-Overlay networks | |||
| are connected to the same group of GWs, each EVPN-Overlay network | are connected to the same group of GWs, each EVPN-Overlay network | |||
| MUST get assigned a different I-ESI.</t> | <bcp14>MUST</bcp14> get assigned a different I-ESI.</t> | |||
| <t> | ||||
| <t> | Received EVPN routes will never be reflected on the GWs but instead will be | |||
| Received EVPN routes will never be reflected on the GWs but consumed | consumed and re-advertised (if needed):</t> | |||
| and re-advertised (if needed):</t> | <ul spacing="normal"> | |||
| <li>Ethernet A-D routes, ES routes, and Inclusive Multicast routes a | ||||
| <t><list style="symbols"> | re | |||
| consumed by the GWs and processed locally for the corresponding <xref tar | ||||
| <t>Ethernet A-D routes, ES routes and Inclusive Multicast routes are | get="RFC7432" format="default"/> procedures.</li> | |||
| consumed by the GWs and processed locally for the corresponding <xref | <li> | |||
| target="RFC7432"/> procedures.</t> | <t>MAC/IP advertisement routes will be received and imported, and | |||
| if they | ||||
| <t>MAC/IP advertisement routes will be received, imported and if they | ||||
| become active in the MAC-VRF, the information will be re-advertised as | become active in the MAC-VRF, the information will be re-advertised as | |||
| new routes with the following fields: | new routes with the following fields: | |||
| <list style="symbols"> | </t> | |||
| <ul spacing="normal"> | ||||
| <t>The RD will be the GW's RD for the MAC-VRF.</t> | <li>The RD will be the GW's RD for the MAC-VRF.</li> | |||
| <li>The ESI will be set to the I-ESI.</li> | ||||
| <t>The ESI will be set to the I-ESI.</t> | <li>The Ethernet-tag value will be kept from the received NLRI t | |||
| he | ||||
| <t>The Ethernet-tag value will be kept from the received NLRI the | received NLRI.</li> | |||
| received NLRI.</t> | <li>The MAC length, MAC address, IP Length, and IP address value | |||
| s will | ||||
| <t>The MAC length, MAC address, IP Length and IP address values will | be kept from the received NLRI.</li> | |||
| be kept from the received NLRI.</t> | <li>The MPLS label will be a local 20-bit value (when sent to th | |||
| e | ||||
| <t>The MPLS label will be a local 20-bit value (when sent to the | ||||
| WAN) or a DC-global 24-bit value (when sent to the DC for | WAN) or a DC-global 24-bit value (when sent to the DC for | |||
| encapsulations using a VNI).</t> | encapsulations using a VNI).</li> | |||
| <li>The appropriate Route Targets (RTs) and <xref | ||||
| <t>The appropriate Route-Targets (RTs) and <xref | target="RFC9012" format="default"/> BGP encapsulation extended | |||
| target="I-D.ietf-idr-tunnel-encaps"/> BGP Encapsulation extended | community will be used according to <xref target="RFC8365" format="defa | |||
| community will be used according to <xref | ult"/>.</li> | |||
| target="I-D.ietf-bess-evpn-overlay"/>.</t> | </ul> | |||
| </li> | ||||
| </list> | </ul> | |||
| </t> | <t> | |||
| </list> | ||||
| </t> | ||||
| <t> | ||||
| The GWs will also generate the following local EVPN routes that will be | The GWs will also generate the following local EVPN routes that will be | |||
| sent to the DC and WAN, with their corresponding RTs and <xref target="I-D.ie | sent to the DC and WAN, with their corresponding RTs and <xref | |||
| tf-idr-tunnel-encaps"/> BGP | target="RFC9012" format="default"/> BGP encapsulation extended community valu | |||
| Encapsulation extended community values:</t> | es:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li>ES route(s) for the I-ESI(s).</li> | |||
| <li>Ethernet A-D routes per ES and EVI for the I-ESI(s). The A-D | ||||
| <t>ES route(s) for the I-ESI(s).</t> | ||||
| <t>Ethernet A-D routes per ES and EVI for the I-ESI(s). The A-D | ||||
| per-EVI routes sent to the WAN and the DC will have consistent | per-EVI routes sent to the WAN and the DC will have consistent | |||
| Ethernet-Tag values.</t> | Ethernet-Tag values.</li> | |||
| <li>Inclusive Multicast routes with independent tunnel-type value | ||||
| <t>Inclusive Multicast routes with independent tunnel type value | for the WAN and DC. For example, a P2MP Label Switched Path (LSP) may be | |||
| for the WAN and DC. E.g. a P2MP LSP may be used in the WAN | used in the WAN, | |||
| whereas ingress replication may be used in the DC. The routes | whereas ingress replication may be used in the DC. The routes | |||
| sent to the WAN and the DC will have a consistent Ethernet-Tag.</t> | sent to the WAN and the DC will have a consistent Ethernet-Tag.</li> | |||
| <t>MAC/IP advertisement routes for MAC addresses learned in local | ||||
| attachment circuits. Note that these routes will not include the | ||||
| I-ESI, but ESI=0 or different from 0 for local multi-homed | ||||
| Ethernet Segments (ES). The routes sent to the WAN and the DC | ||||
| will have a consistent Ethernet-Tag.</t> | ||||
| </list> | ||||
| </t> | ||||
| <t> | <li>MAC/IP advertisement routes for MAC addresses learned in local | |||
| attachment circuits. Note that these routes will not include the | ||||
| I-ESI value in the ESI field. These routes will include a zero ESI or a non-zero | ||||
| ESI for local multihomed | ||||
| Ethernet Segments (ES). The routes sent to the WAN and the DC | ||||
| will have a consistent Ethernet-Tag.</li> | ||||
| </ul> | ||||
| <t> | ||||
| Assuming GW1 and GW2 are peer GWs of the same DC, each GW will generate two | Assuming GW1 and GW2 are peer GWs of the same DC, each GW will generate two | |||
| sets of the above local service routes: Set-DC will be sent to the DC RRs | sets of the above local service routes: set-DC will be sent to the DC RRs | |||
| and will include A-D per EVI, Inclusive Multicast and MAC/IP routes for the | and will include an A-D per EVI, Inclusive Multicast, and MAC/IP routes for t | |||
| he | ||||
| DC encapsulation and RT. Set-WAN will be sent to the WAN RRs and will | DC encapsulation and RT. Set-WAN will be sent to the WAN RRs and will | |||
| include the same routes but using the WAN RT and encapsulation. GW1 and GW2 | include the same routes but using the WAN RT and encapsulation. GW1 and GW2 | |||
| will receive each other's set-DC and set-WAN. This is the expected behavior | will receive each other's set-DC and set-WAN. This is the expected behavior | |||
| on GW1 and GW2 for locally generated routes:</t> | on GW1 and GW2 for locally generated routes:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li>Inclusive multicast routes: When setting up the flooding lists f | |||
| or a | ||||
| <t>Inclusive multicast routes: when setting up the flooding lists for a | ||||
| given MAC-VRF, each GW will include its DC peer GW only in the | given MAC-VRF, each GW will include its DC peer GW only in the | |||
| EVPN-MPLS flooding list (by default) and not the EVPN-Overlay flooding | EVPN-MPLS flooding list (by default) and not the EVPN-Overlay flooding | |||
| list. That is, GW2 will import two Inclusive Multicast routes from GW1 | list. That is, GW2 will import two Inclusive Multicast routes from GW1 | |||
| (from set-DC and set-WAN) but will only consider one of the two, | (from set-DC and set-WAN) but will only consider one of the two, | |||
| having the set-WAN route higher priority. An administrative option MAY | giving the set-WAN route higher priority. An administrative option <bcp1 | |||
| change this preference so that the set-DC route is selected first.</t> | 4>MAY</bcp14> | |||
| change this preference so that the set-DC route is selected first.</li> | ||||
| <t>MAC/IP advertisement routes for local attachment circuits: as | <li>MAC/IP advertisement routes for local attachment circuits: As | |||
| above, the GW will select only one, having the route from the | above, the GW will select only one, giving the route from the | |||
