TEAS Working Group T. Saad
Internet-Draft V. Beeram
Intended status: Standards Track Juniper Networks
Expires: September 8, 2022 B. Wen
Comcast
D. Ceccarelli
Ericsson
S. Peng
R. Chen
ZTE Corporation
LM. Contreras
Telefonica
X. Liu
IBM Corporation
March 7, 2022
YANG Data Model for Network Resource Partition Policy
draft-bestbar-teas-yang-nrp-policy-00
Abstract
A Network Resource Partition (NRP) is a collection of resources
identified in the underlay network to support services (like IETF
Network Slices) that need logical network structures with required
characteristics to be created. An NRP policy is a policy construct
that enables instantiation of mechanisms in support of service
specific control and data plane behaviors on select topological
elements associated with the NRP. This document defines a YANG data
model for the management of NRP policies on NRP capable nodes and
controllers in IP/MPLS networks.
Requirements Language
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document are to be interpreted as described in BCP
14 [RFC2119] [RFC8174] when, and only when, they appear in all
capitals, as shown here.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
Saad, et al. Expires September 8, 2022 [Page 1]
Internet-Draft NRP Policy YANG Data Model March 2022
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on September 8, 2022.
Copyright Notice
Copyright (c) 2022 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3
1.1. Terminology . . . . . . . . . . . . . . . . . . . . . . . 4
1.2. Tree Structure . . . . . . . . . . . . . . . . . . . . . 4
2. NRP Policy Data Model . . . . . . . . . . . . . . . . . . . . 4
2.1. Model Usage . . . . . . . . . . . . . . . . . . . . . . . 4
2.2. Model Structure . . . . . . . . . . . . . . . . . . . . . 4
2.3. NRP Policies . . . . . . . . . . . . . . . . . . . . . . 5
2.3.1. Resource Reservation . . . . . . . . . . . . . . . . 5
2.3.2. Flow Aggregate Selector . . . . . . . . . . . . . . . 6
2.3.3. Per-Hop-Behavior . . . . . . . . . . . . . . . . . . 7
2.3.4. Topology . . . . . . . . . . . . . . . . . . . . . . 7
2.4. YANG Module . . . . . . . . . . . . . . . . . . . . . . . 9
3. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 19
4. Contributors . . . . . . . . . . . . . . . . . . . . . . . . 19
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 19
6. Security Considerations . . . . . . . . . . . . . . . . . . . 20
7. References . . . . . . . . . . . . . . . . . . . . . . . . . 20
7.1. Normative References . . . . . . . . . . . . . . . . . . 20
7.2. Informative References . . . . . . . . . . . . . . . . . 22
Appendix A. Complete Model Tree Structure . . . . . . . . . . . 22
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 25
Saad, et al. Expires September 8, 2022 [Page 2]
Internet-Draft NRP Policy YANG Data Model March 2022
1. Introduction
An IETF Network Slice [I-D.ietf-teas-ietf-network-slices] is a
service that provides connectivity coupled with a set of specific
commitments of network resources between a number of endpoints over a
shared underlay network. The IETF Network Slice service is expressed
in terms of one or more connectivity constructs. One or more
connectivity constructs from one or more IETF Network Slices are
mapped to a set of network resources called a Network Resource
Partition (NRP). An NRP is a collection of resources identified in
the underlay network to support the IETF Network Slice service (or
any other service that needs logical network structures with required
characteristics to be created). An NRP Policy
[I-D.bestbar-teas-ns-packet] is a policy construct that enables
instantiation of mechanisms in support of service specific control
and data plane behaviors on select topological elements associated
with the NRP.
An NRP policy specifies the rules for determining the topology
associated with the NRP and dictates how an NRP can be realized in
IP/MPLS networks using one of three modes. The NRP policy dictates
if the partitioning of the shared network resources can be achieved
in (a) just the data plane or in (b) just the control plane or in (c)
both the control and data planes.
