<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.17 (Ruby 3.1.2) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

<!ENTITY RFC4364 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.4364.xml">
<!ENTITY RFC7432 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.7432.xml">
<!ENTITY RFC9252 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.9252.xml">
<!ENTITY RFC8277 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8277.xml">
<!ENTITY RFC8665 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8665.xml">
<!ENTITY RFC8667 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8667.xml">
<!ENTITY I-D.bonica-spring-srv6-end-dtm SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.bonica-spring-srv6-end-dtm.xml">
<!ENTITY I-D.agrawal-spring-srv6-mpls-interworking SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.agrawal-spring-srv6-mpls-interworking.xml">
]>

<?rfc comments="yes"?>

<rfc ipr="trust200902" docName="draft-zzhang-spring-service-interworking-01" category="std" consensus="true" tocInclude="true" sortRefs="true" symRefs="true">
  <front>
    <title abbrev="MPLS/SRv6 Service Interwork">MPLS/SRv6 Service Interworking Option BC</title>

    <author initials="Z." surname="Zhang" fullname="Zhaohui Zhang">
      <organization>Juniper Networks</organization>
      <address>
        <email>zzhang@juniper.net</email>
      </address>
    </author>
    <author initials="B." surname="Decraene" fullname="Bruno Decraene">
      <organization>Orange</organization>
      <address>
        <email>bruno.decraene@orange.com</email>
      </address>
    </author>
    <author initials="S." surname="Zadok" fullname="Shay Zadok">
      <organization>Broadcom</organization>
      <address>
        <email>shay.zadok@broadcom.com</email>
      </address>
    </author>
    <author initials="L." surname="Jalil" fullname="Luay Jalil">
      <organization>Verizon</organization>
      <address>
        <email>luay.jalil@verizon.com</email>
      </address>
    </author>
    <author initials="D." surname="Voyer" fullname="Daniel Voyer">
      <organization>Bell Canada</organization>
      <address>
        <email>daniel.voyer@bell.ca</email>
      </address>
    </author>

    <area>Routing</area>
    <workgroup>spring</workgroup>
    <keyword>srv6 service interwork</keyword>

    <abstract>


<t>Draft-bonica-spring-srv6-end-dtm specifies SRv6/MPLS transport interworking
procedures, and draft-agrawal-spring-srv6-mpls-interworking specifies SRv6/MPLS
transport and service interworking procedures. For service interworking,
the latter draft defines two modes, similar to VPN Inter-AS Option A and
Option B. This document specifies another Option BC for service interworking
which has much better scaling property.</t>



    </abstract>



  </front>

  <middle>


<section anchor="introduction"><name>Introduction</name>

<t><xref target="I-D.bonica-spring-srv6-end-dtm"/> specifies SRv6/MPLS transport interworking
procedures,
and <xref target="I-D.agrawal-spring-srv6-mpls-interworking"/> specifies SRv6/MPLS
transport and service interworking procedures. For service interworking,
the latter draft defines two styles, similar to VPN Inter-AS Option A and
Option B <xref target="RFC4364"/>.</t>

<t>Specifically, for Option B style interworking, an InterWorking (IW) node does the
following:</t>

<t><list style="symbols">
  <t>For service routes received from MPLS domain, re-advertise to SRv6 domain
with an SRv6 SID (whose bits may be transposed in NLRI and in the Prefix SID
attribute) and with nexthop set to itself. The SID maps to the &lt;service label,
nexthop&gt;
tuple as received from the MPLS domain. For service traffic from SRv6 domain,
the incoming SID maps to &lt;base tunnel to nexthop, service label&gt; forwarding
state in the MPLS domain.</t>
  <t>For service routes received from SRv6 domain, re-advertise to MPLS domain
with an MPLS label and with nexthop set to itself. The label maps to the
service SID (whose bits may be transposed in NLRI and in the Prefix SID
attribute) as received from the SRv6 domain. For service traffic from MPLS
domain, the incoming service label maps to corresponding forwarding state
in the SRv6 domain.</t>
</list></t>

<t>This is a straightforward solution that does not require service instances
on the IW node. However, it does require per-service label/SID forwarding
state on the IW node, that Inter-AS Option C <xref target="RFC4364"/> VPN does not require.</t>

<t>For a true Option C style MPLS/SRv6 service interworking, the SRv6 service
PEs must support MPLSoverUDP or MPLSoverIP, and as such there is no
"service interworking" for Option C - it's just MPLS based services over
interworked MPLS/SRv6 transport.</t>