| set-WAN a higher priority. As with the Inclusive multicast | set-WAN a higher priority. As with the Inclusive multicast | |||
| routes, an administrative option MAY change this priority.</t> | routes, an administrative option <bcp14>MAY</bcp14> change this priority | |||
| .</li> | ||||
| </list> | </ul> | |||
| </t> | </section> | |||
| <section anchor="sect-4.4.2" numbered="true" toc="default"> | ||||
| </section> | <name>Data Plane Setup Procedures on the GWs</name> | |||
| <t> | ||||
| <section title="Data Plane setup procedures on the GWs" anchor="sect-4.4. | ||||
| 2"><t> | ||||
| The procedure explained at the end of the previous section will make sure | The procedure explained at the end of the previous section will make sure | |||
| there are no loops or packet duplication between the GWs of the same | there are no loops or packet duplication between the GWs of the same | |||
| EVPN-Overlay network (for frames generated from local ACs) since only one | EVPN-Overlay network (for frames generated from local ACs), since only one | |||
| EVPN binding per EVI (or per Ethernet Tag in case of VLAN-aware bundle | EVPN binding per EVI (or per Ethernet Tag in the case of VLAN-aware bundle | |||
| services) will be setup in the data plane between the two nodes. That | services) will be set up in the data plane between the two nodes. That | |||
| binding will by default be added to the EVPN-MPLS flooding list.</t> | binding will by default be added to the EVPN-MPLS flooding list.</t> | |||
| <t> | ||||
| <t> | ||||
| As for the rest of the EVPN tunnel bindings, they will be added to one of | As for the rest of the EVPN tunnel bindings, they will be added to one of | |||
| the two flooding lists that each GW sets up for the same MAC-VRF:</t> | the two flooding lists that each GW sets up for the same MAC-VRF:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li>EVPN-Overlay flooding list (composed of bindings to the remote N | |||
| VEs | ||||
| <t>EVPN-overlay flooding list (composed of bindings to the remote NVEs | or multicast tunnel to the NVEs).</li> | |||
| or multicast tunnel to the NVEs).</t> | <li>EVPN-MPLS flooding list (composed of MP2P or LSM tunnel to the | |||
| remote PEs).</li> | ||||
| <t>EVPN-MPLS flooding list (composed of MP2P or LSM tunnel to the | </ul> | |||
| remote PEs)</t> | <t> | |||
| Each flooding list will be part of a separate split-horizon group: | ||||
| </list> | the WAN split-horizon group or the DC split-horizon group. Traffic | |||
| </t> | ||||
| <t> | ||||
| Each flooding list will be part of a separate split-horizon-group: | ||||
| the WAN split-horizon-group or the DC split-horizon-group. Traffic | ||||
| generated from a local AC can be flooded to both | generated from a local AC can be flooded to both | |||
| split-horizon-groups. Traffic from a binding of a split-horizon-group | split-horizon groups. Traffic from a binding of a split-horizon group | |||
| can be flooded to the other split-horizon-group and local ACs, but | can be flooded to the other split-horizon group and local ACs, but | |||
| never to a member of its own split-horizon-group.</t> | never to a member of its own split-horizon group.</t> | |||
| <t> | ||||
| <t> | When either GW1 or GW2 receives a BUM frame on an MPLS tunnel, including an | |||
| When either GW1 or GW2 receive a BUM frame on an MPLS tunnel including an | ||||
| ESI label at the bottom of the stack, they will perform an ESI label lookup | ESI label at the bottom of the stack, they will perform an ESI label lookup | |||
| and split-horizon filtering as per <xref target="RFC7432"/> in case the ESI l | and split-horizon filtering as per <xref target="RFC7432" | |||
| abel | format="default"/>, in case the ESI label | |||
| identifies a local ESI (I-ESI or any other non-zero ESI).</t> | identifies a local ESI (I-ESI or any other nonzero ESI).</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.4.3" numbered="true" toc="default"> | |||
| <name>Multihoming Procedure Extensions on the GWs</name> | ||||
| <section title="Multi-homing procedure extensions on the GWs" anchor="sec | <t> | |||
| t-4.4.3"><t> | This model supports single-active as well as all-active multihoming.</t> | |||
| This model supports single-active as well as all-active multi-homing.</t> | <t> | |||
| All the <xref target="RFC7432" format="default"/> multihoming procedures | ||||
| <t> | for the DF election on I-ES(s), as | |||
| All the <xref target="RFC7432"/> multi-homing procedures for the DF election | ||||
| on I-ES(s) as | ||||
| well as the backup-path (single-active) and aliasing (all-active) | well as the backup-path (single-active) and aliasing (all-active) | |||
| procedures will be followed on the GWs. Remote PEs in the EVPN-MPLS network | procedures, will be followed on the GWs. Remote PEs in the EVPN-MPLS network | |||
| will follow regular <xref target="RFC7432"/> aliasing or backup-path procedur | will follow regular <xref target="RFC7432" format="default"/> aliasing or bac | |||
| es for | kup-path procedures for | |||
| MAC/IP routes received from the GWs for the same I-ESI. So will NVEs in the | MAC/IP routes received from the GWs for the same I-ESI. So will NVEs in the | |||
| EVPN-Overlay network for MAC/IP routes received with the same I-ESI.</t> | EVPN-Overlay network for MAC/IP routes received with the same I-ESI.</t> | |||
| <t> | ||||
| <t> | ||||
| As far as the forwarding plane is concerned, by default, the EVPN-Overlay | As far as the forwarding plane is concerned, by default, the EVPN-Overlay | |||
| network will have an analogous behavior to the access ACs in <xref target="RF | network will have an analogous behavior to the access ACs in <xref target="RF | |||
| C7432"/> | C7432" format="default"/> | |||
| multi-homed Ethernet Segments.</t> | multihomed Ethernet Segments.</t> | |||
| <t>The forwarding behavior on the GWs is described below:</t> | ||||
| <t><list style="symbols"> | <ul spacing="normal"> | |||
| <li> | ||||
| <t>The forwarding behavior on the GWs is described below:</t> | <t>Single-active multihoming; assuming a WAN split-horizon group | |||
| (comprised of EVPN-MPLS bindings), a DC split-horizon group | ||||
| <t>Single-active multi-homing; assuming a WAN split-horizon-group | (comprised of EVPN-Overlay bindings), and local ACs on the GWs: | |||
| (comprised of EVPN-MPLS bindings), a DC split-horizon-group | ||||
| (comprised of EVPN-Overlay bindings) and local ACs on the GWs: | ||||
| <list style="symbols"> | ||||
| <t>Forwarding behavior on the non-DF: the non-DF MUST block | </t> | |||
| <ul spacing="normal"> | ||||
| <li>Forwarding behavior on the non-DF: The non-DF <bcp14>MUST</b | ||||
| cp14> block | ||||
| ingress and egress forwarding on the EVPN-Overlay bindings | ingress and egress forwarding on the EVPN-Overlay bindings | |||
| associated to the I-ES. The EVPN-MPLS network is considered to | associated to the I-ES. The EVPN-MPLS network is considered to | |||
| be the core network and the EVPN-MPLS bindings to the remote | be the core network, and the EVPN-MPLS bindings to the remote | |||
| PEs and GWs will be active.</t> | PEs and GWs will be active.</li> | |||
| <li>Forwarding behavior on the DF: The DF <bcp14>MUST NOT</bcp14 | ||||
| <t>Forwarding behavior on the DF: the DF MUST NOT forward BUM or | > forward BUM or | |||
| unicast traffic received from a given split-horizon-group to a | unicast traffic received from a given split-horizon group to a | |||
| member of his own split-horizon group. Forwarding to other | member of its own split-horizon group. Forwarding to other | |||
| split-horizon-groups and local ACs is allowed (as long as the ACs | split-horizon groups and local ACs is allowed (as long as the ACs | |||
| are not part of an ES for which the node is non-DF). As per <xref | are not part of an ES for which the node is non-DF). As per <xref targ | |||
