UPA and BGP PIC Edge in Summarized SRv6 Domains
Control-plane scalability is the primary driver of locator and prefix summarization in SRv6 multi-domain networks. In large deployments, each PE advertises its SRv6 locator and service-related prefixes. If every individual prefix were distributed across all domains, the IGP database size, SPF computation load, and FIB state would increase significantly. To limit this growth, domains advertise only summarized locators at their boundaries. External domains maintain reachability only to the summarized prefix, while individual PE locators remain visible only within their local domain.
Figure 84: SRv6 Unreachable Prefix Announcement
We verified correct summarization by confirming that nodes outside the domain installed only the summarized locators in their FIB and successfully resolved them into functional forwarding paths. We then generated end-to-end traffic toward individual PE destinations and confirmed that traffic entered the domain via the summarized locator and reached the intended egress PE through internal routing.
| ABR | PE | Traffic Generator |
|---|---|---|
Ciena 8192, | Arista 7280R4, | Keysight IxNetwork |
Table 57: UPA and BGP PIC Edge in Summarized SRv6 Domains - µSID-Locator Summarization
The limitation of this approach appears when a single egress PE becomes unreachable inside the summarized domain. Since the summary route remains valid, ingress PEs in other domains still see the aggregate locator as reachable. The IGP does not provide any indication that one specific PE behind the summary has failed. As a result, traffic may continue to be forwarded toward the failed egress until another mechanism reacts.
Unreachable Prefix Announcement (UPA), as defined in RFC9929, solves this issue by allowing specific prefixes to be explicitly marked as unreachable in the IGP. This signaling is independent of the summarized locator advertisement. The summary remains installed, but the affected prefixes are identified as unusable.
Using BGP Prefix Independent Convergence (PIC) Edge, we configured ingress PEs with primary and backup BGP paths toward multiple egress PEs. Under normal operation, the ingress PEs forwarded traffic through the primary egress. We intentionally failed the primary path toward the egress PE, which caused the ABR to generate a UPA indication for the affected prefixes. When the primary egress signaled unreachable prefixes through UPA, the ingress PEs immediately removed those prefixes from their forwarding decision and relied on BGP PIC to redirect traffic to the backup egress without waiting for full BGP reconvergence.
| ABR | Ingress PE | Traffic Generator |
|---|---|---|
| Ericsson RAN Connect 6682 | Cisco 8712-MOD-M, | Keysight IxNetwork |
| HPE MX204 | Cisco 8712-MOD-M, | Keysight IxNetwork |
Table 59: UPA and BGP PIC Edge in Summarized SRv6 Domains - µSID-UPA
| PE |
|---|
Cisco 8712-MOD-M, |
Table 58: UPA and BGP PIC Edge in Summarized SRv6 Domains - µSID-BGP PIC Edge
During testing, we encountered an interoperability issue with some implementations. According to Section 3.2 of the RFC, IS-IS may advertise a prefix with a metric higher than 0xFE000000 for various reasons. Although IS-IS defines how to treat such high metrics, the standard introduces an explicit signaling mechanism to distinguish a true Unreachable Prefix Announcement (UPA) from other cases where a high metric is used. For this purpose, two new bits were defined in the IPv4/IPv6 Extended Reachability Attribute Flags, including the U-Flag (Bit 5), which indicates that the prefix is unreachable.
In these implementations, the ABR generated an advertisement with a very high metric but did not set the U-Flag to explicitly indicate an unreachable prefix (non-compliant with RFC 9929). Because the ingress PEs relied on the presence of the defined flag to recognize a UPA condition, they did not interpret the high-metric advertisement as an unreachable signal. As a result, the ingress PEs did not trigger the expected BGP PIC Edge reaction, and traffic continued to follow the primary path despite the ABR’s attempt to signal a loss of reachability.
However, the ingress node's behavior remains compliant with the RFC. The specification states that the handling of UPA signals by the receiving node is optional and outside the scope of the document. Therefore, an implementation that responds only to explicit UPA signaling—specifically when the U-Flag is set—remains within the scope of the standard. In the absence of the U-Flag, a high-metric advertisement alone does not necessarily indicate an unreachable prefix and, as a result, may not activate mechanisms such as BGP PIC Edge.
| < Previous | Next > |
