Network Working Group                                     Ross Finlayson
Request for Comments: 906                            Stanford University
                                                              June 1984

                     Bootstrap Loading using TFTP


Status of this Memo

  It is often convenient to be able to bootstrap a computer system from
  a communications network.  This RFC proposes the use of the IP TFTP
  protocol for bootstrap loading in this case.

  This RFC specifies a proposed protocol for the ARPA Internet
  community, and requests discussion and suggestions for improvements.

Introduction

  Many computer systems, such as diskless workstations, are
  bootstrapped by loading one or more code files across a network.
  Unfortunately, the protocol used to load these initial files has not
  been standardized - numerous methods have been employed by different
  computer manufacturers. This can make it difficult, for example, for
  an installation to support several different kinds of systems on a
  local-area network.  Each different booting mechanism that is used
  must be supported, for example by implementing a number of servers on
  one or more host machines.  This is in spite of the fact that these
  heterogeneous systems may be able to communicate freely (all using
  the same protocol) once they have been booted.

  We propose that TFTP (Trivial File Transfer Protocol) [6] be used as
  a standard protocol for bootstrap loading.  This protocol is
  well-suited for our purpose, being based on the standard Internet
  Protocol (IP) [4].  It is easily implemented, both in the machines to
  be booted, and in bootstrap servers elsewhere on the net.  (In
  addition, many popular operating systems already support TFTP
  servers.)  The fact that TFTP is a rather slow protocol is not a
  serious concern, due to the fact that it need be used only for the
  primary bootstrap.  A secondary bootstrap could use a faster
  protocol.

  This RFC describes how system to be booted (called the "booter"
  below) would use TFTP to load a desired code file.  It also describes
  an existing implementation (in ROM) for Ethernet.

  Note that we are specifying only the network protocols that would be
  used by the booting system.  We do not attempt to mandate the method
  by which a user actually boots a system (such as the format of a
  command typed at the console).  In addition, our proposal does not




Finlayson                                                       [Page 1]



RFC 906                                                        June 1984


  presuppose the use of any particular data-link level network
  architecture (although the example that we describe below uses
  Ethernet).

Network Protocols used by the Booting System

  To load a file, the booter sends a standard TFTP read request (RRQ)
  packet, containing the name of the file to be loaded.  The file name
  should not assume any operating system dependent naming conventions
  (file names containing only alphanumeric characters should suffice).
  Thereafter, the system receives TFTP DATA packets, and sends TFTP ACK
  and/or ERROR packets, in accordance with the TFTP specification [6].

  TFTP is implemented using the User Datagram Protocol (UDP) [5], which
  is in turn implemented using IP.  Thus, the booter must be able to
  receive IP datagrams containing up to 524 octets (excluding the IP
  header), since TFTP DATA packets can be up to 516 octets long, and
  UDP headers are 8 octets long.  The booting machine is not required
  to respond to incoming TFTP read or write requests.

  We allow for the use of two additional protocols.  These are ARP
  (Address Resolution Protocol) [3], and RARP (Reverse Address
  Resolution Protocol) [1]. The possible use of these protocols is
  described below.  The booter could also use other protocols (such as
  for name lookup), but they should be IP-based, and an internet
  standard.

  The IP datagram containing the initial TFTP RRQ (and all other IP
  datagrams sent by the booter) must of course contain both a source
  internet address and a destination internet address in its IP header.
  It is frequently the case, however, that the booter does not
  initially know its own internet address, but only a lower-level (e.g.
  Ethernet) address.  The Reverse Address Resolution Protocol
  (RARP) [1] may be used by the booter to find its internet address
  (prior to sending the TFTP RRQ).  RARP was motivated by Plummer's
  Address Resolution Protocol (ARP) [3].  Unlike ARP, which is used to
  find the 'hardware' address corresponding to a known higher-level
  protocol (e.g. internet) address, RARP is used to determine a
  higher-level protocol address, given a known hardware address.  RARP
  uses the same packet format as ARP, and like ARP, can be used for a
  wide variety of data-link protocols.

