BGP - Link State (BGP-LS) Extensions for Seamless Bidirectional Forwarding Detection (S-BFD)
Extracted elements (8)
S-BFD Discriminators are advertised via BGP-LS because IS-IS and OSPF extensions only distribute discriminators within a single IGP area/level or domain. BGP-LS enables collection and distribution across IGP domains and across multiple Autonomous Systems within an administrative domain, supporting end-to-end S-BFD monitoring for service paths that span IGP boundaries.
The new TLV augments existing IGP topology information distributed via BGP-LS (RFC 7752). Malformed NLRIs attribute tests defined in RFC 7752 Section 6.2.2 (Fault Management) now encompass the new S-BFD Discriminators TLV.
The S-BFD Discriminators TLV is derived from protocol-specific advertisements: IS-IS S-BFD Discriminators sub-TLV (RFC 7883) and OSPFv2/OSPFv3 S-BFD Discriminator TLV (RFC 7884). BGP-LS carries the same information that these IGP protocols advertise locally.
The Length field of the S-BFD Discriminators TLV MUST be a minimum of 4 octets and increments by 4 octets for each additional discriminator. At least one discriminator MUST be included in the TLV.
RFC 9247 defines a new BGP-LS Attribute TLV called 'S-BFD Discriminators TLV' (Type 1032) for advertising S-BFD Discriminator values as a node-level attribute within the BGP-LS Node NLRI. This enables distribution of S-BFD Discriminators across IGP domains and ASes.
IANA permanently allocated TLV code point 1032 for 'S-BFD Discriminators' in the 'BGP-LS Node Descriptor, Link Descriptor, Prefix Descriptor, and Attribute TLVs' registry. The IS-IS TLV/Sub-TLV column is left empty for this entry.
Advertising S-BFD Discriminators via BGP-LS makes it possible for attackers to initiate S-BFD sessions using the advertised information. The BGP-LS security model requires limiting topology information sharing to trusted entities within an administrative domain, as discussed in RFC 7752 Section 8. Vulnerabilities from exposed discriminators and mitigations are addressed in RFC 7880.
The S-BFD Discriminators TLV has a 2-octet Type field (value 1032), a 2-octet Length field, and one or more 4-octet Discriminator fields. The Length MUST be a minimum of 4 octets, incrementing by 4 for each additional discriminator.