Introduction to Segment Routing Santiago Álvarez, Distinguished Technical Marketing Engineer BRKRST-2124

Transcription

1

2 Introduction to Segment Routing Santiago Álvarez, Distinguished Technical Marketing Engineer BRKRST-2124

3 Agenda Technology Overview Use Cases A Closer Look to Control and Data Plane Traffic Protection Traffic Engineering Conclusion

4 Technology Overview

5 Segment Routing Source Routing the source chooses a path and encodes it in the packet header as an ordered list of segments the rest of the network executes the encoded instructions without any further per-flow state Segment: an identifier for any type of instruction forwarding or service

6 IGP Prefix Segment Shortest-path to the IGP prefix Global Index Signaled by ISIS/OSPF DC (BGP-SR) WAN (IGP-SR) PEER

7 IGP Adjacency Segment Forward on the IGP adjacency Local 1XY X is the from Y is the to Signaled by ISIS/OSPF DC (BGP-SR) WAN (IGP-SR) PEER

8 BGP Prefix Segment Shortest-path to the BGP prefix Global Index Signaled by BGP DC (BGP-SR) WAN (IGP-SR) PEER

9 BGP Peering Segment Forward to the BGP peer Local 1XY X is the from Y is the to Signaled by BGP-LS (topology information) to the controller Low Lat, Low BW High Lat, High BW 7 14 DC (BGP-SR) WAN (IGP-SR) PEER

10 WAN Controller WAE collects via BGP-LS IGP segments BGP segments Topology 12 BGP-LS 10 BGP-LS BGP-LS 2 4 Low Lat, Low BW DC (BGP-SR) WAN (IGP-SR) PEER

11 An end-to-end path as a list of segments WAE computes that the green path can be encoded as WAE programs a single per-flow state to create an applicationengineered end-toend policy 12 {16001, 16002, 124, 147} PCEP, Netconf, BGP DC (BGP-SR) Default ISIS cost metric: 10 WAN (IGP-SR) Low Lat, Low BW 7 PEER

12 Segment Routing Standardization Sample IETF Documents IETF standardization in SPRING working group Protocol extensions progressing in multiple groups IS-IS OSPF PCE IDR 6MAN Broad vendor and customer support Segment Routing Architecture (draft-ietf-spring-segment-routing) Problem Statement and Requirements (draft-ietf-spring-problem-statement) IPv6 SPRING Use Cases (draft-ietf-spring-ipv6-use-cases) Segment Routing Use Cases (draft-filsfils-spring-segment-routing-use-cases) Topology Independent Fast Reroute using Segment Routing (draft-francois-spring-segment-routing-ti-lfa) IS-IS Extensions for Segment Routing (draft-ietf-isis-segment-routing-extensions) OSPF Extensions for Segment Routing (draft-ietf-ospf-segment-routing-extensions) PCEP Extensions for Segment Routing (draft-ietf-pce-segment-routing) Close to 30 IETF drafts in progress

13 Segment Routing Product Support Platforms: ASR9000, CRS-1/CRS-3 (shipping) IS-IS IPv4 / IPv6 (shipping) Node/Adjacency SID advertisement LDP interworking (mapping server/client) Traffic protection (topology independent LFA link protection) OSPFv2 (shipping) Node SID advertisement Traffic protection (LFA) Upcoming SR Traffic Engineering (manual provisioning and PCEP) OAM (Ping/Trace) IOS XE Support (ASR1000, ASR902, ASR903, ISR4400)

14 Use Cases

15 IPv4/6 VPN/Service transport vpn IGP only No LDP, no RSVP-TE ECMP pkt 1 pkt vpn pkt 7 pkt 6 5 Site Site2 vpn pkt

16 Seamless interworking with LDP Seamless deployment vpn pkt 2 3 LDP(7) vpn pkt vpn pkt pkt pkt 6 5 Site Site2 vpn pkt

17 Topology-Independent LFA (TI-LFA FRR) 50msec FRR in any topology IGP Automated No LDP, no RSVP-TE Optimum Post-convergence path pkt 1 4 No midpoint backup state Detailed operator report pkt S. Litkowski, B. Decraene, Orange Mate Design How many backup segments Capacity analysis pkt

18 Automated Traffic Matrix Collection Traffic Matrix is fundamental for capacity planning centralized traffic engineering IP/Optical optimization Most operators do not have an accurate traffic matrix With SR, the traffic matrix collection is automated 1 3 4

19 Optimized Content Delivery On a per-content, per-user basis, the content delivery application can engineer AS the path within the AS the selected border router AS5 AS6 the selected peer pkt Also applicable for engineering egress traffic from DC to peer 1 2 BGP Prefix and Peering Segments 4 3 AS1

