Networking Working Group T. Winter, Ed. Internet-Draft Intended status: Standards Track P. Thubert, Ed. Expires:June 10,August 7, 2010 Cisco Systems ROLL Design Team IETF ROLL WGDecember 7, 2009February 03, 2010 RPL: IPv6 Routing Protocol for Low power and Lossy Networksdraft-ietf-roll-rpl-05draft-ietf-roll-rpl-06 Abstract Low power and Lossy Networks (LLNs) are a class of network in which both the routers and their interconnect are constrained: LLN routers typically operate with constraints on (any subset of) processing power, memory and energy (battery), and their interconnects are characterized by (any subset of) high loss rates, low data rates and instability. LLNs are comprised of anything from a few dozen and up to thousands of LLN routers, and support point-to-point traffic (between devices inside the LLN), point-to-multipoint traffic (from a central control point to a subset of devices inside the LLN) and multipoint-to-point traffic (from devices inside the LLN towards a central control point). This document specifies the IPv6 Routing Protocol for LLNs (RPL), which provides a mechanism whereby multipoint-to-point traffic from devices inside the LLN towards a central control point, as well as point-to-multipoint traffic from the central control point to the devices inside the LLN, is supported. Support for point-to-point traffic is also available. Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire onJune 10,August 7, 2010. Copyright Notice Copyright (c)20092010 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . .56 1.1. Design Principles . . . . . . . . . . . . . . . . . . . .56 1.2. Expectations of Link Layer Type . . . . . . . . . . . . .67 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . .67 3. ProtocolModelOverview . . . . . . . . . . . . . . . . . . . . . . 9 3.1. Topology . .8 3.1.. . . . . . . . . . . . . . . . . . . . . . . 9 3.1.1. Topology Identifiers . . . . . . . . . . . . . . . . . 9 3.1.2. DODAG Information . . . . . . . . . . . . . . . . . . 10 3.2. Instances, DODAGs, and DODAG Iterations . . . . . . . . .8 3.2.11 3.3. Traffic Flows . . . . . . . . . . . . . . . . . . . . . .10 3.2.1.13 3.3.1. Multipoint-to-Point Traffic . . . . . . . . . . . . .10 3.2.2.13 3.3.2. Point-to-Multipoint Traffic . . . . . . . . . . . . .10 3.2.3.13 3.3.3. Point-to-Point Traffic . . . . . . . . . . . . . . . .10 3.3.13 3.4. Upward Routes and DODAG Construction . . . . . . . . . . .. . . . . . . . . 11 3.3.1.13 3.4.1. DAG Information Object (DIO) . . . . . . . . . . . . .11 3.3.2.14 3.4.2. DAG Repair . . . . . . . . . . . . . . . . . . . . . .11 3.3.3.14 3.4.3. Grounded and Floating DODAGs . . . . . . . . . . . . .12 3.3.4.15 3.4.4. Administrative Preference . . . . . . . . . . . . . .12 3.3.5.15 3.4.5. Objective Function (OF) . . . . . . . . . . . . . . .12 3.3.6.15 3.4.6. Distributed Algorithm Operation . . . . . . . . . . .13 3.4.15 3.5. Downward Routes and Destination Advertisement . . . . . .. . . . . . . . . . 13 3.4.1.16 3.5.1. Destination Advertisement Object (DAO) . . . . . . . .13 4.16 3.6. Routing Metrics and Constraints Used By RPL . . . . . . .. . 14 5. Rank . .17 3.6.1. Loop Avoidance . . . . . . . . . . . . . . . . . . . . 18 3.6.2. Rank Properties . . . . . . .15 5.1. Loop Avoidance. . . . . . . . . . . . 19 4. ICMPv6 RPL Control Message . . . . . . . . . .15 5.1.1. Greediness and Rank-based Instabilities. . . . . . .15 5.1.2. DODAG Loops. 21 5. Upward Routes . . . . . . . . . . . . . . . . . . . .16 5.1.3. DAO Loops. . . . 22 5.1. DODAG Information Object (DIO) . . . . . . . . . . . . . . 22 5.1.1. DIO Base Format . . . .16 5.1.4. Sibling Loops. . . . . . . . . . . . . . . 22 5.1.2. DIO Base Rules . . . . .16 5.2. Rank Properties. . . . . . . . . . . . . . . 24 5.1.3. DIO Suboptions . . . . . .16 6. RPL Protocol Specification. . . . . . . . . . . . . . 25 5.2. DODAG Information Solicitation (DIS) . . . .18 6.1. RPL Messages. . . . . . . 30 5.3. Upward Route Discovery and Maintenance . . . . . . . . . . 30 5.3.1. RPL Instance . . . . . .18 6.1.1. ICMPv6 RPL Control Message. . . . . . . . . . . . . .18 6.1.2. DAG Information Solicitation (DIS). 30 5.3.2. Neighbors and Parents within a DODAG Iteration . . . . 30 5.3.3. Neighbors and Parents across DODAG Iterations . . . . 31 5.3.4. DIO Message Communication .19 6.1.3. DAG Information Object (DIO). . . . . . . . . . . . .19 6.1.4. Destination Advertisement Object (DAO)36 5.3.5. DIO Transmission . . . . . . . .26 6.2. Protocol Elements. . . . . . . . . . . 36 5.3.6. DODAG Selection . . . . . . . . .28 6.2.1. Topological Elements. . . . . . . . . . 39 5.4. Operation as a Leaf Node . . . . . . .28 6.2.2. Neighbors, Parents, and Siblings. . . . . . . . . . 39 5.5. Administrative Rank .28 6.2.3. DODAG Information. . . . . . . . . . . . . . . . . .29 6.3. DAG Discovery and Maintenance39 5.6. Collision . . . . . . . . . . . . . .30 6.3.1. DAG Discovery Rules. . . . . . . . . . 40 6. Downward Routes . . . . . . .31 6.3.2. DIO Message Communication. . . . . . . . . . . . . .35 6.3.3. DIO Transmission. . 40 6.1. Destination Advertisement Object (DAO) . . . . . . . . . . 40 6.1.1. DAO Suboptions . . . . . . .36 6.3.4. Trickle Timer for DIO Transmission. . . . . . . . . .37 6.4. DAG Selection. . . 42 6.2. Downward Route Discovery and Maintenance . . . . . . . . . 42 6.2.1. Overview . . . . . . . . . . . . . . . . . . . . . .38 6.5.. 42 6.2.2. Mode of Operationas a Leaf Node. . . . . . . . . . . . . . . . .39 6.6. Administrative rank. 43 6.2.3. Destination Advertisement Parents . . . . . . . . . . 44 6.2.4. Operation of DAO Storing Nodes . . . . . . . .39 6.7. Collision. . . . 45 6.2.5. Operation of DAO Non-storing Nodes . . . . . . . . . . 48 6.2.6. Scheduling to Send DAO (or no-DAO) . . . . . . . . . .39 6.8. Establishing Routing State Down48 6.2.7. Triggering DAO Message from theDODAGSub-DODAG . . . . . . 49 6.2.8. Sending DAO Messages to DAO Parents . .40 6.8.1. Destination Advertisement Operation. . . . . . . 50 6.2.9. Multicast Destination Advertisement Messages . .41 6.9. Loop Detection. . . 51 7. Packet Forwarding and Loop Avoidance/Detection . . . . . . . . 51 7.1. Suggestions for Packet Forwarding . . . . . . . . . . .48 6.9.1. Source Node Operation. 51 7.2. Loop Avoidance and Detection . . . . . . . . . . . . . . .49 6.9.2. Router52 7.2.1. Source Node Operation . . . . . . . . . . . . . . . . 53 7.2.2. Router Operation . . . . . . .49 6.10. Multicast Operation. . . . . . . . . . . . 54 8. Multicast Operation . . . . . . .51 6.11. Maintenance of Routing Adjacency. . . . . . . . . . . . .52 7. Suggestions for Packet Forwarding. 56 9. Maintenance of Routing Adjacency . . . . . . . . . . . . . .53 8.. 57 10. Guidelines for Objective Functions . . . . . . . . . . . . . .54 9.58 11. RPL Constants and Variables . . . . . . . . . . . . . . . . .56 10.60 12. Manageability Considerations . . . . . . . . . . . . . . . . .58 10.1.61 12.1. Control of Function and Policy . . . . . . . . . . . . . .58 10.1.1.61 12.1.1. Initialization Mode . . . . . . . . . . . . . . . . .58 10.1.2.61 12.1.2. DIO Base option . . . . . . . . . . . . . . . . . . .58 10.1.3.62 12.1.3. Trickle Timers . . . . . . . . . . . . . . . . . . . .59 10.1.4.62 12.1.4. DAG Sequence Number Increment . . . . . . . . . . . .59 10.1.5.63 12.1.5. Destination Advertisement Timers . . . . . . . . . . .59 10.1.6.63 12.1.6. Policy Control . . . . . . . . . . . . . . . . . . . .59 10.1.7.63 12.1.7. Data Structures . . . . . . . . . . . . . . . . . . .60 10.2.63 12.2. Information and Data Models . . . . . . . . . . . . . . .60 10.3.64 12.3. Liveness Detection and Monitoring . . . . . . . . . . . .60 10.3.1.64 12.3.1. Candidate Neighbor Data Structure . . . . . . . . . .61 10.3.2.64 12.3.2. Directed Acyclic Graph (DAG) Table . . . . . . . . . .61 10.3.3.64 12.3.3. Routing Table . . . . . . . . . . . . . . . . . . . .61 10.3.4.65 12.3.4. Other RPL Monitoring Parameters . . . . . . . . . . .62 10.3.5.65 12.3.5. RPL Trickle Timers . . . . . . . . . . . . . . . . . .62 10.4.66 12.4. Verifying Correct Operation . . . . . . . . . . . . . . .62 10.5.66 12.5. Requirements on Other Protocols and Functional Components . . . . . . . . . . . . . . . . . . . . . . . .63 10.6.66 12.6. Impact on Network Operation . . . . . . . . . . . . . . .63 11.66 13. Security Considerations . . . . . . . . . . . . . . . . . . .63 12.66 14. IANA Considerations . . . . . . . . . . . . . . . . . . . . .63 12.1.66 14.1. RPL Control Message . . . . . . . . . . . . . . . . . . .63 12.2.66 14.2. New Registry for RPL Control Codes . . . . . . . . . . . .63 12.3.67 14.3. New Registry for the Control Field of the DIO Base . . . .64 12.4.67 14.4. DAG Information Object (DIO) Suboption . . . . . . . . . .64 13.68 15. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . .65 14.68 16. Contributors . . . . . . . . . . . . . . . . . . . . . . . . .65 15.69 17. References . . . . . . . . . . . . . . . . . . . . . . . . . .67 15.1.70 17.1. Normative References . . . . . . . . . . . . . . . . . . .67 15.2.70 17.2. Informative References . . . . . . . . . . . . . . . . . .6770 Appendix A. Requirements . . . . . . . . . . . . . . . . . . . .6972 A.1. Protocol Properties Overview . . . . . . . . . . . . . . .6972 A.1.1. IPv6 Architecture . . . . . . . . . . . . . . . . . .6972 A.1.2. Typical LLN Traffic Patterns . . . . . . . . . . . . .6973 A.1.3. Constraint Based Routing . . . . . . . . . . . . . . .7073 A.2. Deferred Requirements . . . . . . . . . . . . . . . . . .7073 Appendix B. Examples . . . . . . . . . . . . . . . . . . . . . .7074 B.1. Destination Advertisement . . . . . . . . . . . . . . . .7275 B.2. Example:DAGDODAG Parent Selection . . . . . . . . . . . . .. 7376 B.3. Example:DAGDODAG Maintenance . . . . . . . . . . . . . . . .. 7578 B.4. Example: Greedy Parent Selection and Instability . . . . .7679 Appendix C. Outstanding Issues . . . . . . . . . . . . . . . . .7881 C.1. Additional Support for P2P Routing . . . . . . . . . . . .7881 C.2.Loop DetectionDestination Advertisement / DAO Fan-out . . . . . . . . . 81 C.3. Source Routing . . . . . . . . . . . . .78 C.3. Destination Advertisement / DAO Fan-out. . . . . . . . .7881 C.4.Source Routing . . . . . . .Address / Header Compression . . . . . . . . . . . . . . .7982 C.5.Address / Header CompressionManaging Multiple Instances . . . . . . . . . . . . . . .7982 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . .7982 1. Introduction Low power and Lossy Networks (LLNs)are madeconsist of largely of constrained nodes (with limited processing power, memory, and sometimes energy when they are battery operated). These routers are interconnected by lossy links, typically supporting only low data rates, that are usually unstable with relatively low packet delivery rates. Another characteristic of such networks is that the traffic patterns are not simply unicast, but in many cases point-to-multipoint or multipoint- to-point. Furthermore such networks may potentially comprise up to thousands of nodes. These characteristics offer unique challenges to a routing solution: the IETF ROLL Working Group has defined application-specific routing requirements for a Low power and Lossy Network (LLN) routing protocol, specified in [I-D.ietf-roll-building-routing-reqs], [I-D.ietf-roll-home-routing-reqs], [RFC5673], and [RFC5548]. This document specifies the IPv6 Routing Protocol for Low power andLossy Networkslossy networks (RPL). 1.1. Design Principles RPL was designed with the objective to meet the requirements spelled out in [I-D.ietf-roll-building-routing-reqs], [I-D.ietf-roll-home-routing-reqs], [RFC5673], and [RFC5548]. Because those requirements are heterogeneous and sometimes incompatible in nature, the approach is first taken to design a protocol capable of supporting a core set of functionalities corresponding to the intersection of the requirements. As the RPL design evolves optional features may be added to address some application specific requirements. This is a key protocol design decision providing a granular approach in order to restrict the core of the protocol to a minimal set of functionalities, and to allow each implementation of the protocol to be optimized differently. All "MUST" application requirements that cannot be satisfied by RPL will be specifically listed in the Appendix A, accompanied by a justification. A network may run multiple instances of RPL concurrently. Each such instance may serve different and potentially antagonistic constraints or performance criteria. This document defines how a single instance operates. RPL is a generic protocol that is to be deployed by instantiating the generic operation described in this document with a specific objective function (OF) (which ties together metrics, constraints, and an optimization objective) to realize a desired objective in a given environment. A set of companion documents to this specification will provide further guidance in the form of applicability statements specifying a set of operating points appropriate to the Building Automation, Home Automation, Industrial, and Urban application scenarios. 1.2. Expectations of Link Layer TypeAsRPLis a routing protocol, it of coursedoes not rely on any particular features of a specific link layer technology. RPLshouldis designed to be able to operate over a variety of different link layers, including but not limitedtoto, low power wireless or PLC (Power Line Communication) technologies. Implementers may find RFC 3819 [RFC3819] a useful reference when designing a link layer interface between RPL and a particular link layer technology. 2. Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].ThisAdditionally, this documentrequires readers to be familiar with theuses terminologydescribed in `Terminology in Low power And Lossy Networks' [I-D.ietf-roll-terminology].from [I-D.ietf-roll-terminology], and introduces the following terminology: DAG: Directed Acyclic Graph. A directed graph having the property that all edges are oriented in such a way that no cycles exist. All edges are contained in paths oriented toward and terminating at one or more root nodes. DAGInstance:root: A DAGInstanceroot is aset of possibly multiple Destination Oriented DAGs. A network maynode within the DAG that has no outgoing edges. Because the graph is acyclic, by definition all DAGs must havemore thanat least one DAGInstance,root anda RPL router can participate to multiple DAG instances. Each DAG Instance operates independently of other DAG Instances. This document describes operation within a single DAG instance. InstanceID: Unique identifier ofall paths terminate at a DAGInstance.root. Destination Oriented DAG (DODAG): A DAG rooted at a single destination,which isi.e. at anodesingle DAG root (the DODAG root) with no outgoing edges. DODAG root: A DODAG root is the DAG root of a DODAG. Rank: Thetuple (InstanceID, DAGID) uniquely identifiesrank of a node in aDestination OrientedDAG(DODAG). Inidentifies theRPL context, a router can can belongnodes position with respect toat most one DODAG per DAG Instance. DAGID: The identifier ofa DODAG root. TheDAGID must be unique within the scope offarther away aDAG Instance in the LLN. DODAG Iteration: A specific sequence number iteration ofnode is from aDODAG. DAGSequenceNumber: A sequential counter thatDODAG root, the higher isincremented bytheroot to form a new Iterationrank of that node. The rank of aDODAG. Anode may be a simple topological distance, or may more commonly be calculated as a function of other properties as described later. DODAGIteration is identified uniquely by the (InstanceID, DAGID, DAGSequenceNumber) tuple. DAGparent: A parent of a node within aDAGDODAG is one of the immediate successors of the node on a path towards theDAGDODAG root.DAGThe DODAG parent of a node will have a lower rank than the node itself. (See Section 3.6.2.1). DODAG sibling: A sibling of a node within aDAGDODAG is defined in this specification to be any neighboring node which is located at the same rank within aDAG.DODAG. Note that siblings defined in this manner do not necessarily share a common DODAG parent.DAG root: A DAG root is a node within the DAG that has no outgoing edges. Because the graph is acyclic, by definition all DAGs must have at least one DAG root and all paths terminate at a DAG root. Sub-DAG(See Section 3.6.2.1). Sub-DODAG Thesub-DAGsub-DODAG of a node is the set of other nodes in theDAGDODAG that might use a path towards theDAGDODAG root that containsthethat node. Nodes in thesub-DAGsub-DODAG of a node have a greater rank than that node itself (although not all nodes of greater rank are necessarily in thesub-DAG). Up: Up refers to the direction from leaf nodes towards DODAG roots, following the orientationsub-DODAG ofthe edgesthat node). (See Section 3.6.2.1). DODAGID: The identifier of a DODAG root. The DODAGID must be unique within theDODAG. Down: Down refers toscope of a RPL Instance in thedirection fromLLN. DODAGroots towards leaf nodes, going against the orientationIteration: A specific sequence number iteration ("version") ofthe edges within the DODAG. OCP: Objective Code Point. The Objective Code Point is used to indicate which Objective Function is in use inaDODAG. The Objective Code Point isDODAG with a given DODAGID. RPL Instance: A set of possibly multiple DODAGs. A network may have more than one RPL Instance, and a RPL node can participate in multiple RPL Instances. Each RPL Instance operates independently of other RPL Instances. This document describes operation within a single RPL Instance. In RPL, a node can belong to at most one DODAG per RPL Instance. The tuple (RPLInstanceID, DODAGID) uniquely identifies a DODAG. RPLInstanceID: Unique identifier of a RPL Instance. DODAGSequenceNumber: A sequential counter that is incremented by the root to form a new Iteration of a DODAG. A DODAG Iteration is identified uniquely by the (RPLInstanceID, DODAGID, DODAGSequenceNumber) tuple. Up: Up refers to the direction from leaf nodes towards DODAG roots, following the orientation of the edges within the DODAG. Down: Down refers to the direction from DODAG roots towards leaf nodes, going against the orientation of the edges within the DODAG. Objective Code Point (OCP): An identifier, used to indicate which Objective Function is in use for forming a DODAG. The Objective Code Point is further described in [I-D.ietf-roll-routing-metrics].OF: Objective Function. TheObjective Function(OF) defines(OF): Defines which routing metrics, optimization objectives, and related functions are in use in a DODAG. The Objective Function is further described in [I-D.ietf-roll-routing-metrics]. Goal: The Goal is a host or set of hosts that satisfy a particular application objective / OF. Whether or not a DODAG can provide connectivity to a goal is a property of the DODAG. For example, a goal might be a host serving as a data collection point, or a gateway providing connectivity to an external infrastructure. Grounded: ADAGDODAG isgroundedsaid to be grounded, when the root can reach the Goal of the objective function. Floating: ADAGDODAG is floating if is not Grounded. A floatingDAGDODAG is not expected to reach the Goal defined for the OF. As they form networks, LLN devices often mix the roles of`host''host' and`router''router' when compared to traditional IP networks. In this document,`host''host' refers to an LLN device that can generate but does not forward RPL traffic,`router''router' refers to an LLN device that can forward as well as generate RPL traffic, and`node''node' refers to any RPL device, either a host or a router. 3. ProtocolModelOverview The aim of this section is to describe RPL in the spirit of [RFC4101]. Protocol details can be found in further sections. 3.1.Instances, DODAGs,Topology This section describes how the basic RPL topologies, and the rules by which these are constructed, i.e. the rules governing DODAGIterations Each DAG instance constructs a routing topology optimized for a certain Objective Function (OF). A DAG instance may provide routesformation. 3.1.1. Topology Identifiers RPL uses four identifiers tocertain destination prefixes.track and control the topology: o The first is a RPLInstanceID. Asingle DAG instance containsRPLInstanceID identifies a set of one or moreDestination Oriented DAG (DODAG) roots. These roots may operate independently, or may coordinate over a non-LLN backchannel. Each root has a unique identifier,DODAGs. All DODAGs in theDAGID, such that nodes can identifysame RPL Instance use theDODAG root.same OF. ADAG instancenetwork maycomprise: o a single DODAG with a single root * For example, a DODAGhave multiple RPLInstanceIDs, each of which defines an independent set of DODAGs, which may be optimizedto minimize latency rooted atfor different OFs and/or applications. The set of DODAGs identified by asingle centralized lighting controller inRPLInstanceID is called ahome automation application.RPL Instance. omultiple uncoordinated DODAGs with independent roots (differing DAGIDs) * For example, multiple data collection points in an urban data collection application that do not have an always-on backbone suitable to coordinate to formThe second is asingle DODAG, and further use the formationDODAGID. The scope ofmultiple DODAGs asameans to dynamicallyDODAGID is a RPL Instance. The combination of RPLInstanceID andautonomously partition the network. oDODAGID uniquely identifies a single DODAGwith a single virtual root coordinating LLN sinks (within thesame DAGID) over some non-LLN backbone * For example,network. A RPL Instance may have multipleborder routers operating with a reliable backbone, e.g. in supportDODAGs, each ofa 6LowPAN application, that are capable to act as logically equivalent sinks to the same DODAG.which has an unique DODAGID. o The third is acombination of oneDODAGSequenceNumber. The scope ofthe above as suited to some application scenario. Traffica DODAGSequenceNumber isbound toaspecificDODAG. A DODAGInstanceis sometimes reconstructed from the DODAG root, bya marking inincrementing theflow label of the IPv6 header. Traffic originating in supportDODAGSequenceNumber. The combination of RPLInstanceID, DODAGID, and DODAGSequenceNumber uniquely identifies aparticular application may be tagged to follow an appropriate DAG instance, for example to follow paths optimized for low latency or low energy.DODAG Iteration. o Theprovisioning or automated discoveryfourth is rank. The scope of rank is amapping between an InstanceID andDODAG Iteration. Rank establishes atypepartial order over a DODAG Iteration, defining individual node positions with respect to the DODAG root. 3.1.2. DODAG Information For each DODAG that a node is, orservice of application traffic is beyondmay become, a member of, thescopeimplementation should conceptually keep track of the following information for each DODAG. The data structures described in thisspecification. An example ofsection are intended to illustrate a possible implementation to aid in the description of the protocol, but are not intended to be normative. o RPLInstanceID o DODAGID o DODAGSequenceNumber o DAG Metric Container, including DAGObjectiveCodePoint o A set of Destination Prefixes offered by the DODAG root and available via paths upwards along the DODAG o A set of DODAG parents o A set of DODAG siblings o A timer to govern the sending of DIO messages 3.2. Instances, DODAGs, and DODAG Iterations Each RPL Instancecomprisingconstructs anumber of DODAGs is depicted in Figure 1.routing topology optimized for a certain Objective Function (OF). A RPL Instance may provide routes to certain destination prefixes, reachable via the DODAGIteration is depicted in Figure 2. +----------------------------------------------------------------+ | | | +--------------+ | | | | | | | (R1) | (R2) (Rn) | | | / \ | /| \ / | \ | | | / \ |roots. A single RPL Instance contains one or more Destination Oriented DAG (DODAG) roots. These roots may operate independently, or may coordinate over a non-LLN backchannel. Each root has a unique identifier, the DODAGID. A RPL Instance may comprise: o a single DODAG with a single root * For example, a DODAG optimized to minimize latency rooted at a single centralized lighting controller in a home automation application. o multiple uncoordinated DODAGs with independent roots (differing DODAGIDs) * For example, multiple data collection points in an urban data collection application that do not have an always-on backbone suitable to coordinate to form a single DODAG, and further use the formation of multiple DODAGs as a means to dynamically and autonomously partition the network. o a single DODAG with a single virtual root coordinating LLN sinks (with the same DODAGID) over some non-LLN backbone * For example, multiple border routers operating with a reliable backbone, e.g. in support of a 6LowPAN application, that are capable to act as logically equivalent sinks to the same DODAG. o a combination of one of the above as suited to some application scenario. Traffic is bound to a specific RPL Instance by a marking in the flow label of the IPv6 header. Traffic originating in support of a particular application may be tagged to follow an appropriate RPL instance which enables certain (path) properties, for example to follow paths optimized for low latency or low energy. The provisioning or automated discovery of a mapping between a RPLInstanceID and a type or service of application traffic is beyond the scope of this