Internet-Draft | PCE Multi-Domain DetNet | October 2025 |
Bernardos, et al. | Expires 19 April 2026 | [Page] |
Deterministic Networking (DetNet) provides the capability to carry specified unicast or multicast data flows for real-time applications with extremely low data loss rates and bounded latency over a path or network. As DetNet deployments expand, they will inevitably need to span multiple domains that may be under separate administrative or technological control. This creates a need for a control plane solution that can establish and maintain end-to-end DetNet services across these domain boundaries.¶
This document defines a framework for a Path Computation Element (PCE)-based control plane for multi-domain DetNet. It first establishes a working definition of a "DetNet Domain" for the purpose of path computation and control. It then describes two high-level architectural approaches for inter-domain path computation and resource reservation: a Hierarchical PCE model and a peer-to-peer PCE "stitching" model. This framework provides the foundation for more specific work on multi-domain DetNet solutions.¶
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.¶
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.¶
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."¶
This Internet-Draft will expire on 19 April 2026.¶
Copyright (c) 2025 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License.¶
The Deterministic Networking (DetNet) architecture, as defined in [RFC8655], provides a service for flows requiring bounded latency, and/or extremely low packet loss, and/or reliable service. The initial focus of DetNet has largely been on single-domain networks, where a single controller or administrative entity has full visibility and control over all network resources.¶
However, many use cases, such as industrial automation, professional audio/video, and smart grids, require deterministic connectivity that spans multiple networks. These networks may be operated by different providers (administrative domains), utilize different underlying link-layer technologies (technological domains), or be structured as separate control areas for scalability.¶
To support such scenarios, a control plane framework is needed to coordinate the establishment of end-to-end DetNet paths across these domain boundaries. The Path Computation Element (PCE) Communication Protocol (PCEP) [RFC5440] provides a standard mechanism for a PCE to compute paths and a Path Computation Client (PCC) to request them. This makes PCE a suitable candidate for building a multi-domain DetNet control plane.¶
This document builds on the DetNet Controller Plane Framework [I-D.ietf-detnet-controller-plane-framework] by focusing specifically on multi-domain challenges. It proposes a foundational framework by:¶
The goal is to establish the necessary foundational concepts before addressing specific technology implementations, such as multi-domain RAW (Reliable and Available Wireless) [I-D.bernardos-detnet-raw-multidomain].¶
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.¶
This document uses the terminology defined in [RFC8655], [RFC4655] and [RFC5440].¶
For the purpose of multi-domain DetNet control, a clear definition of a "domain" is essential. A domain represents a collection of network resources (nodes, links) that are managed and controlled as a single entity for the purpose of DetNet path computation and resource allocation.¶
A DetNet domain is characterized by a set of network nodes that are subject to a single, consistent set of DetNet control and management policies. From a PCE-based control plane perspective, this typically implies that:¶
The boundaries of a DetNet domain can be defined based on several factors, which may overlap:¶
Let's consider the scenario depicted in the figure below, where a DetNet flow is established between a source S and a destination D. The path for the flow traverses three different domains. Domain 1 is a wired domain, which could for example be a TSN-based DetNet MPLS [RFC8964] or DetNet IP [RFC8939] network. Domain 2 is a wireless (RAW) domain. Domain 3 is again a wired domain. The RAW domain provides connectivity between the two wired domains. Note that this is just an example, and other combinations of wired/wireless domains could exist (e.g., a DetNet flow traversing a wired domain providing connectivity between two RAW domains).¶
.------------------------------------. | Parent PCE | '------------------------------------' ^ | ^ | | | v v v .----------------. .----------------. .----------------. | Child PCE (d1) | | Child PCE (d2) | | Child PCE (d3) | '----------------' '----------------' '----------------' | | | | | | S ---- R1 ======== R2 -------- R3 ======== R4 -------- R5 ---- D <-- Domain 1 --> <---- Domain 2 ----> <-- Domain 3 --> (wired) (RAW) (wired) S, D: end-systems (source and destination) Rx: DetNet routers/bridges ==: wired link --: wireless link