20 Application Engineered Routing Per-application flow engineering End-to-End DC, WAN, AGG, PEER Millions of flows No signaling No midpoint state No reclassification at boundaries Low-Latency to 7 for application A12 12 Push {16001, 200, 147} Low-Lat to : pop and push {16002, 16004} BSID: 200 ISIS: PeerSID: 147, Low Lat, Low BW PeerSID: 147, High Lat, High BW Low Lat, Low BW DC (or AGG) Default ISIS cost metric: 10 Default Latency metric: 10 WAN PEER

21 Application Engineered Routing Per-application flow engineering End-to-End DC, WAN, AGG, PEER Millions of flows No signaling No midpoint state No reclassification at boundaries Low-Latency to 7, DC Plane 0 only, for application A12 12 Push {16010, 16001, 200, 147} Low-Lat to : pop and push {16002, 16004} BSID: 200 ISIS: PeerSID: 147, Low Lat, Low BW PeerSID: 147, High Lat, High BW Low Lat, Low BW DC (or AGG) Default ISIS cost metric: 10 Default Latency metric: 10 WAN PEER

22 A Closer Look to Control and Data Plane

23 MPLS Control and Forwarding Operation with Segment Routing Services PE1 BGP / LDP PE2 IPv4 IPv6 IPv4 VPN IPv6 VPN VPWS VPLS No changes to control or forwarding plane Packet Transport PE1 IGP PE2 LDP RSVP BGP Static IS-IS OSPF MPLS Forwarding IGP label distribution for IPv4 and IPv6, same forwarding plane

24 SID Encoding Prefix SID SID encoded as an index Index represents an offset from SRGB base Index globally unique SRGB may vary across LSRs SRGB (base and range) advertised with router capabilities Adjacency SID SID encoded as absolute (i.e. not indexed) value Locally significant Automatically allocated for each adjacency SR-enabled Node SRGB = [ ]. Advertised as base = 16,000, range = 7,999 Prefix SID = Advertised as Prefix SID Index = 41 Adjacency SID = Advertised as Adjacency SID = 24000

25 SR IS-IS Control Plane Overview Level 1, level 2 and multi-level routing Prefix Segment ID (Prefix-SID) for host prefixes on loopback interfaces Adjacency SIDs for adjacencies Prefix-to-SID mapping advertisements (mapping server) MPLS penultimate hop popping (PHP) signaling MPLS explicit-null label signaling

26 IS-IS Configuration Required Wide metrics SR enabled under unicast address family Optional Prefix-SID configured under loopback(s) AF IPv4 MPLS forwarding enabled automatically on all (non-passive) IS-IS interfaces Adjacency-SIDs are automatically allocated for each adjacency

27 SR OSPF Control Plane Overview IPv4 Prefix Segment ID (Prefix-SID) for host prefixes on loopback interfaces MPLS penultimate hop popping (PHP) signaling MPLS explicit-null label signaling

28 OSPF Configuration OSPFv2 control plane Required Enable segment-routing under instance or area(s) Command has area scope, usual inheritance applies Enable segment-routing forwarding under instance, area(s) or interface(s) Command has interface scope, usual inheritance applies Optional Prefix-SID configured under loopback(s) MPLS forwarding enabled on all OSPF interfaces with segment-routing forwarding configured

29 MPLS Data Plane Operation Prefix SID SRGB [16,000 23,999 ] Adjacency SID SRGB [16,000 23,999 ] Swap Pop Adjacency SID = X X Y X Y Y Payload Payload Payload Payload Packet forwarded along IGP shortest path (ECMP) Swap operation performed on input label Same top label if same/similar SRGB PHP if signaled by egress LSR Packet forwarded along IGP adjacency Pop operation performed on input label Top labels will likely differ Penultimate hop always pops last adjacency SID

30 MPLS Data Plane Operation (Prefix SID) SRGB [16,000 23,999 ] SRGB [16,000 23,999 ] SRGB [26,000 23,999 ] SRGB [16,000 23,999 ] A B C D Loopback X.X.X.X Prefix SID Index = 41 Push Push Swap Pop Pop VPN Label VPN Label VPN Label Payload Payload Payload Payload Payload

31 MPLS Data Plane Operation (Adjacency SIDs) MPLS Label Range MPLS Label Range MPLS Label Range MPLS Label Range [ ] [ ] [ ] [ ] A B C D Push Push Push Adjacency SID = VPN Label Pop Adjacency SID = VPN Label Pop Adjacency SID = VPN Label Pop Payload Payload Payload Payload Payload