specification. An example of a RPL Instance comprising a number of DODAGs is depicted in Figure 1. A DODAG Iteration (two "versions" of the same DODAG) is depicted in Figure 2. +----------------------------------------------------------------+ | | | +--------------+ | | | | | | | (R1) | (R2) (Rn) | | | / \ | /| \ / | \ | | | / \ | / | \ / | \ | | | (A) (B) | (C) | (D) ... (F) (G) (H) | | | /|\ |\ | / | |\ | | | | | | : : : : : | : (E) : : : : : | | | | / \ | | +--------------+ : : | | DODAG | | | +----------------------------------------------------------------+DAGRPL Instance Figure 1:DAGRPL Instance +----------------+ +----------------+ | | | | | (R1) | | (R1) | | / \ | | / | | / \ | | / | | (A) (B) | \ | (A) | | /|\ |\ | ------\ | /|\ | | : : (C) : : | \ | : : (C) | | | / | \ | | | ------/ | \ | | | / | (B) | | | | |\ | | | | : : | | | | | +----------------+ +----------------+ Sequence N Sequence N+1 Figure 2: DODAG Iteration3.2.3.3. Traffic Flows3.2.1.3.3.1. Multipoint-to-Point Traffic Multipoint-to-Point (MP2P) is a dominant traffic flow in many LLN applications ([I-D.ietf-roll-building-routing-reqs], [I-D.ietf-roll-home-routing-reqs], [RFC5673], [RFC5548]). The destinations of MP2P flows are designated nodes that have some application significance, such as providing connectivity to the larger Internet or core private IP network. RPL supports MP2P traffic by allowing MP2P destinations to be reached via DODAG roots.3.2.2.3.3.2. Point-to-Multipoint Traffic Point-to-multipoint (P2MP) is a traffic pattern required by several LLN applications ([I-D.ietf-roll-building-routing-reqs], [I-D.ietf-roll-home-routing-reqs], [RFC5673], [RFC5548]). RPL supports P2MP traffic by using a destination advertisement mechanism that provisions routes toward destination prefixes and away from roots. Destination advertisements can update routing tables as the underlying DODAG topology changes.3.2.3.3.3.3. Point-to-Point Traffic RPL DODAGs provide a basic structure for point-to-point (P2P) traffic. For a RPL network to support P2P traffic, a root must be able to route packets to a destination. Nodes within the network may also have routing tables to destinations. A packet flows towards a root until it reaches an ancestor that has a known route to the destination. RPL also supports the case where a P2P destination is a`one-hop''one-hop' neighbor. RPL neither specifies nor precludes additional mechanisms for computing and installing more optimal routes to support arbitrary P2P traffic.3.3.3.4. Upward Routes and DODAG Construction RPL provisions routes up towards DODAG roots, forming a DODAG optimized according to the Objective Function (OF) in use. RPL nodes construct and maintain these DODAGs through exchange ofDAGDODAG Information Object (DIO) messages. Undirected links between siblings are also identified during this process, whicharecan be used to provide additional diversity.3.3.1.3.4.1. DAG Information Object (DIO) A DIO identifies theDAGRPL Instance, theDAGID,DODAGID, the values used to compute theDAGRPL Instance's objective function, and the present DODAG Sequence Number. It can also include additional routing and configuration information. The DIO includes a measure derived from the position of the node within the DODAG, the rank, which is used for nodes to determine their positions relative to each other and to inform loop avoidance/detection procedures. RPL exchanges DIO messages to establish and maintain routes. RPL adapts the rate at which nodes send DIO messages. When a DODAG is detected to be inconsistent or needs repair, RPL sends DIO messages more frequently. As the DODAG stabilizes, the DIO message rate tapers off, reducing the maintenance cost of a steady and well- working DODAG. This document defines an ICMPv6 Message TypeRPL"RPL ControlMessage,Message", which is capable of carrying a DIO.3.3.2.3.4.2. DAG Repair RPL supports global repair over the DODAG. A DODAG Root may increment the DODAG SequenceNumber to instituteNumber, thereby initiating a new DODAG iteration. This institutes a globalrepair,repair operation, revising the DODAG and allowing nodes to choose an arbitrary new position within the new DODAG iteration. RPLmay supportsupports mechanisms which may be used for local repair within the DODAG iteration. The DIO messagewill specifyspecifies the necessary parameters as configured from the DODAG root. Local repair options include the allowing a node, upon detecting a loss of connectivity to a DODAG it is a member of, to: o Poison itssub-DAGsub-DODAG by advertising an effective rank ofINFINITY,INFINITY to its sub-DODAG, OR detach and form a floating DODAG in order to preserve inner connectivity within itssub-DAG.sub-DODAG. o Move down within the DODAG iteration (i.e. increase its rank) in a limited manner, no further than a bound configured by the DODAG root via the DIO so as not to count all the way to infinity. Such a move may be undertaken after waiting an appropriate poisoning interval, and should allow the node to restore connectivity to the DODAGIterationIteration, if at all possible.3.3.3.3.4.3. Grounded and Floating DODAGs DODAGs can be grounded or floating. A grounded DODAG offers connectivity to to a goal. A floating DODAG offers no such connectivity, and provides routes only to nodes within the DODAG. Floating DODAGs may be used, for example, to preserve inner connectivity during repair.3.3.4.3.4.4. Administrative Preference An implementation/deployment may specify that some DODAG roots should be used over others through an administrative preference. Administrative preference offers a way to control traffic and engineer DODAG formation in order to better support application requirements or needs.3.3.5.3.4.5. Objective Function (OF) The Objective Function (OF) implements the optimization objectives of route selection within theDAGRPL Instance. The OF is identified by an Objective Code Point (OCP) within the DIO, and its specification also indicates the metrics and constraints in use. The OF also specifies the procedure used to compute rank within a DODAG iteration. Further details may be found in[I-D.ietf-roll-routing-metrics][I-D.ietf-roll-routing-metrics], [I-D.ietf-roll-of0], and related companion specifications. By using defined OFs that are understood by all nodes in a particularimplementation,deployment, and by referencingthemthese in the DIO message, RPL nodes may work to build optimized LLN routes using a variety of application and implementation specific metrics and goals. In the case where a node is unable to encounter a suitableDAGRPL Instance using a known Objective Function, it may be configured to joinDAGa RPL Instance usingandan unknown Objective Function - but in that case only acting as a leaf node.3.3.6.3.4.6. Distributed Algorithm Operation A high level overview of the distributed algorithm which constructs the DODAG is as follows: o Some nodes are configured to be DODAG roots, with associated DODAG configuration. o Nodes advertise their presence, affiliation with a DODAG, routing cost, and related metrics by sending link-local multicast DIO messages. o Nodes may adjust the rate at which DIO messages are sent in response to stability or detection of routing inconsistencies. o Nodes listen for DIOs and use their information to join a new DODAG, or to maintain an existing DODAG, as according to the specified Objective Function and rank-based loop avoidance rules. oThe nodesNodes provision routing tableentriesentries, for the destinations specified by theDIO towardsDIO, via their DODAG parents in the DODAG iteration. Nodes may provision a DODAG parent as a default gateway. o Nodes may identify DODAG siblings within the DODAG iteration to increase path diversity. o Usingboth DIOsDIOs, and possibly information in data packets, RPL nodes detect possible routing loops. When a RPL node detects a possible routing loop, it may adapt its DIO transmission rate to apply a local repair to the topology.This process3.5. Downward Routes andits limitations is discussed in greater detail in 3.4. 3.4.Destination AdvertisementAsRPL constructs and maintains DODAGs with DIO messages to establish upwardroutes,routes: itmay useuses Destination Advertisement Object (DAO) messages to establish downward routes along theDODAG.DODAG as well as other routes. DAO messagesand support for downward routesare an optional feature for applications that require P2MP or P2P traffic. DIO messages advertise whetherthedestinationadvertisement mechanism is enabled. 3.4.1.advertisements are enabled within a given DODAG. 3.5.1. Destination Advertisement Object (DAO) A Destination Advertisement Object (DAO) conveys destination information upwards along the DODAG so that a DODAG root (an other intermediate nodes) can provision downward routes. A DAO message includes prefix information to identify destinations, a capability to record routes in support of source routing, and information to determine the freshness of a particular advertisement. Nodes that are capable of maintaining routing state may aggregate routes from DAO messages that they receive before transmitting a DAO message. Nodes that are not capableto maintainof maintaining routing state may attach a next-hop address to the Reverse Route Stack contained within the DAO message. The Reverse Route Stack is subsequently used to generate piecewise source routes over regions of the LLN that are incapable of storing downward routing state. A special case of the DAO message, termed a no-DAO, is used to clear downward routing state that has been provisioned through DAO operation. This document defines an ICMPv6 Message TypeRPL"RPL ControlMessage,Message", which is capableto carry theof carrying a DAO.3.4.1.1. `One-Hop'3.5.1.1. 'One-Hop' Neighbors In addition to sending DAOs toward DODAG roots, RPL nodes may occasionally emit a link-local multicast DAO message advertising available destination prefixes. This mechanism allow provisioning a trivial`one-hop''one-hop' route to local neighbors.4.3.6. Routing Metrics and Constraints Used By RPL Routing metrics are used by routing protocols to computetheshortest paths. Interior Gateway Protocols (IGPs) such as IS-IS ([RFC5120]) and OSPF ([RFC4915]) use static link metrics. Such link metrics can simply reflect the bandwidth or can also be computed according to a polynomial function of several metrics defining different link characteristics; in all cases they are static metrics. Some routing protocols support more than one metric: in the vast majority of the cases, one metric is used per (sub)topology. Less often, a second metric may be used as a tie-breaker in the presence of Equal Cost Multiple Paths (ECMP). The optimization of multiple metrics is known as an NP complete problem and is sometimes supported by some centralized path computation engine. In contrast, LLNs do require the support of both static and dynamic metrics. Furthermore, both link and node metrics are required. In the case of RPL, it is virtually impossible to define one metric, or even acomposite,composite metric, that will satisfy all use cases. In addition, RPL supports constrained-based routing where constraints may be applied to both link and nodes. If a link or a node does not satisfy a required constraint, it is`pruned''pruned' from the candidatelistlist, thus leading to a constrained shortest path. The set of supported link/node constraints and metrics is specified in [I-D.ietf-roll-routing-metrics]. The role of the Objective Function is toadvertisespecify which routing metrics and constraints are in use, and how these are used, in addition to the objectives used to compute the (constrained) shortest path. Example 1: Shortest path: path offering the shortest end-to-end delay Example 2: Constrained shortest path: the path that does not traverse any battery-operated node and that optimizes the path reliability5. Rank 5.1.3.6.1. Loop Avoidance RPL guarantees neither loop free path selection nor strong global convergence. In order to reduce control overhead, however, such as the cost of the count-to-infinity problem, RPL avoids creating loops when undergoing topology changes. Furthermore, RPL includes rank- based mechanisms for detecting loops when they do occur. RPL uses this loop detection to ensure that packets make forward progress within the DODAG iteration and trigger repairs when necessary.5.1.1.3.6.1.1. Greediness and Rank-based Instabilities Once a node has joined aDODAG,DODAG iteration, RPL disallows certain behaviors, including greediness, in order to prevent resulting instabilities in theDODAG.DODAG iteration. If a node is allowed to be greedy and attempts to move deeper in theDODAG,DODAG iteration, beyond its most preferred parent, in order to increase the size of the parent set, then an instability can result. This is illustrated in Figure 16. Suppose a node is willing to receive and process a DIO messages from a node in its ownsub-DAG,sub-DODAG, and in general a node deeper thanit.itself. Insuch casesthis case, achancepossibility existsto createthat a feedbackloop,loop is created, wherein two or more nodes continue to try and move in the DODAGin orderiteration while attempting to optimize against each other. In somecasescases, this will result inaninstability. It is for this reason that RPL limits the cases where a node may process DIO messages from deeper nodes to some forms of local repair. This approach creates an`event'event horizon', whereby a node cannot be influenced beyond some limit into an instability by the action of nodes that may be in its ownsub-DAG.sub-DODAG. A further example of the consequences of greedy operation, and instability related to processing DIO messages from nodes of greater rank, may be found in Appendix B.45.1.2.3.6.1.2. DODAG Loops A DODAG loop may occur when a node detaches from the DODAG and reattaches to a device in its priorsub-DAG.sub-DODAG. This may happen in particular when DIO messages are missed. Strict use of the DAG sequence number can eliminate this type of loop, but this type of loop may possibly be encountered when using some local repair mechanisms.5.1.3.3.6.1.3. DAO Loops A DAO loop may occur when the parent has a route installed upon receiving and processing a DAO message from a child, but the child has subsequently cleaned up the state. This loop happens when a no- DAO was missed and persists untila heartbeat cleans upallstates.state has been cleaned up. RPL includes loop detection mechanisms that may mitigate the impact of DAO loops and trigger their repair. In the case where stateless DAO operation is used, i.e. source routing specifies the down routes, then DAO Loops should not occur on the stateless portions of the path.5.1.4.3.6.1.4. Sibling Loops Sibling loops could occur if a group of siblings kept choosing amongst themselves as successors such that a packet does not make forward progress. This specification limits the number of times that sibling forwarding may be used at a givenrankrank, in order to prevent sibling loops.5.2.3.6.2. Rank Properties The rank of a node is a scalar representation of the location of that node within a DODAG iteration. The rank is used to avoid and detect loops, and as such must demonstrate certain properties. The exact calculation of the rank is left to the Objective Function, and may depend on parents, link metrics, and the node configuration and policies. The rank is not a cost metric, although its value can be derived from and influenced by metrics. The rank has properties of its own that are not necessarilythatthose of all metrics: Type: Rank is an abstract scalar. Some metrics are boolean (e.g. grounded), others are statistical and better expressed as a tuple like an expected value and a variance. Some OCPs use not one but a set of metrics bound by a piece of logic. Function: Rank is the expression of a relative position within a DODAG iteration with regard to neighborsand,and is not necessarily a good indication or a proper expression of a distance or a cost to the root. Stability: The stability of the rank determinesthatthe stability of the routing topology. Some dampening or filtering might be applied to keep the topologystablestable, and thus the rank does not necessarily change as fast as some physical metrics would. A new DODAG iterationiswould be a good opportunity to reconcile the discrepancies that might form over time betweenthemetrics andthe ranks.ranks within a DODAG iteration. Granularity: Rank is coarse grained. A fine granularity would prevent the selection of siblings. Properties: Rank is strictlymonotonicmonotonic, and can be used to validate a progression from or towards the root. Ametricmetric, like bandwidth orjitterjitter, does not necessarily exhibitsuchthis property. Abstract: Rank does not have a physical unit, but rather a range of increment per hop that varies from 1 (best) to 16 (worst), where the assignment of each value is to be determined by the implementation. The rank value feedsbackintothe DAGDODAG parentselectionselection, according to the RPL loop-avoidance strategy. Once a parent has been added, and a rank value for the node within the DODAG has been advertised, the nodes further options with regard toDAGDODAG parent selection and movement within the DODAG are restricted in favor of loop avoidance. 3.6.2.1. Rank Comparison Rank may be thought of as a fixed point number, where the position of the decimal point is determined by MinHopRankIncrease. The integer portion of the Rank is determined by floor(Rank/MinHopRankIncrease). MinHopRankIncrease is provisioned at the DODAG Root and propagated in the DIO message. For efficient implementation the MinHopRankIncrease SHOULD be a power of 2. An implementation may configure a value MinHopRankIncrease as appropriate to balance between the loop avoidance logic of RPL (i.e. selection of eligible parents and siblings) and the metrics in use. A node A has a rank less than the rank of a node B if floor(Rank(A) / MinHopRankIncrease) is less than floor (Rank(B) / MinHopRankIncrease). A node A has a rank equal to the rank of a node B if floor(Rank(A) / MinHopRankIncrease) is equal to floor (Rank(B) / MinHopRankIncrease). A node A has a rank greater than the rank of a node B if floor(Rank(A) / MinHopRankIncrease) is greater than floor (Rank(B) / MinHopRankIncrease). 3.6.2.2. Rank Relationships The computation of theDAGrank MUST be done in such a way so as to maintain the following properties for any nodes M and N that are neighbors in the LLN: DAGRank(M) is less than DAGRank(N): In this case, the position of M isprobably located in a more preferred position than N in the DODAG with respectcloser to themetrics and optimizations defined byDODAG root than theobjective code point. In any fashion,position of N. Node M may safely be aDAGDODAG parent for Node N without risk of creating a loop. Further, for a node N, all parents in theDAGDODAG parent set must be of rank less thanself'sDAGRank(N). In other words, the rank presented by a node N MUST be greater(deeper)than that presented by any of its parents. DAGRank(M) equals DAGRank(N): In this case the positions of M and Nare located positions of relatively the same optimalitywithin theDODAG.DODAG and with respect to the DODAG root are similar (identical). In some cases, Node M may be used as a successor by Node N,but with related chancewhich however entails the probability of creating a loopthat(which must be detected andbrokenresolved by some othermeans.means). DAGRank(M) is greater than DAGRank(N): In this case,then nodethe position of M islocated in a less preferred position than N infarther from the DODAGwith respect to the metrics and optimizations defined byroot than theobjective code point.position of N. Further, Node(M)M may in fact be in the sub-DODAG of Node(N)'s sub-DAG. ThereN. If node N selects node M as DODAG parent there is ahigherrisk toNode (N) selecting Node (M) as a DAG parent, as such a selection maycreate a loop. As an example, theDAGrank could be computed in such a way so as to closely track ETX when the objective function is to minimize ETX, or latency when the objective function is to minimize latency, or in a more complicated way as appropriate to the objective code point being used within the DODAG.6. RPL Protocol Specification 6.1. RPL Messages 6.1.1.4. ICMPv6 RPL Control Message This document defines the RPL Control Message, a new ICMPv6 message.The RPL Control Message has the following general format, inIn accordancewith [RFC4443]: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Code | Checksum | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + Message Body + | | Figure 3: RPL Control Message The RPL Control message is an ICMPv6 information message with a requested Type of 155. The Code will be used to identify RPL Control Messages as follows: o 0x01: DAG Information Solicitation (Section 6.1.2) o 0x02: DAG Information Object (Section 6.1.3) o 0x04: Destination Advertisement Object (Section 6.1.4) 6.1.2. DAG Information Solicitation (DIS) The DAG Information Solicitation (DIS) message may be used to solicit a DAG Information Object from a RPL node. Its use is analogous to that of a Router Solicitation; a node may use DIS to probe its neighborhood for nearby DAGs. The DAG Information Solicitation carries no additional message body. 6.1.3. DAG Information Object (DIO) The DAG Information Object carries a number of metrics and other information that allows a node to discover a DAG Instance, select its DAG parents, and identify its siblings while employing loop avoidance strategies. 6.1.3.1. DIO Base The DIO Base is a container option, which is always present, and might contain a number of suboptions. The base option regroupswith [RFC4443], theminimum information set that is mandatory in all cases.RPL Control Message has the following format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+|G|D|A|0|0| Prf|SequenceType |InstanceIDCode |DAGRankChecksum | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + Message Body + |DAGID | + + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+|sub-option(s)... +-+-+-+-+-+-+-+-+-+-+-+-+-+Figure4: DIO Base3: RPL ControlField:Message TheDAGRPL ControlField is currently allocated as follows: Grounded (G): The Grounded (G) flag is set when the DODAG root is a Goal for the OF. Destination Advertisement Trigger (D): The Destination Advertisement Trigger (D) flag is set when the DODAG root or another node in the successor chain decides to trigger the sending of destination advertisements in order to update routing state for the down direction along the DODAG, as further detailed in Section 6.8. Note that the use and semantics of this flag are still under investigation. Destination Advertisement Supported (A): The Destination Supported (A) bit is set when the DODAG root is capable to support the collection of destination advertisement related routing state and enables the operation of the destination advertisement mechanism within the DODAG. DAGPreference (Prf): 3-bit unsigned integer set by the DODAG root to its preference and unchanged at propagation. DAGPreference ranges from 0x00 (least preferred) to 0x07 (most preferred). The defaultmessage is0 (least preferred). The DAG preference providesanadministrative mechanism to engineer the self-organization of the LLN, for example indicating the most preferred LBR. If a node has the option to join a more preferred DODAG while still meeting other optimization objectives, then the node will generally seek to join the more preferred DODAG as determined by the OF. Unassigned bitsICMPv6 information message with a requested Type of 155. The Code field identifies the type of RPL ControlField are considered as reserved. They MUST be set to zero on transmissionMessage. This document defines three types: o 0x01: DAG Information Solicitation (Section 5.2) o 0x02: DAG Information Object (Section 5.1) o 0x04: Destination Advertisement Object (Section 6.1) 5. Upward Routes This section describes how RPL discovers andMUST be ignored on receipt. Sequence Number: 8-bit unsigned integer set by themaintains upward routes. It describes DODAGroot, incremented according to a policy provisioned atInformation Objects (DIOs), theDODAG root,messages used to discover andpropagated with no change down the DODAG. Each increment SHOULD have a value of 1maintain these routes. It specifies how RPL generates andmay cause a wrap backresponds tozero. InstanceID: 8-bit field indicating the topology instance associated with the DODAG, as provisioned at the DODAG root. DAGRank: 8-bit unsigned integer indicating theDIOs. It also describes DAGrank of the node sending the DIO message. The DAGRank of the DODAG root is ROOT_RANK. DAGRank is further described in Section 6.3. DAGID: 128-bit unsigned integerInformation Solicitation (DIS) messages, whichuniquely identify a DODAG. This value is set by theare used to trigger DIO transmissions. 5.1. DODAGroot.Information Object (DIO) Theglobal IPv6 address of theDODAGroot can be used. the DAGID MUST be unique per DAG Instance within the scope of the LLN. The following values MUST NOT change during the propagation of DIO messages down the DAG: Grounded (G) Destination Advertisement Supported (A) DAGPreference (Prf) Sequence InstanceID DAGID All other fields ofInformation Object carries information that allows a node to discover a RPL Instance, learn its configuration parameters, select a DODAG parent set, and maintain the upward routing topology. 