| target="RFC7432"/> and for split-horizon purposes, when receiving | et="RFC7432" format="default"/> and for split-horizon purposes, when receiving | |||
| BUM traffic on the EVPN-Overlay bindings associated to an I-ES, the | BUM traffic on the EVPN-Overlay bindings associated to an I-ES, the | |||
| DF GW SHOULD add the I-ESI label when forwarding to the peer GW | DF GW <bcp14>SHOULD</bcp14> add the I-ESI label when forwarding to the | |||
| over EVPN-MPLS.</t> | peer GW | |||
| over EVPN-MPLS.</li> | ||||
| <t>When receiving EVPN MAC/IP routes from the WAN, the non-DF MUST | <li>When receiving EVPN MAC/IP routes from the WAN, the non-DF < | |||
| NOT re-originate the EVPN routes and advertise them to the DC | bcp14>MUST | |||
| NOT</bcp14> reoriginate the EVPN routes and advertise them to the DC | ||||
| peers. In the same way, EVPN MAC/IP routes received from the DC | peers. In the same way, EVPN MAC/IP routes received from the DC | |||
| MUST NOT be advertised to the WAN peers. This is consistent with | <bcp14>MUST NOT</bcp14> be advertised to the WAN peers. This is consis | |||
| <xref target="RFC7432"/> and allows the remote PE/NVEs know who the | tent with | |||
| primary GW is, based on the reception of the MAC/IP routes.</t> | <xref target="RFC7432" format="default"/> and allows the remote | |||
| PE/NVEs to know who the | ||||
| </list> | primary GW is, based on the reception of the MAC/IP routes.</li> | |||
| </t> | </ul> | |||
| </li> | ||||
| </list> | </ul> | |||
| </t> | <ul spacing="normal"> | |||
| <li> | ||||
| <t><list style="symbols"> | <t>All-active multihoming; assuming a WAN split-horizon group | |||
| (comprised of EVPN-MPLS bindings), a DC split-horizon group | ||||
| <t>All-active multi-homing; assuming a WAN split-horizon-group | (comprised of EVPN-Overlay bindings), and local ACs on the GWs: | |||
| (comprised of EVPN-MPLS bindings), a DC split-horizon-group | ||||
| (comprised of EVPN-Overlay bindings) and local ACs on the GWs: | ||||
| <list style="symbols"> | ||||
| <t>Forwarding behavior on the non-DF: the non-DF follows the same | </t> | |||
| behavior as the non-DF in the single-active case but only for BUM | <ul spacing="normal"> | |||
| traffic. Unicast traffic received from a split-horizon-group MUST | <li>Forwarding behavior on the non-DF: The non-DF follows the sa | |||
| NOT be forwarded to a member of its own split-horizon-group but can | me | |||
| be forwarded normally to the other split-horizon-groups and local | behavior as the non-DF in the single-active case, but only for BUM | |||
| traffic. Unicast traffic received from a split-horizon group <bcp14>M | ||||
| UST | ||||
| NOT</bcp14> be forwarded to a member of its own split-horizon group b | ||||
| ut can | ||||
| be forwarded normally to the other split-horizon groups and local | ||||
| ACs. If a known unicast packet is identified as a "flooded" packet, | ACs. If a known unicast packet is identified as a "flooded" packet, | |||
| the procedures for BUM traffic MUST be followed.</t> | the procedures for BUM traffic <bcp14>MUST</bcp14> be followed.</li> | |||
| <li>Forwarding behavior on the DF: The DF follows the same behav | ||||
| <t>Forwarding behavior on the DF: the DF follows the same behavior | ior | |||
| as the DF in the single-active case but only for BUM | as the DF in the single-active case, but only for BUM | |||
| traffic. Unicast traffic received from a split-horizon-group MUST | traffic. Unicast traffic received from a split-horizon group <bcp14>MU | |||
| NOT be forwarded to a member of its own split-horizon-group but can | ST | |||
| be forwarded normally to the other split-horizon-group and local | NOT</bcp14> be forwarded to a member of its own split-horizon group bu | |||
| t can | ||||
| be forwarded normally to the other split-horizon group and local | ||||
| ACs. If a known unicast packet is identified as a "flooded" packet, | ACs. If a known unicast packet is identified as a "flooded" packet, | |||
| the procedures for BUM traffic MUST be followed. As per <xref | the procedures for BUM traffic <bcp14>MUST</bcp14> be followed. As per | |||
| target="RFC7432"/> and for split-horizon purposes, when receiving | <xref target="RFC7432" format="default"/> and for split-horizon purposes, when | |||
| receiving | ||||
| BUM traffic on the EVPN-Overlay bindings associated to an I-ES, the | BUM traffic on the EVPN-Overlay bindings associated to an I-ES, the | |||
| DF GW MUST add the I-ESI label when forwarding to the peer GW over | DF GW <bcp14>MUST</bcp14> add the I-ESI label when forwarding to the p | |||
| EVPN-MPLS.</t> | eer GW over | |||
| EVPN-MPLS.</li> | ||||
| <t>Contrary to the single-active multi-homing case, both DF and | <li>Contrary to the single-active multihoming case, both DF and | |||
| non-DF re-originate and advertise MAC/IP routes received from | non-DF reoriginate and advertise MAC/IP routes received from | |||
| the WAN/DC peers, adding the corresponding I-ESI so that the | the WAN/DC peers, adding the corresponding I-ESI so that the | |||
| remote PE/NVEs can perform regular aliasing as per <xref target="RFC7 | remote PE/NVEs can perform regular aliasing, as per <xref | |||
| 432"/>.</t> | target="RFC7432" format="default"/>.</li> | |||
| </ul> | ||||
| </list> | </li> | |||
| </t> | </ul> | |||
| <t> | ||||
| </list> | The example in <xref target="fig-3"/> illustrates the forwarding of BUM traff | |||
| </t> | ic | |||
| originated from an NVE on a pair of all-active multihoming GWs.</t> | ||||
| <t> | <figure anchor="fig-3"> | |||
| The example in Figure 3 illustrates the forwarding of BUM traffic | <name>Multihoming BUM Forwarding</name> | |||
| originated from an NVE on a pair of all-active multi-homing GWs.</t> | <artwork name="" type="" align="left" alt=""><![CDATA[ | |||
| <figure title="Multi-homing BUM forwarding" anchor="ure-multi-homing-bum- | ||||
| forwarding"><artwork><![CDATA[ | ||||
| |<--EVPN-Overlay--->|<--EVPN-MPLS-->| | |<--EVPN-Overlay--->|<--EVPN-MPLS-->| | |||
| +---------+ +--------------+ | +---------+ +--------------+ | |||
| +----+ BUM +---+ | | +----+ BUM +---+ | | |||
| |NVE1+----+----> | +-+-----+ | | |NVE1+----+----> | +-+-----+ | | |||
| +----+ | | DF |GW1| | | | | +----+ | | DF |GW1| | | | | |||
| | | +-+-+ | | ++--+ | | | +-+-+ | | ++--+ | |||
| | | | | +--> |PE1| | | | | | +--> |PE1| | |||
| | +--->X +-+-+ | ++--+ | | +--->X +-+-+ | ++--+ | |||
| | NDF| | | | | | NDF| | | | | |||
| +----+ | |GW2<-+ | | +----+ | |GW2<-+ | | |||
| |NVE2+--+ +-+-+ | | |NVE2+--+ +-+-+ | | |||
| +----+ +--------+ | +------------+ | +----+ +--------+ | +------------+ | |||
| v | v | |||
| +--+ | +--+ | |||
| |CE| | |CE| | |||
| +--+ | +--+ | |||
| ]]></artwork> | ]]></artwork> | |||
| </figure> | </figure> | |||
| <t> | <t> | |||
| GW2 is the non-DF for the I-ES and blocks the BUM forwarding. GW1 is | GW2 is the non-DF for the I-ES and blocks the BUM forwarding. GW1 is | |||
| the DF and forwards the traffic to PE1 and GW2. Packets sent to GW2 | the DF and forwards the traffic to PE1 and GW2. Packets sent to GW2 | |||
| will include the ESI-label for the I-ES. Based on the ESI-label, GW2 | will include the ESI label for the I-ES. Based on the ESI label, GW2 | |||
| identifies the packets as I-ES-generated packets and will only | identifies the packets as I-ES-generated packets and will only | |||
| forward them to local ACs (CE in the example) and not back to the | forward them to local ACs (CE in the example) and not back to the | |||
| EVPN-Overlay network.</t> | EVPN-Overlay network.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.4.4" numbered="true" toc="default"> | |||
| <name>Impact on MAC Mobility Procedures</name> | ||||
| <section title="Impact on MAC Mobility procedures" anchor="sect-4.4.4"><t | <t> | |||
| > | MAC Mobility procedures described in <xref target="RFC7432" format="default"/ | |||
