The description below assumes that the root sets the 'P' flag in the DODAG Configuration option and performs the EDAR proxy operation presented in
Section 4.3.
If the 'P' flag is set to 0, the 6LR
MUST generate the periodic EDAR messages and process the returned status as specified in [
RFC 8505]. If the EDAC indicates success, the rest of the flow takes place as presented but without the proxied EDAR/EDAC exchange.
Section 9.1 provides an overview of the route injection in RPL, whereas
Section 9.2 offers more details from the perspective of the different nodes involved in the flow.
This specification eliminates the need to exchange keep-alive EDAR and EDAC messages all the way from a 6LN to the 6LBR across a RPL mesh. Instead, the EDAR/EDAC exchange with the 6LBR is proxied by the RPL DODAG root upon the DAO message that refreshes the RPL routing state. The first EDAR upon a new Address Registration cannot be proxied, though, as it is generated for the purpose of DAD, which must be verified before the address is injected in RPL.
In a RPL network where the function is enabled, refreshing the state in the 6LBR is the responsibility of the root. Consequently, only addresses that are injected in RPL will be kept alive at the 6LBR by the RPL DODAG root. Since RULs are advertised using Non-Storing mode, the DAO message flow and the keep-alive EDAR/EDAC can be nested within the Address (re)Registration flow.
Figure 7 illustrates that, for the first Address Registration, both the DAD and the keep-alive EDAREDAC exchanges happen in the same sequence.
6LN/RUL 6LR <6LR*> Root 6LBR
|<---Using ND--->|<--Using RPL->|<-----Using ND---->|
| |<-----------Using ND------------->|
| | | |
| NS(EARO) | | |
|--------------->| |
| | EDAR |
| |--------------------------------->|
| | |
| | EDAC |
| |<---------------------------------|
| | |
| | DAO(X=0) | |
| |------------->| |
| | |
| | DAO-ACK | |
| |<-------------| |
| NA(EARO) | | |
|<---------------| | |
| | | |
This flow requires that the lifetimes and sequence counters in 6LoWPAN ND and RPL be aligned.
To achieve this, the Path Sequence and the Path Lifetime in the DAO message are taken from the Transaction ID and the Address Registration lifetime in the NS(EARO) message from the 6LN.
On the first Address Registration, illustrated in
Figure 7 for RPL Non-Storing mode, the EDAR/EDAC exchange takes place as prescribed by [
RFC 8505]. If the exchange fails, the 6LR returns an NA message with a non-zero status to the 6LN, the NCE is not created, and the address is not injected in RPL. Otherwise, the 6LR creates an NCE and injects the Registered Address in the RPL routing using a DAO/DAO-ACK exchange with the RPL DODAG root.
An Address Registration refresh is performed by the 6LN to keep the NCE in the 6LR alive before the lifetime expires. Upon the refresh of a registration, the 6LR reinjects the corresponding route in RPL before it expires, as illustrated in
Figure 8.
6LN/RUL <-ND-> 6LR <-RPL-> Root <-ND-> 6LBR
| | | |
| NS(EARO) | | |
|--------------->| | |
| | DAO(X=1) | |
| |------------->| |
| | | EDAR |
| | |------------------>|
| | | EDAC |
| | |<------------------|
| | DAO-ACK | |
| |<-------------| |
| NA(EARO) | | |
|<---------------| | |
This is what causes the RPL DODAG root to refresh the state in the 6LBR, using an EDAC message. In the case of an error in the proxied EDAR flow, the error is returned in the DAO-ACK using a RPL Status with the 'A' flag set to 1, which embeds a 6LoWPAN Status value as discussed in
Section 6.3.
The 6LR may receive a requested DAO-ACK after it received an asynchronous Non-Storing DCO, but the non-zero status in the DCO supersedes a positive status in the DAO-ACK, regardless of the order in which they are received. Upon the DAO-ACK -- or the DCO, if one arrives first -- the 6LR responds to the RUL with an NA(EARO).
An issue may be detected later, e.g., the address moves to a different DODAG with the 6LBR attached to a different 6LoWPAN Backbone Router (6BBR); see Figure 5 in
Section 3.3 of
RFC 8929. The 6BBR may send a negative ND Status, e.g., in an asynchronous NA(EARO) to the 6LBR.