32 MPLS LFIB with Segment Routing LFIB populated by IGP (ISIS / OSPF) Forwarding table remains constant (Nodes + Adjacencies) regardless of number of paths Other protocols (LDP, RSVP, BGP) can still program LFIB Network Node Segment Ids Node Adjacency Segment Ids In Label PE PE PE PE Out Label P Out Interface L1 L1 Intf1 L2 L2 Intf1 L8 L8 Intf4 L9 L9 Intf2 L10 Pop Intf2 Ln Pop Intf5 PE PE PE PE Forwarding table remains constant

33 Traffic Protection

34 Topology Independent LFA (TI-LFA) Benefits 100%-coverage 50-msec link and node protection Simple to operate and understand automatically computed by the IGP Prevents transient congestion and suboptimal routing leverages the post-convergence path, planned to carry the traffic Incremental deployment also protects LDP traffic

35 Topology Independent LFA Implementation Leverages existing and proven LFA technology P space: set of nodes reachable from node S (PLR) without using protected link L Q space: set of nodes that can reach destination D without using protected link L Enforcing loop-freeness on post-convergence path Where can I release the packet? At the intersection between the post-convergence shortest path and the Q space How do I reach the release point? By chaining intermediate segments that are assessed to be loop-free

36 TI-LFA Zero-Segment Example TI-LFA for link R1R2 on R1 Calculate LFA(s) Packet to Z A R1 Z R2 Packet to Z Calculate post-convergence SPT 1000 Find LFA on post-convergence SPT R1 will steer the traffic towards LFA R5 prefix-sid(z) Packet to Z R5 R4 R3 Default metric:10

37 TI-LFA Single-Segment Example TI-LFA for link R1R2 on R1 Calculate P and Q spaces Packet to Z A R1 Z R2 Packet to Z They overlap in this case P-space Calculate post-convergence SPT Find PQ node on postconvergence SPT prefix-sid(r4) prefix-sid(z) Packet to Z R5 R4 R3 prefix-sid(z) Packet to Z R1 will push the prefix-sid of R4 on the backup path Default metric:10 Q-space

38 TI-LFA Double-Segment Example TI-LFA for link R1R2 on R1 Calculate P and Q spaces Packet to Z A R1 Z R2 Packet to Z Calculate post-convergence SPT Find Q and adjacent P node on post-convergence SPT R1 will push the prefix-sid of R4 and the adj-sid of R4-R3 link on the backup path prefix-sid(r4) adj-sid(r4-r3) prefix-sid(z) Packet to Z P-space adj-sid(r4-r3) prefix-sid(z) R5 R Default metric:10 R3 Q-space prefix-sid(z) Packet to Z Packet to Z

39 Traffic Engineering

40 Traffic Engineering with Segment Routing Provides explicit routing Supports constraint-based routing Supports centralized admission control No RSVP-TE to establish LSPs Uses existing ISIS / OSPF extensions to advertise link attributes Supports ECMP Segment Routing TE LSP

41 How Traffic Engineering Works Head end Mid-point TE LSP IP/MPLS Tail end Link information Distribution ISIS-TE OSPF-TE Path Calculation Path Setup Forwarding Traffic down path Auto-route (announce / destinations) Static route PBR PBTS / CBTS Forwarding Adjacency Pseudowire Tunnel select

42 Stateful PCE PCE maintains topology and path database (established paths) More optimal centralized path computation Enables centralized path initiation and update control Well suited for SDN deployments PCC PCEP Stateful PCE LSP DB TED

43 Topology Acquisition An external PCE requires some form of topology acquisition A PCE may learn topology using BGP-LS, IGP, SNMP, etc. BGP-LS characteristics aggregates topology across one or more domains provides familiar operational model New BGP-LS attribute TLVs for SR IGP: links, nodes, prefixes BGP: peer node, peer adjacency, peer set PCE BGP-LS Domain 0 RR BGP-LS BGP-LS Domain 1 Domain 2 TED

44 Active Stateful PCE PCC or PCE may initiate path setup PCC may delegate update control to PCE PCC may revoke delegation PCE may return delegation PCE has update control over delegated paths Stateful PCC PCEP Active Stateful PCE LSP DB TED

45 Active Stateful PCE PCE-Initiated and PCC-Initiated LSPs PCE-Initiated (Active Stateful PCE) PCC-Initiated (Active Stateful PCE) PCE initiates LSP and maintains update control PCEP LSP DB TED PCC initiates LSP and delegates update control PCEP LSP DB TED Stateful PCC Stateful PCC PCE part of controller architecture managing full path life cycle Tighter integration with application demands PCC may initiate path setup based on distributed network state Can be used in conjunction with PCEinitiated paths