| MAC Mobility procedures described in <xref target="RFC7432"/> are not modifie | > are not modified by | |||
| d by | ||||
| this document.</t> | this document.</t> | |||
| <t> | ||||
| <t> | ||||
| Note that an intra-DC MAC move still leaves the MAC attached to the | Note that an intra-DC MAC move still leaves the MAC attached to the | |||
| same I-ES, so under the rules of <xref target="RFC7432"/> this is not conside | same I-ES, so under the rules of <xref target="RFC7432" format="default"/>, | |||
| red a | this is not considered a | |||
| MAC mobility event. Only when the MAC moves from the WAN domain to | MAC Mobility event. Only when the MAC moves from the WAN domain to | |||
| the DC domain (or from one DC to another) the MAC will be learned | the DC domain (or from one DC to another) will the MAC be learned | |||
| from a different ES and the MAC Mobility procedures will kick in.</t> | from a different ES, and the MAC Mobility procedures will kick in.</t> | |||
| <t> | ||||
| <t> | The sticky-bit indication in the MAC Mobility extended community <bcp14>MUST< | |||
| The sticky bit indication in the MAC Mobility extended community MUST | /bcp14> | |||
| be propagated between domains.</t> | be propagated between domains.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.4.5" numbered="true" toc="default"> | |||
| <name>Gateway Optimizations</name> | ||||
| <section title="Gateway optimizations" anchor="sect-4.4.5"><t> | <t> | |||
| All the Gateway optimizations described in section 3.5 MAY be applied | All the Gateway optimizations described in <xref target="sect-3.5"/> | |||
| to the GWs when the Interconnect is based on EVPN-MPLS.</t> | <bcp14>MAY</bcp14> be applied | |||
| to the GWs when the interconnect is based on EVPN-MPLS.</t> | ||||
| <t> | <t> | |||
| In particular, the use of the Unknown MAC Route, as described in | In particular, the use of the Unknown MAC Route, as described in | |||
| section 3.5.1, solves some transient packet duplication issues in | <xref target="sect-3.5.1"/>, solves some transient packet-duplication | |||
| cases of all-active multi-homing, as explained below.</t> | issues in | |||
| cases of all-active multihoming, as explained below.</t> | ||||
| <t> | <t> | |||
| Consider the diagram in Figure 2 for EVPN-MPLS Interconnect and all-active | Consider the diagram in <xref target="fig-2"/> for EVPN-MPLS interconnect and | |||
| multi-homing, and the following sequence:</t> | all-active | |||
| multihoming, and the following sequence:</t> | ||||
| <t><list style="format (%c)"> | <ol spacing="normal" type="(%c)"> | |||
| <li>MAC Address M1 is advertised from NVE3 in EVI-1.</li> | ||||
| <t>MAC Address M1 is advertised from NVE3 in EVI-1.</t> | <li>GW3 and GW4 learn M1 for EVI-1 and re-advertise M1 to the WAN | |||
| with I-ESI-2 in the ESI field.</li> | ||||
| <t>GW3 and GW4 learn M1 for EVI-1 and re-advertise M1 to the WAN | <li>GW1 and GW2 learn M1 and install GW3/GW4 as next hops following | |||
| with I-ESI-2 in the ESI field.</t> | the EVPN aliasing procedures.</li> | |||
| <li>Before NVE1 learns M1, a packet arrives at NVE1 with destination | ||||
| <t>GW1 and GW2 learn M1 and install GW3/GW4 as next-hops following | ||||
| the EVPN aliasing procedures.</t> | ||||
| <t>Before NVE1 learns M1, a packet arrives at NVE1 with destination | ||||
| M1. If the Unknown MAC Route had not been advertised into the DC, | M1. If the Unknown MAC Route had not been advertised into the DC, | |||
| NVE1 would have flooded the packet throughout the DC, in particular | NVE1 would have flooded the packet throughout the DC, in particular | |||
| to both GW1 and GW2. If the same VNI/VSID is used for both known | to both GW1 and GW2. If the same VNI/VSID is used for both known | |||
| unicast and BUM traffic, as is typically the case, there is no | unicast and BUM traffic, as is typically the case, there is no | |||
| indication in the packet that it is a BUM packet and both GW1 and | indication in the packet that it is a BUM packet, and both GW1 and | |||
| GW2 would have forwarded it, creating packet duplication. However, | GW2 would have forwarded it, creating packet duplication. However, | |||
| because the Unknown MAC Route had been advertised into the DC, NVE1 | because the Unknown MAC Route had been advertised into the DC, NVE1 | |||
| will unicast the packet to either GW1 or GW2.</t> | will unicast the packet to either GW1 or GW2.</li> | |||
| <li>Since both GW1 and GW2 know M1, the GW receiving the packet will | ||||
| <t>Since both GW1 and GW2 know M1, the GW receiving the packet will | forward it to either GW3 or GW4.</li> | |||
| forward it to either GW3 or GW4.</t> | </ol> | |||
| </section> | ||||
| </list> | <section anchor="sect-4.4.6" numbered="true" toc="default"> | |||
| </t> | <name>Benefits of the EVPN-MPLS Interconnect Solution</name> | |||
| <t> | ||||
| </section> | The "DCI using ASBRs" solution described in <xref target="RFC8365" format="de | |||
| fault"/> and the GW solution | ||||
| <section title="Benefits of the EVPN-MPLS Interconnect solution" anchor=" | with EVPN-MPLS interconnect may be seen as similar, since they both | |||
| sect-4.4.6"><t> | ||||
| The <xref target="I-D.ietf-bess-evpn-overlay"/> "DCI using ASBRs" solution an | ||||
| d the GW solution | ||||
| with EVPN-MPLS Interconnect may be seen similar since they both | ||||
| retain the EVPN attributes between Data Centers and throughout the | retain the EVPN attributes between Data Centers and throughout the | |||
| WAN. However the EVPN-MPLS Interconnect solution on the GWs has | WAN. However, the EVPN-MPLS interconnect solution on the GWs has | |||
| significant benefits compared to the "DCI using ASBRs" solution:</t> | significant benefits compared to the "DCI using ASBRs" solution:</t> | |||
| <ul spacing="normal"> | ||||
| <t><list style="symbols"> | <li>As in any of the described GW models, this solution supports the | |||
| <t>As in any of the described GW models, this solution supports the | ||||
| connectivity of local attachment circuits on the GWs. This is not | connectivity of local attachment circuits on the GWs. This is not | |||
| possible in a "DCI using ASBRs" solution.</t> | possible in a "DCI using ASBRs" solution.</li> | |||
| <li>Different data plane encapsulations can be supported in the DC | ||||
| <t>Different data plane encapsulations can be supported in the DC | ||||
| and the WAN, while a uniform encapsulation is needed in the "DCI | and the WAN, while a uniform encapsulation is needed in the "DCI | |||
| using ASBRs" solution.</t> | using ASBRs" solution.</li> | |||
| <li>Optimized multicast solution, with independent inclusive | ||||
| <t>Optimized multicast solution, with independent inclusive | multicast trees in DC and WAN.</li> | |||
| multicast trees in DC and WAN.</t> | <li>MPLS label aggregation: For the case where MPLS labels are | |||
| signaled from the NVEs for MAC/IP advertisement routes, this | ||||
| <t>MPLS Label aggregation: for the case where MPLS labels are | solution provides label aggregation. A remote PE <bcp14>MAY</bcp14> rec | |||
| signaled from the NVEs for MAC/IP Advertisement routes, this | eive a | |||
| solution provides label aggregation. A remote PE MAY receive a | single label per GW MAC-VRF, as opposed to a label per NVE/MAC-VRF | |||
| single label per GW MAC-VRF as opposed to a label per NVE/MAC-VRF | connected to the GW MAC-VRF. For instance, in <xref target="fig-2"/>, P | |||
| connected to the GW MAC-VRF. For instance, in Figure 2, PE would | E would | |||
| receive only one label for all the routes advertised for a given | receive only one label for all the routes advertised for a given | |||
| MAC-VRF from GW1, as opposed to a label per NVE/MAC-VRF.</t> | MAC-VRF from GW1, as opposed to a label per NVE/MAC-VRF.</li> | |||