[
RFC 8929] expects that the 6LBR is co-located with the RPL DODAG root, but if not, the 6LBR
MUST forward the status code to the originator of the EDAR -- either the 6LR or the RPL DODAG root that proxies for it. The ND status code is mapped in a RPL Status value by the RPL DODAG root, and then back to an ND Status by the 6LR to the 6LN. Note that a legacy RAN that receives a Non-Storing DCO that it does not support will ignore it silently, as specified in
Section 6 of
RFC 6550. The result is that it will remain unaware that it is no longer reachable until its next RPL exchange happens. This situation will be cleared upon the next Non-Storing DAO exchange if the error is returned in a DAO-ACK.
Figure 9 illustrates this in the case where the 6LBR and the root are not co-located, and the root proxies the EDAR/EDAC flow.
6LN/RUL <-ND-> 6LR <-RPL-> Root <-ND-> 6LBR <-ND-> 6BBR
| | | | |
| | | | NA(EARO) |
| | | |<------------|
| | | EDAC | |
| | |<-------------| |
| | DCO | | |
| |<------------| | |
| NA(EARO) | | | |
|<-------------| | | |
| | | | |
If the root does not proxy, then the EDAC with a non-zero status reaches the 6LR directly. In that case, the 6LR
MUST clean up the route using a DAO with a Lifetime of 0, and it
MUST propagate the status back to the RUL in an NA(EARO) with the R flag set to 0.
The RUL may terminate the registration at any time by using a Registration Lifetime of 0. This specification requires that the RPL Target option transport the ROVR. This way, the same flow as the heartbeat flow is sufficient to inform the 6LBR using the root as a proxy, as illustrated in
Figure 8.
All or any combination of the 6LR, the root, and the 6LBR might be collapsed in a single node.
The following sections specify the behavior of (1) the 6LN acting as a RUL, (2) the 6LR acting as a border router and serving the 6LN, (3) the RPL DODAG root, and (4) the 6LBR in the control flows that enable RPL routing back to the RUL, respectively.
This specification builds on the operation of a 6LoWPAN ND-compliant 6LN/RUL, which is expected to operate as follows:
-
The 6LN selects a 6LR that provides reachability services for a RUL. This is signaled by a 6CIO in the RA messages with the L, P, and E flags set to 1 as prescribed by [RFC 8505].
-
The 6LN obtains an IPv6 global address, via either (1) Stateless Address Autoconfiguration (SLAAC) [RFC 4862] based on a Prefix Information Option (PIO) [RFC 4861] found in an RA message or (2) some other means, such as DHCPv6 [RFC 8415].
-
Once it has formed an address, the 6LN registers its address and refreshes its registration periodically, early enough within the lifetime of the previous Address Registration, as prescribed by [RFC 6775], to refresh the NCE before the lifetime indicated in the EARO expires. It sets the T flag to 1 as prescribed in [RFC 8505]. The TID is incremented each time and wraps in a lollipop fashion (see Section 5.2.1 of RFC 8505, which is fully compatible with Section 7.2 of RFC 6550).
-
As stated in Section 5.2 of RFC 8505, the 6LN can register with more than one 6LR at the same time.In that case, all the fields in the EARO are set to the same valuefor all of the parallel Address Registrations, with the exceptionof the Registration Lifetime field and the R flag, which may be set todifferent values.The 6LN may cancel a subset of its registrations or may transfer a registration from one or more old 6LRs to one or more new 6LRs. To do so, the 6LN sends a series of NS(EARO) messages, all with the same TID, with a zero Registration Lifetime to the old 6LR(s) and with a non-zero Registration Lifetime to the new 6LR(s). In that process, the 6LN SHOULD send the NS(EARO) with a non-zero Registration Lifetime and ensure that at least one succeeds before it sends an NS(EARO) that terminates another registration. This avoids the churn related to transient route invalidation in the RPL network above the common parent of the involved 6LRs.