Each domain has its own PCE, which is responsible for path computation and resource management within the domain. These are referred to as Child PCEs (C-PCEs). Routers R2 and R3 are border routers of Domain 2 (RAW), and R3 and R4 are border routers of Domain 2 and 3, respectively. A Parent PCE (P-PCE) is responsible for the end-to-end path computation and orchestration among the different C-PCEs.¶
In a multi-domain environment, no single PCE has end-to-end visibility of the full network topology. The challenge is to compute an end-to-end path that meets the strict latency, jitter, and loss requirements of a DetNet flow, while respecting the administrative and confidentiality boundaries of each participating domain.¶
Each domain's PCE is responsible for its own internal path computation and resource allocation. The multi-domain architecture must define how these individual PCEs cooperate to create a seamless end-to-end service. Two primary models are considered: Hierarchical PCE and Peer-to-Peer PCE.¶
The Hierarchical PCE (H-PCE) architecture [RFC6805] defines a parent-child relationship between PCEs.¶
In a multi-domain DetNet context:¶
The Parent PCE (P-PCE) would be responsible for computing the multi-domain path based on an abstracted topology of the different domains. The Child PCEs (C-PCEs) are responsible for the path computation in their own domains. A C-PCE would be aware of the specific technologies used in its domain (e.g., RAW, DetNet IP, DetNet MPLS, etc.), being able to compute a path taking into account the specific constraints of the technology. For instance, in a RAW domain, the C-PCE would be able to select the path, the schedule and the links to be used to guarantee a certain level of reliability.¶
In a peer-to-peer approach, also known as "stitching," there is no parent-child hierarchy. PCEs from adjacent domains cooperate as peers. The path computation is performed sequentially from one domain to the next. This model is described in [RFC5441] for inter-area and inter-AS TE path computation.¶
In a multi-domain DetNet context:¶
The end-to-end path is a concatenation of intra-domain path segments. The total latency and other QoS metrics are cumulative. The control plane must be able to allocate the end-to-end budget among the participating domains.¶
In hierarchical PCE, the P-PCE needs to collect the domain-specific information from C-PCEs and the P-PCE will divide the end-to-end budget of a DetNet flow into sub-budgets to several domains based on the capabilities (e.g. latency, jitter) within each domain.¶
In stitching PCE, the end-to-end budget of a DetNet will be divided from the source PCE, then to an adjacent domain, till to the destination PCE. The PCE within each domain needs to compute the latency bound as per [RFC9320] considering the bounded latency metric.¶
Resources MAY be reserved in each domain for the flow. If any domain in the path cannot provide the required resources, the end-to-end path setup fails. A mechanism for transactional, all-or-nothing resource commitment across domains is highly desirable.¶
The control plane also needs to advertise inter-domain resource information, including bandwidth, delay, jitter with related queuing mechanisms for QoS coordination.¶
A critical aspect is whether the end-systems (source and destination) are DetNet-aware.¶
Flow aggregation is recommended in the multi-domain scenario to achieve the end-to-end QoS guarantees for aggregated flow(s) that span across multiple domains. Multiple flows may be aggregated in a domain and disaggregated in another domain. The network parameters of an aggregated flow should be exchanged among different network domains. The path computation should consider to identify the end-to-end budget of the aggregated flow which should cover the requirements of all member flows.¶
Multi-domain operations introduce significant security challenges. The communication between PCEs in different domains MUST be secured, ensuring authentication, integrity, and confidentiality. Each domain must be protected from misbehaving or compromised peer domains.¶
Topology and resource information exposed by a domain's PCE to an external entity (a parent PCE or a peer PCE) is a sensitive matter. The framework must allow for policy-based control over the level of abstraction and detail that is shared.¶
This document makes no requests of IANA.¶
The work of Carlos J. Bernardos in this document has been partially supported by the Horizon Europe DESIRE6G (Grant 101096466), and UNICO I+D 6G-DATADRIVEN-04 project (TSI-063000-2021-132).¶