  ARP may also be used.  If the destination internet address is known,
  then an ARP request containing this address may be broadcast, to find
  a corresponding hardware address to which to send the subsequent TFTP
  RRQ.  It may not matter if this request should fail, because the RRQ
  can also be broadcast (at the data-link level).  However, because
  such an ARP request packet also contains the sender's (that is, the


Finlayson                                                       [Page 2]



RFC 906                                                        June 1984


  booter's) internet and hardware addresses, this information is made
  available to the rest of the local subnet, and could be useful for
  routing, for instance.

  If a single destination internet address is not known, then a special
  'broadcast' internet address could be used as the destination address
  in the TFTP RRQ, so that it will be received by all 'local' internet
  hosts.  (At this time, however, no standard for internet broadcasting
  has been officially adopted. [**])

An Example Implementation

  The author has implemented TFTP booting as specified above.  The
  resulting code resides in ROM.  (This implementation is for a
  Motorola 68000 based workstation, booting over an Ethernet.)  A user
  wishing to boot such a machine types a file name, and (optionally)
  the internet address of the workstation, and/or the internet address
  of a server machine from which the file is to be loaded.  The
  bootstrap code proceeds as follows:

     (1) The workstation's Ethernet address is found (by querying the
     Ethernet interface).

     (2) If the internet address of the workstation was not given, then
     a RARP request is broadcast, in order to find it.  If this request
     fails (that is, times out), then the bootstrap fails.

     (3) If the internet address of a server host was given, then
     broadcast an ARP request to try to find a corresponding Ethernet
     address.  If this fails, or if a server internet address was not
     given, then the Ethernet broadcast address is used.

     (4) If the internet address of a server host was not given, then
     we use a special internet address that represents a broadcast on
     the "local subnet", as described in [2].  (This is not an internet
     standard.)

     (5) A TFTP RRQ for the requested file is sent to the Ethernet
     address found in step (3).  The source internet address is that
     found in step (2), and the destination internet address is that
     found in step (4).

  Note that because several TFTP servers may, in general, reply to the
  RRQ, we do not abort if a TFTP ERROR packet is received, because this
  does not preclude the possibility of some other server replying later
  with the first data packet of the requested file.  When the first
  valid TFTP DATA packet is received in response to the RRQ, the source
  internet and Ethernet addresses of this packet are used as the


Finlayson                                                       [Page 3]



RFC 906                                                        June 1984


  destination addresses in subsequent TFTP ACK packets.  Should another
  server later respond with a DATA packet, an ERROR packet is sent back
  in response.

  An implementation of TFTP booting can take up a lot of space if care
  is not taken.  This can be a significant problem if the code is to
  fit in a limited amount of ROM.  However, the implementation
  described above consists of less than 4K bytes of code (not counting
  the Ethernet device driver).

Acknowledgements

  The ideas presented here are the result of discussions with several
  other people, in particular Jeff Mogul.

References

  [1]  Finlayson, R.,  Mann, T.,  Mogul, J.  & Theimer, M.,  "A Reverse
       Address Resolution Protocol", RFC 903  Stanford University,
       June 1984.

  [2]  Mogul, J., "Internet Broadcasting",  Proposed RFC, January 1984.

  [3]  Plummer, D., "An Ethernet Address Resolution Protocol",
       RFC 826,  MIT-LCS, November 1982.

  [4]  Postel, J., ed., "Internet Protocol - DARPA Internet Program
       Protocol Specification", RFC 791, USC/Information Sciences
       Institute, September 1981.

  [5]  Postel, J., "User Datagram Protocol", RFC 768 USC/Information
       Sciences Institute, August 1980.

  [6]  Sollins, K., "The TFTP Protocol (Revision 2)", RFC 783, MIT/LCS,
       June 1981.





  [**]  Editor's Note:  While there is no standard for an Internet wide
       broadcast or multicast address, it is strongly recommended that
       the "all ones" local part of the Internet address be used to
       indicate a broadcast in a particular network.  That is, in class
       A network 1 the broadcast address would be 1.255.255.255, in
       class B network 128.1 the broadcast address would be
       128.1.255.255, and in class C network 192.1.1 the broadcast
       address would be 192.1.1.255.


Finlayson                                                       [Page 4]