The NRP policy modes (a) and (c) require the forwarding engine on
each NRP capable node to identify the traffic belonging to a specific
flow aggregate and to apply the corresponding Per-Hop Behavior (PHB)
that determines the forwarding treatment of the packets belonging to
the flow aggregate. The identification of the flow aggregate that
the packet belongs to and the corresponding forwarding treatment that
needs to be applied to the packet is dictated by the NRP policy.
When catering to IETF Network Slices, this flow aggregate is referred
to as the Slice-Flow Aggregate [I-D.bestbar-teas-ns-packet] and
comprises of traffic streams from one or more connectivity constructs
(belonging to one or more IETF network slices) mapped to a specific
NRP.
The NRP policy modes (b) and (c) require the distributed/centralized
resource reservation manager in the control plane to manage NRP
resource reservation. The provisions for enabling NRP state aware
traffic engineering (NRP-TE) [I-D.bestbar-teas-ns-packet] are
dictated by the NRP policy.
This document defines a YANG data model for the management of NRP
policies on NRP capable nodes and controllers in IP/MPLS networks.
Saad, et al. Expires September 8, 2022 [Page 3]
Internet-Draft NRP Policy YANG Data Model March 2022
1.1. Terminology
The terminology for describing YANG data models is found in
[RFC7950].
The reader is expected to be familiar with the terminology specified
in [I-D.ietf-teas-ietf-network-slices] and
[I-D.bestbar-teas-ns-packet].
1.2. Tree Structure
A simplified graphical representation of the data model is presented
in Appendix A of this document. The tree format defined in [RFC8340]
is used for the YANG data model tree representation.
2. NRP Policy Data Model
2.1. Model Usage
A controller that consumes the IETF Network Slice service requests
determines which specific connectivity constructs from one or more
slices can be grouped together. This could be based on a specific
set of SLOs and SLEs, or on any administrative or operational reason.
A controller function that has visibility of the underlay network and
its resources maps these connectivity constructs onto the NRP. It
also constructs and distributes the network wide consistent NRP
policy (using the data model defined in this document) to the
relevant NRP capable nodes and controllers.
2.2. Model Structure
The high-level model structure defined by this document is as shown
below:
Saad, et al. Expires September 8, 2022 [Page 4]
Internet-Draft NRP Policy YANG Data Model March 2022
module: ietf-nrp-policy
augment /nw:networks:
+--rw nrp-policies
+--rw nrp-policy* [name]
+--rw name string
+--rw nrp-id? uint32
+--rw resource-reservation
| + ............
+--rw flow-agg-selector
| + ............
+--rw phb? string
+--rw topology
+--rw filters
+--rw filter* [filter-ref]
+ ............
+--rw resource-reservation
| + ............
+--rw flow-agg-selector
| + ............
+--rw phb? string
The 'networks' container from the 'ietf-network' module [RFC8345]
provides a placeholder for an inventory of nodes in the network.
This container is augmented to carry a set of NRP policies.
2.3. NRP Policies
The 'nrp-policies' container carries a list of NRP policies. Each
'nrp-policy' entry is identified by a name and holds the set of
attributes needed to instantiate the NRP. Each entry also carries an
'nrp-id' leaf which uniquely identifies the NRP created by the
enforcement of this policy. The key elements of each nrp-policy
entry are discussed in the following sub-sections.
2.3.1. Resource Reservation
The 'resource-reservation' container carries data nodes that are used
to support NRP state aware bandwidth engineering. The data nodes in
this container facilitate preference-based preemption of NRP state
aware TE paths, sharing of resources amongst a group of NRPs and
backup path bandwidth protection.
