I-D Action: draft-dikshit-bess-evpn-fhs-scoped-sync-01.txt

Internet-Draft draft-dikshit-bess-evpn-fhs-scoped-sync-01.txt is now
available.

   Title:   Scoped Sync for EVPN First-Hop-Security DHCP Snoop Routes
   Author:  Saumya Dikshit
   Name:    draft-dikshit-bess-evpn-fhs-scoped-sync-01.txt
   Pages:   6
   Dates:   2026-07-27

Abstract:

   [I-D.ietf-bess-evpn-first-hop-security] defines a new EVPN Route
   Type, the DHCP Snoop Route (DSR), to synchronize DHCP snoop
   MAC/IP bindings across EVPN Provider Edge (PE) devices so that
   First Hop Security (FHS) functions such as Dynamic ARP Inspection,
   Neighbor Discovery Inspection, and IPv4/IPv6 Source Guard continue
   to operate correctly across EVPN multihoming and host mobility
   events.  As specified, a DSR is distributed to every PE
   participating in the EVPN Broadcast Domain (BD) in which it was
   learned.  In deployments where a single EVPN BD spans many
   geographically or administratively distinct fabrics interconnected
   over a WAN, this "flood to the whole BD" behavior distributes
   client IP/MAC binding information -- and therefore knowledge of
   which hosts exist behind which access switches -- well beyond the
   set of fabrics that actually need it for FHS purposes.  This
   document defines a Sync-Scope Extended Community that an
   originating PE MAY attach to a DSR to restrict its distribution to
   an explicitly identified subset of participating fabrics, and
   specifies the associated PE processing rules.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-dikshit-bess-evpn-fhs-scoped-sync/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-dikshit-bess-evpn-fhs-scoped-sync-01

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-dikshit-bess-evpn-fhs-scoped-sync-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]