MPLS - Multi Protocol Label Switching
MPLS - Multi Protocol Label Switching
MPLS Basics
MPLS Basics
Multiprotocol Label Switching (MPLS), originating in IPv4, was initially proposed to improve forwarding speed. Its core technology can be extended to multiple network protocols, such as IPv6, Internet Packet Exchange (IPX), and Connectionless Network Protocol (CLNP). That is what the term multiprotocol means. MPLS integrates both Layer 2 fast switching and Layer 3 routing and forwarding, satisfying the networking requirements of various new applications.
Note: For details about MPLS architecture, refer to RFC 3031 Multiprotocol Label Switching Architecture.
MPLS Overview
Basic Concepts of MPLS
I. FEC
As a forwarding technology based on classification, MPLS groups packets to be forwarded in the same manner into a class called the forwarding equivalence class (FEC). That is, packets of the same FEC are handled in the same way. The classification of FECs is very flexible. It can be based on any combination of source address, destination address, source port, destination port, protocol type and VPN. For example, in the traditional IP forwarding using longest match, all packets to the same destination belongs to the same FEC.
II. Label
A label is a short fixed length identifier for identifying a FEC. A FEC may correspond to multiple labels in scenarios where, for example, load sharing is required, while a label can only represent a single FEC. A label is carried in the header of a packet. It does not contain any topology information and is local significant. A label is four octets, or 32 bits, in length. Figure 1 illustrates its format.
MPLS Basics
Label: Label value of 20 bits. Used as the pointer for forwarding. Exp: For QoS, three bits in length. S: Flag for indicating whether the label is at the bottom of the label stack, one bit in length. 1 indicates that the label is at the bottom of the label stack. This field is very useful when there are multiple levels of MPLS labels.
TTL: Time to live (TTL) for the label. Eight bits in length. This field has the same meaning as that for an IP packet.
Similar to the VPI/VCI in ATM and the DLCI in frame relay, an MPLS label functions as a connection identifier. If the link layer protocol has a label field like VPI/VCI in ATM or DLCI in frame relay, the MPLS label is encapsulated in that field. Otherwise, it is inserted between the data link layer header and the network layer header as a shim. As such, an MPLS label can be supported by any link layer protocol. Figure 2 shows the place of a label in a packet.
Ethernet/SONET/SDH
Ethernet/PPP header
Label
Layer 3 data
ATM header
Label
Layer 3 data
VPI/VCI
Layer 3 data
Note: Currently, the device does not support the cell mode.
III. LSR
Label switching router (LSR) is a fundamental component on an MPLS network. All LSRs support MPLS.
MPLS Basics
IV. LSP
Label switched path (LSP) means the path along which a FEC travels through an MPLS network. Along an LSP, two neighboring LSRs are called upstream LSR and downstream LSR respectively. In Figure 3, R2 is the downstream LSR of R1, while R1 is the upstream LSR of R2.
R2 R3
R1
R4
R21
R22
Figure 3 Diagram for an LSP An LSP is a unidirectional path from the ingress of the MPLS network to the egress. It functions like a virtual circuit in ATM or frame relay. Each node of an LSP is an LSR.
V. LDP
Label Distribution Protocol (LDP) means the protocol used by MPLS for control. An LDP has the same functions as a signaling protocol on a traditional network. It classifies FECs, distributes labels, and establishes and maintains LSPs. MPLS supports multiple label distribution protocols of either of the following two types:
z
Those dedicated for label distribution, such as LDP and Constraint-based Routing using LDP (CR-LDP). The existing protocols that are extended to support label distribution, such as Border Gateway Protocol (BGP) and Resource Reservation Protocol (RSVP).
Note:
z
For information about CR-LDP and RSVP, refer to MPLS TE Configuration in the MPLS Volume. For information about BGP, refer to BGP Configuration in the IP Routing Volume.