5.1.1. DIOmessage may be updated at each hop of the propagation. 6.1.3.1.1.Base Format DIOSuboptions In addition to the minimum options presentedBase is an always-present container option inthe base option, several suboptions are defined for thea DIOmessage: 6.1.3.1.1.1. Formatmessage. Every DIO MUST include a DIO Base. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - -4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |G|A|T|S|0| Prf |Subopt. TypeSequence |Subopt LengthRank |Subopt Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | RPLInstanceID | DTSN | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + | | + + | DODAGID | + + | | + +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | sub-option(s)... +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure5:4: DIOSuboption Generic Format Suboption Type: 8-bit identifier ofBase Control Field: The DAG Control Field has three flags and one field: Grounded (G): The Grounded (G) flag indicates whether thetypeupward routes this node advertises provide connectivity to the set ofsuboption. When processing a DIO message containing a suboption foraddresses which are application-defined goals. If theSuboption Type valueflag is set, the DODAG is grounded and provides such connectivity. If the flag is cleared, the DODAG is floating and may not provide such connectivity. Destination Advertisement Supported (A): The Destination Advertisement Supported (A) bit indicates whether the root of this DODAG can collect and use downward route state. The flag is set when nodes in the network are to exchange destination advertisements messages to build downward routes (Section 6). The flag is cleared when the DODAG maintains only upward routes. Destination Advertisement Trigger (T): The Destination Advertisement Trigger (T) flag isnot recognized by the receiver, the receiver MUST silently ignore the unrecognized option, continueused to trigger a complete refresh of downward routes. The details of this processthe following suboption, correctly handling any remaining options in the message. Suboption Length: 16-bit unsigned integer, representing the lengthare described inoctets of the suboption, not including the suboption TypeSection 6. Destination Advertisements Stored (S): The Destination Advertisements Stored (S) flag is used to indicate that a non-root ancestor is storing routing table entries learned from DAO messaging. The meaning andLength fields. Suboption Data:further use of this flag is described in Section 6. DODAGPreference (Prf): Avariable length field3-bit unsigned integer thatcontains data specificdefines how preferable the root of this DODAG is compared to other DODAG roots within theoption.DODAG. DAGPreference ranges from 0x00 (least preferred) to 0x07 (most preferred). Thefollowing subsections specify thedefault is 0 (least preferred). Section 5.3 describes how DAGPreference affects DIOmessage suboptions which are currently defined for use inprocessing. Unassigned bits of theDAG Information Object. ImplementationsControl Field are reserved. They MUSTsilently ignore any DIO message suboptions options that they do not understand. DIO message suboptions may have alignment requirements. Followingbe set to zero on transmission and MUST be ignored on reception. Sequence Number: 8-bit unsigned integer set by theconvention in IPv6, these options are aligned in a packet such that multi-octet values withinDODAG root. Section 5.3 describes theOption Data field of each option fall on natural boundaries (i.e., fields of width n octets are placed at anrules for sequence numbers and how they affect DIO processing. Rank: 8-bit unsigned integermultiple of n octets fromindicating thestartDODAG rank of theheader, for n = 1, 2, 4, or 8). 6.1.3.1.1.2. Pad1 The Pad1 suboption does not have any alignment requirements. Its formatnode sending the DIO message. Section 5.3 describes how Rank isas follows: 0 0 1 2 3 4 5 6 7 +-+-+-+-+-+-+-+-+ | Type = 0 | +-+-+-+-+-+-+-+-+ Figure 6: Pad 1 NOTE!set and how it affects DIO processing. RPLInstanceID: 8-bit field set by theformat ofDODAG root that indicates which RPL Instance thePad1 optionDODAG isa special case - it has neither Option Length nor Option Data fields.part of. Destination Advertisement Trigger Sequence Number (DTSN): 8-bit unsigned integer set by the node issuing the DIO message. ThePad1 optionDestination Advertisement Trigger Sequence Number (DTSN) flag is usedto insert one or two octetsas part ofpadding intheDIO messageprocedure toenable suboptions alignment. If more than two octets of padding is required, the PadN option, described next, should be used rather than multiple Pad1 options. 6.1.3.1.1.3. PadN The PadN option does not have any alignment requirements. Its format is as follows: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - | Type = 1 | Subopt Length | Subopt Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - Figure 7: Pad Nmaintain downward routes. ThePadN option is used to insert three or more octetsdetails ofpaddingthis process are described in Section 6. DODAGID: 128-bit unsigned integer set by a DODAG root which uniquely identifies a DODAG. Possibly derived from theDIO message to enable suboptions alignment. For N (N > 2) octetsIPv6 address ofpadding, the Option Length field containsthevalue N-3, andDODAG root. 5.1.2. DIO Base Rules 1. If theOption Data consists'A' flag ofN-3 zero-valued octets. PadN Option dataa DIO Base is cleared, the 'T' flag MUST also beignored bycleared. 2. For thereceiver. 6.1.3.1.1.4. DAG Metric Container The DAG Metric Container suboption may be aligned as necessary to support its contents. Its formatfollowing DIO Base fields, a node that is not a DODAG root MUST advertise the same values asfollows: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - | Type = 2 | Container Length | DAG Metric Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - Figure 8: DAG Metric Container The DAG Metric Container is usedits preferred DODAG parent (defined in Section 5.3.2). Therefore, if a DODAG root does not change these values, every node in a route toreport aggregated path metrics alongthat DODAG root eventually advertises theDODAG. The DAG Metric Container may contain a number of discrete node, link, and aggregate path metrics as chosen bysame values for these fields. These fields are: 1. Grounded (G) 2. Destination Advertisement Supported (A) 3. Destination Advertisement Trigger (T) 4. DAGPreference (Prf) 5. Sequence 6. RPLInstanceID 7. DODAGID 3. A node MAY update theimplementer.following fields at each hop: 1. DAGRank 2. DTSN 4. TheContainer LengthDODAGID fieldcontainseach root sets MUST be unique within thelength in octetsRPL Instance. 5.1.3. DIO Suboptions This section describes the format of DIO suboptions and the five suboptions this document defines: Pad 1, Pad N, DAG MetricData. The order, content,Container, DAG Destination Prefix, andcoding of theDAGMetric Container data is as specified in [I-D.ietf-roll-routing-metrics].Configuration. 5.1.3.1. DIO Suboption Format The Pad N, DAG MetricContainer MUST include the value for theContainer, DAGObjective Code Point. The processingDestination Prefix, andpropagation of theDAGMetric Container is governed by implementation specific policy functions. 6.1.3.1.1.5. Destination Prefix The Destination Prefix suboption does not have any alignment requirements. Its format is as follows:Configuration suboptions all follow this format: 0 1 230 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 34 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - | Subopt. Type= 3 | Length |Resvd|Prf|Resvd| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Prefix Lifetime | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+|PrefixSubopt Length || +-+-+-+-+-+-+-+-+ | | Destination Prefix (Variable Length) | . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+Subopt Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - Figure9: DAG Destination Prefix The Destination Prefix suboption is used when the DODAG root, or another node located upwards along the DODAG on the path to the DODAG root, needs to indicate that it offers connectivity to destination prefixes other than the default. This may be useful in cases where more than one LBR is operating within the LLN and offering connectivity to different administrative domains, e.g. a home network and a utility network. In such cases, upon observing the Destination Prefixes offered by a particular DODAG, a node MAY decide to join multiple DODAGs in support5: DIO Suboption Generic Format Suboption Type: 8-bit identifier ofa particular application. The Length is coded asthelengthtype of suboption. Suboption Length: 16-bit unsigned integer, representing thesuboptionlength inoctets, excludingoctets of the suboption, not including the suboption Type and Length fields.Prf is the Route Preference as in [RFC4191]. The reserved fields MUST be set to zero on transmission and MUST be ignored on receipt. The Prefix Lifetime is a 32-bit unsigned integer representing theSuboption Data: A variable lengthof time in seconds (relative to the time the packet is sent)field that contains data specific to theDestination Prefix is valid for route determination.option. Thelifetime is initially set by the node that owns the prefix and denotesfollowing subsections specify thevalid lifetimeDIO message suboptions which are currently defined forthat prefix (similar to AdvValidLifetime [RFC4861]). The value might be reduced byuse in theoriginator and/or en-route nodes that will not provide connectivityDAG Information Object. When processing a DIO message containing a suboption for which thewhole valid lifetime. A value of all one bits (0xFFFFFFFF) represents infinity. ASuboption Type valueof all zero bits (0x00000000) indicates a loss of reachability. The Prefix Lengthisan 8-bit unsigned integer that indicatesnot recognized by thenumber of leading bits inreceiver, thedestination prefix. The Destination Prefix contains Prefix Length significant bits ofreceiver MUST silently ignore thedestination prefix. Theunrecognized option and continue to process the following suboption, correctly handling any remainingbits ofoptions in theDestination Prefix, as required to completemessage. DIO message suboptions may have alignment requirements. Following the convention in IPv6, these options are aligned in a packet such that multi-octet values within thetrailing octet,Option Data field of each option fall on natural boundaries (i.e., fields of width n octets areset to 0. Inplaced at an integer multiple of n octets from theevent that a DIO message may need to specify connectivity to more than one destination,start of theDestination Prefix suboption may be repeated. 6.1.3.1.1.6. DAG Configurationheader, for n = 1, 2, 4, or 8). 5.1.3.2. Pad1 TheDAG ConfigurationPad1 suboption does not have any alignment requirements. Its format is as follows: 01 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 90 1 2 3 4 5 6 78 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+ | Type =4 | Length | DIOIntDoubl. | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | DIOIntMin. | DIORedun. | MaxRankInc0 |+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+ Figure10: DAG Configuration The DAG Configuration suboption is used to distribute configuration information for DAG Operation through6: Pad 1 NOTE! theDODAG. The information communicated in this suboption is generally static and unchanging withinformat of theDODAG, therefore itPad1 option isnot necessary to include in every DIO. This suboption MAY be included occasionally by the DODAG Root, and MUST be included in response to a unicast request, e.g.aDAG Information Solicitation (DIS) message. Thespecial case - it has neither Option Length nor Option Data fields. The Pad1 option iscoded as 5. DIOIntervalDoublings is an 8-bit unsigned integer, configured on the DODAG root and used to configure the trickle timer governing when DIO message should be sent within the DODAG. DIOIntervalDoublings is the number of times that the DIOIntervalMin is allowed to be doubled during the trickle timer operation. DIOIntervalMin is an 8-bit unsigned integer, configured on the DODAG root andused toconfigureinsert one or two octets of padding in thetrickle timer governing whenDIO message to enable suboptions alignment. If more than two octets of padding is required, the PadN option, described next, should besent within the DODAG.used rather than multiple Pad1 options. 5.1.3.3. PadN Theminimum configured interval for the DIO trickle timer in units of ms is 2^DIOIntervalMin. For example, a DIOIntervalMin value of 16msPadN option does not have any alignment requirements. Its format isexpressedas4. DIORedundancyConstantfollows: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - | Type = 1 | Subopt Length | Subopt Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - Figure 7: Pad N The PadN option isan 8-bit unsigned integerused toconfigure suppressioninsert three or more octets ofDIO transmissions. DIORedundancyConstant ispadding in theminimum number of relevant incoming DIOs required to suppress aDIOtransmission. Ifmessage to enable suboptions alignment. For N (N > 2) octets of padding, thevalue is 0xFF thenOption Length field contains thesuppression mechanism is disabled. MaxRankInc, 8-bit unsigned integer, isvalue N-3, and theDAGMaxRankIncrease. This isOption Data consists of N-3 zero-valued octets. PadN Option data MUST be ignored by theallowable increase in rank inreceiver. 5.1.3.4. Metric Container The Metric Container suboption may be aligned as necessary to supportof local repair. If DAGMaxRankIncreaseits contents. Its format is as follows: 0then this mechanism is disabled. 6.1.4. Destination Advertisement Object (DAO)1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - | Type = 2 | Subopt Length | Metric Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - Figure 8: Metric Container TheDestination Advertisement Object (DAO)Metric Container is used topropagate destination information upwardsreport aggregated path metrics along the DODAG. TheRPL useMetric Container may contain a number of discrete node, link, and aggregate path metrics as chosen by theDAO allowsimplementer. The Suboption Length field contains thenodeslength in octets of theDODAG to provision routing state for nodes contained inMetric Data. The order, content, and coding of thesub-DAGMetric Container data is as specified insupport[I-D.ietf-roll-routing-metrics]. The processing and propagation oftraffic flowing down alongtheDODAG.Metric Container is governed by implementation specific policy functions. 5.1.3.5. Destination Prefix The Destination Prefix suboption does not have any alignment requirements. Its format is as follows: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |DAO Sequence | InstanceID | DAO RankType = 3 | Subopt Length |Resvd|Prf|Resvd| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |DAOPrefix Lifetime | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Route Tag | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Prefix Length |RRCount ||+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+ | | Destination Prefix (Variable Length) | . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+| Reverse Route Stack (Variable Length) | . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+Figure11:9: DAG Destination Prefix The DestinationAdvertisement Object (DAO) DAO Sequence: Incremented by the node that owns the prefix for each new DAO message for that prefix. InstanceID: 8-bit field indicating the topology instance associated with the DODAG, as learned from the DIO. DAO Rank: Set byPrefix suboption is used when the DODAG root, or another nodethat ownslocated upwards along theprefix and first issuesDODAG on theDAO message to its rank. DAO Lifetime: 32-bit unsigned integer. The length of time in seconds (relativepath to thetime the packet is sent) that the prefix is valid for route determination. A value of all one bits (0xFFFFFFFF) represents infinity. A value of all zero bits (0x00000000) indicates a loss of reachability. Route Tag: 32-bit unsigned integer. The Route Tag may be usedDODAG root, needs togive a priorityindicate that it offers connectivity to destination prefixesthat should be stored.other than the default. This may be useful in cases whereintermediate nodes are capable of storing a limited amount of routing state. The further specification of this field and its usemore than one LBR isunder investigation. Prefix Length: 8-bit unsigned integer. Number of valid leading bits inoperating within theIPv6 Prefix. RRCount: 8-bit unsigned integer. This counter is usedLLN and offering connectivity tocountdifferent administrative domains, e.g. a home network and a utility network. In such cases, upon observing thenumber of entriesDestination Prefixes offered by a particular DODAG, a node MAY decide to join multiple DODAGs inthe Reverse Route Stack. A valuesupport of`0' indicates that no Reverse Route Stack is present. Prefix: Variable-length field containing an IPv6 address oraprefix of an IPv6 address.particular application. ThePrefixSuboption Lengthfield containsis coded as thenumberlength ofvalid leading bits intheprefix. The bitssuboption in octets, excluding theprefix afterType and Length fields. Prf is theprefix length (if any) areRoute Preference as in [RFC4191]. The reservedandfields MUST be set to zero on transmission and MUST be ignored on receipt.Reverse Route Stack: Variable-length field containingThe Prefix Lifetime is asequence of RRCount (possibly compressed) IPv6 addresses. A node that adds on to32-bit unsigned integer representing theReverse Route Stack will appendlength of time in seconds (relative to thelist and incrementtime theRRCount. 6.2. Protocol Elements 6.2.1. Topological Elements RPL uses four identifiers to track and controlpacket is sent) that therouting topology oDestination Prefix is valid for route determination. Thefirstlifetime isan InstanceID. An InstanceID defines what OF a DAG usesinitially set by the node that owns the prefix andmay also indicate what destinations are offered. A network may have multiple InstanceIDs, each of which defines an independent DAG optimizeddenotes the valid lifetime fora different OF and/or application.that prefix (similar to AdvValidLifetime [RFC4861]). TheDAG definedvalue might be reduced byan InstanceID is called a DAG Instance. o The second is a DAGID. The scopethe originator and/or en-route nodes that will not provide connectivity for the whole valid lifetime. A value ofa DAGID is a DAG Instance.all one bits (0xFFFFFFFF) represents infinity. Acombinationvalue ofInstanceID and DAGID definesall zero bits (0x00000000) indicates aDODAG. A DAG Instance may have multiple DODAGs. oloss of reachability. Thethird valuePrefix Length isa DAG Sequence Number.an 8-bit unsigned integer that indicates the number of leading bits in the destination prefix. ThescopeDestination Prefix contains Prefix Length significant bits ofa DAG Sequence Number is a DODAG. A DODAG is sometimes reconstructed fromtheroot, by incrementingdestination prefix. The remaining bits of the Destination Prefix, as required to complete the trailing octet, are set to 0. In theDAGSequenceNumber. A combination of InstanceID, DAGID, and DAG Sequence Number definesevent that a DIO message may need to specify connectivity to more than one destination, the Destination Prefix suboption may be repeated. 5.1.3.6. DODAGIteration. oConfiguration Thefourth valueDODAG Configuration suboption does not have any alignment requirements. Its format isrank.as follows: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type = 4 | Length | DIOIntDoubl. | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | DIOIntMin. | DIORedun. | MaxRankInc | MinHopRankInc | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 10: DODAG Configuration Thescope of rank is aDODAGIteration. Rank establishes a partial order over aConfiguration suboption is used to distribute configuration information for DODAGIteration, defining individual node positions. 6.2.2. Neighbors, Parents,Operation through the DODAG. The information communicated in this suboption is generally static andSiblings 1. A node thatunchanging within the DODAG, therefore it is nota DODAG rootnecessary to include in every DIO. This suboption MAYmaintain multiple DAG parents for a single DAG Instance. 2. The set of DAG parents MUSTbea conceptual subset ofincluded occasionally by theset of candidate neighbors. (This does not dictate implementation, e.g.,DODAG Root, and MUST be included in response touseacertain data structure). 3. If Neighbor Unreachability Detection (NUD), or an equivalent mechanism, determines thatunicast request, e.g. aneighborDODAG Information Solicitation (DIS) message. The Length isno longer reachable, then a RPL node MUST NOT consider this node incoded as 5. DIOIntervalDoublings is an 8-bit unsigned integer, configured on theneighbor set when calculatingDODAG root andadvertising routes untilused to configure thenode determines it is reachable again. 4. Routes via that unreachable neighbor MUSTtrickle timer (see Section 5.3.5.1 for details on trickle timers) governing when DIO message should beeliminated fromsent within therouting table, andDODAG. DIOIntervalDoublings is thenode SHOULD poison using no-DAO all DAO routes that it has advertised via DAO and that it can reach only vianumber of times thatneighbor. A node's neighbor setthe DIOIntervalMin isan unconstrained subset ofallowed to be doubled during thenodes that it can reach with a link-local multicast. The OF guides intrickle timer operation. DIOIntervalMin is an 8-bit unsigned integer, configured on theselectionDODAG root andmaintains a number of neighborsused tointeract with, which neighbors being qualified as statistically stable and presenting adequate properties as perconfigure the trickle timer governing when DIO message should be sent within theOF logic,DODAG. The minimum configured interval forinstance following mechanisms discussed in [I-D.ietf-roll-routing-metrics]. Those neighbors are referred to as candidate neighbors. Candidate neighbors may taketherole of Parent or Siblings,DIO trickle timer inpart as determined by rank.units of ms is 2^DIOIntervalMin. For example, a DIOIntervalMin value of 16ms is expressed as 4. DIORedundancyConstant is an 8-bit unsigned integer used to configure suppression of DIO transmissions. DIORedundancyConstant is thepurposeminimum number ofinheriting metrics and computing rank,relevant incoming DIOs required to suppress a DIO transmission. If theOF might select one preferred parent. In that case,value is 0xFF then the suppression mechanism is disabled. MaxRankInc, 8-bit unsigned integer, is the DAGMaxRankIncrease. This is the allowable increase in rank in support of local repair. If DAGMaxRankIncrease is 0 then thisnodemechanism is disabled. MinHopRankInc, 8-bit unsigned integer, iscomputed as the rank ofthepreferred parent plus a rank incrementMinHopRankIncrease asdetermined by the OF. 6.2.3.described in Section 3.6.2.1. 5.2. DODAG InformationFor eachSolicitation (DIS) The DODAG Information Solicitation (DIS) message may be used to solicit a DODAG Information Object from a RPL node. Its use is analogous to that of a Router Solicitation; a nodeis, ormaybecome, a member of, the implementation should conceptually keep track of the following informationuse DIS to probe its neighborhood foreach DODAG.nearby DODAGs. Thedata structures described in this section are intendedDODAG Information Solicitation carries no additional message body. Section 5.3.5 describes how nodes respond toillustrateapossible implementationDIS. 5.3. Upward Route Discovery and Maintenance Upward route discovery allows a node toaid in the description of the protocol, butjoin a DODAG by discovering neighbors that arenot intended to be normative. o InstanceID o DAGID o DAGSequenceNumber o DAG Metric Container, including DAGObjectiveCodePoint o A setmembers ofDestination Prefixes offered upwards alongthe DODAGo Aand identifying a set ofDAGparents. The exact policies for selecting neighbors and parentso Ais implementation-dependent. This section specifies the set ofDAG siblings orules those policies must follow for interoperability. 5.3.1. RPL Instance AtimerRPLInstanceID MUST be unique across an LLN. A node MAY belong togovern the sendingmultiple RPL Instances. Within a given LLN, there may be multiple, logically independent RPL instances. This document describes how a single instance behaves. 5.3.2. Neighbors and Parents within a DODAG Iteration RPL's upward route discovery algorithms and processing are in terms ofDIO messages Whenthree logical sets of link-local nodes. First, theDAG parentcandidate neighbor set isdepleted on a node that is notaroot, (i.e. the last parent is removed), thensubset of theDAG information should notnodes that can besuppressed until after the expiration of an implementation- specificreached via link- localtimer in order to observe that the DAGSequenceNumber has incremented should any new parents appear for the DODAG. 