| <li>The GW will not propagate MAC Mobility for the MACs moving withi | ||||
| <t>The GW will not propagate MAC mobility for the MACs moving within | n | |||
| a DC. Mobility intra-DC is solved by all the NVEs in the DC. The MAC | a DC. Mobility intra-DC is solved by all the NVEs in the DC. The MAC | |||
| Mobility procedures on the GWs are only required in case of mobility | Mobility procedures on the GWs are only required in case of mobility | |||
| across DCs.</t> | across DCs.</li> | |||
| <li>Proxy-ARP/ND function on the DC GWs can be leveraged to reduce | ||||
| <t>Proxy-ARP/ND function on the DC GWs can be leveraged to reduce | ARP/ND flooding in the DC or/and the WAN.</li> | |||
| ARP/ND flooding in the DC or/and in the WAN.</t> | </ul> | |||
| </section> | ||||
| </list> | </section> | |||
| </t> | <section anchor="sect-4.5" numbered="true" toc="default"> | |||
| <name>PBB-EVPN Interconnect for EVPN-Overlay Networks</name> | ||||
| </section> | <t> | |||
| PBB-EVPN <xref target="RFC7623" format="default"/> is yet another interconnec | ||||
| </section> | t option. It requires | |||
| <section title="PBB-EVPN Interconnect for EVPN-Overlay networks" anchor=" | ||||
| sect-4.5"><t> | ||||
| PBB-EVPN <xref target="RFC7623"/> is yet another Interconnect option. It requ | ||||
| ires | ||||
| the use of GWs where I-components and associated B-components are | the use of GWs where I-components and associated B-components are | |||
| part of EVI instances.</t> | part of EVI instances.</t> | |||
| <section anchor="sect-4.5.1" numbered="true" toc="default"> | ||||
| <section title="Control/Data Plane setup procedures on the GWs" anchor="s | <name>Control/Data Plane Setup Procedures on the GWs</name> | |||
| ect-4.5.1"><t> | <t> | |||
| EVPN will run independently in both components, the I-component MAC-VRF and | EVPN will run independently in both components, the I-component MAC-VRF and | |||
| B-component MAC-VRF. Compared to <xref target="RFC7623"/>, the DC C-MACs are | B-component MAC-VRF. Compared to <xref target="RFC7623" format="default"/>, | |||
| no longer | the DC customer MACs (C-MACs) are no longer | |||
| learned in the data plane on the GW but in the control plane through EVPN | learned in the data plane on the GW but in the control plane through EVPN | |||
| running on the I-component. Remote C-MACs coming from remote PEs are still | running on the I-component. Remote C-MACs coming from remote PEs are still | |||
| learned in the data plane. B-MACs in the B-component will be assigned and | learned in the data plane. B-MACs in the B-component will be assigned and | |||
| advertised following the procedures described in <xref target="RFC7623"/>.</t | advertised following the procedures described in <xref target="RFC7623" forma | |||
| > | t="default"/>.</t> | |||
| <t> | ||||
| <t> | An I-ES will be configured on the GWs for multihoming, but its I-ESI will | |||
| An I-ES will be configured on the GWs for multi-homing, but its I-ESI will | ||||
| only be used in the EVPN control plane for the I-component EVI. No | only be used in the EVPN control plane for the I-component EVI. No | |||
| non-reserved ESIs will be used in the control plane of the B-component EVI | unreserved ESIs will be used in the control plane of the B-component EVI, | |||
| as per <xref target="RFC7623"/>, that is, the I-ES will be represented to the | as per <xref target="RFC7623" format="default"/>. That is, the I-ES will be | |||
| WAN PBB-EVPN | represented to the WAN PBB-EVPN | |||
| PEs using shared or dedicated B-MACs.</t> | PEs using shared or dedicated B-MACs.</t> | |||
| <t> | ||||
| <t> | The rest of the control plane procedures will follow <xref target="RFC7432" f | |||
| The rest of the control plane procedures will follow <xref target="RFC7432"/> | ormat="default"/> for | |||
| for | the I-component EVI and <xref target="RFC7623" format="default"/> for the B-c | |||
| the I-component EVI and <xref target="RFC7623"/> for the B-component EVI.</t> | omponent EVI.</t> | |||
| <t> | ||||
| <t> | ||||
| From the data plane perspective, the I-component and B-component EVPN | From the data plane perspective, the I-component and B-component EVPN | |||
| bindings established to the same far-end will be compared and the | bindings established to the same far end will be compared, and the | |||
| I-component EVPN-overlay binding will be kept down following the rules | I-component EVPN-Overlay binding will be kept down following the rules | |||
| described in section 4.3.1.</t> | described in <xref target="sect-4.3.1"/>.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.5.2" numbered="true" toc="default"> | |||
| <name>Multihoming Procedures on the GWs</name> | ||||
| <section title="Multi-homing procedures on the GWs" anchor="sect-4.5.2">< | <t> | |||
| t> | This model supports single-active as well as all-active multihoming.</t> | |||
| This model supports single-active as well as all-active multi-homing.</t> | <t> | |||
| <t> | ||||
| The forwarding behavior of the DF and non-DF will be changed based on | The forwarding behavior of the DF and non-DF will be changed based on | |||
| the description outlined in section 4.4.3, only replacing the "WAN split-hori | the description outlined in <xref target="sect-4.4.3"/>, substituting the | |||
| zon-group" for the B-component, and using <xref target="RFC7623"/> | WAN split-horizon group for the B-component, and using <xref | |||
| target="RFC7623" format="default"/> | ||||
| procedures for the traffic sent or received on the B-component.</t> | procedures for the traffic sent or received on the B-component.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.5.3" numbered="true" toc="default"> | |||
| <name>Impact on MAC Mobility Procedures</name> | ||||
| <section title="Impact on MAC Mobility procedures" anchor="sect-4.5.3"><t | <t> | |||
| > | ||||
| C-MACs learned from the B-component will be advertised in EVPN within | C-MACs learned from the B-component will be advertised in EVPN within | |||
| the I-component EVI scope. If the C-MAC was previously known in the | the I-component EVI scope. If the C-MAC was previously known in the | |||
| I-component database, EVPN would advertise the C-MAC with a higher | I-component database, EVPN would advertise the C-MAC with a higher | |||
| sequence number, as per <xref target="RFC7432"/>. From a Mobility perspective | sequence number, as per <xref target="RFC7432" format="default"/>. From the | |||
| and | perspective of Mobility and the related procedures described in <xref | |||
| the related procedures described in <xref target="RFC7432"/>, the C-MACs lear | target="RFC7432" format="default"/>, the C-MACs learned | |||
| ned | ||||
| from the B-component are considered local.</t> | from the B-component are considered local.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.5.4" numbered="true" toc="default"> | |||
| <name>Gateway Optimizations</name> | ||||
| <section title="Gateway optimizations" anchor="sect-4.5.4"><t> | <t> | |||
| All the considerations explained in section 4.4.5 are applicable to | All the considerations explained in <xref target="sect-4.4.5"/> are | |||
| the PBB-EVPN Interconnect option.</t> | applicable to | |||
| the PBB-EVPN interconnect option.</t> | ||||
| </section> | </section> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.6" numbered="true" toc="default"> | |||
| <name>EVPN-VXLAN Interconnect for EVPN-Overlay Networks</name> | ||||
| <section title="EVPN-VXLAN Interconnect for EVPN-Overlay networks" anchor | <t> | |||
| ="sect-4.6"><t> | If EVPN for Overlay tunnels is supported in the WAN, and a GW function | |||
| If EVPN for Overlay tunnels is supported in the WAN and a GW function | ||||
| is required, an end-to-end EVPN solution can be deployed. While | is required, an end-to-end EVPN solution can be deployed. While | |||
