| Internet-Draft | Applicability of BFD P2MP in VRRP | August 2026 |
| Mirsky, et al. | Expires 3 February 2027 | [Page] |
This document specifies the applicability of Bidirectional Forwarding Detection in multipoint networks to support sub-second failure detection for Virtual Router Redundancy Protocol Router Role election. The mechanism enables faster determination of the Active Router without requiring any modification to the protocol behavior or message formats defined in RFC 9568.¶
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.¶
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.¶
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."¶
This Internet-Draft will expire on 3 February 2027.¶
Copyright (c) 2026 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License.¶
The [RFC9568] is the current Virtual Router Redundancy Protocol (VRRP) specification for IPv4 and IPv6 networks. VRRPv3 allows for a faster switchover to a Backup Router. A router may be part of several Virtual Router Redundancy groups, such as Active in some and Backup in others. Supporting sub-second mode for VRRPv3 [RFC9568] for all these roles without specialized support in the data plane may prove challenging because of the increased load on the control plane. However, it may still be possible to deploy VRRP and provide sub-second detection of Active Router failure by Backup Routers.¶
Bidirectional Forwarding Detection (BFD) [RFC5880] had been originally defined to detect failure of point-to-point paths: single-hop [RFC5881], multihop [RFC5883]. Single-hop BFD may enable a Backup router to detect an Active router failure within sub-seconds. But this approach may present a scaling challenge in a multi-Backup router environment.¶
[RFC8562] extends [RFC5880] for multipoint and multicast networks, which matches the deployment scenarios for VRRP over the LAN segment. This document demonstrates how point-to-multipoint (p2mp) BFD can enable faster detection of the Active Router failure and thus minimize service disruption in a VRRP domain.¶
BFD: Bidirectional Forwarding Detection¶
p2mp: Point-to-Multipoint¶
VRRP: Virtual Router Redundancy Protocol¶
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.¶
[RFC8562] may provide an efficient and scalable solution for a fast-converging environment that uses the default route rather than dynamic routing. Each redundancy group presents itself as a p2mp BFD session, with its Active Router being the head and Backup Routers being the tails of the p2mp BFD session.¶
The Active Router, configured to use p2mp BFD to support faster convergence of VRRP, starts transmitting BFD control packets with IPvX address associated with the Virtual Router [RFC9568] as a source IP address and the value of the My Discriminator field ([RFC5880]) locally selected according to the following rules:¶
A Backup Router demultiplexes p2mp BFD test sessions based on IPvX address associated with the Virtual Router that it has been configured with and the non-zero My Discriminator value, it deduces from the received VRRP Advertisement packet according to the rules listed above. When a Backup router detects the failure of the Active Router, according to Section 5.11 [RFC8562], it re-evaluates its role in the Virtual Router. As a result, the Backup Router may become the Active router of the given Virtual Router or continue as a Backup Router.¶
The MultipointHead of p2mp BFD session when transmitting BFD control packet:¶
This document makes no requests for IANA allocations. This section may be deleted by RFC Editor.¶
This document defines an alternative mechanism, complementary to the one specified in [RFC9568], for accelerating the detection of failures that affect VRRP functionality by using p2mp BFD. The operation of either protocol is not modified.¶
Security considerations discussed in [RFC9568], [RFC5880], [RFC5881], and [RFC8562], apply to this document. Using p2mp BFD in the VRRP context does not introduce additional security considerations beyond those already covered in the referenced RFCs.¶
In deployments where a VRRP group contains routers that support the use of p2mp BFD as described in this specification and others that do not, the mechanism continues to operate correctly, but convergence characteristics will differ among routers. Routers that support p2mp BFD will detect failure of the Active Router based on BFD session state and may transition to Active more quickly than routers relying solely on VRRP Advertisement timers. Conversely, if the Active Router does not support p2mp BFD, all routers, regardless of BFD capability, will converge based on VRRP Advertisement timeout.¶
In a VRRP group where both VRRP-native and BFD-based mechanisms are used for detecting failure of the Active Router, the system can be viewed as a multi-layer OAM environment, with p2mp BFD operating as a lower-layer and faster failure-detection mechanism. In such an environment, operators should ensure that VRRP Advertisement intervals and BFD timer values are coordinated so that the expected convergence behavior is well understood.¶
Consistent with multi-layer OAM design principles, the failure-detection interval at the lower layer is typically configured to be at least three times shorter than the failure‑detection interval at the layer above it. This relationship ensures that the faster mechanism (p2mp BFD) reliably triggers failover before the VRRP-native mechanism, while still allowing VRRP Advertisements to provide a backup detection method.¶
In mixed-mode deployments, routers within the VRRP group may detect failure of the Active Router at different times, depending on whether they rely on p2mp BFD or VRRP Advertisements. From the host's perspective, however, failover is determined by the fastest detection mechanism that results in a new Active Router being elected and advertising the virtual router address.¶
In multi-tenant deployments, multiple VRRP groups may exist on the same segment, each maintaining its own p2mp BFD session. The scaling impact depends primarily on the operator's convergence objectives. If sub-second convergence is required, an operator may choose either sub-second VRRP Advertisement intervals or sub-second BFD transmission intervals. Using p2mp BFD for failure detection allows VRRP Advertisement intervals to remain relatively large (e.g., one second), thereby reducing the overall volume of VRRP control traffic even when many VRRP groups are present.¶
Because p2mp BFD uses a single multipoint session per VRRP group, the incremental overhead scales linearly with the number of groups. In environments with a large number of VRRP groups, operators should ensure that BFD transmission intervals and VRRP Advertisement intervals are configured to balance convergence requirements with the control plane load.¶
The authors appreciate the comments and suggestions provided by Acee Lindem and Alexander "Sasha" Vainshtein, which helped simplify and improve the solution. The authors also express their gratitude to Joe Clarke for his valuable insights into the application and deployment aspects of p2mp BFD in VRRP.¶