-
Following Section 5.1 of RFC 8505, a 6LN acting as a RUL sets the R flag in the EARO of its registration(s) for which it requires routing services. If the R flag is not echoed in the NA, the RUL MUST assume that establishing the routing services via this 6LR failed, and it SHOULD attempt to use another 6LR. The RUL SHOULD ensure that one registration succeeds before setting the R flag to 0. In the case of a conflict with the preceding rule regarding the lifetime, the rule regarding the lifetime has precedence.
-
The 6LN may use any of the 6LRs to which it registered as the default gateway. Using a 6LR to which the 6LN is not registered may result in packets dropped at the 6LR by a Source Address Validation Improvement (SAVI) function [RFC 7039] and thus is not recommended.
Even without support for RPL, the RUL may be configured with an opaque value to be provided to the routing protocol. If the RUL has knowledge of the RPL Instance into which the packet should be injected, then it
SHOULD set the Opaque field in the EARO to the RPLInstanceID; otherwise, it
MUST leave the Opaque field as 0.
Regardless of the setting of the Opaque field, the 6LN
MUST set the "I" field to 0 to signal "topological information to be passed to a routing process", as specified in
Section 5.1 of
RFC 8505.
A RUL is not expected to produce RPL artifacts in the data packets, but it may do so. For instance, if the RUL has minimal awareness of the RPL Instance, then it can build an RPI. A RUL that places an RPI in a data packet
SHOULD indicate the RPLInstanceID of the RPL Instance where the packet should be forwarded. It is up to the 6LR (e.g., by policy) to use the RPLInstanceID information provided by the RUL or rewrite it to the selected RPLInstanceID for forwarding inside the RPL domain. All the flags and the SenderRank field are set to 0 as specified by
Section 11.2 of
RFC 6550.
A 6LR that provides reachability services for a RUL in a RPL network as specified in this document
MUST include a 6CIO in its RA messages and set the L, P, and E flags to 1 as prescribed by [
RFC 8505].
As prescribed by [
RFC 8505], the 6LR generates an EDAR message upon reception of a valid NS(EARO) message for the registration of a new IPv6 address by a 6LN. If the initial EDAR/EDAC exchange succeeds, then the 6LR installs an NCE for the Registration Lifetime.
If the R flag is set to 1 in the NS(EARO), the 6LR
SHOULD inject the host route in RPL, unless this is barred for other reasons, such as the saturation of the RPL parents. The 6LR
MUST use RPL Non-Storing mode signaling and the updated Target option (see
Section 6.1). To avoid a redundant EDAR/EDAC flow to the 6LBR, the 6LR
SHOULD refrain from setting the 'X' flag. The 6LR
MUST request a DAO-ACK by setting the 'K' flag in the DAO message. Successfully injecting the route to the RUL's address will be indicated via the 'U' flag set to 0 in the RPL Status of the DAO-ACK message.
For the registration refreshes, if the RPL DODAG root sets the 'P' flag in the DODAG Configuration option to 1, then the 6LR
MUST refrain from sending the keep-alive EDAR; instead, it
MUST set the 'X' flag to 1 in the Target option of the DAO messages, to request that the root proxy the keep-alive EDAR/EDAC exchange with the 6LBR (see
Section 6); if the 'P' flag is set to 0, then the 6LR
MUST set the 'X' flag to 0 and handle the EDAR/EDAC flow itself.
The Opaque field in the EARO provides a means to signal which RPL Instance is to be used for the DAO advertisements and the forwarding of packets sourced at the Registered Address when there is no RPI in the packet.
As described in [
RFC 8505], if the "I" field is 0, then the Opaque field is expected to carry the RPLInstanceID suggested by the 6LN; otherwise, there is no suggested RPL Instance. If the 6LR participates in the suggested RPL Instance, then the 6LR
MUST use that RPL Instance for the Registered Address.
If there is no suggested RPL Instance or if the 6LR does not participate in the suggested RPL Instance, it is expected that the packets coming from the 6LN "can unambiguously be associated to at least one RPL Instance" [
RFC 6550] by the 6LR, e.g., using a policy that maps the 6-tuple to a RPL Instance.
The DAO message advertising the Registered Address
MUST be constructed as follows:
-
The Registered Address is signaled as the Target Prefix in the updated Target option in the DAO message; the Prefix Length is set to 128 but the 'F' flag is set to 0, since the advertiser is not the RUL. The ROVR field is copied unchanged from the EARO (see Section 6.1).
