Tuning BFD Settings
The BFD protocol is defined in RFC 5880, which describes the basics of its state machine. When two SSR routers are configured to be peered together, they will begin to send BFD packets to each other over each peer path in order to establish peer reachability (using UDP port 1280). The state will be "down" until a three-way BFD handshake occurs, in which case the state will transition to become "up."
Throughout the life cycle of the BFD peering relationship between SSR routers, two different kinds of BFD operating modes are used:
BFD asynchronous control mode
BFD echo mode
SSR Peer BFD Settings
For a given peering relationship between SSR routers, the following settings are available:
High Tolerance Operation
For customers operating SSRs in extremely lossy conditions such as field-deployed units in austere environments, more tolerant BFD settings may be required. In these situations, the following settings may be more forgiving.
- Test length of 20 packets
- Test interval of 20 seconds
- Multiplier of 10
These changes send 20 packets every 20 seconds and require losing 10 packets in a row before a peer path is declared dead. Use these settings in conjunction with either SLA-based routing utilizing a Service Policy with Load Balancing settings (specifically the Best Path Selection Criteria set to MOS); or SLA Path Quality Filtering, to achieve the desired result.
Asynchronous Control Mode
Asynchronous control mode messages are used between SSR router peers to establish and maintain peering state. In other words, it is the exchange of these messages that determine if a peer is up or down. These messages are exchanged between router waypoints, with both routers periodically transmitting async mode messages to their peers, as well as expecting to receive and process async mode messages from their peers.
The following BFD settings influence how an SSR uses async mode messages:
These settings are used in a negotiation between two SSR peers over a given peer path. They are used in determining precisely when each router should send, and expect to receive async control mode messages. They are also used in determining the length of time that must pass without receiving messages from a peer, before that peer is deemed to be "down."
The below setting on an SSR router communicates to its peer how often (in milliseconds) the router wishes to transmit BFD async mode packets:
In other words, "I'd like to send to you at this interval."
The below setting on an SSR router communicates to its peer the minimum interval (in milliseconds) between BFD async mode packets that it is capable of receiving:
In other words, "don't send to me at less than this interval."
Once the SSR routers establish communication with each other, each peer gains knowledge of the intervals their peer wishes to transmit async control mode messages to them at, as well as the minimum intervals the peer is able to receive at. Based on this knowledge, they will each begin to transmit async control mode messages at either their own
desired-tx-interval time or their peers
required-min-rx-interval time, whichever is greater.
The below setting goes into a calculation for an SSR router to determine how long it should go without receiving an async mode packet from it's peer, before it declares it "down":
Initially this time is effectively the
multiplier times the router's own
required-min-rx-interval. However, once the router has learned the
desired-tx-interval of its peer, it will then understand the interval it should expect to receive messages from the peer. At that point, it will take the greater of either its own
required-min-rx-interval, or the peer's
desired-tx-interval it has learned, and multiply that value by its
multiplier to become the length of time without receiving messages before it deems the peer path down. The multiplier therefore represents the number of consecutive, missed async BFD messages before deeming the peer path down.
In other words, "if I don't receive a message in the amount of time that is my multiplier times either my configured
required-min-rx-interval, or my peer's
desired-tx-interval that I've learned (whichever is greater), I'll deem the peer path to be down."
If both router peers use the default settings above, you should expect to see them transmit async control mode messages every 1000ms, or 1s. If one or both peers do not receive an async control mode packet in 3x1000ms (3s), it will consider the peer path to be "down."
BFD is used to detect path failures between routers. BFD notifies the load-balancer and other peer-path observers when there is packet loss between peering routers, or if the link fails. In many cases it becomes critical to minimize session failovers to prevent the session from oscillating between paths, to reduce unnecessary changes to routing tables, prevent consumption of valuable system resources, and avert needless convergence impact. SSR routers have a hold down timer that can be configured to prevent BFD from making immediate updates until the timer has expired. This method works well when the characteristic of the link is well known and a predetermined value can be assigned to the timer.
In cases where link characteristics change or are unpredictable, the SSR router can dynamically adjust BFD notification periods and reduce excessive notifications to clients. This prevents unnecessary instability in the network, minimizing unnecessary failovers and flapping links.
Simple BFD damping (hold-down timer) is enabled by default, and can be disabled by an administrator. Dynamic BFD Damping is enabled by an administrator using the
dynamic-damping configuration field.
Initial Hold Down Timer: The minimum amount of time BFD must wait before beginning notifications. The default is 5 seconds, and can be configured to be any value lower than the
maximum-hold-down-time. The hold-down-timer will not accept a value of 0.
Maximum Hold Down Timer: The maximum amount of time that BFD must wait before it begins notifications. This timer only applies when BFD damping is enabled. The default value for this is 3600s (or 1 hour). The network administrator may configure this to be any value higher than the initial
Dynamic Damping: Disabled by default. When enabled, the SSR router uses the
maximum-hold-down-time parameters to dynamically adjust the damping timer to ensure that excessive BFD flaps are not affecting the system negatively. This prevents the effect of oscillations, or flapping, caused by BFD and underperforming (or volatile) links. It ensures stability of the entire network and reduces the events requiring the network administrator's attention.
|hold-down-time||BFD (router, peer, neighborhood, adjacency)||Seconds||Default: 5 Range: 1-300|
|dynamic-damping||BFD (router, peer, neighborhood, adjacency)||Enumeration||Enabled/Disabled Default: Disabled|
|maximum-hold-down-time||BFD (router, peer, neighborhood, adjacency)||Seconds||Default: 3600 (1 hour) Only configurable when dynamic-damping is enabled. Must be greater than hold-down-time.|
adjacenency 22.214.171.124 peer1
If damping is disabled, the configured
hold-down-time will be used with the current existing
hold-down-time logic. For additional information, see BFD Router in the Configuration Element Reference Guide.
Echo mode messages are used between SSR router peers to measure path quality, including jitter, packet loss, and latency (JPL). Echo mode messages are transmitted from one router to its peer, which simply echoes them back to the originating router. In contrast to async control mode messages, which are conversations between peer BFD agents, echo mode messages are one router's conversation with itself via its router peer, over a specific peer path.
The below sets how often (in seconds) an SSR router will perform a test of path quality using BFD echo mode messages:
The below sets the number of echo mode packets to be used when performing a path quality test using BFD echo mode messages:
The below sets the minimum amount of time between echo packets that a particular peer is able to handle. This gets communicated in BFD messages as a means of telling a peer what it can handle, and is useful as a means of a router preventing a peer from overloading it with echo mode packets.
If both router peers use the default settings above, you should expect to see each router independently perform echo mode tests every 10s, consisting of 10 echo mode packets sent to its peer in rapid succession, for each peer path it has established with that peer. Upon receipt, the peer will echo them back to the originating router, which will measure JPL.
Visibility into BFD
Visibility into the status of the BFD async control mode can be seen as "up" or "down" in PCLI commands such as the one below. They can also be seen in the topology view of the GUI and alarms are generated whenever a BFD detects paths are down:
detail to the command (i.e.,
show peers detail) you can see the current JPL statistics for each peer path.
Visibility into the measured results of BFD echo mode can be seen on a per service-route basis using the one below. This shows data from a running average of multiple successive echo mode tests:
On a per-peer path basis, this command shows results from echo mode measurements, however, this is NOT the same running average as data seen in
show load-balancer it is simply the raw data resulting from the last time a test was performed:
show stats bfd by-peer-path