]> Cisco Systems, Inc.

Eurovea Central 3. Bratislava 811 09 Slovakia ssidor@cisco.com

Airtel India

Praveen.Maheshwari@airtel.com

Nokia

andrew.stone@nokia.com

Verizon

luay.jalil@verizon.com

Huawei Technologies

pengshuping@huawei.com

PCE Working Group Segment Routing (SR) enables a node to steer packet flows along a specified path without the need for intermediate per-path states, due to the utilization of source routing. An SR Policy can consist of one or a set of candidate paths, where each candidate path is represented by a segment list or a set of segment lists, which are essentially instructions that define a source-routed policy. This document specifies a set of extensions to the Path Computation Element Communication Protocol (PCEP) for Segment Routing Policies that are designed to satisfy requirements for connection-oriented transport services (Circuit-Style SR policies). They include the ability to control path recomputation and the option to request path with strict hops only, being also applicable for generic SR policy use cases where controlling path recomputation or deterministic and persistent path requirements are applicable.

Introduction Segment Routing (SR) leverages the source routing paradigm, where the sender of a packet defines the path that the packet takes through the network. This is achieved by encoding the path information as a sequence of segments within the packet header. SR can be applied to both MPLS and IPv6 data planes, providing a flexible and scalable method for traffic engineering. The Path Computation Element (PCE) is a network component, application, or node that is capable of computing a network path or route based on a network graph and applying computational constraints. The PCE Communication Protocol (PCEP) enables communication between a PCE and Path Computation Clients (PCCs), facilitating the computation of optimal paths for traffic flows. introduces the concept of Segment Routing Policy (SR Policy), which is one or a set of candidate paths that can be used to steer traffic through a network. Each candidate path is represented by a segment ist or a set of segment lists, and the path can be dynamically adjusted based on network conditions and requirements. In connection-oriented transport services, such as those defined in , there is a need for path persistency and per-hop behavior for PCE-computed paths. This ensures that the paths remain stable and predictable, which is crucial for services that require high reliability and performance guarantees. To support the requirements of connection-oriented transport services, this document specifies extensions to PCEP to enable the use of Circuit Style Policies. These extensions allow for the request of strict paths from the PCE, the encoding of information to disable path recomputation for specific paths, and the clarification of the usage of existing flags within PCEP messages. The PCEP extensions described in this document are designed to be compatible with any Path Setup Type and are not limited to Circuit Style SR policies, ensuring broad applicability across different network environments and use cases.

Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Terminology This document uses the following term defined in :

• Label Switched Path (LSP)

This document uses the following terms defined in :

• Explicit Route Object (ERO)
• LSP Attributes (LSPA)
• Path Computation Client (PCC)
• Path Computation Element (PCE)
• Path Computation Element Protocol (PCEP)
• PCEP Peer
• PCEP speaker

This document uses the following terms defined in :

• Segment Routing (SR)
• Segment Identifier (SID)

This document uses the following terms defined in :

• SR Policy

This document uses the following term defined in :

• Circuit Style (CS) SR Policy

Overview of Extensions to PCEP This section specifies the PCEP extensions that enable a PCC and PCE to support CS SR policies. These extensions build on the base PCEP , the Stateful PCE extensions , and the Segment Routing (SR) Policy extensions . The mechanisms defined here allow a PCC or PCE to:

• Indicate the requirement for strict paths,
• Signal path persistency by disabling recomputation for specific paths,
• Identify and control behavior specific to CS SR policies.

Unless explicitly stated, the procedures of existing PCEP messages and objects remain unchanged. The following subsections describe the specific object formats, TLVs, and flag definitions introduced to realize this functionality.

New Flags in STATEFUL-PCE-CAPABILITY TLV The STATEFUL-PCE-CAPABILITY TLV is an optional TLV introduced in in the OPEN object for stateful PCEP peer capability advertisement. This document defines the following new flags in that TLV:

• STRICT-PATH-CAPABILITY - 1 bit (Bit Position 18) - If set to 1, it indicates support for the Strict-Path flag in LSP-EXTENDED-FLAG TLV. See for details.
• PATH-RECOMPUTATION-CAPABILITY - 1 bit (Bit Position 19) - If set to 1, it indicates support for PATH-RECOMPUTATION TLV. See for details.