MPLS Basics
respectively the start point and end point of the LSP, and the LSP is an LSP tunnel, which does not use the traditional network layer encapsulation tunneling technology. For example, the LSP <R2R21R22R3> in IV. Figure 3 is a tunnel between R2 and R3. If the path that a tunnel traverses is exactly the hop-by-hop route established by the routing protocol, the tunnel is called a hop-by-hop routed tunnel. Otherwise, the tunnel is called an explicitly routed tunnel.
Architecture of MPLS
I. Structure of the MPLS network
As shown in Figure 4, the element of an MPLS network is LSR. LSRs in the same routing or administrative domain form an MPLS domain. In an MPLS domain, LSRs residing at the domain border to connect with other networks are label edge routers (LERs), while those within the MPLS domain are core LSRs. All core LSRs, which can be routers running MPLS or ATM-LSRs upgraded from ATM switches, use MPLS to communicate, while LERs interact with devices outside the domain that use traditional IP technologies. Each packet entering an MPLS network is labeled on the ingress LER and then forwarded along an LSP to the egress LER. All the intermediate LSRs are called transit LSRs.
MPLS Basics
LSP Ingress
Egress
IP network
Transit
IP network
Figure 4 Structure of the MPLS network The following describes how MPLS operates: 1) First, the LDP protocol and the traditional routing protocol (such as OSPF and ISIS) work together on each LSR to establish the routing table and the label information base (LIB) for intended FECs. 2) Upon receiving a packet, the ingress LER completes the Layer 3 functions, determines the FEC to which the packet belongs, labels the packet, and forwards the labeled packet to the next hop along the LSP. 3) After receiving a packet, each transit LSR looks up its label forwarding table for the next hop according to the label of the packet and forwards the packet to the next hop. None of the transit LSRs performs Layer 3 processing. 4) When the egress LER receives the packet, it removes the label from the packet and performs IP forwarding. Obviously, MPLS is not a service or application, but actually a tunneling technology and a routing and switching technology platform combining label switching with Layer 3 routing. This platform supports multiple upper layer protocols and services, as well as secure transmission of information to a certain degree.
MPLS Basics
IP routing protocol
Control plane: Implements label distribution and routing, establishes the LFIB, and builds and tears LSPs. Forwarding plane: Forwards packets according to the LFIB.
An LER forwards both labeled packets and IP packets on the forwarding plane and therefore uses both the LFIB and the FIB. An ordinary LSR only needs to forward labeled packets and therefore uses only the LFIB.
MPLS Basics
Applications of MPLS
By integrating both Layer 2 fast switching and Layer 3 routing and forwarding, MPLS features improved route lookup speed. However, with the development of the application specific integrated circuit (ASIC) technology, route lookup speed is no longer the bottleneck hindering network development. This makes MPLS not so outstanding in improving forwarding speed. Nonetheless, MPLS can easily implement the seamless integration between IP networks and Layer 2 networks of ATM, frame relay, and the like, and offer better solutions to Quality of Service (QoS), TE, and Virtual Private Network (VPN) applications thanks to the following advantages.
I. MPLS-based VPN
Traditional VPN depends on tunneling protocols such as GRE, L2TP, and PPTP to transport data between private networks across public networks, while an LSP itself is a tunnel over public networks. Therefore, implementation of VPN using MPLS is of natural advantages. MPLS-based VPN connects geographically different branches of a private network to form a united network by using LSPs. MPLS-based VPN also supports the interconnection between VPNs.
VPN 3 CE 3
PE 3
Figure 6 MPLS-based VPN Figure 6 shows the basic structure of an MPLS-based VPN. Two of the fundamental components are customer edge device (CE) and service provider edge router (PE). A CE can be a router, switch, or host. All PEs are on the backbone network. PE is responsible for managing VPN users, establishing LSP connections between PEs, and allocating routes among different branches of the same VPN. Route allocation among PEs is usually implemented by LDP or extended BGP. MPLS-based VPN supports IP address multiplexing between branches and interconnection between VPNs. Compared with a traditional route, a VPN route
MPLS Basics
requires the branch and VPN identification information. Therefore, it is necessary to extend BGP to carry VPN routing information.