| multiple Overlay tunnel combinations at the WAN and the DC are | multiple Overlay tunnel combinations at the WAN and the DC are | |||
| possible (MPLSoGRE, nvGRE, etc.), VXLAN is described here, given its | possible (MPLSoGRE, NVGRE, etc.), VXLAN is described here, given its | |||
| popularity in the industry. This section focuses on the specific case | popularity in the industry. This section focuses on the specific case | |||
| of EVPN for VXLAN (EVPN-VXLAN hereafter) and the impact on the | of EVPN for VXLAN (EVPN-VXLAN hereafter) and the impact on the | |||
| <xref target="RFC7432"/> procedures.</t> | <xref target="RFC7432" format="default"/> procedures.</t> | |||
| <t> | ||||
| <t> | The procedures described in <xref target="sect-4.4"/> apply to this section, | |||
| The procedures described in section 4.4 apply to this section too, only | too, only | |||
| replacing EVPN-MPLS for EVPN-VXLAN control plane specifics and using | substituting EVPN-MPLS for EVPN-VXLAN control plane specifics and using | |||
| <xref target="I-D.ietf-bess-evpn-overlay"/> "Local Bias" procedures instead o | <xref target="RFC8365" format="default"/> "Local Bias" procedures instead | |||
| f section 4.4.3. Since | of <xref target="sect-4.4.3"/>. Since | |||
| there are no ESI-labels in VXLAN, GWs need to rely on "Local Bias" to apply | there are no ESI labels in VXLAN, GWs need to rely on "Local Bias" to apply | |||
| split-horizon on packets generated from the I-ES and sent to the peer GW.</t> | split horizon on packets generated from the I-ES and sent to the peer GW.</t> | |||
| <t> | ||||
| <t> | This use case assumes that NVEs need to use the VNIs or VSIDs as | |||
| This use-case assumes that NVEs need to use the VNIs or VSIDs as a | globally unique identifiers within a Data Center, and a Gateway needs | |||
| globally unique identifiers within a data center, and a Gateway needs | to be employed at the edge of the Data-Center network to translate | |||
| to be employed at the edge of the data center network to translate | ||||
| the VNI or VSID when crossing the network boundaries. This GW | the VNI or VSID when crossing the network boundaries. This GW | |||
| function provides VNI and tunnel IP address translation. The use-case | function provides VNI and tunnel-IP-address translation. The use case | |||
| in which local downstream assigned VNIs or VSIDs can be used (like | in which local downstream-assigned VNIs or VSIDs can be used (like | |||
| MPLS labels) is described by <xref target="I-D.ietf-bess-evpn-overlay"/>.</t> | MPLS labels) is described by <xref target="RFC8365" format="default"/>.</t> | |||
| <t> | ||||
| <t> | ||||
| While VNIs are globally significant within each DC, there are two | While VNIs are globally significant within each DC, there are two | |||
| possibilities in the Interconnect network:</t> | possibilities in the interconnect network:</t> | |||
| <ol spacing="normal"> | ||||
| <t><list style="format (%c)"> | <li>Globally unique VNIs in the interconnect network. In this case, | |||
| the GWs and PEs in the interconnect network will agree on a common | ||||
| <t>Globally unique VNIs in the Interconnect network: In this case, | VNI for a given EVI. The RT to be used in the interconnect network | |||
| the GWs and PEs in the Interconnect network will agree on a common | can be autoderived from the agreed-upon interconnect VNI. The VNI used | |||
| VNI for a given EVI. The RT to be used in the Interconnect network | inside each DC <bcp14>MAY</bcp14> be the same as the interconnect VNI.< | |||
| can be auto-derived from the agreed Interconnect VNI. The VNI used | /li> | |||
| inside each DC MAY be the same as the Interconnect VNI.</t> | <li>Downstream-assigned VNIs in the interconnect network. In this | |||
| case, the GWs and PEs <bcp14>MUST</bcp14> use the proper RTs to import/ | ||||
| <t>Downstream assigned VNIs in the Interconnect network. In this | export the EVPN routes. Note that even if the VNI is downstream assigned in the | |||
| case, the GWs and PEs MUST use the proper RTs to import/export the | interconnect network, and unlike option (a), it only identifies the | |||
| EVPN routes. Note that even if the VNI is downstream assigned in the | ||||
| Interconnect network, and unlike option (a), it only identifies the | ||||
| <Ethernet Tag, GW> pair and not the <Ethernet Tag, egress | <Ethernet Tag, GW> pair and not the <Ethernet Tag, egress | |||
| PE> pair. The VNI used inside each DC MAY be the same as the | PE> pair. The VNI used inside each DC <bcp14>MAY</bcp14> be the same | |||
| Interconnect VNI. GWs SHOULD support multiple VNI spaces per EVI | as the | |||
| (one per Interconnect network they are connected to). | interconnect VNI. GWs <bcp14>SHOULD</bcp14> support multiple VNI spaces | |||
| </t> | per EVI | |||
| (one per interconnect network they are connected to). | ||||
| </list> | </li> | |||
| </t> | </ol> | |||
| <t> | ||||
| <t> | ||||
| In both options, NVEs inside a DC only have to be aware of a single | In both options, NVEs inside a DC only have to be aware of a single | |||
| VNI space, and only GWs will handle the complexity of managing | VNI space, and only GWs will handle the complexity of managing | |||
| multiple VNI spaces. In addition to VNI translation above, the GWs | multiple VNI spaces. In addition to VNI translation above, the GWs | |||
| will provide translation of the tunnel source IP for the packets | will provide translation of the tunnel source IP for the packets | |||
| generated from the NVEs, using their own IP address. GWs will use | generated from the NVEs, using their own IP address. GWs will use | |||
| that IP address as the BGP next-hop in all the EVPN updates to the | that IP address as the BGP next hop in all the EVPN updates to the | |||
| Interconnect network.</t> | interconnect network.</t> | |||
| <t> | ||||
| <t> | ||||
| The following sections provide more details about these two options.</t> | The following sections provide more details about these two options.</t> | |||
| <section anchor="sect-4.6.1" numbered="true" toc="default"> | ||||
| <section title="Globally unique VNIs in the Interconnect network" anchor= | <name>Globally Unique VNIs in the Interconnect Network</name> | |||
| "sect-4.6.1"><t> | <t> | |||
| Considering Figure 2, if a host H1 in NVO-1 needs to communicate with a | Considering <xref target="fig-2"/>, if a host H1 in NVO-1 needs to communicat | |||
| e with a | ||||
| host H2 in NVO-2, and assuming that different VNIs are used in each DC for | host H2 in NVO-2, and assuming that different VNIs are used in each DC for | |||
| the same EVI, e.g. VNI-10 in NVO-1 and VNI-20 in NVO-2, then the VNIs MUST | the same EVI (e.g., VNI-10 in NVO-1 and VNI-20 in NVO-2), then the VNIs | |||
| be translated to a common Interconnect VNI (e.g. VNI-100) on the GWs. Each | <bcp14>MUST</bcp14> | |||
| be translated to a common interconnect VNI (e.g., VNI-100) on the GWs. Each | ||||
| GW is provisioned with a VNI translation mapping so that it can translate | GW is provisioned with a VNI translation mapping so that it can translate | |||
| the VNI in the control plane when sending BGP EVPN route updates to the | the VNI in the control plane when sending BGP EVPN route updates to the | |||
| Interconnect network. In other words, GW1 and GW2 MUST be configured to map | interconnect network. In other words, GW1 and GW2 <bcp14>MUST</bcp14> be conf | |||
| VNI-10 to VNI-100 in the BGP update messages for H1's MAC route. This | igured to map | |||
| VNI-10 to VNI-100 in the BGP update messages for H1's MAC route. | ||||
| This | ||||
| mapping is also used to translate the VNI in the data plane in both | mapping is also used to translate the VNI in the data plane in both | |||
| directions, that is, VNI- 10 to VNI-100 when the packet is received from | directions: that is, VNI-10 to VNI-100 when the packet is received from | |||