<t>This document proposes an Option BC style service interworking that does
not require per-service-label/SID state on the IW nodes, and the service
PEs can be single plane - MPLS or SRv6 only.</t>

<t>The key behind the Option BC style interworking is that the SRv6 Service
SID is encoded in two parts of a service route - in the "label" field of
the NLRI and the Prefix SID attribute. The SRv6 SID Structure sub-sub-TLV
specifies the LOC:FUNCT:ARG encoding scheme of the Service SID, and
specifies the which part of the Service SID the "label" field of
the NLRI fits into.
In most cases, the ARG part is not used, with the exception of EVPN
multi-homing support with label-based split-horizon filtering <xref target="RFC7432"/>
<xref target="RFC9252"/>. This is discussed in Section 6.1.1 of <xref target="RFC9252"/> and
in <xref target="esi"/> of this document.</t>

<section anchor="re-advertising-service-routes-from-mpls-to-srv6-domain"><name>Re-advertising Service Routes from MPLS to SRv6 Domain</name>

<t>When the IW node re-advertises a service route from MPLS domain to
SRv6 domain, it attaches a Prefix SID attribute but does not change the label
field of the NLRI. An SRv6 SID Structure Sub-Sub-TLV is included in the
L2/L3 SRv6 Service TLV's SRv6 SID Information sub-TLV, specifying the
LOC:FUNCT:ARG encoding scheme and which part of the SID (in the SRv6 SID
value field of the SRv6 SID Information sub-TLV) that the label
field of the NLRI fits into.</t>

<t>A receiving SRv6 PE sends corresponding service traffic using the SRv6
Service SID resulting from superimposing the label value in the NLRI(s)
to the SID in SRv6 SID Information sub-TLV.</t>

<t>On the IW node, the FUNCT bits of the Service SID in the Prefix SID attribute
indicate a new End.DBS behavior, where DBS stands for Decapsulate, Binding,
and Shifting. The FUNCT bits also map/bind to a particular MPLS router,
which is the BGP protocol nexthop in the service route received from the
MPLS domain. Note that the MPLS router could either be an MPLS service PE,
or an ASBR implementing Inter-AS Option B.</t>

<t>When a service packet arrives from the SRv6 domain, the IW node identifies
an MPLS router (that advertised the service route to the IW node) based on
the FUNCT bits. Since the FUNCT bits identify the End.DBS end behavior,
the packet is decapsulated, the incoming SID's certain bits are extracted as
MPLS service label, and then the packet is sent to the corresponding
MPLS router with the &lt;base tunnel label, service label&gt; label stack.</t>

<t>For example, the LOC:FUNCT:ARG encoding of the SRv6 SID that the IW node
advertises could be 64:44:20 where the numbers represent the number of
bits in each part. The 20-bit ARG part is not used except in the case
of EVPN ESI label based split-horizon filtering (<xref target="esi"/>).
The lower 20 bits of the 44-bit FUNCT part are for the
MPLS label received from the MPLS side, X number of bits of the 44-bit
FUNCT part are used to identify End.DBS behavior for each MPLS PE/ASBR
- only 10 bits are needed for 1k of PEs/ASBRs on MPLS side. The rest
of FUNCT space can still be used for other purposes. The IWS only needs
to maintain IPv6 1k SIDs in the forwarding path to switch traffic to
those 1k MPLS PEs/ASBRs using the End.DBS behavior, no matter how many
service labels are advertised from those PEs/ASBRs.</t>

<t>If transposition is not to be used, the above procedure can still be used
with a small change. The 20-bit label field in the received NLRI is extracted
and superimposed to the lower 20-bit of the FUNCT part of the SID value
in the SRv6 SID Information Sub-TLV.</t>

</section>
<section anchor="bindingSID"><name>Re-advertising Service Routes from SRv6 to MPLS Domain</name>

<t>When the IW node re-advertises a service route from SRv6 domain to MPLS domain,
the Prefix SID attribute is removed but the label field in the NLRI does not
change. The nexthop is set to an address mapped to the SID value in the SRv6
SID Information Sub-TLV of the L2/L3 SRv6 Service TLV in the Prefix SID
attribute. If the MPLS domain is IPv6, the address can be the SID value itself.</t>

<t>In addition, the IW node advertises a underlay route for the BGP protocol
nexthop in the re-advertised service route. If BGP-LU <xref target="RFC8277"/> is used,
a per-prefix binding label is advertised and the nexthop is set to the IW node
itself. If IGP is used, the per-prefix binding label is advertised as a
Prefix SID with both V-flag and L-flag set <xref target="RFC8665"/> <xref target="RFC8667"/>.</t>

