NLSR

NLSR multicasts an interest for LSAs to neighbouring routers after it is informed by sync.
After getting the LSA data, direct certificate fetcher sends interests for certificates back to the face where the data came from.

If there is a NoRoute NACK, direct certificate fetcher tries three more times before giving up (sending another interest immediately upon NACK).

After NLSR is informed that segment fetcher has failed, it schedules another interest in 4 seconds (in case the reason is timeout, the next interest is sent immediately).
This interest is never seen on the network - it is answered by the content store every time because the freshness of the LSA data is equal to LSA refresh time which by default is 30 minutes. All the interests from direct certificate fetcher are directed towards the content store resulting in failure to fetch the certificates.

Setting the LSA data freshness to 4 seconds resolves this issue.

Certificate direct fetch sends two interests for certificates:

• Interest with face id
• Interest to the network

Interest to the network always results in a NoRoute.

Interest with face id can hit the content store if LSA data has got the local content store but other routers are not yet ready to serve the certificates (delay in registering prefixes in NFD).

Since lowering the LSA data freshness from LSA refresh lifetime is not acceptable because no new data is expected before that, two other solutions are:

• NLSR should only send the LSA data when registration of certificate prefixes is successful: requires some changes in NLSR to achieve this Have no control over the content store

• Create our own certificate direct fetcher that does not send an interest to the network as a back up, use the segment fetcher to fetch the certificate, and re-schedule the fetch on Nack using the same face (warn if face is that of content store) till it is successful.