| NVO-1 and the reverse mapping from VNI-100 to VNI-10 when the packet is | NVO-1 and the reverse mapping from VNI-100 to VNI-10 when the packet is | |||
| received from the remote NVO-2 network and needs to be forwarded to NVO-1.</t > | received from the remote NVO-2 network and needs to be forwarded to NVO-1.</t > | |||
| <t> | ||||
| <t> | The procedures described in <xref target="sect-4.4"/> will be followed, | |||
| The procedures described in section 4.4 will be followed, considering | considering | |||
| that the VNIs advertised/received by the GWs will be translated | that the VNIs advertised/received by the GWs will be translated | |||
| accordingly.</t> | accordingly.</t> | |||
| </section> | ||||
| </section> | <section anchor="sect-4.6.2" numbered="true" toc="default"> | |||
| <name>Downstream-Assigned VNIs in the Interconnect Network</name> | ||||
| <section title="Downstream assigned VNIs in the Interconnect network" anc | <t> | |||
| hor="sect-4.6.2"><t> | ||||
| In this case, if a host H1 in NVO-1 needs to communicate with a host | In this case, if a host H1 in NVO-1 needs to communicate with a host | |||
| H2 in NVO-2, and assuming that different VNIs are used in each DC for | H2 in NVO-2, and assuming that different VNIs are used in each DC for | |||
| the same EVI, e.g. VNI-10 in NVO-1 and VNI-20 in NVO-2, then the VNIs | the same EVI, e.g., VNI-10 in NVO-1 and VNI-20 in NVO-2, then the VNIs | |||
| MUST be translated as in section 4.6.1. However, in this case, there | <bcp14>MUST</bcp14> be translated as in <xref | |||
| is no need to translate to a common Interconnect VNI on the GWs. Each | target="sect-4.6.1"/>. However, in this case, there | |||
| is no need to translate to a common interconnect VNI on the GWs. Each | ||||
| GW can translate the VNI received in an EVPN update to a locally | GW can translate the VNI received in an EVPN update to a locally | |||
| assigned VNI advertised to the Interconnect network. Each GW can use | assigned VNI advertised to the interconnect network. Each GW can use | |||
| a different Interconnect VNI, hence this VNI does not need to be | a different interconnect VNI; hence, this VNI does not need to be | |||
| agreed on all the GWs and PEs of the Interconnect network.</t> | agreed upon on all the GWs and PEs of the interconnect network.</t> | |||
| <t> | ||||
| <t> | The procedures described in <xref target="sect-4.4"/> will be followed, | |||
| The procedures described in section 4.4 will be followed, taking the | taking into account the considerations above for the VNI translation.</t> | |||
| considerations above for the VNI translation.</t> | </section> | |||
| </section> | ||||
| </section> | </section> | |||
| <section anchor="sect-5" numbered="true" toc="default"> | ||||
| </section> | <name>Security Considerations</name> | |||
| <t> | ||||
| </section> | ||||
| <section title="Security Considerations" anchor="sect-5"><t> | ||||
| This document applies existing specifications to a number of | This document applies existing specifications to a number of | |||
| Interconnect models. The Security Considerations included in those | interconnect models. The security considerations included in those | |||
| documents, such as <xref target="RFC7432"/>, <xref target="I-D.ietf-bess-evpn | documents, such as <xref target="RFC7432" format="default"/>, <xref | |||
| -overlay"/>, <xref target="RFC7623"/>, <xref target="RFC4761"/> | target="RFC8365" format="default"/>, <xref target="RFC7623" | |||
| and <xref target="RFC4762"/> apply to this document whenever those technologi | format="default"/>, <xref target="RFC4761" format="default"/>, | |||
| es are | and <xref target="RFC4762" format="default"/> apply to this document | |||
| whenever those technologies are | ||||
| used.</t> | used.</t> | |||
| <t> | ||||
| <t> | As discussed, <xref target="RFC8365" format="default"/> discusses two main DC | |||
| As discussed, <xref target="I-D.ietf-bess-evpn-overlay"/> discusses two main | I solution groups: | |||
| DCI solution groups: | ||||
| "DCI using GWs" and "DCI using ASBRs". This document specifies the | "DCI using GWs" and "DCI using ASBRs". This document specifies the | |||
| solutions that correspond to the "DCI using GWs" group. It is | solutions that correspond to the "DCI using GWs" group. It is | |||
| important to note that the use of GWs provide a superior level of | important to note that the use of GWs provides a superior level of | |||
| security on a per tenant basis, compared to the use of ASBRs. This is | security on a per-tenant basis, compared to the use of ASBRs. This is | |||
| due to the fact that GWs need to perform a MAC lookup on the frames | due to the fact that GWs need to perform a MAC lookup on the frames | |||
| being received from the WAN, and they apply security procedures, such | being received from the WAN, and they apply security procedures, such | |||
| as filtering of undesired frames, filtering of frames with a source | as filtering of undesired frames, filtering of frames with a source | |||
| MAC that matches a protected MAC in the DC or application of MAC | MAC that matches a protected MAC in the DC, or application of | |||
| duplication procedures defined in <xref target="RFC7432"/>. On ASBRs though, | MAC-duplication procedures defined in <xref target="RFC7432" | |||
| traffic | format="default"/>. On ASBRs, though, traffic | |||
| is forwarded based on a label or VNI swap and there is usually no | is forwarded based on a label or VNI swap, and there is usually no | |||
| visibility of the encapsulated frames, which can carry malicious | visibility of the encapsulated frames, which can carry malicious | |||
| traffic.</t> | traffic.</t> | |||
| <t> | ||||
| <t> | In addition, the GW optimizations specified in this document provide | |||
| In addition, the GW optimizations specified in this document, provide | additional protection of the DC tenant systems. For instance, the | |||
| additional protection of the DC Tenant Systems. For instance, the MAC | MAC-address advertisement control and Unknown MAC Route defined in | |||
| address advertisement control and Unknown MAC Route defined in | <xref target="sect-3.5.1"/> protect the DC NVEs from being overwhelmed with a | |||
| section 3.5.1 protect the DC NVEs from being overwhelmed with an | n | |||
| excessive number MAC/IP routes being learned on the GWs from the WAN. | excessive number of MAC/IP routes being learned on the GWs from the WAN. | |||
| The ARP/ND flooding control described in 3.5.2 can reduce/suppress | The ARP/ND flooding control described in <xref target="sect-3.5.2"/> can redu | |||
| ce/suppress | ||||
| broadcast storms being injected from the WAN.</t> | broadcast storms being injected from the WAN.</t> | |||
| <t> | ||||
| <t> | ||||
| Finally, the reader should be aware of the potential security | Finally, the reader should be aware of the potential security | |||
| implications of designing a DCI with the Decoupled Interconnect | implications of designing a DCI with the decoupled interconnect | |||
| solution (section 3) or the Integrated Interconnect solution (section | solution (<xref target="sect-3"/>) or the integrated interconnect solution | |||
| 4). In the Decoupled Interconnect solution the DC is typically easier | (<xref target="sect-4"/>). In the decoupled interconnect solution, the DC is | |||
| typically easier | ||||
| to protect from the WAN, since each GW has a single logical link to | to protect from the WAN, since each GW has a single logical link to | |||
| one WAN PE, whereas in the Integrated solution, the GW has logical | one WAN PE, whereas in the Integrated solution, the GW has logical | |||
| links to all the WAN PEs that are attached to the tenant. In either | links to all the WAN PEs that are attached to the tenant. In either | |||