New Flag in the LSP-EXTENDED-FLAG TLV The LSP-EXTENDED-FLAG TLV was introduced in . This document specifies new Strict-Path flag in the LSP-EXTENDED-FLAG TLV. O (Strict-Path) - 1 bit (Bit Position 4): If set to 1, this indicates to the PCE that a path exclusively made of strict hops is required. The strict hop definition is described in

PATH-RECOMPUTATION TLV This document defines a new TLV for the LSPA Object for encoding information whether path recomputation is allowed for a delegated LSP. The PATH-RECOMPUTATION TLV is optional. If the TLV is included in LSPA object, the PCE MUST NOT recompute the path in cases specified by flags in the TLV. Only the first instance of this TLV MUST be processed, subsequent instances MUST be ignored.

Type (16 bits): 72. Length (16 bits): 4.

Reserved (16 bits):

This field MUST be set to zero on transmission and MUST be ignored on receipt.

Flags (16 bits):

This document defines the following flag bits. The other bits MUST be set to zero by the sender and MUST be ignored by the receiver.

• P (Permanent): If set to 1, the PCE MUST NOT recompute path even if the current path does not satisfy path computation constraints. If this flag is cleared, then the PCE MAY recompute the path according to local policy if the original path is invalidated.
• F (Force): If set to 1, the PCE MUST NOT update the path (exceptions description in ). If the flag is cleared, the PCE MAY update the path based on an explicit request from the operator.

Operation

Strict Path Enforcement To indicate that a path exclusively made of strict hops is required, the PCC sets the O flag in the LSP-EXTENDED-FLAG TLV in a PCRpt message sent to the PCE. It MUST NOT be set to 1 if one or both PCEP speakers have not set the STRICT-PATH-CAPABILITY flag to 1 in the STATEFUL-PCE-CAPABILITY TLV. If the PCEP peer received LSP-EXTENDED-FLAG TLV with O flag set, but it does not support that flag, it MUST send PCErr with Error-Type = 2 (Capability not supported). The O flag cleared or LSP-EXTENDED-FLAG TLV not included indicates that a loose path is acceptable. In PCUpd or PCInitiate messages, PCE MAY set O bit if the strict path is provided. The flag is applicable only for stateful messages. Existing O flag in Request Parameters (RP) object may be used to indicate similar behavior in PCReq and PCRep messages as described in . If the O flag is set to 1 (either in the LSP-EXTENDED-FLAG TLV for stateful messages or in the RP object for stateless messages) for SR paths introduced in , the PCE MUST use only Segment Identifiers (SIDs) that explicitly specify adjacencies for packet forwarding. For example, Adjacency SIDs SHOULD be used, but Prefix SIDs MUST NOT be used (even if there is only one adjacency).

Path Recomputation A PCC MAY set flags in PATH-RECOMPUTATION TLV to control path computation behavior on the PCE side. If the PATH-RECOMPUTATION TLV is not included, then the PCE MAY use local policy to trigger path computation or LSP path update. If a PCEP speaker does not recognize the PATH-RECOMPUTATION TLV, it MUST ignore the TLV based on . If a PCEP speaker recognizes the TLV but does not support the TLV, it MUST send PCErr with Error-Type = 2 (Capability not supported). The LSP path MAY be modified, if the change results in a semantically equivalent path representation (e.g., a different SID list) that preserves the exact sequence of traversed network hops. If the same path can be encoded using Adjacency, Binding, Prefix, or other SIDs, then PCE MAY switch between various representations of the same path. The PATH-RECOMPUTATION TLV defines the recomputation and path modification behavior for an LSP. It is important to note that regardless of the flag settings described below, a PCE can always initiate an update to tear down the LSP (e.g., by sending a PCUpd message with an empty ERO) or to bring it up again with the same path it had before being torn down. The P and F flags specifically restrict the PCE's ability to perform path recomputation and to initiate path updates with a modified path:

Default Behavior (TLV present, P=0, F=0):

The PCE MUST NOT recompute the path in response to various triggers (E.g. topology updates, periodic reoptimization timers, or changes in the state of other LSPs) if the current path remains valid and meets all constraints. However, the PCE MAY recompute the path if:

• The current path is invalidated (e.g., due to a topology change that makes it non-compliant with LSP constraints).
• An operator explicitly triggers a recomputation via an implementation-specific mechanism (e.g., a Command Line Interface (CLI) or northbound Application Programming Interface (API) on the PCE).