6.2.3.1. DAG Parents/Siblings Structure When the DODAGmulticast. The selection of this set isself-rooted,implementation- dependent and OF-dependent. Second, the parent setof DAG parentsisempty. For each node inaDAG parent/sibling set, the implementation should conceptually keep track of: o a reference torestricted subset of theneighboring device which iscandidate neighbor set. Finally, theDAG parent/ sibling opreferred parent, arecordset ofmost recent information taken from the DAG Information Object last processed in the case where the neighboring devicesize one, isa DAG parent DAG parents may be ordered, according to the OF. When ordering DAG parents, in consultation withan element of theOF,parent set that is themostpreferredDAGnext hop in upward routes. More precisely: 1. The DODAG parentmayset MUST beidentified. All current DAG parents must havearank less than self. All current DAG siblings mustsubset of the candidate neighbor set. 2. A DODAG root MUST have arankDODAG parent set of size zero. 3. A node that is not a DODAG root MAY maintain a DODAG parent set of size greater than or equal toself. When nodes are added to or removed from the DAG parent/sibling sets the mostone. 4. A node's preferredDAG parent may have changed. The role of all the nodes in the list should be reevaluated. In particular, any nodes havingDODAG parent MUST be a member of its DODAG parent set. 5. A node's rank MUST be greater thanself after suchall elements of its DODAG parent set. 6. When Neighbor Unreachability Detection (NUD), or an equivalent mechanism, determines that achange mustneighbor is no longer reachable, a RPL node MUST NOT consider this node in the candidate neighbor set when calculating and advertising routes until it determines that it is again reachable. Routes through an unreachable neighbor MUST beevictedeliminated from theset. 6.3. DAG Discovery and Maintenance DAG discovery allowsrouting table. These rules ensure that there is a consistent partial order on nodes within the DODAG. As long as node ranks do not change, following the above rules ensures that every node's route tojoin a DODAG rooted ata DODAG rootby discovering neighbors that are members of the DODAG, and identifying a set of parents. DAG discovery also identifies siblings, which may be used lateris loop- free, as rank decreases on each hop toprovide additional path diversity towardstheDODAGroot.DODAG discovery may avoid loops by constraining how and when nodesThe OF canincrease their rank,guide candidate neighbor set andby statistically poisoning the nodes that present the highest risk. DAG discovery enables nodes to implement different policies for selecting their DAG parentsparent set selection, as discussed inthe[I-D.ietf-roll-routing-metrics]. 5.3.3. Neighbors and Parents across DODAGby using implementation specific policy functions. DAG discovery specifies a set ofIterations The above rulesto be followed by all implementations to enable interoperation. 6.3.1. DAG Discovery Rulesgovern a single DODAG iteration. Thefollowingrules in this section definethehow RPLDAG Discovery procedures: 6.3.1.1.operates when there are multiple DODAG iterations: 5.3.3.1. DODAG Iteration 1.An InstanceID SHOULD be administratively provisioned onThe tuple (RPLInstanceID, DODAGID, DODAGSequenceNumber) uniquely defines a DODAGroot that is significant RPL objective. The InstanceIDIteration. Every element of a node's DODAG parent set, as conveyed by the last heard DIO from each DODAG parent, MUSTbe uniquebelong tothat purpose acrossthescopesame DODAG iteration. Elements ofthe LLN.a node's candidate neighbor set MAY belong to different DODAG Iterations. 2. ADAGID MUST be unique within the scopenode is a member of a DODAG iteration if every element of its DODAG parent set belongs to that DODAG iteration, or if that node is theInstanceID. It MAY be derived from the IPv6 addressroot of theDODAG root.corresponding DODAG. 3. A nodeMAY belong to multiple DAG instances. The related details of operation are outside the scopeMUST NOT send DIOs for DODAG iterations ofthis specification.which it is not a member. 4. DODAG roots MAY increment theDAGSequenceNumberDODAGSequenceNumber that theyadvertise. 5.advertise and thus move to a new DODAG iteration. When a DODAG root increments itsDAGSequenceNumber,DODAGSequenceNumber, it MUST follow the conventions of Serial Number Arithmetic as described in [RFC1982].6. The tuple (InstanceID, DAGID, DAGSequenceNumber) uniquely defines a DODAG Iteration. All of5. Within anode's parents withingiven DODAG, aDODAG MUST belong to the same DODAG iteration, as conveyed by the last heard DIO from each parent. 7. Anode that is a not a root MUST NOTpropagate DIOs foradvertise aDODAG Iteration unlessDODAGSequenceNumber higher than the highest DODAGSequenceNumber it has heard. Higher is defined as theDODAG root of the DODAG iteration or has selected DODAG parentsgreater-than operator inthat DODAG iteration. 8. A[RFC1982]. 6. Once a nodeacting ashas advertised aleaf SHOULDDODAG iteration by sending a DIO, it MUST NOTpropagate DIOs forbe member of a previous DODAGIteration. 9. A node MUST belong at most to oneiteration of the same DODAGIteration per InstanceID. 10. Within a given DODAG,(i.e. with the same DODAGID and anode thatlower DODAGSequenceNumber). Lower isa not a root MUST NOT advertise a DAGSequenceNumber higher thandefined as thehighest DAGSequenceNumber it has heard.less-than operator in [RFC1982]. Within a particular implementation, a DODAG root may increment theDAGSequenceNumberDODAGSequenceNumber periodically, at a rate that depends on the deployment. In otherimplementationsimplementations, loop detection may be considered sufficient to solvetherouting issues, and the DODAG root may increment theDAGSequenceNumberDODAGSequenceNumber only upon administrative intervention. Another possibility is that nodes within the LLN have some meanstoby which they can signal detected routing inconsistencies or suboptimalities to the DODAGrootroot, in order to request anon-demandon- demand DODAGSequenceNumber incrementwhen routing issues are detected.(i.e. request a global repair of the DODAG). When the DODAG parent set is depleted on a node that is not a root, (i.e. the last parent is removed), then the DODAG information should not be suppressed until after the expiration of an implementation- specific local timer in order to observe if the DODAGSequenceNumber has been incremented, should any new parents appear for the DODAG. As theDAGSequenceNumberDODAGSequenceNumber is incremented, a new DODAG Iteration spreads outward from the DODAG root. Thus a parent that advertises the newDAGSequenceNumberDODAGSequenceNumber can not possibly belong to thesub-DAGsub-DODAG of a node that still advertises an olderDAGSequenceNumber.DODAGSequenceNumber. A node may safely add such a parent, without risk of forming a loop, without regard to its relative rank in the prior DODAG Iteration. This is equivalent to jumping to a different DODAG. As a node transitions to new DODAG Iterations as a consequence of following these rules, the node will be unable to advertise the previous DODAG Iteration (priorDAGSequenceNumber)DODAGSequenceNumber) once it has committed to advertising the new DODAG Iteration. Duringatransition to a new DODAG Iteration, a node may decide to forward packets via 'future parents' that belong to the same DODAG (sameInstanceIDRPLInstanceID andDAGID),DODAGID), but are observed to advertise a more recent (incremented)DAGSequenceNumber. 6.3.1.2.DODAGSequenceNumber. 5.3.3.2. DODAG Roots 1. A DODAG root that does not have connectivity toa network outside oftheLLNset of addresses described as application-level goals, MUST NOT set the Grounded bit. 2. A DODAG root MUST advertise a rank of ROOT_RANK. 3. A nodethat does not have anywhose DODAG parent set is empty MAY become the DODAG root of a floating DODAG. It MAY also set its DAGPreference such that it is less preferred.This behavior may be a desired alternate to poisoning.An LLN node that is aGoalgoal for the Objective Function is the root of its own grounded DODAG, at rank ROOT_RANK. In a deployment that uses a backbone link to federate a number of LLN roots, it is possible to run RPL overthethat backbone and use one router as abackbone root."backbone root". The backbone root is the virtual root of theDODAGDODAG, and exposes a rank of BASE_RANK over the backbone. All the LLN roots that are parented to that backbone root, including the backbone root if it also serves as LLNroot,root itself, expose a rank of ROOT_RANKoverto theLLNLLN, and are part of the same DODAG,coordinatedcoordinating DODAGSequenceNumber and other DODAG root determined parameters with the virtual root over the backbone.6.3.1.3.5.3.3.3. DODAG Selection The DODAGPreference (Prf) provides an administrative mechanism to engineer the self-organization of the LLN, for example indicating the most preferred LBR. If a node has the option to join a more preferred DODAG while still meeting other optimization objectives, then the node will generally seek to join the more preferred DODAG as determined by the OF. 5.3.3.4. Rank and Movement within a DODAG Iteration 1. A node MUST NOT advertise a rank less than or equal to any member of its parent set within the DODAG Iteration. 2. A node MAY advertise a rank lower than its prior advertisement within the DODAG Iteration.(This corresponds to a node moving up within the DODAG Iteration).3. Let L be the lowest rank within a DODAG iteration that a given node has advertised. Withinathe same DODAG Iteration, that node MUST NOT advertise an effective rankdeeperhigher than L + DAGMaxRankIncrease. INFINITE_RANK is an exception to this rule: a node MAY advertise an INFINITE_RANK at any time. (This corresponds to a limited rank increase for the purpose of local repair within the DODAG Iteration.) 4. A node MAY, at any time, choose to join a different DODAG within aDAGRPL Instance. Such a join has no rank restrictions, unless that different DODAG is a DODAG Iteration of which thatthenode has previously been aprior member of,member, in which case the rule of the previous bullet (3) must be observed. Until a node transmits a DIO indicating its new DODAG membership, it MUST forward packets along the previous DODAG. 5. A node MAY, at any time after hearing the nextDAGSequenceNumberDODAGSequenceNumber Iteration advertised from suitable DODAG parents, choose to migrateupto the next DODAG Iteration within the DODAG. Conceptually, an implementation is maintaining a DODAG parent set within the DODAG Iteration. Movement entails changes to the DODAG parent set. Moving up does not present the risk to create a loop but moving down might, so that operation is subject to additional constraints. When a node migratesintoto the next DODAG Iteration, the DODAG parent and sibling sets need to be rebuilt for the new iteration. An implementation could defer to migrateuntilfor some reasonabletimeamount of time, to see if some other neighbors with potentially better metrics but higher rank announce themselves. Similarly, when a node jumps into a new DODAG it needs to construct new DODAG parent/sibling sets forthethis new DODAG. When a node moves to improve its position, it must conceptually abandon all DODAG parents and siblings with a rank larger than itself. As a consequence of the movement it may also add new siblings. Such a movement may occur at any time to decrease the rank, as per the calculation indicated by the OF. Maintenance of the parent and sibling sets occurs as the rank of candidate neighbors is observed as reported in their DIOs. If a node needs to move down a DODAG that it is attached to, causing theDAGrank to increase, then it MAY poison its routes and delay before moving as described in Section6.3.1.4. 6.3.1.4.5.3.3.5. 5.3.3.5. Poisoning a Broken Path 1. A node MAY poison, in order to avoid being used as an ancestor by the nodes in itssub-DAG,sub-DODAG, by advertising an effective rank of INFINITE_RANK and resetting the associated DIO trickle timer to causethethis INFINITE_RANK to be announced promptly. 2. The node MAY advertise an effective rank of INFINITE_RANK for an arbitrary number of DIO timereventsevents, before announcing a new rank. 3. As per Section6.3.1.3,5.3.3.4, the node MUST advertise INFINITE_RANK within the DODAG iteration in which it participates, if its revised rank would exceed the maximumDAGrank increase. An implementation may choose to employ this poisoning mechanism when a nodethatloses all of its current parents, i.e. the set ofDAGDODAG parents becomes depleted, and it can not jumpontoto an alternateDODAGDODAG. An alternate mechanism is to form a floating DODAG. The motivation for delaying announcement of the revised route through multiple DIO events is to (i) increase tolerance to DIO loss, (ii) allow time for the poisoning action to propagate, and (iii) to develop an accurate assessment of its new rank. Such gains are obtained at the expense of potentially increasing the delay beforelowerportions of the network are able to re-establishupupwards routes. Path redundancy in theDAGDODAG reduces the significance of either effect, since children with alternate parents should be able to utilize those alternates and retain their rank while the detached parent re-establishes its rank. Although an implementation may advertise INFINITE_RANK for the purposes of poisoning, it is not expected to be equivalent to setting the rank to INFINITE_RANK, and an implementation would likely retain its rank value prior to the poisoning in some form, for purpose of maintaining its effective position within (L + DAGMaxRankIncrease).6.3.1.5.5.3.3.6. Detaching 1. A nodethat does not have a solutionunable to stay connected to a DODAG within a given DODAG iteration MAY detach fromits currentthis DODAG iteration. A node that detaches becomes root of its own floating DODAG and SHOULD immediately advertiseitsthis new situation in a DIO as an alternate to poisoning.6.3.1.6.5.3.3.7. Following a Parent 1. If a node receives a DIO from one of itsparentsDODAG parents, indicating that the parent has left the DODAG,itthat node SHOULD stay in its current DODAG through analternate DAG parentalternative DODAG parent, ifthat ispossible. It MAY followthatthe leaving parent. ADAGDODAG parent may have moved, migratedforward intoto the next DODAG Iteration, or jumped to a different DODAG. A node should give some preference to remaining in the currentDODAGDODAG, if possible, but ought to follow the parent if there are no other options.6.3.2.5.3.4. DIO Message Communication When an DIO message isreceived from a source device named SRC,received, the receiving node must first determine whether or not the DIO message should be accepted for further processing, and subsequently present the DIO message for further processing if eligible. 1. If the DIO message is malformed, then the DIO message is not eligible for further processing and is silently discarded. A RPL implementation MAY log the reception of a malformed DIO message. 2. IfSRCthe sender of the DIO message is a member of the candidate neighbor set, then the DIO is eligible for further processing.6.3.2.1.5.3.4.1. DIO Message ProcessingIf the node has sent an DIO message within the risk window as described in Section 6.7 then a collision has occurred; do not process the DIO message any further. Process the DIO message as per the rules in Section 6.3As DIO messages are received from candidate neighbors, the neighbors may be promoted toDAGDODAG parents by following the rules ofDAGDODAG discovery as described in Section6.3.5.3. When a node places a neighbor into theDAG ParentDODAG parent set, the node becomes attached to the DODAG through the new DODAG parent node.In the DAG discovery implementation, theThe most preferred parent should be used to restrict which other nodes may becomeDAGDODAG parents. Some nodes in theDAGDODAG parent set may be of a rank less than or equal to the most preferredDAGDODAG parent. (This case may occur, for example, if an energy constrained device is at a lesser rank but should be avoided as per an optimization objective, resulting in a more preferred parent at a greater rank).6.3.3.5.3.5. DIO Transmission Each node maintains atimertimer, that governs when to multicast DIO messages. This timer is a trickle timer, as detailed in Section6.3.4.5.3.5.1. The DIO Configuration Option includes the configuration of aDAGRPL Instance's trickle timer. o When a node detects or causes an inconsistency, it MUST reset the interval of the trickle timer toaits minimum value. o When a node migrates to a new DODAG Iteration it MUST reset the trickle timer to its minimum value o When a node detects an inconsistency when forwarding a packet, as detailed in Section6.9,7.2, the node MUST reset the trickle timer to its minimum value. o When a node receives a multicast DIS message, it MUST reset the trickle timer totheits minimum value. o When a node receives a unicast DIS message, it MUST unicast a DIO message in response, and MUST include theDAGDODAG Configuration Object. In this case the node SHOULD NOT reset the trickle timer. o If a node is not a member of a DODAG, it MUST suppresstransmittingtransmission of DIO messages. o When a node is initialized, it MAY be configured to remain silent and not multicast any DIO messages until it has encountered and joined a DODAG (perhaps initially probing for a nearby DODAG with an DIS message). Alternately, itmayMAY choose to root its own floating DODAG and begin multicasting DIO messages using a default trickle configuration. The second case may be advantageous if it is desired for independent nodes to begin aggregating into scattered floatingDODAGsDODAGs, in the absence of a grounded node, for example in support of LLN installation and commissioning.6.3.4.5.3.5.1. Trickle Timer for DIO Transmission RPL treats the construction of a DODAG as a consistency problem, and uses a trickle timer [Levis08] to control the rate of control broadcasts. For each DODAG that a node is partof,of (i.e. one DODAG per RPL Instance), the node must maintain a single trickle timer. The required state contains the following conceptual items: I: The current length of the communication interval T: A timer with a duration set to a random value in the range [I/2, I] C: Redundancy Counter I_min: The smallest communication interval in milliseconds. This value is learned from the DIO message as (2^DIOIntervalMin)ms. The default value is DEFAULT_DIO_INTERVAL_MIN. I_doublings: The number of times I_min should be doubled before maintaining a constant rate, i.e. I_max = I_min * 2^I_doublings. This value is learned from the DIO message as DIOIntervalDoublings. The default value is DEFAULT_DIO_INTERVAL_DOUBLINGS.6.3.4.1.5.3.5.1.1. Resetting the Trickle Timer The trickle timer for a DODAG is reset by: 1. Setting I_min and I_doublings to the values learned from the DODAG root via a received DIO message. 2. Setting C to zero. 3. Setting I to I_min. 4. Setting T to a random value as described above. 5. Restarting the trickle timer to expire after a duration T When a node learns about a DODAG through a DIOmessagemessage, and makes the decision to joinit,this DODAG, it initializes the state of the trickle timer by resetting the trickle timer and listening. Each time it hears a redundant DIO message for this DODAG, it MAY increment C. The exact determination of what constitutes a redundant DIO message is left to an implementation; it could for example include DIOs that advertise the same rank. When the timer fires at time T, the node compares C to the redundancy constant, DIORedundancyConstant. If C is less than that value, or if the DIORedundancyConstant value is 0xFF, the node generates a new DIO message and multicasts it. When the communication interval I expires, the node doubles the interval I so long as it has previously doubled it fewer than I_doubling times, resets C, and chooses a new T value.6.3.4.2.5.3.5.1.2. Determination of Inconsistency The trickle timer is reset whenever an inconsistency is detected within the DODAG, for example: o The node joins a new DODAG o The node moves within a DODAG o The node receives a modified DIO message from aDAGDODAG parent o ADAGDODAG parent forwards a packet intended to move up, indicating an inconsistency and possible loop. o A metric communicated in the DIO message is determined to be inconsistent, as according to a implementation specific path metric selection engine. o The rank of aDAGDODAG parent has changed.6.4. DAG5.3.6. DODAG Selection TheDAGDODAG selection is implementation and algorithm dependent. Nodes SHOULD prefer to join DODAGs forInstanceIDsRPLInstanceIDs advertising OCPs and destinations compatible with their implementation specific objectives. In order to limit erratic movements, and all metrics being equal, nodes SHOULD keep their previous selection. Also, nodes SHOULD provide a means to filter out a parent whose availability is detected as fluctuating, at least when more stable choices are available. When connection to a fixed network is not possible or preferable for security or other reasons, scattered DODAGs MAY aggregate as much as possible into larger DODAGs in order to allow connectivity within the LLN. A node SHOULD verify that bidirectional connectivity and adequate link quality is available with a candidate neighbor before it considers that candidate as aDAGDODAG parent.6.5.5.4. Operation as a Leaf Node In some casesita RPL node may attach to a DODAGfor DAG Instanceas a leaf nodeonly; the node in this case is not to extend connectivity to the DODAG to other nodes under any circumstances. Suchonly. One example of such a casemay occur, for example,is when a nodeis attaching to a DODAG that is using an unknown Objective Function. When operating as adoes not understand the RPL Instance's OF. A leafnode, a node: 1. MAY receive and process DIOs for that DODAG 2. SHOULD NOT transmit DIOs for thatnode does not extend DODAG3.connectivity but still needs to advertise its presence using DIOs. A node operating as a leaf node must obey the following rules: 1. It MUST NOT transmit DIOs containing the DAG MetricContainer for that DODAG 4.Container. 2. Its DIOs must advertise a DAGRank of INFINITE_RANK. 3. It MAY transmit unicast DAOsto the chosen parents for that DODAG 5.as described in Section 6.2. 4. It MAY transmit multicast DAOs to the`1'1 hop'neighborhood. 6.6.neighborhood as described in Section 6.2.9. 5.5. Administrativerank When the DODAG is formed under a common administration, or when a node performs a certain role within a community,Rank In some cases it might be beneficial toassociate a range of acceptableadjust the rankwithadvertised by a node beyond that computed by the OF based on some implementation specific policy and properties of the node. Forinstance,example, a node that has limited battery should be a leaf unless there is no other choice, and may then augment the rank computation specified by the OF in order to expose an exaggerated rank.6.7.5.6. Collision A race condition occurs if 2 nodes send DIO messages at the same time and then attempt to join each other. This might happen, for example, between nodes which act asDAGDODAG root of their own DODAGs. In order to detect the situation, LLN Nodes time stamp the sending of DIO message. Any DIO message received within a short link-layer- dependent period introduces a risk. It left to the implementation to define the duration of the risk window. There is risk of a collision when a node receives and processes a DIO within the risk window. For example, it may occur that two nodes are associated with different DODAGs and near-simultaneously send DIO messages, which are received and processed by both, and possibly result in both nodes simultaneously deciding to attach to each other. As a remedy, in the face of a potential collision, as determined by receiving a DIO within the risk window, the DIO message is not processed. It is expected that subsequent DIOs would not cross.6.8. Establishing Routing State Down the DODAG The destination advertisement mechanism supports6. Downward Routes This section describes how RPL discovers and maintains downward routes. Messages containing thedissemination of routing state requiredDestination Advertisement Object (DAO), used to construct downward routes, are described. The downward routes are necessary in supporttraffic flows down along the DODAG,of P2MP flows, from the DODAGrootroots towardnodes. As a result of destination advertisement operation: o Destination advertisement establishes down routes alongtheDODAG. Such paths consist of: * Hop-By-Hop routing state within islandsleaves. It specifies non-storing and storing behavior of`stateful' nodes. * Source Routing `bridges' acrossnodesthat do not retain state. Destinations disseminatedwiththe destination advertisement mechanism may be prefixes, individual hosts, or multicast listeners. The mechanism supports nodes of varying capabilities as follows: o When nodes are capable of storing routing state, they may inspect destination advertisementsrespect to DAO messaging andlearn hop-by-hopDAO routingstate toward destinations by populatingtable entries. Nodes, as according to theirrouting tables withresources and theroutesimplementation, may selectively store routing table entries learnedfrom nodes in their sub-DAG. In this process theyfrom DAO messages, or mayalso learn necessary piecewise source routes to traverse regions ofinstead propagate theLLN that do not maintainDAO information upwards while adding source routingstate. Theyinformation. A further optimization is described whereby DAO messages mayperform route aggregation on known destinations before emitting Destination Advertisements. o When nodes are incapable of storingbe used to populate routingstate, theytable entries for the '1-hop' neighbors, which mayforwardbe useful in some cases as a shortcut for P2P flows. 