II. MPLS-based TE
MPLS-based TE and the Diff-serv feature allow not only high network utilization, but different levels of services based on traffic precedence, providing voice and video streams with services of low delay, low packet loss, and stable bandwidth guarantee. Since TE is more difficult to be implemented on an entire network, the Diff-serv model is often adopted in practical networking schemes. The Diff-serv model maps a service to a certain service class at the network edge according to the QoS requirement of the service. The DS field (derived from the TOS field) in the IP packet identifies the service uniquely. Then, each node in the backbone network performs the preset service policies to diversified services according to the field to ensure the corresponding QoS. The QoS classification and label mechanism in Diff-Serv is similar to the MPLS label distribution. In fact, the MPLS-based Diff-Serv is implemented by integrating the DS distribution into the MPLS label distribution.
MPLS Basics
Label Advertisement and Management
In MPLS, the decision to assign a particular label to a particular FEC is made by the downstream LSR. The downstream LSR informs the upstream LSR of the assignment. That is, labels are advertised in the upstream direction.
Downstream on demand (DoD): In this mode, a downstream LSR binds a label to a particular FEC and advertises the binding only when it receives a label request from its upstream LSR.
Downstream unsolicited (DU): In this mode, a downstream LSR does not wait for any label request from an upstream LSR before binding a label to a particular FEC.
An upstream LSR and its downstream LSR must use the same label advertisement mode; otherwise, no LSP can be established normally. For more information, refer to LDP Label Distribution.
MPLS Basics
Independent: In this mode, an LSR can notify label binding messages upstream anytime. The drawback of this mode is that an LSR may have advertised to the upstream LSR the binding of a label to a particular FEC when it receives a binding from its downstream LSR.
Ordered: In this mode, an LSR can send label binding messages about a FEC upstream only when it receives a specific label binding message from the next hop for a FEC or the LSR itself is the egress node of the FEC.
Liberal: In this mode, an LSR keeps any received label to FEC binding regardless of whether the binding is from its next hop for the FEC or not. Conservative: In this mode, an LSR keeps only label to FEC bindings that are from its next hops for the FECs.
In liberal mode, an LSR can adapt to route changes quickly; while in conservative mode, there are less label to FEC bindings for an LSR to advertise and keep. The conservative label retention mode is usually used together with the DoD mode on LSRs with limited label space.
Next hop label forwarding entry (NHLFE): Operation to be performed on the label, which can be Push or Swap. FEC to NHLFE map (FTN): Mapping of a FEC to an NHLFE at the ingress node. Incoming label map (ILM): Mapping of each incoming label to a set of NHLFEs. The operations performed for each incoming label includes Null and Pop.
z z
PHP
As described in Architecture of MPLS, each transit LSR on an MPLS network forwards an incoming packet based on the label of the packet, while the egress LER removes the label from the packet and forwards the packet based on the network layer destination address.
MPLS Basics
In fact, on a relatively simple MPLS application network, the label of a packet is useless for the egress, which only needs to forward the packet based on the network layer destination address. In this case, the penultimate hop popping (PHP) feature can pop the label at the penultimate node, relieving the egress of the label operation burden and improving the packet processing capability of the MPLS network.
I. IP TTL propagation
An MPLS label contains an 8-bit long TTL field, which has the same meaning as that of an IP packet. According to RFC 3031 Multiprotocol Label Switching Architecture, when an LSR labels a packet, it copies the TTL value of the original IP packet or the upper level label to the TTL field of the newly added label. When an LSR forwards a labeled packet, it decrements the TTL value of the label at the stack top by 1. When an LSR pops a label, it copies the TTL value of the label at the stack top back to the TTL field of the IP packet or lower level label. TTL can be used not only to prevent routing loops, but to implement the tracert function:
z
With IP TTL propagation enabled at ingress, whenever a packet passes a hop along the LSP, its IP TTL gets decremented by 1. Therefore, the result of tracert will reflect the path along which the packet has traveled.