46 PCE Extensions for Segment Routing (SR) Segment routing enables source routing based on segment ids distributed by IGP PCE specifies path as list of segment ids PCC forwards traffic by pushing segment id list on packets No path signaling required Minimal forwarding state Maximum network forwarding virtualization Application PCEP Segment List:: 10,20,30,40 Stateful PCC Stateful PCE Path Request LSP DB TED The state is no longer in the network but in the packet Paths may be PCE- or PCC-initiated Node SID Adjacency SID In Out Int L1 L1 Intf1 L7 L7 Int3 L8 Pop Intf3 L9 Pop Intf5 Forwarding table remains constant

47 Conclusion

48 Conclusion Simple routing extensions to implement source routing Packet path determined by prepended segment identifiers (one or more) Data plane agnostic (MPLS, IPv6) Network scalability and agility by reducing network state and simplifying control plane Traffic protection with 100% coverage with more optimal routing

49 Participate in the My Favorite Speaker Contest Promote Your Favorite Speaker and You Could Be a Winner Promote your favorite speaker through Twitter and you could win $200 of Cisco Press products (@CiscoPress) Send a tweet and include Your favorite speaker s Twitter handle (@111pontes) Two hashtags: #CLUS #MyFavoriteSpeaker You can submit an entry for more than one of your favorite speakers Don t forget to View the official rules at

50 Complete Your Online Session Evaluation Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

51 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings Related sessions

52 Backup Slides

53 Configuring Segment Routing for IPv4 Using IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv4 unicast metric-style wide segment-routing mpls interface Loopback0 passive address-family ipv4 unicast prefix-sid absolute interface GigabitEthernet0/0/0/0 point-to-point address-family ipv4 unicast Enable Segment Routing for IPv4 with MPLS data plane Advertise prefix SID (index 41) for Loopback0

54 Configuring Segment Routing for IPv6 Using IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv6 unicast metric-style wide segment-routing mpls interface Loopback0 passive address-family ipv6 unicast prefix-sid absolute interface GigabitEthernet0/0/0/0 point-to-point address-family ipv6 unicast Enable Segment Routing for IPv6 with MPLS data plane Advertise prefix SID (index 61) for Loopback0

55 Configuring Segment Routing for IPv4 Using OSPF (Cisco IOS XR) router ospf DEFAULT router-id segment-routing mpls segment-routing forwarding mpls area 0 interface Loopback0 passive prefix-sid absolute interface GigabitEthernet0/0/0/0 network point-to-point Enable Segment Routing with MPLS data plane Advertise prefix SID (index 41) for Loopback0

56 Configuring Topology Independent Fast Reroute for IPv4 using Segment Routing and IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv4 unicast metric-style wide segment-routing mpls interface Loopback0 passive address-family ipv4 unicast prefix-sid absolute interface GigabitEthernet0/0/0/0 address-family ipv4 unicast fast-reroute per-prefix fast-reroute per-prefix ti-lfa Enable TI-LFA for IPv4 prefixes on interface GigabitEthernet0/0/0/0

57 Configuring Topology Independent Fast Reroute for IPv6 using Segment Routing and IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv6 unicast metric-style wide segment-routing mpls interface Loopback0 passive address-family ipv6 unicast prefix-sid absolute interface GigabitEthernet0/0/0/0 address-family ipv6 unicast fast-reroute per-prefix fast-reroute per-prefix ti-lfa Enable TI-LFA for IPv6 prefixes on interface GigabitEthernet0/0/0/0

58 Configuring a Mapping Server for SR and LDP Interworking for IPv4 Using IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv4 unicast metric-style wide segment-routing mpls segment-routing prefix-sid-map receive segment-routing prefix-sid-map advertise-local... segment-routing address-family ipv4 prefix-sid-map / range 8 Construct active mapping policy using remotely learned and locally configured mappings (mapping client) Advertise local mapping policy (mapping server) Local prefix-to-sid mapping policy / : /

59 Configuring a Mapping Client for SR and LDP Interworking for IPv4 Using IS-IS (Cisco IOS XR) router isis DEFAULT net address-family ipv4 unicast metric-style wide segment-routing mpls segment-routing prefix-sid-map receive interface Loopback0 passive address-family ipv4 unicast prefix-sid absolute interface GigabitEthernet0/0/0/0 point-to-point address-family ipv4 unicast Construct active mapping policy using remotely learned and locally configured mappings (mapping client)

60 Thank you

61