-
The 6LR indicates one of its global or unique-local IPv6 unicast addresses as the Parent Address in the TIO associated with the Target option.
-
The 6LR sets the External ('E') flag in the TIO to indicate that it is redistributing an external target into the RPL network.
-
The Path Lifetime in the TIO is computed from the Registration Lifetime in the EARO. This operation converts seconds to the Lifetime Units used in the RPL operation. This creates the deployment constraint that the Lifetime Unit is reasonably compatible with the expression of the Registration Lifetime; e.g., a Lifetime Unit of 0x4000 maps the most significant byte of the Registration Lifetime to the Path Lifetime.
In that operation, the Path Lifetime must be set to ensure that the path has a longer lifetime than the registration and also covers the round-trip time to the root.
Note that if the Registration Lifetime is 0, then the Path Lifetime is also 0 and the DAO message becomes a No-Path DAO, which cleans up the routes down to the RUL's address; this also causes the root as a proxy to send an EDAR message to the 6LBR with a Lifetime of 0.
-
The Path Sequence in the TIO is set to the TID value found in the EARO.
Upon receiving or timing out the DAO-ACK after an implementation-specific number of retries, the 6LR
MUST send the corresponding NA(EARO) to the RUL. Upon receiving an asynchronous DCO message, it
MUST send an asynchronous NA(EARO) to the RUL immediately but still be capable of processing the DAO-ACK if one is pending.
The 6LR
MUST set the R flag to 1 in the NA(EARO) that it sends back to the 6LN if and only if the 'U' flag in the RPL Status is set to 0, indicating that the 6LR injected the Registered Address in the RPL routing successfully and that the EDAR proxy operation succeeded.
If the 'A' flag in the RPL Status is set to 1, the embedded Status value is passed back to the RUL in the EARO Status. If the 'U' flag is also set to 1, the registration failed for 6LoWPAN-ND-related reasons, and the NCE is removed.
An error injecting the route causes the 'U' flag to be set to 1. If the error is not related to ND, the 'A' flag is set to 0. In that case, the registration succeeds, but the RPL route is not installed. So, the NA(EARO) is returned with a status indicating success but the R flag set to 0, which means that the 6LN obtained a binding but no route.
If the 'A' flag is set to 0 in the RPL Status of the DAO-ACK, then the 6LoWPAN ND operation succeeded, and an EARO Status of 0 (Success)
MUST be returned to the 6LN. The EARO Status of 0
MUST also be used if the 6LR did not attempt to inject the route but could create the binding after a successful EDAR/EDAC exchange or refresh it.
If the 'U' flag is set to 1 in the RPL Status of the DAO-ACK, then the route was not installed, and the R flag
MUST be set to 0 in the NA(EARO). The R flag
MUST be set to 0 if the 6LR did not attempt to inject the route.
In a network where Address-Protected Neighbor Discovery (AP-ND) is enabled, in the case of a DAO-ACK or a DCO transporting an EARO Status value of 5 (Validation Requested), the 6LR
MUST challenge the 6LN for ownership of the address, as described in
Section 6.1 of
RFC 8928, before the registration is complete. This flow, illustrated in
Figure 10, ensures that the address is validated before it is injected in the RPL routing.
6LN 6LR Root 6LBR
| | | |
|<--------------- RA ---------------------| | |
| | | |
|------ NS(EARO) (ROVR=Crypto-ID) ------->| | |
| | | |
|<-NA(EARO) (Status=Validation Requested)-| | |
| | | |
|---- NS(EARO) and proof of ownership --->| | |
| | | |
| <validate the proof> | |
| | |
|<------- NA(EARO) (Status=10) -----<if failed> | |
| | |
| <else> | |
| | | |
| |--------- EDAR ------->|
| | |
| |<-------- EDAC --------|
| | |
| | | |
| |-DAO(X=0)->| |
| | | |
| |<- DAO-ACK-| |
| | | |
|<---------- NA(EARO) (Status=0) ---------| | |
| | | |
...
| | | |
|------ NS(EARO) (ROVR=Crypto-ID) ------->| | |
| |-DAO(X=1)->| |
| | |-- EDAR -->|
| | | |
| | |<-- EDAC --|
| |<- DAO-ACK-| |
|<---------- NA(EARO) (Status=0) ---------| | |
| | | |
...