6.1. Destination Advertisement Object (DAO) The Destination Advertisement Object (DAO) is used to propagate destinationadvertisements, recordinginformation upwards along thereverse route asDODAG. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | DAO Sequence | DAO Rank | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | RPLInstanceID | Route Tag | Prefix Length | RRCount | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | DAO Lifetime | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Destination Prefix (Variable Length) | . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reverse Route Stack (Variable Length) | . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | sub-option(s)... +-+-+-+-+-+-+-+-+ Figure 11: The Destination Advertisement Object (DAO) DAO Sequence: 16-bit unsigned integer. Incremented by thego in order to supportnode that owns theconstruction of piecewise source routes. Nodesprefix for each new DAO message for thatare capable of storing routing state, and finallyprefix. DAO Rank: 16-bit unsigned integer indicating theDODAG roots, are ableDAO Rank associated with the advertised Destination Prefix. The DAO Rank is analogous tolearn which destinations are containedthe Rank in thesub-DAG belowDIO message in that it may be used to convey a relative distance to thenode, and via which next-hop neighbors. The dissemination and installation of this routing state into nodes allows for Hop-By-Hop routing fromDestination Prefix as computed by theDODAG root downObjective Function in use over the DODAG.TheIt serves as a mechanismis further enhancebysupportingwhich an ancestor node may order alternate DAO paths. RPLInstanceID: 8-bit field indicating theconstruction of source routes across stateless `gaps' intopology instance associated with the DODAG, as learned from the DIO. Route Tag: 8-bit unsigned integer. The Route Tag may be used to give a priority to prefixes that should be stored. This may be useful in cases where intermediate nodes areincapablecapable of storingadditionala limited amount of routing state.An adaptationThe further specification of thismechanism allows for the implementation of loose-source routing. A special case, the reception of a destination advertisement addressed to a link-local multicast address, allows for a node to learn destinations directly available fromfield and itsone-hop neighbors. A design choice behind advertising routes via destination advertisementsuse isnot to synchronize the parent and children databases alongunder investigation. Prefix Length: 8-bit unsigned integer. Number of valid leading bits in theDODAG, but instead to update them regularlyIPv6 Prefix. RRCount: 8-bit unsigned integer. This counter is used torecover fromcount thelossnumber ofpackets. The rationale for that choice is time variationsentries inconnectivity across unreliable links. Ifthetopology can be expected to change frequently, synchronization might be an excessive goal in termsReverse Route Stack. A value ofexchanges and protocol complexity. The approach used here results in a simple protocol with'0' indicates that noreal peering.Reverse Route Stack is present. DAO Lifetime: 32-bit unsigned integer. Thedestination advertisement mechanism hence provides for periodic updateslength ofthe routing state, similarly to other protocols such as RIP [RFC2453]. 6.8.1. Destination Advertisement Operation 6.8.1.1. Overview Accordingtime in seconds (relative toimplementation specific policy,the time the packet is sent) that the prefix is valid for route determination. A value of all one bits (0xFFFFFFFF) represents infinity. A value of all zero bits (0x00000000) indicates asubsetloss of reachability. Destination Prefix: Variable-length field identifying an IPv6 destination address, prefix, orallmulticast group. The Prefix Length field contains the number of valid leading bits in thefeasible parentsprefix. The bits in theDODAG may be selected to receiveprefixinformation fromafter thedestination advertisement mechanism. This subset of DAG parents shallprefix length (if any) are reserved and MUST bedesignated thesetof DA parents. As DAO messages for particular destinations move up the DODAG, a sequence counter is usedtoguarantee their freshness. Thezero on transmission and MUST be ignored on receipt. Reverse Route Stack: Variable-length field containing a sequencecounter is incremented by the sourceofthe DAO message (theRRCount (possibly compressed) IPv6 addresses. A node thatownsadds on to theprefix, or learnedReverse Route Stack will append to theprefix via some other means), each time it issues a DAO message for its prefix. Nodes that receivelist and increment the RRCount. 6.1.1. DAOmessage and, if scope allows, will be forwarding aSuboptions The DAO messagefor the unmodified destination up the DODAG, will leave the sequence number unchanged. Intermediate nodes will check the sequence counter before processingmay optionally include a number of suboptions. The DAOmessage, and if the DAO is unchanged (the sequence counter has not changed), thensuboptions are in theDAO message will be discarded without additional processing. Further, ifsame format as the DIO Suboptions described in Section 6.1.1. In particular, a DAO messageappears tomay include a DAG Metric Container suboption as described in Section 5.1.3.4. This suboption may beout of synch (the sequence counter is 2 or more behind thepresentvalue) thenin implementations where the DAOstateRank isconsideredinsufficient to optimize a path tobe stale and may be purged, andthe DAOmessage is discarded. The rank is also added for tracking purposes; nodesDestination Prefix. 6.2. Downward Route Discovery and Maintenance 6.2.1. Overview Destination Advertisement operation produces DAO messages thatare storingflow up the DODAG, provisioning downward routing statemay use it to determine which possible next-hopsforthe destination are more optimal. Ifdestinationadvertisements are activatedprefixes available in theDIO message as indicated by the `D' bit, the node sends unicast destination advertisements to onesub-DODAG ofits DA parents, that is selected as most favored for incoming down traffic.the DODAG root, and possibly other nodes. Thenode only accepts unicast destination advertisements from any nodes but those containedrouting state provisioned with this mechanism is in theDA parent subset. Receiving a DIO message withform of soft-state routing table entries. DAO messages are able to record loose source routing information as by propagate up the`D' destination advertisement bit set from a DAG parent stimulatesDODAG. This mechanism is flexible to support thesendingprovisioning ofa delayed destination advertisement back, withpaths which consist of fully specified source routes, piecewise source routes, or hop-by-hop routes as according to thecollectionimplementation and the capabilities ofall known prefixes (that istheprefixes learned via destination advertisements for nodes lower innodes. Destination Advertisement may or may not be enabled over a DODAG rooted at a DODAG root. This is an a priori configuration determined by theDODAG,implementation/deployment andany connected prefixes). Ifnot generally changed during the operation of the RPL LLN. When Destination AdvertisementSupported (A) bitissetenabled: 1. Some nodes in theDIO messageLLN MAY store at least one routing table entry forthe DODAG, thena particular destinationadvertisement is also sent tolearned from aDAG parent once it has been added to the DA parent set afterDAO. Such amovement, or when the list of advertised prefixes has changed. Anode is termed a 'storing node', with respect to thatmodifies its DAG Parent set may set the `D' bit in subsequent DIO propagation in orderparticular destination. 2. Some nodes are capable totriggerstore at least one routing table entry for every unique destinationadvertisements toobserved from all DAOs that pass through. Such a node is termed a 'fully storing node'. 3. DODAG roots nodes SHOULD beupdated to its DAG Parents and other ancestors on the DODAG. Additional recommendations and guidelines regardingfully-storing nodes. 4. Other nodes in theuse of this mechanismDODAG arestill under consideration and will be elaboratednot required to store routing table entries for any particular destinations observed in DAOs. Nodes that do not store routing table entries from DAOs are termed 'non-storing nodes', with respect to afuture revisionparticular destination. 5. Non-storing nodes MUST participate in the construction ofthis specification. Destination advertisements may advertise positive (prefix is present) or negative (removed)piecewise source routes as they propagate the DAOmessages, termedmessage, asno-DAOs. A no-DAO is stimulated bydescribed in Section 6.2.5. 6. Storing nodes MUST store any source route information received from thedisappearance of a prefix below. This is discovered by timing out after a request (a DIO message) or by receivingDAO (RRStack) in the routing table entry entry. If ano-DAO. A no-DAOnode isa conveyednot capable to do this then it must act as aDAO message with a DAO Lifetime of ZERO_LIFETIME. Anon-storing node with respect to thatis capable of recording the state information conveyedparticular destination. 7. Storing nodes MUST use piecewise source routes in order to forward data across aunicast DAO message will do so upon receiving and processingnon-storing region of theDAO message, thus provisioningLLN. The source routingstate concerning destinations located downwards along the DODAG. Ifmechanism is to be described in a companion specification. (If a node is not capableof recording state information receives a DAO message containing a Reverse Route Stack,to do this, thenthe node knowsthatthenode MUST NOT operate as a storing node). 6.2.2. Mode of Operation o DAOmessage has traversed one or more nodes that didOperation may notretain anybe required for all use cases. o Some applications may only need support for collection/upward/MP2P flow with no acknowledgement/reciprocal traffic. o Some DODAGs may not support DAO Operation, which could mean that DAO Operation is wasteful overhead. o As a special case, multicast DAO operation may be used to populate 'one-hop' neighborhood routingstate as it traversed the pathtable entries, and is distinct from the unicast DAOsourceoperation used to establish downward routes along thenode.DODAG. 1. Thenode may then extract the Reverse Route Stack and retain the included state'A' flag inorder to specify Source Routing instructions along the return path towardsthedestination. The node MUST setDIO as conveyed from theRRCount backDODAG root serves tozero and clearenable/disable DAO operation over theReverse Route Stack prior to passingentire DODAG. This flag should be administratively provisioned a priori at the DODAG root as a function of the implementation/deployment and not tend to change. 2. When DAOmessage information on. AOperation is disabled, a nodethatSHOULD NOT emit DAOs. 3. When DAO Operation isunabledisabled, a node MAY ignore received DAOs. 6.2.3. Destination Advertisement Parents o Nodes will select a subset of their DODAG Parents torecord the state information conveyed in the DAO messagewhom DAOs willappendbe sent * This subset is thenext-hop addressset of 'DAO Parents' * Each DAO parent MUST be a DODAG Parent. (Not all DODAG parents need tothe Reverse Route Stack, increment the RRCount,be DAO parents). * Operation with more than DAO Parent requires consideration of such issues as DAO fan-out andthen pass the destination advertisement on without recording any additional state. In this way the Reverse Route Stack will containpath diversity, to be elaborated in avectorfuture version ofnext hops that must be traversed along the reverse path that the DAO message has traveled.this specification. o Thevector willselection of DAO parents is implementation specific and may beordered suchbased on selecting the DODAG Parents that offer thenode closestbest upwards cost (as opposed to downwards or mixed), as determined by thedestination will appear firstmetrics in use and thelist. In such cases, if it is usefulObjective Function. o When DAO messages are unicast to theimplementation to try and provision redundant paths,DAO Parent, thenode may choose to conveyidentity of thedestination advertisement to one or more DAG parentsDAO Parent (DODAGID x DAGSequenceNumber) combined with the RPLInstanceID inorder of preference as guided by an implementation specific policy. In certain cases (called hybrid cases), some nodes alongthepath a destination advertisement follows upDAO message unambiguously associates theDODAG may store stateDAO message, andsome may not. The destination advertisement mechanism allows forthus theprovisioning of routing state such that whenparticular destination prefix, with apacket is traversing downDODAG Iteration. o When DAO messages are unicast to theDODAG, some nodesDAO Parent, the DAO Rank may beable to directly forwardupdated as according to thenext hop,implementation andother nodes may be able to specify a piecewise source routeObjective Function inorderuse tobridge spansreflect the relative (aggregated) cost ofstateless nodes withinreaching thepath onDestination Prefix through that DAO parent. As a further extension, a DAO Suboption for thewayMetric Container may be included. 6.2.4. Operation of DAO Storing Nodes 6.2.4.1. DAO Routing Table Entry A DAO Routing Table Entry conceptually contains the following elements: o Advertising Neighbor Information * IPv6 Addr * Interface ID o To which DAO Parents has this entry been reported o Retry Counter o Logical equivalent of DAO Content: * DAO Sequence * DAO Rank * DAO Lifetime * Route tag (used to prioritize which destination entries should be stored) * Destination Prefix (or Address or Mcast Group) * RR Stack* The DAO Routing Table Entry is logically associated with thedesired destination. Infollowing states: CONNECTED This entry is 'owned' by thecase where nonode - it isable to store any routing state as destination advertisements pass by,manually configured andthe DAG root ends up withis considered as a 'self' entry for DAOmessages that containOperation REACHABLE This entry has been reported from acompletely specified route back toneighbor of theoriginating node innode. This state includes the following substates: CONFIRMED This entry is active, newly validated, and usable PENDING This entry is active, awaiting validation, and usable. A Retry Counter is associated with this substate UNREACHABLE This entry is being cleaned up. This entry may be suppressed when the cleanup process is complete. When an attempt is to be made to report theform ofDAO entry to DAO Parents, theinverted Reverse Route Stack. A DAG root should not request (Destination Advertisement Trigger) nor indicate support (Destination Advertisement Supported) for destination advertisements if itDAO Entry record isnot ablelogically marked tostoreindicate that an attempt has not yet been made for parent. As theReverse Route Stack information inunicast attempts are completed for each parent, thiscase. The destination advertisementmark may be cleared. This mechanismrequires stateful nodesmay serve tomaintain lists of known prefixes. A prefixlimit DAO entrycontains the following abstract information: o A referenceupdates for each parent tothe ND entrya subset thatwas created for the advertising neighbor. o The IPv6 address and interface for the advertising neighbor. o The logical equivalent of the full destination advertisement information (including the prefixes, depth, and Reverse Route Stack, if any). o A 'reported' Booleanneeds tokeep track whether this prefix was reported already, andbe reported. 6.2.4.1.1. DAO Routing Table Entry Management +---------------------------------+ | | | REACHABLE | +-------------+ | | | | | +-----------+ | | CONNECTED | (*)----------->| |-------+ | | | | | Confirmed | | | +-------------+ | +-->| |---+ | | | | +-----------+ | | | | | | | | | | | | | | | | | | | | +-----------+ | | | +-------------+ | | | |<--+ +-------->| | | +---| Pending | | | UNREACHABLE | | | |---------------->| |--->(*) | +-----------+ | +-------------+ | | +---------------------------------+ DAO Routing Table Entry FSM 6.2.4.1.1.1. Operation in the CONNECTED state 1. CONNECTED DAO entries are towhichbe provisioned outside of theDA parents. o A countercontext ofretries to count how many DIO messages were sent on the interfaceRPL, e.g. through a management API. An implementation SHOULD provide a means to provision/manage CONNECTED DAO entries, including whether they are to be redistributed in RPL. 6.2.4.1.1.2. Operation in theadvertising neighbor without reachability confirmation for the prefix. Note that nodes may receive multiple information from different neighbors forREACHABLE state 1. When aspecific destination, as different paths throughREACHABLE(*) entry times out, theDODAG mayentry MUST bepropagating information up the DODAG forplaced into thesame destination. A node that is recording routingUNREACHABLE statewill keep track of the information from each neighbor independently,andwhen it comes timeno-DAO SHOULD be scheduled to send topropagatethe node's DAOmessageParents. (TBD MUST?) 2. When a no-DAO for aparticular prefix to the DA parents, then theREACHABLE(*) entry is received with a newer DAOinformation will be selected from amongSequence Number, theadvertising neighbors who offerentry MUST be placed into theleast depthUNREACHABLE state and no-DAO SHOULD be scheduled to send to thedestination.node's DAO Parents. 3. When anode loses connectivityREACHABLE(*) entry is toa childbe removed because NUD or equivalent has determined that the next-hop neighbor isused as next hop for a route learned from a DAO,no longer reachable, thenode should cleanup all routesentry MUST be placed into the UNREACHABLE state and no-DAO SHOULD be scheduled to send to the node's DAOstates that are relatedParents. 4. When a REACHABLE(*) entry is tothat child. Ifbe removed because an associated Forwarding Error has been returned by thelost child wasnext-hop neighbor, theonly adjacency leadingentry MUST be placed into the UNREACHABLE state and no-DAO SHOULD be scheduled to send to the node's DAOprefix, the node should poisonParents. 5. When a DAO (or no-DAO) for a REACHABLE(*) entry is received with an older or unchanged DAO Sequence Number, then theroute by sending no-DAOs toDAO (or no- DAO) SHOULD be ignored and theparents to which it has advertisedassociated entry MUST NOT be updated with the stale information. 6.2.4.1.1.2.1. REACHABLE(Confirmed) 1. When a DAOprefixes. Thefor a previously unknown (or UNREACHABLE) destinationadvertisement mechanism stores the prefix entries in one of 3 abstract lists; the Connected, the Reachableis received andthe Unreachable lists. The Connected list correspondsis to be stored, it MUST be entered into theprefixes owned and managed byrouting table in thelocal node. The Reachable list contains prefixes for whichREACHABLE(Confirmed) state. Alternately the nodekeeps receivingmay behave as a non-storing node with respect to this destination. 2. When a DAOmessages, andforthose prefixes which have not yet timed out. The Unreachable list keeps track of prefixes which are no longer valid and ina REACHABLE(Confirmed) entry is received with a newer DAO Sequence Number theprocessentry MUST be updated with the logical equivalent ofbeing deleted, in order to sendthe DAOmessages with zero lifetime (also called no-DAO)contents. 3. When a DAO for a REACHABLE(Confirmed) entry is expected, e.g. because a DIO to request a DAO refresh is sent, then theDA parents. 6.8.1.1.1. Destination Advertisement Timers The destination advertisement mechanism requires 2 timers;DAO entry MUST be placed in theDelayDAO timerREACHABLE(Pending) state and theRemoveTimer. o The DelayDAO timer is armed upon a stimulationassociated Retry Counter MUST be set tosend0. 6.2.4.1.1.2.2. REACHABLE(Pending) 1. When adestination advertisement (such asDAO for aDIO message fromREACHABLE(Pending) entry is received with aDA parent). Whennewer DAO Sequence Number, thetimer is armed, all entriesentry MUST be updated with the logical equivalent of the DAO contents and the entry MUST be placed in theReachable list as well as all entriesREACHABLE(Confirmed) state. 2. When a DAO forConnected list are seta REACHABLE(Pending) entry is expected, e.g. because DAO has (again) been triggered with respect tonot be reported yet forthatparticular DA parent. o Forneighbor, then the associated Retry Counter MUST be incremented. 3. When aroot,theDIO timer hasassociated Retry Counter for aduration of DEF_DAO_LATENCY. ForREACHABLE(Pending) entry reaches anodemaximum threshold, the entry MUST be placed into the UNREACHABLE state and no-DAO SHOULD be scheduled to send to the node's DAO Parents. 6.2.4.1.1.3. Operation ina DODAG iteration,theDelayDAO timer has a durationUNREACHABLE state 1. An implementation SHOULD bound the time that the entry israndomized between (DEF_DAO_LATENCY divided byallocated in theRankUNREACHABLE state. Upon the equivalent expiry of thenode) and (DEF_DAO_LATENCY divided byrelated timer (RemoveTimer), theRank ofentry SHOULD be suppressed. 2. While theparent). The intentionentry isthat nodes located deeperin theDODAG iteration should haveUNREACHABLE state ashorter DelayDAO timer, allowing DAO messagesnode SHOULD make achancereasonable attempt tobe reported from deeper inreport a no-DAO to each of theDODAG and potentially aggregated along sub-DAGs before propagating further up. o The RemoveTimer is usedDAO parents. 3. When the node has completed an attempt toclean up entries for whichreport a no-DAO to each of the DAOmessages are no longer being received fromparents, thesub-DAG. *entry SHOULD be suppressed. 6.2.5. Operation of DAO Non-storing Nodes 1. When aDIO message is sent thatDAO isrequesting destination advertisements,received from aflag is setchild by a node who will not store a routing table entry forallthe DAO, the node MUST schedule to pass the DAOentriescontents along to its DAO parents. Prior to passing the DAO along, the node MUST process the DAO as follows, in order that information necessary to construct a loose source route may be accumulated within therouting table. * IfDAO payload as it moves up theflag hasDODAG: 1. The most recent addition to the RRStack (the 'next waypoint') is investigated to determine if the node alreadybeen set forhas aDAO entry,route provisioned to theretry count is incremented. *waypoint. If the node already has such aDAO messageroute, then it isreceivednot necessary to add additional information toconfirm the entry,theentry is refreshed andRRStack. The node SHOULD NOT modify theflag and count may be cleared. *RRStack further. 2. Ifat least one entry has reached a threshold value andtheRemoveTimer isnode does notrunning,have a route provisioned to theentry is considerednext waypoint, then the node MUST append the address of the child tobe probably gonethe RRStack, and increment RRCount. 6.2.6. Scheduling to Send DAO (or no-DAO) 1. An implementation SHOULD arrange to rate-limit theRemoveTimer is started. *sending of DAOs. 2. Whenthe RemoveTimer elapse, DAO messages with lifetime 0, i.e. no-DAOs, are sentscheduling toexplicitly inform DA parents thatsend a DAO, an implementation SHOULD equivalently start a timer (DelayDAO) to delay sending theentries which have reachedDAO. If thethreshold are no longer available, andtimer has already been armed then therelated routing statesDAO may bepropagatedconsidered as already scheduled, andcleaned up.implementation SHOULD leave the timer running at its present duration. oThe RemoveTimer has a durationIn order to increase the effectiveness ofmin (MAX_DESTROY_INTERVAL, TBD(DIO Trickle Timer Interval)). 6.8.1.2. Multicast Destination Advertisement Messages It is also possible for a nodeaggregation, an implementation MAY allow time tomulticast a DAO messagereceive no-DAOs from its sub- DODAG prior to emitting DAOs to its DAO Parents. * The scheduled delay in such cases may be, for example, such that DAO_LATENCY/f(self_rank) <= delay < DAO_LATENCY/ f(parent_rank), where f(rank) is floor(rank/ MinHopRankIncrease), such that nodes deeper in thelink-local scope all-nodes multicast address FF02::1. This messageDODAG may tend to report DAO messages first before their parent nodes willbe received by all node listeningreport DAO messages. Note that this suggestion is intended as an optimization to allow efficient aggregation -- it is not required for correct operation inrange oftheemitting node.general case. 6.2.7. Triggering DAO Message from the Sub-DODAG Note: TheobjectiveDIO is modified toenable direct P2P communication, between destinations directly supported by neighboring nodes, without needing the RPL routing structure to relay the packets. A multicast DAO message MUST beadd a 'S' flag, which is usedonlytoadvertise information about self, i.e. prefixesindicate if a non-root ancestor storing routing table entries learned from DAOs. This allows an optimization in theConnected list or addresses owned by this node. This would typically be a multicast group that thiscase where ONLY the root node islistening to or a global address owned by this node, thoughstoring such routing table entries, then itcan be used to advertise any prefix owned by this node as well. A multicast DAO messageis notusednecessary for an intermediate node to trigger DAO messages from its sub-DODAG when it changes its DAO Parent. 