Fast heartbeat liveness between packet processing engines using media access control security (MACSEC) communication

1. A device, comprising:

one or more processors to:

establish a media access control security (MACsec) key agreement (MKA) session between a first network device and a second network device via a MACsec communication link;

establish a fast heartbeat session via the MACsec communication link, between a first packet processing engine of the first network device and a second packet processing engine of the second network device, to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link,

where the fast heartbeat messages are exchanged at a faster rate than MKA packet data of the MKA session;

determine, based on the fast heartbeat session, that the MKA session has ended; and

perform an action based on the MKA session ending.

2. The device of claim 1 , where the one or more processors, when establishing the fast heartbeat session, are to:

transmit a request to establish the fast heartbeat session by sending a first fast heartbeat message, of the fast heartbeat messages, from the first packet processing engine to the second packet processing engine; and

establish the fast heartbeat session after the first packet processing engine receives a second fast heartbeat message from the second packet processing engine.

3. The device of claim 1 , where the fast heartbeat messages are exchanged via a secure channel of the MACsec communication link.

4. The device of claim 1 , where the one or more processors, when determining that the MKA session has ended, are to:

determine that the first network device or the second network device has been disconnected from the MKA session based on a fast heartbeat timeout interval expiring without exchanging fast heartbeat messages.

5. The device of claim 1 , where each of the fast heartbeat messages includes a type field indicating that the fast heartbeat message is a message of the fast heartbeat session,

where the type field is populated by the first packet processing engine or the second packet processing engine.

6. The device of claim 1 , where the one or more processors, when performing the action, are to:

reinitiate the MKA session based on the MKA session ending.

7. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors, cause the one or more processors to:

establish an media access control security (MACsec) key agreement (MKA) session between a first network device and a second network device via a MACsec communication link to send MKA packet data;

establish a fast heartbeat session via the MACsec communication link between a first packet processing engine of the first network device and a second packet processing engine of the second network device to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link at a faster rate than MKA packet data of the MKA session;

determine, based on the fast heartbeat session, that the first network device or the second network device has been disconnected from the MKA session; and

perform an action based on the determining that the first network device or the second network device has been disconnected from the MKA session.

8. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, that cause the one or more processors to establish the fast heartbeat session, cause the one or more processors to:

transmit a request to establish the fast heartbeat session by sending a first fast heartbeat message, of the fast heartbeat messages, from the first packet processing engine to the second packet processing engine;

determine that the second network device is capable of establishing the fast heartbeat session after the first packet processing engine receives a second heartbeat message, of the fast heartbeat messages, from the second packet processing engine; and

establish the fast heartbeat session by sending a third fast heartbeat message of the fast heartbeat messages from the first packet processing engine to the second packet processing engine.

9. The non-transitory computer-readable medium of claim 7 , where the first packet processing engine and the second packet processing engine indicate that the fast heartbeat messages are messages of the fast heartbeat session by populating a field of the fast heartbeat messages with particular data identifying the fast heartbeat messages as messages of the fast heartbeat session.

10. The non-transitory computer-readable medium of claim 7 , where

the first packet processing engine of the first network device and the second packet processing engine of the second network device populate at least one of:

an ether type field of a fast heartbeat message of the fast heartbeat messages,

a type field of a fast heartbeat message of the fast heartbeat messages, or

a length field of a fast heartbeat message of the fast heartbeat messages, and

a first MKA daemon of the first network device and a second MKA daemon of the second network device populate at least one of:

a destination address field of a fast heartbeat message of the fast heartbeat messages,

a source address field of a fast heartbeat message of the fast heartbeat messages,

a secure channel identifier (SCI) field of a fast heartbeat message of the fast heartbeat messages,

a member identifier field of a fast heartbeat message of the fast heartbeat messages,

a member number field of a fast heartbeat message of the fast heartbeat messages, or

a connectivity association key (CAK) name field of a fast heartbeat message of the fast heartbeat messages.

11. The non-transitory computer-readable medium of claim 7 , where the fast heartbeat messages are unencrypted and are exchanged via a secure channel of the MACsec communication link.

12. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, that cause the one or more processors to determine that the first network device or the second network device has been disconnected from the MKA session, cause the one or more processors to:

determine that a fast heartbeat timeout interval has expired without receiving fast heartbeat messages; and

determine that the first network device or the second network device has been disconnected from the MKA session based on determining that the fast heartbeat timeout interval has expired.

13. The non-transitory computer-readable medium of claim 7 , where the one or more instructions, that cause the one or more processors to perform the action, cause the one or more processors to:

reinitiate the MKA session.

14. A method, comprising:

establishing an media access control security (MACsec) key agreement (MKA) session between a first network device and a second network device via a MACsec communication link;

establishing a fast heartbeat session via the MACsec communication link between a first packet processing engine of the first network device and a second packet processing engine of the second network device to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link,

where the fast heartbeat messages are exchanged at a faster rate between the first packet processing engine and the second packet processing engine than MKA packet data of the MKA session are exchanged between a first MKA daemon of the first network device and a second MKA daemon of the second network device;

determining, based on the fast heartbeat session, that the first network device or the second network device has been disconnected from the MKA session; and

reinitiating an exchange of the MKA packet data via the MKA session based on determining that the first network device or the second network device has been disconnected from the MKA session.

15. The method of claim 14 , where establishing the fast heartbeat session comprises:

determining that an MKA timeout interval has expired without receiving MKA packet data via the MKA session; and

establishing the fast heartbeat session based on determining that the MKA timeout interval has expired.

16. The method of claim 14 , where establishing the fast heartbeat session comprises:

sending a first fast heartbeat message, of the fast heartbeat messages, from the first packet processing engine to the second packet processing engine; and

establishing the fast heartbeat session after the first packet processing engine receives a second fast heartbeat message from the second packet processing engine.

17. The method of claim 14 , where the first packet processing engine and the second packet processing engine populate at least one field of the fast heartbeat messages.

18. The method of claim 14 , where the fast heartbeat messages are exchanged via a secure channel of the MACsec communication link.

19. The device of claim 4 , where the fast heartbeat timeout interval is less than a period of time of an MKA timeout interval of the MKA session.

20. The non-transitory computer-readable medium of claim 12 , where the fast heartbeat timeout interval is less than a period of time of an MKA timeout interval of the MKA session.