If the challenge succeeded, then the operations continue as normal. In particular, a DAO message is generated upon the NS(EARO) that proves the ownership of the address. If the challenge failed, the 6LR rejects the registration as prescribed by AP-ND and may take actions to protect itself against Denial-Of-Service (DoS) attacks by a rogue 6LN; see
Section 11.
The 6LR may, at any time, send a unicast asynchronous NA(EARO) with the R flag set to 0 to signal that it has stopped providing routing services, and/or with an EARO Status of 2 (Neighbor Cache Full) to signal that it removed the NCE. It may also send a final RA -- unicast or multicast -- with a router Lifetime field of 0, to signal that it will cease to serve as the router, as specified in
Section 6.2.5 of
RFC 4861. This may happen upon a DCO or a DAO-ACK message indicating that the path is already removed; otherwise, the 6LR
MUST remove the host route to the 6LN using a DAO message with a Path Lifetime of 0.
A valid NS(EARO) message with the R flag set to 0 and a Registration Lifetime that is not zero signals that the 6LN wishes to maintain the binding but does not require (i.e., no longer requires) the routing services from the 6LR. Upon this message, if, due to a previous NS(EARO) with the R flag set to 1 the 6LR was injecting the host route to the Registered Address in RPL using DAO messages, then the 6LR
MUST invalidate the host route in RPL using a DAO with a Path Lifetime of 0. It is up to the registering 6LN to maintain the corresponding route from then on, by either (1) keeping it active via a different 6LR or (2) acting as a RAN and managing its own reachability.
When forwarding a packet from the RUL into the RPL domain, if the packet does not have an RPI, the 6LR
MUST encapsulate the packet to the root and add an RPI. If there is an RPI in the packet, the 6LR
MUST rewrite the RPI, but it does not need to encapsulate.
A RPL DODAG root
MUST set the 'P' flag to 1 in the RPL DODAG Configuration option of the DIO messages that it generates (see
Section 6) to signal that it proxies the EDAR/EDAC exchange and supports the updated RPL Target option.
Upon reception of a DAO message, for each updated RPL Target option (see
Section 6.1) with the 'X' flag set to 1, the root
MUST notify the 6LBR by using a proxied EDAR/EDAC exchange; if the RPL DODAG root and the 6LBR are integrated, an internal API can be used instead.
The EDAR message
MUST be constructed as follows:
-
The target IPv6 address from the RPL Target option is placed in the Registered Address field of the EDAR message;
-
The Registration Lifetime is adapted from the Path Lifetime in the TIO by converting the Lifetime Units used in RPL into units of 60 seconds used in the 6LoWPAN ND messages;
-
The TID value is set to the Path Sequence in the TIO and indicated with an ICMP code of 1 in the EDAR message;
-
The ROVR in the RPL Target option is copied as is in the EDAR, and the ICMP Code Suffix is set to the appropriate value as shown in Table 4 of [RFC 8505], depending on the size of the ROVR field.
Upon receiving an EDAC message from the 6LBR, if a DAO is pending, then the root
MUST send a DAO-ACK back to the 6LR. Otherwise, if the status in the EDAC message is not "Success", then it
MUST send an asynchronous DCO to the 6LR.
In either case, the EDAC Status is embedded in the RPL Status with the 'A' flag set to 1.
The proxied EDAR/EDAC exchange
MUST be protected with a timer whose appropriate duration and number of retries (1) are implementation dependent and (2)
SHOULD be configurable, since the root and the 6LBR are typically nodes with a higher capacity and manageability than 6LRs. Upon timing out, the root
MUST send an error back to the 6LR as above, using either a DAO-ACK or a DCO, as appropriate, with the 'A' and 'U' flags set to 1 in the RPL Status, and a RPL Status value of "6LBR Registry Saturated" [
RFC 8505].
The 6LBR is unaware that the RPL DODAG root is not the new attachment 6LR of the RUL, so it is not impacted by this specification.
Upon reception of an EDAR message, the 6LBR behaves as prescribed by [
RFC 8505] and returns an EDAC message to the sender.