<t>When an MPLS PE (or ASBR in case of Inter-AS Option B) receives the service
route, it resolves the protocol nexthop via the underlay route.
As a result, service traffic is sent with a label stack &lt;underlay tunnel
label used to reach the IW node, binding label for the underlay prefix
(i.e. nexthop), service label in NLRI&gt;.</t>

<t>When the IW node gets service traffic from the MPLS domain, the binding label
for the underlay prefix (which maps to the SID in the Prefix SID attribute of
the service route from the SRv6 domain) leads to the following processing:</t>

<t><list style="symbols">
  <t>Pop the next label, which is the service label</t>
  <t>Find the underlay prefix that is associated with the binding label
(note that the underlay prefix is the SID in the Prefix SID attribute),
and super impose the popped service label to it according to the Transposition
offset/length in the SID Structure sub-sub-TLV in the Prefix SID attribute.</t>
  <t>Send packet after encapsulating it in IPv6 with the resulting SID</t>
</list></t>

<t>If transposition is not used, the entire SRv6 SID value is encoded in the SID
Information Sub-TLV of the Prefix SID attribute. The above procedure can still
be used with a small change - the lower 20 bits of the FUNCT part is extracted
and filled into the label field of the NLRI, and the remaining LOC:FUNCT part
is treated as if it was sinaled with transposition.</t>

</section>
<section anchor="esi"><name>EVPN ESI Label</name>

<t>Typically, if there are separate SRv6 and MPLS domains for an EVPN
network, multihoming is likely within a domain. In case of multihoming across
domains, the following method can be used to achieve label based split-horizon
filtering across the domains.</t>

<t>When the IW node re-advertises the EVPN Ethernet A-D per ES Route from MPLS
domain to SRv6 domain, a Prefix SID attribute is attached, with the SID
Structure sub-sub-TLV specifying the transposition length and offset for the
ESI label, as specified in Section 6.1.1 of <xref target="RFC9252"/>.</t>

<t>When SRv6 service traffic arrives at the IW node, if the end behavior for the
SID is End.DBS and the ARG part is not 0, the IW node extracts the ARG bits
into an ESI label that is imposed before the service label (that is extracted
from the FUNCT bits) is imposed.</t>

<t>When the IW node re-advertise the EVPN Ethernet A-D per ES Route from SRv6
domain to MPLS domain, the Prefix SID attribute is simply removed but the
transposition information is saved locally.</t>

<t>When MPLS service traffic arrives at the IW node, if there is another label
after the service label, that label is also popped and superimposed to the
SRv6 Service SID that is bound to the binding label described in
<xref target="bindingSID"/>, in addition to that the service label is popped and
superimposed to the same SRv6 Service SID.</t>

</section>
</section>
<section anchor="procedures"><name>Procedures</name>

<t>Normative procedures will be specified in future revisions of the document.</t>

</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<t>The Option BC interwork solution inherits the security properties of VPN
Inter-AS Option C. In particular, with the SRv6 to MPLS service route
re-advertisement, the SID value in the received Prefix SID attribute or
a mapped IPv4 address is re-advertised into the MPLS domain. Note that
this is not the case in the other direction.</t>

<t>On the other hand, while with Option C the PEs may exchange service routes
directly via inter-AS Route Reflectors, with Option BC the service routes
go through interwork nodes where rich policy control may be applied.</t>

</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<t>This document requests the IANA to register the End.DBS behavior in the
"SRv6 Endpoint Behaviors" registry.</t>


</section>


  </middle>

  <back>


    <references title='Normative References'>

&RFC4364;
&RFC7432;
&RFC9252;
&RFC8277;
&RFC8665;
&RFC8667;


    </references>

    <references title='Informative References'>

&I-D.bonica-spring-srv6-end-dtm;
&I-D.agrawal-spring-srv6-mpls-interworking;


    </references>


    <section anchor="contributors" numbered="false" toc="include" removeInRFC="false">
        <name>Contributors</name>
    <contact initials="S." surname="Hegde" fullname="Shraddha Hegde">
      <organization>Juniper Networks</organization>
      <address>
        <email>shraddha@juniper.net</email>
      </address>
    </contact>
    <contact initials="K." surname="Szarkowicz" fullname="Krzysztof Szarkowicz">
      <organization>Juniper Networks</organization>
      <address>
        <email>kszarkowicz@juniper.net</email>
      </address>
    </contact>
    </section>

  </back>

</rfc>