With IP TTL propagation disabled at ingress, the IP TTL of a packet does not decrement when the packet passes a hop, and the result of tracert does not show the hops within the MPLS backbone, as if the ingress and egress were connected directly.
Caution:
z
Within an MPLS domain, TTL propagation always occurs between the multi-level labels. The TTL value of a transmitted local packet is always copied regardless of whether IP TTL propagation is enabled or not. This ensures that the local administrator can tracert for network test.
For network security, the structure of the MPLS backbone may need to be hidden in an MPLS VPN application. In this case, TTL propagation is not allowed for private network packets at ingress.
10
MPLS Basics
Note: For description and configuration of P routers, refer to MPLS L3VPN Configuration and MPLS L2VPN Configuration in the MPLS Volume.
For an MPLS packet with only one level of label, the ICMP response message travels along the IP route when the TTL expires.
MPLS LSP ping is a tool for checking the validity and availability of an LSP. It uses messages called MPLS echo requests. In a ping operation, an MPLS echo request is forwarded along an LSP to the egress, where the control plane determines whether the LSR itself is the egress of the FEC and responds with an MPLS echo reply. When the ping initiator receives the reply, the LSP is considered perfect for forwarding data.
MPLS LSP traceroute is a tool for locating LSP errors. By sending MPLS echo requests to the control plane of each transit LSR, it can determine whether the LSR is really a transit node on the LSP.
11
MPLS Basics
Note: When an MPLS echo request reaches the egress, the destination address in the IP header is set to an address on 127.0.0.0/8 (loopback address of the LSR) and the TTL is set to 1, so as to prevent further forwarding of the request.
LDP Overview
LDP Basic Concepts
An LDP dictates the messages to be used in label distribution and the related processes. Using LDP, LSRs can map network layer routing information to data layer switching paths directly and further establish LSPs. LSPs can be established between both neighboring LSRs and LSRs that are not directly connected, making label switching possible at all transit nodes on the network.
Note: For detailed description about LDP, refer to RFC 2036 LDP Specification.
I. LDP peer
Two LSRs with an LDP session established between them and using LDP to exchange label to FEC bindings are called LDP peers, each of which obtains the label to FEC bindings of its peer over the LDP session between them.
Local LDP session: Established between two directly connected LSRs. Remote LDP session: Established between two indirectly connected LSRs.
Discovery message: Used to declare and maintain the presence of an LSR on a network.
12
MPLS Basics
Session message: Used to establish, maintain, and terminate sessions between LDP peers. Advertisement message: Used to create, alter, or remove label to FEC bindings. Notification message: Used to provide advisory information and signal errors.
z z
For reliable transport of LDP messages, TCP is used for LDP session messages, advertisement messages, and notification messages, while UDP is used only for discovery messages.
Ingress LSR A
LSR B
LSR C
Egress LSR D
LSR E
LSR F
LSR G
LSR H LER
Figure 7 Label distribution In Figure 7, B is the upstream LSR of C on LSP1. As described previously, there are two label advertisement modes. The main difference between them is whether the downstream advertises the bindings unsolicitedly or on demand.
13
MPLS Basics
The following details the advertisement process for each of the two modes.
I. DoD mode
In DoD mode, an upstream LSR sends a label request message containing the description of a FEC to its downstream LSR, which assigns a label to the FEC, encapsulates the binding information in a label mapping message and sends the message back to it. When the downstream LSR responds with label binding information depends on the label distribution control mode used by the LSR:
z
In ordered mode, an LSR responds to its upstream LSR with label binding information only when it receives that of its downstream LSR. In independent mode, an LSR immediately responds to its upstream LSR with label binding information no matter whether it receives that of its downstream LSR or not.