1. The DODAG root MUST clear the 'S' flag when it emits DIO messages. 2. Non-root nodes that store routingand does not presumetable entries learned from DAOs MUST set the 'S' flag when they emit DIO messages. 3. A node that has anyDODAG relationship betweenDAO Parent with theemitter and'S' flag set MUST also set thereceiver;'S' flag when it emits DIO messages. 4. A node that has all DAO Parents with cleared 'S' flags MUST clear the 'S' flag when it emits DIO messages. 5. A DAO Trigger Sequence Number (DTSN) MUSTNOTbeused to relay information learned (e.g. informationmaintained by each node per RPL Instance. The DTSN, in conjunction with theReachable list) from another node; information obtained'T' flag from the DIO message, provides amulticastmeans by which DAOMAYmessages may beinstalledreliably triggered in therouting table and MAYevent of topology change. 6. The DTSN MUST bepropagatedadvertised bya router in unicast DAOs. A node receiving a multicast DAO message addressed to FF02::1 MAY install prefixes contained intheDAO messagenode in therouting table for local use. Such aDIO message. 7. A nodeMUST NOT perform any other processing onkeeps track of theDAO message (i.e. such a node does not presumeDTSN that itis a DA parent). 6.8.1.3. Unicast Destination Advertisement Messageshas heard fromChild to Parent When sending a destination advertisement to a DA parent, a node includes the DAOs for prefix entries not already reported (sincethe lastDA Trigger from anDIOmessage) in the Reachable and Connected lists, as well as no-DAOs for all the entries in the Unreachable list. Depending onfrom each of itspolicy and abilityDAO Parents. Note that there is one DTSN maintained per DAO Parent-- each DAO Parent may independently increment it at will. (TBD A change toretain routing state, the receivingDTSN does not indicate DAG inconsistency?). 8. A node that is not a fully-storing node SHOULDkeepincrement its own DTSN when it adds arecord of the reported DAO message. If the DAO message offersnew parent, that parent having thebest route'S' flag set, to its DAO Parent set. It MAY defer advertising theprefixincrement asdetermined by policy and other prefix records, the node SHOULD installlong as it has aroute to the prefix reported in theDAOmessage via the link local address of the reporting neighbor andparent that already provides adequate connectivity. 9. A node that is not a fully-storing node MUST increment its own DTSN when itSHOULD further propagate the information inreceives aDAO message. TheDIOmessagefromthe DODAG root is used to synchronize the whole DODAG iteration, including the periodic reporting of destination advertisements back up the DODAG. Its perioda DAO Parent that contains a newly incremented DTSN. (The newly incremented DTSN isexpected to vary, depending ondetected by comparing theconfiguration ofvalue received in the DIOtrickle timer. When awith the value last recorded for that DAO parent). 10. A fully-storing node MUST increment its own DTSN when it receives a DIOmessage over an LLN interfacefrom aDA parent, the DelayDAO is armed to forceDAO Parent that contains afull update.newly incremented DTSN and a set 'T' flag. 11. Whenthea storing or non-storing nodebroadcastsjoins aDIO message on an LLN interface, for all entries on that interface: o If the entry is CONFIRMED, it goes PENDING with the retry count set to 0. o If the entry is PENDING, the retry count is incremented. Ifnew DODAG iteration, itreaches a maximum threshold, the entry goes ELAPSED If at least one entry is ELAPSED at the end of the process:SHOULD increment its DTSN as if theRemoveTimer is not running then it is armed with a jitter. Since the DelayDAO timer'T' flag has been set. 12. DAO Transmission SHOULD be scheduled when aduration that decreases with the depth, itnew parent isexpectedadded toreceive allthe DAOmessagesParent set. 13. A node that receives a newly incremented DTSN fromall children before the timer elapses and the full update is sent to the DA parents. Once the RemoveTimera DAO Parent MUST schedule a DAO transmission. o When a node that iselapsed,not fully-storing sees a DTSN increment, it will increment its own DTSN. This will cause theprefix entry is scheduledDTSN increment tobe removed and movedextend down the DODAG to theUnreachable list if there are any DA parents that needfirst fully-storing node, which will send its DAOs back up, rebuilding source routes information along the way tobe informed ofthechange in status forfirst node that incremented theprefix, otherwiseDTSN, who then may report theprefix entry is cleaned up right away. The prefix entrynew DAO information to its new parent. o When a fully-storing node sees a DTSN increment, it isremovedcaused to reissue its entire set of routing table entries learned fromthe Unreachable list when no more DA parentsDAOs (or an aggregated subset thereof), but will not need tobe informed. This condition may be satisfiedincrement its own DTSN. The 'DTSN increment wave' stops when it encounters fully-storing nodes. o When ano-DAOfully-storing node sees a DTSN increment AND the 'T' flag issent toset, it does increment its own DTSN as well. The 'T' flag 'punches through' allcurrent DA parents indicating the loss of the prefix, and noting thatnodes, causing all routing tables insome cases parents may have been removed from the set of DA parents. 6.8.1.4. Other Events Finally,thedestination advertisement mechanism respondsentire sub-DODAG toa series of events, such as: o Destination advertisement operation stopped: All entries in the abstract lists are freed. All the routes learned frombe refreshed. 6.2.8. Sending DAO Messages to DAO Parents 1. When storing nodes send DAO messagesare removed. o Interface going down:forallstored entriesintheReachable list on that interface,RRStack SHOULD be cleared in theassociated routeDAO message. 2. DAO Messages sent to DAO Parents MUST be unicast. * The IPv6 Source Address isremoved, andtheentrynode sending the DAO message. * The IPv6 Destination Address isscheduled to be removed. o Loss of routing adjacency:DAO parent. 3. When therouting adjacencyappointed time arrives (DelayDAO) fora neighbor is lost, as per the procedures described in Section 6.11, and iftheassociated entries are intransmission of DAO messages (with jitter as appropriate) for theReachable list,requested entries, the implementation MAY aggregate theassociated routes are removed, andthe entriesare scheduledinto a reduced numbers of DAOs to bedestroyed. o Changes to DA parent set: all entries in the Reachable list are setreported tonot 'reported'each parent, andDelayDAOperform compression if possible. 4. Note: it isarmed. 6.8.1.5. Aggregation of Prefixes by a Node There may be number of cases whereNOT RECOMMENDED that aaggregation mayDAO Transmission (No-DAO) beshared withinscheduled when agroupDAO Parent is removed from the DAO Parent set. 6.2.9. Multicast Destination Advertisement Messages A special case ofnodes. In such a case, itDAO operation, distinct from unicast DAO operation, ispossible to use aggregation techniques with destination advertisements and improve scalability. Other cases might occur formulticast DAO operation whichadditional support is required:may be used to populate '1-hop' routing table entries. 1.The aggregatingA nodeis attached within the sub-DAG ofMAY multicast a DAO message to the link-local scope all- nodesit is aggregating for.multicast address FF02::1. 2. Anode that is tomulticast DAO message MUST beaggregated for is located somewhere else within the DODAG iteration, not in the sub-DAG of the aggregating node. 3. A node that isused only tobe aggregated for is located somewhere else in the LLN. Consider a node M that is performing an aggregation, and a node N that isadvertise information about self, i.e. prefixes directly connected tobe a member of the aggregation group. A node Z situated above the node M in the DODAG, but not above node N, will see the advertisements for the aggregationor owned byM but not that of the individual prefix for N. Such a node Z will route all the packets for node N towards node M, butthis node, such as a multicast group that the nodeM will have no routeis subscribed to or a global address owned by thenode N and will failnode. 3. A multicast DAO message MUST NOT be used toforward. Additional protocols mayrelay connectivity information learned (e.g. through unicast DAO) from another node. 4. Information obtained from a multicast DAO MAY beapplied beyondinstalled in thescope of this specification to dynamically elect/provision an aggregating noderouting table andgroups of nodes eligible toMAY beaggregatedpropagated by a node inorder to provide route summarization forunicast DAOs. 5. A node MUST NOT perform any other DAO related processing on asub-DAG. 6.9. Loop Detection RPL loop avoidance mechanisms are kept simple and designed to minimize churn and states. Loops may form forreceived multicast DAO, in particular anumbernode MUST NOT perform the actions ofreasons, from control packet loss to sibling forwarding. RPL includesareactive loop detection technique that protects from meltdown and triggers repairDAO parent upon receipt ofbroken paths. RPL loop detection uses information that is placed into the packet in the IPv6 flow label.a multicast DAO. o TheIPv6 flow label is defined in [RFC2460] and its operation is further specified in [RFC3697]. For the purpose of RPL operations, the flow label is constructed as follows: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |O|S|R|F| SenderRank | InstanceID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 12: RPL Flow Label Down 'O' bit: 1-bit flag indicating whether the packet is expectedmulticast DAO may be used toprogress up or down. A router sets the 'O' bit whenenable direct P2P communication, without needing thepacket is expectRPL routing structure toprogress down (using DAO routes), and resets it when forwarding towards the root ofrelay the packets. o The multicast DAO does not presume any DODAGiteration. A host MUST set the bit to 0. Sibling 'S' bit: 1-bit flag indicating whetherrelationship between thepacket has been forwarded via a sibling atemitter and thepresent rank,receiver. 7. Packet Forwarding anddenotesLoop Avoidance/Detection 7.1. Suggestions for Packet Forwarding When forwarding ariskpacket to a destination, precedence is given to selection of asibling loop. A host setsnext-hop successor as follows: 1. In thebitscope of this specification, it is preferred to0. Rank-Error 'R' bit: 1-bit flag indicating whetherselect arank error was detected. A rank error is detected when there issuccessor from amismatch in the relative ranks andDODAG iteration that matches thedirection as indicatedRPLInstanceID marked in the'O' bit. A host MUST setIPv6 header of thebit to 0. Forwarding-Error 'F' bit: 1-bit flag indicatingpacket being forwarded. 2. If a local administrative preference favors a route thatthis node can not forwardhas been learned from a different routing protocol than RPL, then use that successor. 3. If there is an entry in thepacket further towardsrouting table matching thedestination. The 'F' bit might be set by siblingdestination thatcan not forward tohas been learned from aparentmulticast destination advertisement (e.g. the destination is apacket withone-hop neighbor), then use that successor. 4. If there is an entry in theSibling 'S' bit set, or by a child noderouting table matching the destination thatdoes not havehas been learned from aroute tounicast destinationfor a packet withadvertisement (e.g. the destination is located down'O' bit set. A host MUST set the bit to 0. SenderRank: 8-bit field set to zero bythesource andsub- DODAG), then use that successor. 5. If there is a DODAG iteration offering a route toits rank byarouter that forwards inside the RPL network. InstanceID: 8-bit field indicatingprefix matching the destination, then select one of those DODAGinstance along which the packetparents as a successor. 6. If there issent. 6.9.1. Source Node Operation A packeta DODAG parent offering a default route then select thatis sourced atDODAG parent as anode connected tosuccessor. 7. If there is aRPL network or destined toDODAG iteration offering anode connectedroute to aRPL network MUST be issued withprefix matching theflow label zeroed out,destination, butforall DODAG parents have been tried and are temporarily unavailable (as determined by theInstanceID field. Ifforwarding procedure), then select a DODAG sibling as a successor. 8. Finally, if no DODAG siblings are available, thesourcepacket isaware of the InstanceID thatdropped. ICMP Destination Unreachable may be invoked. An inconsistency ispreferred for the flow, then it MUST set the InstanceID field in the flow label accordingly, otherwise itdetected. TTL MUSTset it to the RPL_DEFAULT_INSTANCE.be decremented when forwarding. Ifa compression mechanism such as 6LoWPANthe packet isappliedbeing forwarded via a sibling, then the TTL MAY be decremented more aggressively (by more than one) to limit thepacket,impact of possible loops. Note that theflow labelchosen successor MUST NOT becompressed even if it is set to all zeroes. 6.9.2. Router Operation 6.9.2.1. Conformance to RFC 3697 [RFC3697] mandatesthe neighbor that was theFlow Label value set bypredecessor of thesource MUST be delivered unchanged topacket (split horizon), except in thedestination node(s). In order to restorecase where it is intended for theflow labelpacket toits original value,change from anRPL router that delivers a packetup toa destination connectedan down flow, such as switching from DIO routes toa RPL network or thatDAO routesa packet outsideas the destination is neared. 7.2. Loop Avoidance and Detection RPLnetwork MUST zero out all the fields but the InstanceID field that must be delivered without a change. 6.9.2.2. Instance Forwarding Instance IDsloop avoidance mechanisms areusedkept simple and designed toavoid loops between DODAGs from different origins. DODAGs that constructedminimize churn and states. Loops may form forantagonistic constraints might contain paths that, if mixed together, would yield loops. Those loops are avoided by forwardinga number of reasons, from control packetalong the DODAG that is associatedloss to sibling forwarding. RPL includes agiven instance. The InstanceID is placed by the source in the flow label. This InstanceID MUST match the DODAG instance onto which the packet is placed by any node, be it a host or router. When a router receives a packet that is flagged with a given InstanceID and the node can forward the packet along the DODAG associated toreactive loop detection technique thatinstance, then the router MUST do soprotects from meltdown andleavetriggers repair of broken paths. RPL loop detection uses information that is placed into theInstanceID flag unchanged. If any node can not forward apacketalong the DODAG associated to the InstanceIDin the IPv6 flowlabel, then the node SHOULD discard the packet. 6.9.2.3. DAG Inconsistency Loop Detectionlabel. TheDODAGIPv6 flow label isinconsistent ifdefined in [RFC2460] and its operation is further specified in [RFC3697]. For thedirectionpurpose ofa packet does not matchRPL operations, the flow label is constructed as follows: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |O|S|R|F| SenderRank | RPLInstanceID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 12: RPL Flow Label Down 'O' bit: 1-bit flag indicating whether therank relationship. A receiver detects an inconsistency if it receives apacketwith either:is expected to progress up or down. A router sets the 'O' bitset (to down) from a node of a higher rank.when the'O' bit reset (for up) from a node of a lesser rank.packet is expect to progress down (using DAO routes), and resets it when forwarding towards the'S' bit set (to sibling) from a noderoot ofa different rank. Whenthe DODAGroot increments the DAG Sequence Number a temporary rank discontinuity may form between the next iteration anditeration. A host MUST set theprior iteration, in particular if nodes are adjusting their rank inbit to 0. Sibling 'S' bit: 1-bit flag indicating whether thenext iteration and deferring their migration intopacket has been forwarded via a sibling at thenext iteration. A router that is stillpresent rank, and denotes amemberrisk ofthe prior iteration may choose to forwardapacketsibling loop. A host sets the bit to 0. Rank-Error 'R' bit: 1-bit flag indicating whether a(future) parent thatrank error was detected. A rank error is detected when there is a mismatch in thenext iteration. In some cases this could cause the parent to detect an inconsistency because the rank-ordering in the prior iteration is not necessarilyrelative ranks and thesamedirection as indicated in thenext iteration and'O' bit. A host MUST set thepacket may be judgedbit to 0. Forwarding-Error 'F' bit: 1-bit flag indicating that this node can notbe makingforwardprogress. Ifthesending router is aware thatpacket further towards thechosen successor has already joineddestination. The 'F' bit might be set by sibling that can not forward to a parent a packet with thenext iteration, thenSibling 'S' bit set, or by a child node that does not have a route to destination for a packet with thesending routerdown 'O' bit set. A host MUSTupdateset theSenderRankbit toINFINITE_RANK as it forwards0. SenderRank: 8-bit field set to zero by thepackets acrosssource and to its rank by a router that forwards inside thediscontinuity intoRPL network. RPLInstanceID: 8-bit field indicating thenextDODAGiteration in order to avoid a false detection of rank inconsistency. One inconsistencyinstance along which thepathpacket isnot considered assent. 7.2.1. Source Node Operation A packet that is sourced at a node connected to a RPL network or destined to a node connected to acritical error andRPL network MUST be issued with thepacket may continue. But a second detection alongflow label zeroed out, but for thepath of a same packet should not occur andRPLInstanceID field. If thepacket is dropped. This processsource iscontrolled by the Rank-Error bit inaware of theFlow Label. When an inconsistency,RPLInstanceID that isdetected on a packet, ifpreferred for theRank-Error bit was not setflow, thenthe Rank-Error bit is set. IfitwasMUST set thepacket is discarded andRPLInstanceID field in thetrickle timer is reset. 6.9.2.4. Sibling Loop Avoidance Whenflow label accordingly, otherwise it MUST set it to the RPL_DEFAULT_INSTANCE. If apacketcompression mechanism such as 6LoWPAN isforwarded along siblings, it cannot be checked for forward progress and may loop between siblings. Experimental evidence has shown that one sibling hop canapplied to the packet, the flow label MUST NOT bevery useful butcompressed even if it isgenerally sufficientset toavoid loops. Based onall zeroes. 7.2.2. Router Operation 7.2.2.1. Conformance to RFC 3697 [RFC3697] mandates thatevidence, this specification enforcesthesimple ruleFlow Label value set by the source MUST be delivered unchanged to the destination node(s). In order to restore the flow label to its original value, an RPL router that delivers a packetmay not make 2 sibling hops into arow. Whendestination connected to ahost issuesRPL network or that routes a packetor whenoutside the RPL network MUST zero out all the fields but the RPLInstanceID field that must be delivered without arouter forwardschange. 7.2.2.2. Instance Forwarding Instance IDs are used to avoid loops between DODAGs from different origins. DODAGs that constructed for antagonistic constraints might contain paths that, if mixed together, would yield loops. Those loops are avoided by forwarding a packet along the DODAG that is associated to anon-sibling,given instance. The RPLInstanceID is placed by theSibling bitsource in the flow label. This RPLInstanceID MUST match the RPL Instance onto which the packetmustis placed by any node, bereset.it a host or router. When a routerforwards toreceives asibling: if the Sibling bit was not set then the Sibling bitpacket that isset. If the Sibling bit was set then thenflagged with a given RPLInstanceID and therouter SHOULD returnnode can forward the packettoalong thesibling thatDODAG associated to thatpassed it withinstance, then theForwarding-Error 'F' bit set. 6.9.2.5. DAO Inconsistency Loop Detection and Recovery A DAO inconsistency happens whenrouterthat has an down DAO route via a child that is a remnant from an obsolete state that is not matched inMUST do so and leave thechild. With DAO inconsistency loop recovery,RPLInstanceID flag unchanged. If any node can not forward a packetcan be usedalong the DODAG associated torecursively explore and cleanuptheobsolete DAO states along a sub-DAG. In a general manner, a packet that goes down should never go up again. So rather than routing up a packet withRPLInstanceID in thedown bit set,flow label, then therouter MUSTnode SHOULD discard the packet.If DAO inconsistency loop recovery7.2.2.3. DAG Inconsistency Loop Detection The DODAG isapplied, then the router SHOULD sendinconsistent if the direction of a packettodoes not match theparent that passedrank relationship. A receiver detects an inconsistency if it receives a packet with either: theForwarding-Error 'F''O' bitset. 6.9.2.6. Forward Path Recovery Upon receivingset (to down) from apacket withnode of aForwarding-Errorhigher rank. the 'O' bitset,reset (for up) from a node of a lesser rank. the 'S' bit set (to sibling) from a nodeMUST removeof a different rank. When therouting states that caused forwarding to that neighbor, clearDODAG root increments theForwarding-Error bitDODAGSequenceNumber a temporary rank discontinuity may form between the next iteration andattempt to sendthepacket again. The packetprior iteration, in particular if nodes are adjusting their rank in the next iteration and deferring their migration into the next iteration. A router that is still a member of the prior iteration mayits waychoose toan alternate neighbor. Ifforward a packet to a (future) parent thatalternate neighbor still has an inconsistent DAO state via this node,is in theprocess will recurse,next iteration. In some cases thisnode will setcould cause theForwarding- Error 'F' bit andparent to detect an inconsistency because therouting staterank-ordering in thealternate neighbor will be cleaned upprior iteration is not necessarily the same aswell. 6.10. Multicast Operation This section describes furtherin themulticast routing operations over an IPv6 RPL network,next iteration andspecifically how unicast DAOs canthe packet may beusedjudged torelay group registrations up. Wherevernot be making forward progress. If thefollowing text mentions MLD, one can read MLDv2 or v3. As is traditional, a listener uses a protocol such as MLD with asending routerto register to a multicast group. Alongis aware that the chosen successor has already joined thepath betweennext iteration, then the sending routerandMUST update theDODAG root, MLD requests are mapped and transportedSenderRank to INFINITE_RANK asDAO messages withinit forwards theRPL protocol; each hop coalescespackets across themultiple requests fordiscontinuity into the next DODAG iteration in order to avoid asame groupfalse detection of rank inconsistency. One inconsistency along the path is not considered as asingle DAO message tocritical error and theparent(s), inpacket may continue. But afashion similar to proxy IGMP, but recursively between child router and parent up tosecond detection along theroot. A router might select to passpath of alistener registration DAO message to its preferred parent only,same packet should not occur and the packet is dropped. This process is controlled by the Rank-Error bit inwhich case multicast packets coming back might be lost for all of its sub-DAGthe Flow Label. When an inconsistency, is detected on a packet, if thetransmission fails over that link. AlternativelyRank-Error bit was not set then therouter might select to copy additional parents asRank-Error bit is set. If itwould dowas set the packet is discarded and the trickle timer is reset. 