P=0, F=1:

The PCE MUST NOT update the path in response to an explicit operator trigger. However, the PCE MAY recompute and update the path if the current path becomes invalidated.

P=1, F=0:

The PCE MUST NOT recompute the path, even if it becomes invalidated or no longer satisfies its constraints. However, a path update MAY be initiated if explicitly triggered by an operator.

P=1, F=1:

The PCE is most restricted. It MUST NOT recompute the path even if it becomes invalidated, and it MUST NOT update the path even if explicitly triggered by an operator.

A PCE MAY include the PATH-RECOMPUTATION TLV in PCInitiate and PCUpd messages to define which triggers will be disabled for an LSP. When a PCC receives and applies behavior specified by flags in the TLV, it MUST reflect the active flag values in the PATH-RECOMPUTATION TLV of its PCRpt messages for that LSP. By including this TLV, the PCC ensures that the LSP's recomputation policy is consistently communicated to all connected PCEs. When a PCC receives a PCUpd message with a modified path for an LSP, where such an update is blocked by flags in the PATH-RECOMPUTATION TLV (e.g., the F flag is set), it MUST reject the update and maintain the existing path for the LSP.The PCC MUST also send a PCErr message to the PCE with Error-Type=19 ("Invalid Operation") and Error-Value=TBD1 ("Path update is blocked by recomputation constraint").

All manageability requirements and considerations listed in , and apply to PCEP protocol extensions defined in this document. In addition, the requirements and considerations listed in this section apply.

A PCE or PCC implementation MAY allow the capability of supporting PCEP extensions introduced in this document to be enabled/disabled as part of the global configuration.

An implementation SHOULD allow an operator to view the PCEP peer capability defined in this document. Section 4.1 and 4.1.1 of should be extended to include that capability for PCEP peer. module SHOULD be extended to add notification for blocked recomputation that satisfies specified constraints if recomputation is blocked using the PATH-RECOMPUTATION TLV.

Circuit-Style Policy draft is already describing connectivity verification and path validity considerations for Circuit Style Policies.

A PCE implementation SHOULD notify the operator in case of blocked recomputation for an LSP that no longer satisfies specified constraints. It SHOULD also allow the operator to view LSPs on the PCE that does not satisfy specified constraints.

The PCEP extensions defined in this document do not imply any new requirements on other protocols. The overall concept of Circuit Style policies requires interaction with other protocols, but those requirements are already described in .

The mechanisms defined in , , and also apply to the PCEP extensions defined in this document.

[Note to the RFC Editor - remove this section before publication, as well as remove the reference to RFC 7942.] This section records the status of known implementations of the protocol defined by this specification at the time of posting of this Internet-Draft, and is based on a proposal described in . The description of implementations in this section is intended to assist the IETF in its decision processes in progressing drafts to RFCs. Please note that the listing of any individual implementation here does not imply endorsement by the IETF. Furthermore, no effort has been spent to verify the information presented here that was supplied by IETF contributors. This is not intended as, and must not be construed to be, a catalog of available implementations or their features. Readers are advised to note that other implementations may exist. According to , "this will allow reviewers and working groups to assign due consideration to documents that have the benefit of running code, which may serve as evidence of valuable experimentation and feedback that have made the implemented protocols more mature. It is up to the individual working groups to use this information as they see fit".