Usually, an upstream LSR selects its downstream LSR based on the information in its routing table. In Figure 7, all LSRs on LSP1 work in ordered mode, while LSR F on LSP2 works in independent mode.
II. DU mode
In DU mode, a downstream LSR advertises label binding information to its upstream LSR unsolicitedly after the LDP session is established, while the upstream LSR keeps the label binding information and processes the information based on its routing table information.
I. Discovery
In this phase, an LSR who wants to establish a session sends Hello messages to its neighboring LSRs periodically, announcing its presence. This way, LSRs can automatically find their peers without manual configuration. LDP provides two discovery mechanisms:
z
The basic discovery mechanism is used to discover local LDP peers, that is, LSRs directly connected at link layer, and to further establish local LDP sessions. Using this mechanism, an LSR periodically sends LDP link Hellos as UDP packets out an interface to the multicast address known as all routers on this subnet. An LDP link Hello message carries information about the LDP identifier of a given interface and
14
MPLS Basics
some other information. Receipt of an LDP link Hello message on an interface indicates that a potential LDP peer is connected to the interface at link layer.
z
The extended discovery mechanism is used to discover remote LDP peers, that is, LSRs not directly connected at link layer, and to further establish remote LDP sessions. Using this mechanism, an LSR periodically sends LDP targeted Hellos as UDP packets to a given IP address. An LDP targeted Hello message carries information about the LDP identifier of a given LSR and some other information. Receipt of an LDP targeted Hello message on an LSR indicates that a potential LDP peer is connected to the LSR at network layer. At the end of the discovery phase, Hello adjacency is established between LSRs, and LDP is ready to initiate session establishment.
15
MPLS Basics
4)
Upon receiving the label mapping message, an LSR checks the status of the corresponding label request message that is locally maintained. If it has information about the request message, the LSR assigns a label to the FEC, and adds an entry in its LFIB for the binding, and sends the label mapping message on to its upstream LSR.
5)
When the ingress LER receives the label mapping message, it also adds an entry in its LFIB. Up to this point, the LSP is established, and packets of the FEC can be label switched along the LSP.
Hello timer: LDP peers periodically send Hello messages to indicate that they intend to keep the Hello adjacency. If the timer expires but an LSR still does not receive any new Hello message from its peer, it removes the Hello adjacency.
Keepalive timer: LDP peers keep LDP sessions by periodically sending Keepalive message over LDP session connections. If the timer expires but an LSR still does not receive any new Keepalive message, it closes the connection and terminates the LDP session.
The MPLS LSR ID of the LSR is already in the path vector table. Hop counts of the path exceeds the specified limit.
16
MPLS Basics
If the MPLS LSR ID of the LSR is not in the path vector table, the LSR adds it into the table.
LDP GR
Note: For details about Graceful Restart (GR), refer to GR Configuration in the System Volume.
During MPLS LDP session establishment, the LDP devices need to perform Fault Tolerance (FT) and GR capability negotiation. Only when both devices support GR, can the established session be FT/GR capable. To support GR, a GR device must backup the FECs and label information. When an LDP session is GR capable: 1) Whenever the GR restarter restarts, the GR helper will detect that the related LDP session is down and will keep its neighborship with the GR restarter and retain information about the session until the reconnect timer times out. 2) If the GR helper receives a session request from the GR restarter before the reconnect timer times out, it retains the LSP and label information of the session and restores the session with the GR restarter. Otherwise, it deletes all the LSP and label information associated with the session. 3) After the session recovers, the GR restarter and GR helper activate their neighbor liveness timer and recovery timer, restore all the LSP information relative to this session, and send to each other label mapping and label request messages. 4) Upon receipt of the mapping messages from each other, the GR restarter and GR helper delete the LSP stale flag and will delete all the LSP information of the session after the neighbor liveness timer and recovery timer times out. To summarize, during a graceful restart, the LSP information is preserved for the forwarding plane and therefore MPLS packets can be forwarded without interruption.
17