| model, proper control plane and data plane policies should be put in | model, proper control plane and data plane policies should be put in | |||
| place in the GWs in order to protect the DC from potential attacks | place in the GWs in order to protect the DC from potential attacks | |||
| coming from the WAN.</t> | coming from the WAN.</t> | |||
| </section> | ||||
| <section anchor="sect-6" numbered="true" toc="default"> | ||||
| <name>IANA Considerations</name> | ||||
| <t> | ||||
| This document has no IANA actions.</t> | ||||
| </section> | ||||
| </middle> | ||||
| <back> | ||||
| </section> | <displayreference target="I-D.ietf-bess-evpn-virtual-eth-segment" to="VIRTUAL-ES "/> | |||
| <section title="IANA Considerations" anchor="sect-6"><t> | <references> | |||
| This document has no IANA actions.</t> | <name>References</name> | |||
| <references> | ||||
| <name>Normative References</name> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.4761.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.4762.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.6074.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.7041.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.7432.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.2119.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.8174.xml"/> | ||||
| </section> | <!-- draft-ietf-idr-tunnel-encaps-15 is now RFC 9012--> | |||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.9012. | ||||
| xml"/> | ||||
| </middle> | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R FC.7623.xml"/> | |||
| <back> | <!-- [I-D.ietf-bess-evpn-overlay] Published as RFC 8365 --> | |||
| <references title="Normative References"> | ||||
| &RFC4761; | ||||
| &RFC4762; | ||||
| &RFC6074; | ||||
| &RFC7041; | ||||
| &RFC7432; | ||||
| &RFC2119; | ||||
| &RFC8174; | ||||
| &I-D.ietf-idr-tunnel-encaps; | ||||
| &RFC7623; | ||||
| &I-D.ietf-bess-evpn-overlay; | ||||
| &RFC7543; | ||||
| </references> | ||||
| <references title="Informative References"> | ||||
| &RFC4684; | ||||
| &RFC7348; | ||||
| &RFC7637; | ||||
| &RFC4023; | ||||
| <reference anchor="Y.1731"><front> | ||||
| <title>OAM functions and mechanisms for Ethernet based networks</title> | ||||
| <author> | ||||
| <organization>ITU-T Recommendation Y.1731</organization> | ||||
| </author> | ||||
| <date month="July" year="2011"/> | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | |||
| </front> | FC.8365.xml"/> | |||
| </reference> | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | |||
| <reference anchor="IEEE.802.1AG"><front> | FC.7543.xml"/> | |||
| <title>IEEE Standard for Local and Metropolitan Area Networks - Virtual B | ||||
| ridged Local Area Networks Amendment 5: Connectivity Fault Management</title> | ||||
| <author> | ||||
| <organization>IEEE 802.1AG_2007</organization> | ||||
| </author> | ||||
| <date month="January" year="2008"/> | </references> | |||
| </front> | <references> | |||
| <name>Informative References</name> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.4684.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.7348.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.7637.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.4023.xml"/> | ||||
| </reference> | <reference anchor="Y.1731"> | |||
| <reference anchor="IEEE.802.1Q-2014"><front> | <front> | |||
| <title>IEEE Standard for Local and metropolitan area networks--Bridges an | <title>OAM functions and mechanisms for Ethernet based networks</tit | |||
| d Bridged Networks</title> | le> | |||
| <author> | <author> | |||
| <organization>IEEE 802.1Q-2014</organization> | <organization>ITU-T</organization> | |||
| </author> | </author> | |||
| <date month="August" year="2019"/> | ||||
| </front> | ||||
| <seriesInfo name="ITU-T Recommendation" value="Y.1731" /> | ||||
| </reference> | ||||
| <date month="December" year="2014"/> | <reference anchor="IEEE.802.1AG"> | |||
| </front> | <front> | |||
| <title>IEEE Standard for Local and Metropolitan Area Networks | ||||
| Virtual Bridged Local Area Networks Amendment 5: Connectivity | ||||
| Fault Management</title> | ||||
| <author> | ||||
| <organization>IEEE</organization> | ||||
| </author> | ||||
| <date month="January" year="2008"/> | ||||
| </front> | ||||
| <seriesInfo name="IEEE standard" value="802.1ag-2007"/> | ||||
| </reference> | ||||
| </reference> | <reference anchor="IEEE.802.1Q"> | |||
| &RFC6870; | <front> | |||
| &RFC3031; | <title>IEEE Standard for Local and metropolitan area | |||
| &I-D.sajassi-bess-evpn-virtual-eth-segment; | networks--Bridges and Bridged Networks</title> | |||
| </references> | <author> | |||
| <section title="Acknowledgments" anchor="sect-8"><t> | <organization>IEEE</organization> | |||
| The authors would like to thank Neil Hart, Vinod Prabhu and Kiran | </author> | |||
| Nagaraj for their valuable comments and feedback. We would also like | <date month="December" year="2014"/> | |||
| to thank Martin Vigoureux and Alvaro Retana for his detailed review | </front> | |||
| and comments.</t> | <seriesInfo name="IEEE standard" value="802.1Q-2014" /> | |||
| <seriesInfo name="DOI" value="10.1109/IEEESTD.2014.6991462"/> | ||||
| </reference> | ||||
| </section> | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | |||
| FC.6870.xml"/> | ||||
| <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
| FC.3031.xml"/> | ||||
| <section title="Contributors" anchor="sect-9"><t> | <!-- [I-D.sajassi-bess-evpn-virtual-eth-segment] Replaced by | |||
| draft-ietf-bess-evpn-virtual-eth-segment; IESG state I-D Exists --> | ||||
| <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D | ||||
| .ietf-bess-evpn-virtual-eth-segment.xml"/> | ||||
| </references> | ||||
| </references> | ||||
| <section anchor="sect-8" numbered="false" toc="default"> | ||||
| <name>Acknowledgments</name> | ||||
| <t> | ||||
| The authors would like to thank <contact fullname="Neil Hart"/>, <contact | ||||
| fullname="Vinod Prabhu"/>, and <contact fullname="Kiran Nagaraj"/> for | ||||
| their valuable comments and feedback. We would also like | ||||
| to thank <contact fullname="Martin Vigoureux"/> and <contact | ||||
| fullname="Alvaro Retana"/> for their detailed reviews and comments.</t> | ||||
| </section> | ||||
| <section anchor="sect-9" numbered="false" toc="default"> | ||||
| <name>Contributors</name> | ||||
| <t> | ||||
| In addition to the authors listed on the front page, the following | In addition to the authors listed on the front page, the following | |||
| co-authors have also contributed to this document:</t> | coauthors have also contributed to this document:</t> | |||
| <figure><artwork><![CDATA[ | <contact fullname="Ravi Shekhar"> | |||
| Ravi Shekhar | <organization>Juniper Networks</organization> | |||
| Anil Lohiya | </contact> | |||
| Wen Lin | ||||
| Juniper Networks | ||||
| Florin Balus | <contact fullname="Anil Lohiya"> | |||
| Patrice Brissette | <organization>Juniper Networks</organization> | |||
| Cisco | </contact> | |||
| Senad Palislamovic | <contact fullname="Wen Lin"> | |||
| Nokia | <organization>Juniper Networks</organization> | |||
| </contact> | ||||
| Dennis Cai | <contact fullname="Florin Balus"> | |||
| Alibaba | <organization>Cisco</organization> | |||
| ]]></artwork> | </contact> | |||
| </figure> | ||||
| </section> | ||||
| </back> | <contact fullname="Patrice Brissette"> | |||
| <organization>Cisco</organization> | ||||
| </contact> | ||||
| </rfc> | <contact fullname="Senad Palislamovic"> | |||
| <organization>Nokia</organization> | ||||
| </contact> | ||||
| <contact fullname="Dennis Cai"> | ||||
| <organization>Alibaba</organization> | ||||
| </contact> | ||||
| </section> | ||||
| </back> | ||||
| </rfc> | ||||
| End of changes. 183 change blocks. | ||||
| 1210 lines changed or deleted | 1066 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||