• Organization: Cisco Systems
• Implementation: IOS-XR PCC and PCE.
• Description: PCEP extensions supported using VENDOR-INFORMATION Object.
• Maturity Level: Production.
• Coverage: Partial.
• Contact: ssidor@cisco.com

The security considerations described in , , , and are applicable to this document. Note that this specification introduces the possibility to block path recomputation after various topology events. This creates an additional vulnerability if the security mechanisms of , , and are not used. If there is no integrity protection on the session, then an attacker could block path updates from PCE potentially resulting in a traffic drop. As per , it is RECOMMENDED that these PCEP extensions can only be activated on authenticated and encrypted sessions across PCEs and PCCs belonging to the same administrative authority, using Transport Layer Security (TLS) as per the recommendations and best current practices in .

IANA Considerations IANA maintains the "Path Computation Element Protocol (PCEP) Numbers" registry at .

STATEFUL-PCE-CAPABILITY defines the STATEFUL-PCE-CAPABILITY. IANA is requested to confirm the following allocations within the "STATEFUL-PCE-CAPABILITY TLV Flag Field" registry of the "Path Computation Element Protocol (PCEP) Numbers" registry group:

Bit	Description	Reference
18	STRICT-PATH-CAPABILITY	This document
19	PATH-RECOMPUTATION-CAPABILITY	This document

LSP-EXTENDED-FLAG TLV defines the LSP-EXTENDED-FLAG TLV. IANA is requested to confirm the following allocation within the "LSP-EXTENDED-FLAG TLV Flag Field" registry of the "Path Computation Element Protocol (PCEP) Numbers" registry group:

Bit	Description	Reference
4	Strict-Path Flag (O)	This document

PATH-RECOMPUTATION TLV IANA is requested to confirm the following allocation within the "PCEP TLV Type Indicators" registry of the "Path Computation Element Protocol (PCEP) Numbers" registry group:

TLV Type	TLV Name	Reference
72	PATH-RECOMPUTATION TLV	This document

PATH-RECOMPUTATION TLV Flag Field IANA has created a new registry named "PATH-RECOMPUTATION TLV Flag Field" within the "Path Computation Element Protocol (PCEP) Numbers" registry group. New values are to be assigned by "IETF Review" . Each bit should be tracked with the following qualities:

• Bit number (count from 0 as the most significant bit)
• Description
• Reference

The registry contains the following codepoints, with initial values, to be assigned by IANA with the reference set to this document:

Bit	Description	Reference
0-13	Unassigned
14	Permanent	This document
15	Force	This document

IANA is requested to allocate new error types and error values within the "PCEP-ERROR Object Error Types and Values" sub-registry of the PCEP Numbers registry for the following errors.

Error-Type	Meaning	Error-Value	Reference
19	Invalid Operation	TBD1:Path update is blocked by recomputation constraint	This Document

References Normative References Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) are used to protect data exchanged over a wide range of application protocols and can also form the basis for secure transport protocols. Over the years, the industry has witnessed several serious attacks on TLS and DTLS, including attacks on the most commonly used cipher suites and their modes of operation. This document provides the latest recommendations for ensuring the security of deployed services that use TLS and DTLS. These recommendations are applicable to the majority of use cases. RFC 7525, an earlier version of the TLS recommendations, was published when the industry was transitioning to TLS 1.2. Years later, this transition is largely complete, and TLS 1.3 is widely available. This document updates the guidance given the new environment and obsoletes RFC 7525. In addition, this document updates RFCs 5288 and 6066 in view of recent attacks. Huawei sn3rd Vigil Security, LLC Section 3.4 of RFC 8253 specifies TLS connection establishment restrictions for PCEPS; PCEPS refers to usage of TLS to provide a secure transport for PCEP (Path Computation Element Communication Protocol). This document adds restrictions to specify what PCEPS implementations do if they support more than one version of the TLS protocol and to restrict the use of TLS 1.3's early data. Informative References

Contributors Bell Canada

daniel.voyer@bell.ca

Ciena

rrokui@ciena.com

Cisco Systems, Inc.

tsaad.net@gmail.com

Cisco Systems, Inc.

zali@cisco.com

ZTE Corporation

chen.ran@zte.com.cn

ZTE Corporation

xiong.quan@zte.com.cn

Huawei

dhruv.ietf@gmail.com

Cisco Systems, Inc.

cschmutz@cisco.com