7.2.2.4. Sibling Loop Avoidance When a packet is forwarded along siblings, it cannot be checked forDAO messages advertising unicast destinations, in which case there mightforward progress and may loop between siblings. Experimental evidence has shown that one sibling hop can beduplicatesvery useful but is generally sufficient to avoid loops. Based on that evidence, this specification enforces the simple rule that a packet may not make 2 sibling hops in a row. When a host issues a packet or when a routerwill needforwards a packet toprune. Asaresult, multicast routing states are installednon-sibling, the Sibling bit ineachthe packet must be reset. When a routeronforwards to a sibling: if theway fromSibling bit was not set then thelisteners toSibling bit is set. If theroot, enablingSibling bit was set then then the router SHOULD return theroot to copy a multicastpacket toall its children routersthe sibling thathad issued athat passed it with the Forwarding-Error 'F' bit set. 7.2.2.5. DAOmessage including aInconsistency Loop Detection and Recovery A DAOforinconsistency happens when router thatmulticast group, as well as all the attached nodeshas an down DAO route via a child thatregistered over MLD. For unicast traffic, itisexpected that the grounded root ofa remnant from anDODAG terminates RPL and MAY redistribute the RPL routes over the external infrastructure using whatever routing protocol is used there. For multicast traffic, the root MAY proxy MLD for all the nodes attached to the RPL routers (this would be needed if the multicast sourceobsolete state that islocatednot matched in theexternal infrastructure). For suchchild. With DAO inconsistency loop recovery, asource, thepacketwillcan bereplicated as it flows down the DODAG based on the multicast routing table entries installed fromused to recursively explore and cleanup the obsolete DAOmessage. Forstates along a sub-DODAG. In a general manner, a packet that goes down should never go up again. So rather than routing up asource insidepacket with theDODAG,down bit set, thepacket is passed torouter MUST discard thepreferred parents, and if that failspacket. If DAO inconsistency loop recovery is applied, thentothealternates inrouter SHOULD send theDODAG. Thepacketis also copiedtoall the registered children, except fortheoneparent that passed it with thepacket. Finally, if there isForwarding-Error 'F' bit set. 7.2.2.6. Forward Path Recovery Upon receiving alistener inpacket with a Forwarding-Error bit set, theexternal infrastructure thennode MUST remove theDODAG root hasrouting states that caused forwarding tofurther propagate the packet intothat neighbor, clear theexternal infrastructure. As a result,Forwarding-Error bit and attempt to send theDODAG Root acts aspacket again. The packet may its way to anautomatic proxy Rendezvous Point foralternate neighbor. If that alternate neighbor still has an inconsistent DAO state via this node, theRPL network,process will recurse, this node will set the Forwarding- Error 'F' bit andas source towardstheInternet for all multicast flows startedrouting state in theRPL LLN. So regardless of whether the root is actually attached toalternate neighbor will be cleaned up as well. 8. Multicast Operation This section describes further theInternet,multicast routing operations over an IPv6 RPL network, andregardless of whether the DODAG is grounded or floating, the rootspecifically how unicast DAOs canserve inner multicast streams at all times. 6.11. Maintenance of Routing Adjacency The selection of successors, along the default paths up alongbe used to relay group registrations up. Wherever theDODAG,following text mentions MLD, one can read MLDv2 oralongv3. As is traditional, a listener uses a protocol such as MLD with a router to register to a multicast group. Along thepaths learned from destination advertisements down alongpath between theDODAG, leads torouter and theformation of routing adjacencies that require maintenance. In IGPs suchDODAG root, MLD requests are mapped and transported asOSPF [RFC4915] or IS-IS [RFC5120],DAO messages within themaintenance of a routing adjacency involvesRPL protocol; each hop coalesces theuse of Keepalive mechanisms (Hellos) or other protocols such as BFD ([I-D.ietf-bfd-base]) and MANET Neighborhood Discovery Protocol (NHDP [I-D.ietf-manet-nhdp]). Unfortunately, such an approach is not desirable in constrained environments suchmultiple requests for a same group asLLN and would leada single DAO message toexcessive control traffic in light ofthedata traffic withparent(s), in anegative impact on both link loads and nodes resources. Overheadfashion similar tomaintain the routing adjacency should be minimized. Furthermore, it is not always possibleproxy IGMP, but recursively between child router and parent up torely onthelink or transport layerroot. A router might select toprovide information of the associated link state. The network layer needspass a listener registration DAO message tofall back onitsown mechanism. Thus RPL makes use of a different approach consistingpreferred parent only, in which case multicast packets coming back might be lost for all ofprobingits sub-DODAG if theneighbor using a Neighbor Solicitation message (see [RFC4861]). The reception of a Neighbor Advertisement (NA) message withtransmission fails over that link. Alternatively the router might select to copy additional parents as it would do for DAO messages advertising unicast destinations, in which case there might be duplicates that the"Solicited Flag" set is usedrouter will need toverifyprune. As a result, multicast routing states are installed in each router on thevalidity ofway from therouting adjacency. Such mechanism MAY be used priorlisteners tosending a data packet. This allows for detecting whether or nottherouting adjacency is still valid, and should it not beroot, enabling thecase, select another feasible successorroot toforward the packet. 7. Suggestions for Packet Forwarding When forwardingcopy a multicast packet to all its children routers that had issued adestination, precedence is given to selection ofDAO message including anext-hop successorDAO for that multicast group, asfollows: 1. Inwell as all thescope of this specification,attached nodes that registered over MLD. For unicast traffic, it ispreferred to select a successor from a DODAG iterationexpected thatmatches the InstanceID marked intheIPv6 headergrounded root of an DODAG terminates RPL and MAY redistribute thepacket being forwarded. 2. If a local administrative preference favors a route that has been learned from a differentRPL routes over the external infrastructure using whatever routing protocolthan RPL, then use that successor. 3. If thereisan entry inused there. For multicast traffic, therouting table matchingroot MAY proxy MLD for all thedestination that has been learned from a multicast destination advertisement (e.g.nodes attached to thedestination is a one-hop neighbor), then use that successor. 4. If thereRPL routers (this would be needed if the multicast source isan entrylocated in the external infrastructure). For such a source, the packet will be replicated as it flows down the DODAG based on the multicast routing tablematching the destination that has been learnedentries installed from the DAO message. For aunicast destination advertisement (e.g.source inside thedestinationDODAG, the packet islocated downpassed to thesub-DAG),preferred parents, and if that fails thenuseto the alternates in the DODAG. The packet is also copied to all the registered children, except for the one thatsuccessor. 5. Ifpassed the packet. Finally, if there is a listener in the external infrastructure then the DODAGiteration offering a routeroot has to further propagate the packet into the external infrastructure. As aprefix matchingresult, thedestination, then select one of thoseDODAGparentsRoot acts asa successor. 6. If there is a DAG parent offering a default route then select that DAG parentan automatic proxy Rendezvous Point for the RPL network, and asa successor. 7. If theresource towards the Internet for all multicast flows started in the RPL LLN. So regardless of whether the root isa DODAG iteration offering a routeactually attached toa prefix matchingthedestination, but all DAG parents have been triedInternet, andare temporarily unavailable (as determined byregardless of whether theforwarding procedure), then select a DAG siblingDODAG is grounded or floating, the root can serve inner multicast streams at all times. 9. Maintenance of Routing Adjacency The selection of successors, along the default paths up along the DODAG, or along the paths learned from destination advertisements down along the DODAG, leads to the formation of routing adjacencies that require maintenance. In IGPs such as OSPF [RFC4915] or IS-IS [RFC5120], the maintenance of asuccessor. 8. Finally, if no DAG siblings are available,routing adjacency involves thepacket is dropped. ICMP Destination Unreachable may be invoked. An inconsistencyuse of Keepalive mechanisms (Hellos) or other protocols such as BFD ([I-D.ietf-bfd-base]) and MANET Neighborhood Discovery Protocol (NHDP [I-D.ietf-manet-nhdp]). Unfortunately, such an approach isdetected. TTL MUST be decremented when forwarding. Ifnot desirable in constrained environments such as LLN and would lead to excessive control traffic in light of thepacket is being forwarded viadata traffic with asibling, thennegative impact on both link loads and nodes resources. Overhead to maintain theTTL MAYrouting adjacency should bedecremented more aggressively (by more than one)minimized. Furthermore, it is not always possible tolimitrely on theimpactlink or transport layer to provide information ofpossible loops. Note thatthechosen successor MUST NOT beassociated link state. The network layer needs to fall back on its own mechanism. Thus RPL makes use of a different approach consisting of probing the neighborthat wasusing a Neighbor Solicitation message (see [RFC4861]). The reception of a Neighbor Advertisement (NA) message with thepredecessor"Solicited Flag" set is used to verify the validity of thepacket (split horizon), except inrouting adjacency. Such mechanism MAY be used prior to sending a data packet. This allows for detecting whether or not thecase where itrouting adjacency isintended forstill valid, and should it not be thepacket to change from an up to an down flow, such as switching from DIO routescase, select another feasible successor toDAO routes asforward thedestination is neared. 8.packet. 10. Guidelines for Objective Functions An Objective Function (OF) allows for the selection of a DODAG to join, and a number of peers in thatDAGDODAG as parents. The OF is used to compute an ordered list of parents. The OF is also responsible to compute the rank of the device within the DODAG iteration. The Objective Function is indicated in the DIO message using an Objective Code Point (OCP), as specified in [I-D.ietf-roll-routing-metrics], and indicates the method that must be used to compute the DODAG (e.g. "minimize the path cost using the ETX metric and avoid`Blue''Blue' links"). The Objective Code Points are specified in[I-D.ietf-roll-routing-metrics][I-D.ietf-roll-routing-metrics], [I-D.ietf-roll-of0], and related companion specifications. Most Objective Functions are expected to follow the same abstract behavior: o The parent selection is triggered each time an event indicates that a potential next hop information is updated. This might happen upon the reception of a DIO message, a timer elapse, or a trigger indicating that the state of a candidate neighbor has changed. o An OF scans all the interfaces on the device. Although there may typically be only one interface in most application scenarios, there might be multiple of them and an interface might be configured to be usable or not for RPL operation. An interface can also be configured with a preference or dynamically learned to be better than another by some heuristics that might be link-layer dependent and are out of scope. Finally an interface might or not match a required criterion for an Objective Function, for instance a degree of security. As a result some interfaces might be completely excluded from the computation, while others might be more or less preferred. o An OF scans all the candidate neighbors on the possible interfaces to check whether they can act as a router for a DODAG. There might be multiple of them and a candidate neighbor might need to pass some validation tests before it can be used. In particular, some link layers require experience on the activity with a router to enable the router as a next hop. o An OF computes self's rank by addingthe step of rank to that candidateto the rank ofthat candidate. The stepthe candidate a value representing the relative locations ofrank is computed by estimatingself and thelink as follows:candidate in the DODAG iteration. * Thestep ofincrease in rankmight vary from 1 to 16. + 1 indicatesmust be at least MinHopRankIncrease. (This prevents the creation of aunusually good link, for instancepath of sibling links connecting alink between powered deviceschild with its parent.) * To keep loop avoidance and metric optimization in alignment, the increase in rank should reflect any increase in the metric value. For example, with amostly battery operated environment. + 4 indicates a `normal'/typical link,purely additive metric such asqualified byETX, theimplementation. + 16 indicates a link thatincrease in rank canhardlybeused to forward any packet, for instance a radio link with quality indicator or expected transmission count that is closemade proportional to theacceptable threshold.increase in the metric. * Candidate neighbors that would cause self's rank to increase are ignored o Candidate neighbors that advertise an OF incompatible with the set of OF specified by the policy functions are ignored. o As it scans all the candidate neighbors, the OF keeps the current best parent and compares its capabilities with the current candidate neighbor. The OF defines a number of tests that are critical to reach the objective. A test between the routers determines an order relation. * If the routers are roughly equal for that relation then the next test is attempted between the routers, * Else the best of the 2 becomes the current best parent and the scan continues with the next candidate neighbor * Some OFs may include a test to compare the ranks that would result if the node joined either router o When the scan is complete, the preferred parent is elected and self's rank is computed as the preferred parent rank plus the step in rank with that parent. o Other rounds of scans might be necessary to elect alternate parents and siblings. In the next rounds: * Candidate neighbors that are not in the same DODAG are ignored * Candidate neighbors that are of greater rank than self are ignored * Candidate neighbors of an equal rank to self (siblings) are ignored * Candidate neighbors of a lesser rank than self (non-siblings) are preferred9.11. RPL Constants and Variables Following is a summary of RPL constants and variables. Some default values are to be determined in companion applicability statements. ZERO_LIFETIME This is the special value of a lifetime that indicates immediate death and removal. ZERO_LIFETIME has a value of 0. BASE_RANK This is the rank for a virtual root that might be used to coordinate multiple roots. BASE_RANK has a value of 0. ROOT_RANK This is the rank for aDAGDODAG root. ROOT_RANK has a value of 1. INFINITE_RANK This is the constant maximum for the rank. INFINITE_RANK has a value of 0xFF. RPL_DEFAULT_INSTANCE This is theInstanceIDRPLInstanceID that is used by this protocol by a node without any overriding policy. RPL_DEFAULT_INSTANCE has a value of 0. DEFAULT_DIO_INTERVAL_MIN To be determined DEFAULT_DIO_INTERVAL_DOUBLINGS To be determined DEFAULT_DIO_REDUNDANCY_CONSTANT To be determined DEF_DAO_LATENCY To be determined MAX_DESTROY_INTERVAL To be determined DIO Timer One instance per DODAG that a node is a member of. Expiry triggers DIO message transmission. Trickle timer with variable interval in [0, DIOIntervalMin..2^DIOIntervalDoublings]. See Section6.3.45.3.5.1 DAG Sequence Number Increment Timer Up to one instance per DODAG that the node is acting asDAGDODAG root of. May not be supported in all implementations. Expiry triggers revision ofDAGSequenceNumber,DODAGSequenceNumber, causing a new series of updated DIO message to be sent. Interval should be chosen appropriate to propagation time of DODAG and as appropriate to application requirements (e.g. response time vs. overhead). DelayDAO Timer Up to one instance perDADAO parent (the subset ofDAGDODAG parents chosen to receive destination advertisements) per DODAG. Expiry triggers sending of DAO message to theDA parent. The interval is to be proportional to DEF_DAO_LATENCY/ (node rank), such that nodes of greater rank (further down along the DODAG) expire first, coordinating the sending ofDAOmessages to allow for a chance of aggregation.parent. See Section6.8.1.1.16.2.6 RemoveTimer Up to one instance perDADAO entry per neighbor (i.e. those neighbors that have given DAO messages to this node as aDAGDODAG parent) Expiry triggers a change in state for theDADAO entry, setting up to do unreachable (No-DAO) advertisements or immediately deallocating theDADAO entry if there are noDADAO parents.The interval is min(MAX_DESTROY_INTERVAL, TBD(DIO Trickle Timer Interval)).See Section6.8.1.1.1 10.6.2.4.1.1.3 12. Manageability Considerations The aim of this section is to give consideration to the manageability of RPL, and how RPL will be operated in LLN beyond the use of a MIB module. The scope of this section is to consider the following aspects of manageability: fault management, configuration, accounting and performance.10.1.12.1. Control of Function and Policy10.1.1.12.1.1. Initialization Mode When a node is first powered up, it may either choose to stay silent and not send any multicast DIO message until it has joined a DODAG, or to immediately root a transient DODAG and start sending multicast DIO messages. A RPL implementation SHOULD allow configuring whether the node should stay silent or should start advertising DIO messages. Furthermore, the implementation SHOULD to allow configuring whether or not the node should start sending an DIS message as an initial probe for nearby DODAGs, or should simply wait until it received DIO messages from other nodes that are part of existing DODAGs.10.1.2.12.1.2. DIO Base option RPL specifies a number of protocol parameters. A RPL implementation SHOULD allow configuring the following routing protocol parameters, which are further described in Section6.1.3.1:5.1.1: DAGPreferenceInstanceIDRPLInstanceID DAGObjectiveCodePointDAGIDDODAGID Destination Prefixes DIOIntervalDoublings DIOIntervalMin DIORedundancyConstant DAG Root behavior: In some cases, a node may not want to permanently act as aDAGDODAG root if it cannot join a grounded DODAG. For example a battery-operated node may not want to act as aDAGDODAG root for a long period of time. Thus a RPL implementation MAY support the ability to configure whether or not a node could act as aDAGDODAG root for a configured period of time.DAGDODAG Table Entry Suppression A RPL implementation SHOULD provide the ability to configure a timer after the expiration of which logical equivalent of theDAGDODAG table that contains all the records about aDAGDODAG is suppressed, to be invoked if theDAGDODAG parent set becomes empty.10.1.3.12.1.3. Trickle Timers A RPL implementation makes use of trickle timer to govern the sending of DIO message. Such an algorithm is determined a by a set of configurable parameters that are then advertised by theDAGDODAG root along the DODAG in DIO messages. For each DODAG, a RPL implementation MUST allow for the monitoring of the following parameters, further described in Section6.3.4:5.3.5.1: I T C I_min I_doublings A RPL implementation SHOULD provide a command (for example via API, CLI, or SNMP MIB) whereby any procedure that detects an inconsistency may cause the trickle timer to reset.10.1.4.12.1.4. DAG Sequence Number Increment A RPL implementation may allow by configuration at theDAGDODAG root to refresh the DODAG states by updating theDAGSequenceNumber.DODAGSequenceNumber. A RPL implementation SHOULD allow configuring whether or not periodic or event triggered mechanism are used by theDAGDODAG root to controlDAGSequenceNumberDODAGSequenceNumber change.10.1.5.12.1.5. Destination Advertisement Timers The following set of parameters of the DAO messages SHOULD be configurable: o The DelayDAO timer o The Remove timer10.1.6.12.1.6. Policy Control DAG discovery enables nodes to implement different policies for selecting theirDAGDODAG parents. A RPL implementation SHOULD allow configuring the set of acceptable or preferred Objective Functions (OF) referenced by their Objective Codepoints (OCPs) for a node to join a DODAG, and what action should be taken if none of a node's candidate neighbors advertise one of the configured allowable Objective Functions. A node in an LLN may learn routing information from different routing protocols including RPL. It is in this case desirable to control via administrative preference which route should be favored. An implementation SHOULD allow for specifying an administrative preference for the routing protocol from which the route was learned. A RPL implementation SHOULD allow for the configuration of the "Route Tag" field of the DAO messages according to a set of rules defined by policy.10.1.7.12.1.7. Data Structures Some RPL implementation may limit the size of the candidate neighbor list in order to bound the memory usage, in which case some otherwise viable candidate neighbors may not be considered and simply dropped from the candidate neighbor list. A RPL implementation MAY provide an indicator on the size of the candidate neighbor list.10.2.12.2. Information and Data Models The information and data models necessary for the operation of RPL will be defined in a separate document specifying the RPL SNMP MIB.10.3.12.3. Liveness Detection and Monitoring The aim of this section is to describe the various RPL mechanisms specified to monitor the protocol. As specified in Section6.2,3.1, an implementation is expected to maintain a set of data structures in support ofDAGDODAG discovery: o The candidate neighbors data structure o For each DODAG: * A set ofDAGDODAG parents10.3.1.12.3.1. Candidate Neighbor Data Structure A node in the candidate neighbor list is a node discovered by the some means and qualified to potentially become of neighbor or a sibling (with high enough local confidence). A RPL implementation SHOULD provide a way monitor the candidate neighbors list with some metric reflecting local confidence (the degree of stability of the neighbors) measured by some metrics. A RPL implementation MAY provide a counter reporting the number of times a candidate neighbor has been ignored, should the number of candidate neighbors exceeds the maximum authorized value.10.3.2.12.3.2. Directed Acyclic Graph (DAG) Table For each DAG, a RPL implementation is expected to keep track of the following DODAG table values: oDAGIDDODAGID o DAGObjectiveCodePoint o A set of Destination Prefixes offered upwards along the DODAG o A set ofDAGDODAG Parents o timer to govern the sending of DIO messages for the DODAG oDAGSequenceNumberDODAGSequenceNumber The set ofDAGDODAG parents structure is itself a table with the following entries: o A reference to the neighboring device which is the DAG parent o A record of most recent information taken from the DAG Information Object last processed from theDAGDODAG Parent o A flag reporting if the Parent is aDADAO Parent as described in Section6.8 10.3.3.6 12.3.3. Routing Table For each route provisioned by RPL operation, a RPL implementation MUST keep track of the following: o Destination Prefix o Destination Prefix Length o Lifetime Timer o Next Hop o Next Hop Interface o Flag indicating that the route was provisioned from one of: * Unicast DAO message * DIO message * Multicast DAO message10.3.4.12.3.4. Other RPL Monitoring Parameters A RPL implementation SHOULD provide a counter reporting the number of a times the node has detected an inconsistency with respect to aDAGDODAG parent, e.g. if theDAGIDDODAGID has changed. A RPL implementation MAY log the reception of a malformed DIO message along with the neighbor identification if avialable.10.3.5.12.3.5. RPL Trickle Timers A RPL implementation operating on aDAGDODAG root MUST allow for the configuration of the following trickle parameters: o The DIOIntervalMin expressed in ms o The DIOIntervalDoublings o The DIORedundancyConstant A RPL implementation MAY provide a counter reporting the number of times an inconsistency (and thus the trickle timer has been reset).10.4.12.4. Verifying Correct Operation This section has to be completed in further revision of this document to list potential Operations and Management (OAM) tools that could be used for verifying the correct operation of RPL.10.5.12.5. Requirements on Other Protocols and Functional Components RPL does not have any impact on the operation of existing protocols.10.6.12.6. Impact on Network Operation To be completed.11.13. Security Considerations Security Considerations for RPL are to be developed in accordance with recommendations laid out in, for example, [I-D.tsao-roll-security-framework].12.14. IANA Considerations12.1.14.1. RPL Control Message The RPL Control Message is an ICMP information message type that is to be used carry DAG Information Objects, DAG Information Solicitations, and Destination Advertisement Objects in support of RPL operation. IANA has defined a ICMPv6 Type Number Registry. The suggested type value for the RPL Control Message is 155, to be confirmed by IANA.12.2.14.2. New Registry for RPL Control Codes IANA is requested to create a registry, RPL Control Codes, for the Code field of the ICMPv6 RPL Control Message. New codes may be allocated only by an IETF Consensus action. Each code should be tracked with the following qualities: o Code o Description o Defining RFC Three codes are currently defined: +------+----------------------------------+---------------+ | Code | Description | Reference | +------+----------------------------------+---------------+ | 0x01 | DAG Information Solicitation | This document | | 0x02 | DAG Information Object | This document | | 0x04 | Destination Advertisement Object | This document | +------+----------------------------------+---------------+ RPL Control Codes12.3.14.3. New Registry for the Control Field of the DIO Base IANA is requested to create a registry for the Control field of the DIO Base. Newbit numbersfields may be allocated only by an IETF Consensus action. Eachbitfield should be tracked with the following qualities: o Bit number (counting from bit 0 as the most significant bit) o Capability description o Defining RFC Four groups are currently defined:+-------+-------------------------------------+---------------++-------+-----------------------------------------+---------------+ | Bit | Description | Reference |+-------+-------------------------------------+---------------++-------+-----------------------------------------+---------------+ | 0 | Grounded DODAG (G) | This document | | 1 | Destination AdvertisementTriggerSupported (A) | This document | | 2 | Destination AdvertisementSupportedTrigger (T) | This document | | 3 | Destination Advertisements Stored (S) | This document | | 5,6,7 |DAGDODAG Preference (Prf) | This document |+-------+-------------------------------------+---------------++-------+-----------------------------------------+---------------+ DIO Base Flags12.4.14.4. DAG Information Object (DIO) Suboption IANA is requested to create a registry for the DIO Base Suboptions +-------+------------------------------+---------------+ | Value | Meaning | Reference | +-------+------------------------------+---------------+ | 0 | Pad1 - DIO Padding | This document | | 1 | PadN - DIO suboption padding | This document | | 2 | DAG Metric Container | This Document | | 3 | Destination Prefix | This Document | | 4 | DAG Timer Configuration | This Document | +-------+------------------------------+---------------+ DAG Information Option (DIO) Base Suboptions13.15. Acknowledgements The authors would like to acknowledge the review, feedback, and comments from Emmanuel Baccelli, Dominique Barthel, Yusuf Bashir, Mathilde Durvy, Manhar Goindi, Mukul Goyal, Anders Jagd, Quentin Lampin, Jerry Martocci, Alexandru Petrescu, and Don Sturek. The authors would like to acknowledge the guidance and input provided by the ROLL Chairs, David Culler and JP Vasseur. The authors would like to acknowledge prior contributions of Robert Assimiti, Mischa Dohler, Julien Abeille, Ryuji Wakikawa, Teco Boot, Patrick Wetterwald, Bryan Mclaughlin, Carlos J. Bernardos, Thomas Watteyne, Zach Shelby, Caroline Bontoux, Marco Molteni, Billy Moon, and Arsalan Tavakoli, which have provided useful design considerations to RPL.14.16. Contributors RPL is the result of the contribution of the following members of the ROLL Design Team, including the editors, and additional contributors as listed below: JP Vasseur Cisco Systems, Inc 11, Rue Camille Desmoulins Issy Les Moulineaux, 92782 France Email: jpv@cisco.comJonathan W. Hui Arch Rock Corporation 501 2nd St. Ste. 410 San Francisco, CA 94107 USA Email: jhui@archrock.comThomas Heide Clausen LIX, Ecole Polytechnique, France Phone: +33 6 6058 9349 EMail: T.Clausen@computer.org URI: http://www.ThomasClausen.org/ Philip Levis Stanford University 358 Gates Hall, Stanford University Stanford, CA 94305-9030 USA Email: pal@cs.stanford.edu Richard Kelsey Ember Corporation Boston, MA USA Phone: +1 617 951 1225 Email: kelsey@ember.comStephen Dawson-Haggerty UC Berkeley Soda Hall, UC Berkeley Berkeley,Jonathan W. Hui Arch Rock Corporation 501 2nd St. Ste. 410 San Francisco, CA9472094107 USA Email:stevedh@cs.berkeley.edujhui@archrock.com Kris Pister Dust Networks 30695 Huntwood Ave. Hayward, 94544 USA Email: kpister@dustnetworks.com Anders Brandt Zensys, Inc. Emdrupvej 26 Copenhagen, DK-2100 Denmark Email: abr@zen-sys.com15.Stephen Dawson-Haggerty UC Berkeley Soda Hall, UC Berkeley Berkeley, CA 94720 USA Email: stevedh@cs.berkeley.edu 17. References15.1.17.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2460] Deering, S. and R. Hinden, "Internet Protocol, Version 6 (IPv6) Specification", RFC 2460, December 1998.15.2.17.2. Informative References [I-D.ietf-bfd-base] Katz, D. and D. Ward, "Bidirectional Forwarding Detection",draft-ietf-bfd-base-09draft-ietf-bfd-base-11 (work in progress),February 2009.January 2010. [I-D.ietf-manet-nhdp] Clausen, T., Dearlove, C., and J. Dean, "Mobile Ad Hoc Network (MANET) Neighborhood Discovery Protocol (NHDP)", draft-ietf-manet-nhdp-11 (work in progress), October 2009. [I-D.ietf-roll-building-routing-reqs] Martocci, J., Riou, N., Mil, P., and W. Vermeylen, "Building Automation Routing Requirements in Low Power and Lossy Networks",draft-ietf-roll-building-routing-reqs-08draft-ietf-roll-building-routing-reqs-09 (work in progress),December 2009.January 2010. [I-D.ietf-roll-home-routing-reqs] Brandt, A. and J. Buron, "Home Automation Routing Requirements in Low Power and Lossy Networks",draft-ietf-roll-home-routing-reqs-09draft-ietf-roll-home-routing-reqs-11 (work in progress),NovemberJanuary 2010. [I-D.ietf-roll-of0] Thubert, P., "RPL Objective Function 0", draft-ietf-roll-of0-00 (work in progress), December 2009. [I-D.ietf-roll-routing-metrics] Vasseur, J. and D. Networks, "Routing Metrics used for Path Calculation in Low Power and Lossy Networks", draft-ietf-roll-routing-metrics-04 (work in progress), December 2009. [I-D.ietf-roll-terminology] Vasseur, J., "Terminology in Low power And Lossy Networks", draft-ietf-roll-terminology-02 (work in progress), October 2009. [I-D.tsao-roll-security-framework] Tsao, T., Alexander, R., Dohler, M., Daza, V., and A. Lozano, "A Security Framework for Routing over Low Power and Lossy Networks", draft-tsao-roll-security-framework-01 (work in progress), September 2009. [Levis08] Levis, P., Brewer, E., Culler, D., Gay, D., Madden, S., Patel, N., Polastre, J., Shenker, S., Szewczyk, R., and A. Woo, "The Emergence of a Networking Primitive in Wireless Sensor Networks", Communications of the ACM, v.51 n.7, July 2008, <http://portal.acm.org/citation.cfm?id=1364804>. [RFC1982] Elz, R. and R. Bush, "Serial Number Arithmetic", RFC 1982, August 1996.[RFC2453] Malkin, G., "RIP Version 2", STD 56, RFC 2453, November 1998.[RFC3697] Rajahalme, J., Conta, A., Carpenter, B., and S. Deering, "IPv6 Flow Label Specification", RFC 3697, March 2004. [RFC3819] Karn, P., Bormann, C., Fairhurst, G., Grossman, D., Ludwig, R., Mahdavi, J., Montenegro, G., Touch, J., and L. Wood, "Advice for Internet Subnetwork Designers", BCP 89, RFC 3819, July 2004. [RFC4101] Rescorla, E. and IAB, "Writing Protocol Models", RFC 4101, June 2005. [RFC4191] Draves, R. and D. Thaler, "Default Router Preferences and More-Specific Routes", RFC 4191, November 2005. [RFC4443] Conta, A., Deering, S., and M. Gupta, "Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification", RFC 4443, March 2006. [RFC4861] Narten, T., Nordmark, E., Simpson, W., and H. Soliman, "Neighbor Discovery for IP version 6 (IPv6)", RFC 4861, September 2007. [RFC4915] Psenak, P., Mirtorabi, S., Roy, A., Nguyen, L., and P. Pillay-Esnault, "Multi-Topology (MT) Routing in OSPF", RFC 4915, June 2007. [RFC5120] Przygienda, T., Shen, N., and N. Sheth, "M-ISIS: Multi Topology (MT) Routing in Intermediate System to Intermediate Systems (IS-ISs)", RFC 5120, February 2008. [RFC5548] Dohler, M., Watteyne, T., Winter, T., and D. Barthel, "Routing Requirements for Urban Low-Power and Lossy Networks", RFC 5548, May 2009. [RFC5673] Pister, K., Thubert, P., Dwars, S., and T. Phinney, "Industrial Routing Requirements in Low-Power and Lossy Networks", RFC 5673, October 2009. Appendix A. Requirements A.1. Protocol Properties Overview RPL demonstrates the following properties, consistent with the requirements specified by the application-specific requirements documents. A.1.1. IPv6 Architecture RPL is strictly compliant with layered IPv6 architecture. Further, RPL is designed with consideration to the practical support and implementation of IPv6 architecture on devices which may operate under severe resource constraints, including but not limited to memory, processing power, energy, and communication. The RPL design does not presume high quality reliable links, and operates over lossy links (usually low bandwidth with low packet delivery success rate). A.1.2. Typical LLN Traffic Patterns Multipoint-to-Point (MP2P) and Point-to-multipoint (P2MP) traffic flows from nodes within the LLN from and to egress points are very common in LLNs. Low power and lossy network Border Router (LBR) nodes may typically be at the root of such flows, although such flows are not exclusively rooted at LBRs as determined on an application- specific basis. In particular, several applications such as building or home automation do require P2P (Point-to-Point) communication. As required by the aforementioned routing requirements documents, RPL supports the installation of multiple paths. The use of multiple paths include sending duplicated traffic along diverse paths, as well as to support advanced features such as Class of Service (CoS) based routing, or simple load balancing among a set of paths (which could be useful for the LLN to spread traffic load and avoid fast energy depletion on some, e.g. battery powered, nodes). Conceptually, multiple instances of RPL can be used to send traffic along different topology instances, the construction of which is governed by different Objective Functions (OF). Details of RPL operation in support of multiple instances are beyond the scope of the present specification. A.1.3. Constraint Based Routing The RPL design supports constraint based routing, based on a set of routing metrics and constraints. The routing metrics and constraints for links and nodes with capabilities supported by RPL are specified in a companion document to this specification, [I-D.ietf-roll-routing-metrics]. RPL signals the metrics, constraints, and related Objective Functions (OFs) in use in a particular implementation by means of an Objective Code Point (OCP). Both the routing metrics, constraints, and the OF help determine the construction of the Directed Acyclic Graphs (DAG) using a distributed path computation algorithm. A.2. Deferred Requirements NOTE: RPL is still a work in progress. At this time there remain several unsatisfied application requirements, but these are to be addressed as RPL is further specified. Appendix B. Examples Consider the example LLN physical topology in Figure 13. In this example the links depicted are all usable L2 links. Suppose that all links are equally usable, and that the implementation specific policy function is simply to minimize hops. This LLN physical topology then yields theDAGDODAG depicted in Figure 14, where the links depicted are the edges towardDAGDODAG parents. This topology includes one DAG, rooted by an LBR node (LBR) at rank 1. The LBR node will issue DIO messages, as governed by a trickle timer. Nodes (11), (12), (13), have selected (LBR) as their only parent, attached to theDAGDODAG at rank 2, and periodically multicast DIOs. Node (22) has selected (11) and (12) in itsDAGDODAG parent set, and advertises itself at rank 3. Node (22) thus has a set ofDAGDODAG parents {(11), (12)} and siblings {((21), (23)}. (LBR) / | \.---`.---' | `----. / | \ (11)------(12)------(13) | \ | \ | \ | `----. | `----. | `----. | \| \| \ (21)------(22)------(23) (24) | /| /| | |.----`.----' |.----`.----' | | | / | / | | (31)------(32)------(33)------(34) | /| \ | \ | \ |.----`.----' | `----. | `----. | `----. | / | \| \| \ .--------(41) (42) (43)------(44)------(45) / / /| \ | \.----` .----` .----`.----' .----' .----' | `----. | `----. / / / | \| \ (51)------(52)------(53)------(54)------(55)------(56) Note that the links depicted represent the usable L2 connectivity available in the LLN. For example, Node (31) can communicate directly with its neighbors, Nodes (21), (22), (32), and (41). Node (31) cannot communicate directly with any other nodes, e.g. (33), (23), (42). In this example these links offer bidirectional communication, and`bad''bad' links are not depicted. Figure 13: Example LLN Topology (LBR) / | \.---`.---' | `----. / | \ (11) (12) (13) | \ | \ | \ | `----. | `----. | `----. | \| \| \ (21) (22) (23) (24) | /| /| | |.----`.----' |.----`.----' | | | / | / | | (31) (32) (33) (34) | /| \ | \ | \ |.----`.----' | `----. | `----. | `----. | / | \| \| \ .--------(41) (42) (43) (44) (45) / / /| \ | \.----` .----` .----`.----' .----' .----' | `----. | `----. / / / | \| \ (51) (52) (53) (54) (55) (56) Note that the links depicted represent directed links in theDAGDODAG overlaid on top of the physical topology depicted in Figure 13. As such, the depicted edges represent the relationship between nodes and theirDAGDODAG parents, wherein all depicted edges are directed and oriented`up''up' on the page toward theDAGDODAG root (LBR). TheDAGDODAG may provide default routes within the LLN, and serves as the foundation on which RPL builds further routing structure, e.g. through the destination advertisement mechanism. Figure 14: Example DAG B.1. Destination Advertisement Consider the exampleDAGDODAG depicted in Figure 14. Suppose that Nodes (22) and (32) are unable to record routing state. Suppose that Node (42) is able to perform prefix aggregation on behalf of Nodes (53), (54), and (55). o Node (53) would send a DAO message to Node (42), indicating the availability of destination (53). o Node (54) and Node (55) would similarly send DAO messages to Node (42) indicating their own destinations. o Node (42) would collect and store the routing state for destinations (53), (54), and (55). o In this example, Node (42) may then be capable of representing destinations (42), (53), (54), and (55) in the aggregation (42'). o Node (42) sends a DAO message advertising destination (42') to Node 32. o Node (32) does not want to maintain any routing state, so it adds onto to the Reverse Route Stack in the DAO message and passes it on to Node (22) as (42'):[(42)]. It may send a separate DAO message to indicate destination (32). o Node (22) does not want to maintain any routing state, so it adds on to the Reverse Route Stack in the DAO message and passes it on to Node (12) as (42'):[(42), (32)]. It also relays the DAO message containing destination (32) to Node 12 as (32):[(32)], and finally may send a DAO message for itself indicating destination (22). o Node (12) is capable to maintain routing state again, and receives the DAO messages from Node (22). Node (12) then learns: * Destination (22) is available via Node (22) * Destination (32) is available via Node (22) and the piecewise source route to (32) * Destination (42') is available via Node (22) and the piecewise source route to (32), (42'). o Node (12) sends DAO messages to (LBR), allowing (LBR) to learn routes to the destinations (12), (22), (32), and (42'). (42), (53), (54), and (55) are available via the aggregation (42'). It is not necessary for Node (12) to propagate the piecewise source routes to (LBR). B.2. Example:DAGDODAG Parent Selection For example, suppose that a node (N) is not attached to any DAG, and that it is in range of nodes (A), (B), (C), (D), and (E). Let all nodes be configured to use an OCP which defines a policy such that ETX is to be minimized and paths with the attribute`Blue''Blue' should be avoided. Let the rank computation indicated by the OCP simply reflect the ETX aggregated along the path. Let the links between node (N) and its neighbors (A-E) all have an ETX of 1 (which is learned by node (N) through some implementation specific method). Let node (N) be configured to send RPL DIS messages to probe for nearby DAGs. o Node (N) transmits a RPL DIS message. o Node (B) responds. Node (N) investigates the DIO message, and learns that Node (B) is a member ofDAGIDDODAGID 1 at rank 4, and not`Blue'.'Blue'. Node (N) takes note of this, but is not yet confident. o Similarly, Node (N) hears from Node (A) at rank 9, Node (C) at rank 5, and Node (E) at rank 4. o Node (D) responds. Node (D) has a DIO message that indicates that it is a member ofDAGIDDODAGID 1 at rank 2, but it carries the attribute`Blue'.'Blue'. Node (N)'s policy function rejects Node (D), and no further consideration is given. o This process continues until Node (N), based on implementation specific policy, builds enough confidence to trigger a decision to joinDAGIDDODAGID 1. Let Node (N) determine its most preferred parent to be Node (E). o Node (N) adds Node (E) (rank 4) to its set ofDAGDODAG parents forDAGIDDODAGID 1. Following the mechanisms specified by the OCP, and given that the ETX is 1 for the link between (N) and (E), Node (N) is now at rank 5 inDAGIDDODAGID 1. o Node (N) adds Node (B) (rank 4) to its set ofDAGDODAG parents forDAGIDDODAGID 1. o Node (N) is a sibling of Node (C), both are at rank 5. o Node (N) may now forward traffic intended for the default destination upwards alongDAGIDDODAGID 1 via nodes (B) and (E). In some cases, e.g. if nodes (B) and (E) are tried and fail, node (N) may also choose to forward traffic to its sibling node (C), without making upwards progress but with the intention that node (C) or a following successor can make upwards progress. Should Node (C) not have a viable parent, it should never send the packet back to Node (N) (to avoid a 2-node loop). B.3. Example:DAGDODAG Maintenance : : : : : : (A) (A) (A) |\ | | | `-----. | | | \ | | (B) (C) (B) (C) (B) | | \ | | `-----. | | \ (D) (D) (C) | | | (D) -1- -2- -3- Figure 15: DAG Maintenance Consider the example depicted in Figure 15-1. In this example, Node (A) is attached to aDAGDODAG at some rank d. Node (A) is aDAGDODAG parent of Nodes (B) and (C). Node (C) is aDAGDODAG parent of Node (D). There is also an undirected sibling link between Nodes (B) and (C). In this example, Node (C) may safely forward to Node (A) without creating a loop. Node (C) may not safely forward to Node (D), contained within it's ownsub-DAG,sub-DODAG, without creating a loop. Node (C) may forward to Node (B) in some cases, e.g. the link (C)->(A) is temporarily unavailable, but with some chance of creating a loop (e.g. if multiple nodes in a set of siblings start forwarding`sideways''sideways' in a cycle) and requiring the intervention of additional mechanisms to detect and break the loop. Consider the case where Node (C) hears a DIO message from a Node (Z) at a lesser rank and superior position in theDAGDODAG than node (A). Node (C) may safely undergo the process to evict node (A) from its DAG parent set and attach directly to Node (Z) without creating a loop, because its rank will decrease. Now consider the case where the link (C)->(A) becomes nonviable, and node (C) must move to a deeper rank within the DAG: o Node (C) must first detach from theDAGDODAG by removing Node (A) from itsDAGDODAG parent set, leaving an emptyDAGDODAG parent set. Node (C) may become the root of its own floating, less preferred, DAG. o Node (D), hearing a modified DIO message from Node (C), follows Node (C) into the floating DAG. This is depicted in Figure 15-2. In general, any node with no other options in thesub-DAGsub-DODAG of Node (C) will follow Node (C) into the floating DAG, maintaining the structure of thesub-DAG.sub-DODAG. o Node (C) hears a DIO message with an incrementedDAGSequenceNumberDODAGSequenceNumber from Node (B) and determines it is able to rejoin the groundedDAGDODAG by reattaching at a deeper rank to Node (B). Node (C) adds Node (B) to itsDAGDODAG parent set. Node (C) has now safely moved deeper within the groundedDAGDODAG without creating any loops. o Node (D), and any othersub-DAGsub-DODAG of Node (C), will hear the modified DIO message sourced from Node (C) and follow Node (C) in a coordinated manner to reattach to the grounded DAG. The finalDAGDODAG is depicted in Figure 15-3 B.4. Example: Greedy Parent Selection and Instability (A) (A) (A) |\ |\ |\ | `-----. | `-----. | `-----. | \ | \ | \ (B) (C) (B) \ | (C) \ | | / `-----. | |.-----`.-----' \| |/ (C) (B) -1- -2- -3- Figure 16: GreedyDAGDODAG Parent Selection Consider the example depicted in Figure 16. ADAGDODAG is depicted in 3 different configurations. A usable link between (B) and (C) exists in all 3 configurations. In Figure 16-1, Node (A) is aDAGDODAG parent for Nodes (B) and (C), and (B)--(C) is a sibling link. In Figure 16-2, Node (A) is aDAGDODAG parent for Nodes (B) and (C), and Node (B) is also aDAGDODAG parent for Node (C). In Figure 16-3, Node (A) is aDAGDODAG parent for Nodes (B) and (C), and Node (C) is also aDAGDODAG parent for Node (B). If a RPL node is too greedy, in that it attempts to optimize for an additional number of parents beyond its preferred parent, then an instability can result. Consider theDAGDODAG illustrated in Figure 16-1. In this example, Nodes (B) and (C) may most prefer Node (A) as aDAGDODAG parent, but are operating under the greedy condition that will try to optimize for 2 parents. When the preferred parent selection causes a node to have only one parent and no siblings, the node may decide to insert itself at a slightly higher rank in order to have at least one sibling and thus an alternate forwarding solution. This does not deprive other nodes of a forwarding solution and this is considered acceptable greediness. o Let Figure 16-1 be the initial condition. o Suppose Node (C) first is able to leave theDAGDODAG and rejoin at a lower rank, taking both Nodes (A) and (B) asDAGDODAG parents as depicted in Figure 16-2. Now Node (C) is deeper than both Nodes (A) and (B), and Node (C) is satisfied to have 2DAGDODAG parents. o Suppose Node (B), in its greediness, is willing to receive and process a DIO message from Node (C) (against the rules of RPL), and then Node (B) leaves theDAGDODAG and rejoins at a lower rank, taking both Nodes (A) and (C) asDAGDODAG parents. Now Node (B) is deeper than both Nodes (A) and (C) and is satisfied with 2 DAG parents. o Then Node (C), because it is also greedy, will leave and rejoin deeper, to again get 2 parents and have a lower rank then both of them. o Next Node (B) will again leave and rejoin deeper, to again get 2 parents o And again Node (C) leaves and rejoins deeper... o The process will repeat, and theDAGDODAG will oscillate between Figure 16-2 and Figure 16-3 until the nodes count to infinity and restart the cycle again. o This cycle can be averted through mechanisms in RPL: * Nodes (B) and (C) stay at a rank sufficient to attach to their most preferred parent (A) and don't go for any deeper (worse) alternate parents (Nodes are not greedy) * Nodes (B) and (C) do not process DIO messages from nodes deeper than themselves (because such nodes are possibly in their ownsub-DAGs)sub-DODAGs) Appendix C. Outstanding Issues This section enumerates some outstanding issues that are to be addressed in future revisions of the RPL specification. C.1. Additional Support for P2P Routing In some situations the baseline mechanism to support arbitrary P2P traffic, by flowing upwards along theDAGDODAG until a common ancestor is reached and then flowing down, may not be suitable for all application scenarios. A related scenario may occur when the down paths setup along theDAGDODAG by the destination advertisement mechanism are not be the most desirable downward paths for the specific application scenario (in part because theDAGDODAG links may not be symmetric). It may be desired to support within RPL the discovery and installation of more direct routes`across''across' the DAG. Such mechanisms need to be investigated. C.2.Loop Detection It is under investigation to complement the loop avoidance strategies provided by RPL with a loop detection mechanism that may be employed when traffic is forwarded. C.3.Destination Advertisement / DAO Fan-out When DAO messages are relayed to more than oneDAGDODAG parent, in some cases a situation may be created where a large number of DAO messages conveying information about the same destination flow upwards along the DAG. It is desirable to bound/limit the multiplication/fan-out of DAO messages in this manner. Some aspects of the Destination Advertisement mechanism remain under investigation, such as behavior in the face of links that may not be symmetric. In general, the utility of providing redundancy along downwards routes by sending DAO messages to more than one parent is under investigation. The use of suitable triggers, such as the`D' bit,'T' flag, to trigger DA operation within an affectedsub-DAG,sub-DODAG, is under investigation. Further, the ability to limit scope of the affected depth within thesub-DAGsub-DODAG is under investigation (e.g. if a stateful node can proxy for all nodes`behind''behind' it, then there may be no need to propagate the triggered`D' bit'T' flag further).C.4.C.3. Source Routing In support of nodes that maintain minimal routing state, and to make use of the collection of piecewise source routes from the destination advertisement mechanism, there needs to be some investigation of a mechanism to specify, attach, and follow source routes for packets traversing the LLN.C.5.C.4. Address / Header Compression In order to minimize overhead within the LLN it is desirable to perform some sort of address and/or header compression, perhaps via labels, addresses aggregation, or some other means. This is still under investigation. C.5. Managing Multiple Instances A network may run multiple instances of RPL concurrently. Such a network will require methods for assigning and otherwise managing RPLInstanceIDs. This will likely be addressed in a separate document. Authors' Addresses Tim Winter (editor) Email: wintert@acm.org Pascal Thubert (editor) Cisco Systems Village d'Entreprises Green Side 400, Avenue de Roumanille Batiment T3 Biot - Sophia Antipolis 06410 FRANCE Phone: +33 497 23 26 34 Email: pthubert@cisco.com ROLL Design Team IETF ROLL WG Email: rpl-authors@external.cisco.com