Saad, et al. Expires September 8, 2022 [Page 5]
Internet-Draft NRP Policy YANG Data Model March 2022
+--rw resource-reservation
| +--rw preference? uint16
| +--rw (max-bw-type)?
| | +--:(bw-value)
| | | +--rw maximum-bandwidth? uint64
| | +--:(bw-percentage)
| | +--rw maximum-bandwidth-percent?
| | rt-types:percentage
| +--rw shared-resource-groups* uint32
| +--rw protection
| +--rw backup-nrp-id? uint32
| +--rw (backup-bw-type)?
| +--:(backup-bw-value)
| | +--rw backup-bandwidth? uint64
| +--:(backup-bw-percentage)
| +--rw backup-bandwidth-percent?
| rt-types:percentage
2.3.2. Flow Aggregate Selector
The 'flow-agg-selector' container carries data nodes that specify the
rules for identifying which packets belong to the flow aggregate that
this NRP caters to.
Saad, et al. Expires September 8, 2022 [Page 6]
Internet-Draft NRP Policy YANG Data Model March 2022
+--rw flow-agg-selector
| +--rw mpls
| | +--rw (fas-type)?
| | +--:(label)
| | | +--rw (specification-type)?
| | | +--:(derived)
| | | | +--rw forwarding-label? empty
| | | +--:(explicit)
| | | +--rw label?
| | | | rt-types:mpls-label
| | | +--rw label-position?
| | | | identityref
| | | +--rw label-position-offset? uint8
| | +--:(label-ranges)
| | +--rw label-range* [index]
| | +--rw index string
| | +--rw start-label?
| | | rt-types:mpls-label
| | +--rw end-label?
| | | rt-types:mpls-label
| | +--rw label-position? identityref
| | +--rw label-position-offset? uint8
| +--rw ipv4
| | +--rw destination-prefix* inet:ipv4-prefix
| +--rw ipv6
| | +--rw (fas-type)?
| | +--:(ipv6-destination)
| | | +--rw destination-prefix* inet:ipv6-prefix
| | +--:(ipv6-hbh-eh)
| | +--rw fas-hbh-eh* uint32
| +--rw acl-ref* nrp-policy-acl-ref
2.3.3. Per-Hop-Behavior
The 'phb' leaf carries a name of a PHB profile available on the
topological element where the policy is being enforced.
+--rw phb? string
2.3.4. Topology
The 'topology' container consists of a list of filters where each
entry references a topology filter
[I-D.bestbar-teas-yang-topology-filter]. The resultant topology from
the union of these filters is referred to as the NRP topology. The
topological elements that satisfy the membership criteria can
optionally override the default resource-reservation, flow-agg-
selector and phb specific leafs.
Saad, et al. Expires September 8, 2022 [Page 7]
Internet-Draft NRP Policy YANG Data Model March 2022
+--rw topology
+--rw filters
+--rw filter* [filter-ref]
+--rw filter-ref
| nrp-policy-topo-filter-ref
+--rw resource-reservation
| +--rw preference? uint16
| +--rw (max-bw-type)?
| | +--:(bw-value)
| | | +--rw maximum-bandwidth? uint64
| | +--:(bw-percentage)
| | +--rw maximum-bandwidth-percent?
| | rt-types:percentage
| +--rw shared-resource-groups* uint32
| +--rw protection
| +--rw backup-nrp-id?
| | uint32
| +--rw (backup-bw-type)?
| +--:(backup-bw-value)
| | +--rw backup-bandwidth?
| | uint64
| +--:(backup-bw-percentage)
| +--rw backup-bandwidth-percent?
| rt-types:percentage
+--rw flow-agg-selector
| +--rw mpls
| | +--rw (fas-type)?
| | +--:(label)
| | | +--rw (specification-type)?
| | | +--:(derived)
| | | | +--rw forwarding-label?
| | | | empty
| | | +--:(explicit)
| | | +--rw label?
| | | | rt-types:mpls-label
| | | +--rw label-position?
| | | | identityref
| | | +--rw label-position-offset?
| | | uint8
| | +--:(label-ranges)
| | +--rw label-range* [index]
| | +--rw index
| | | string
| | +--rw start-label?
| | | rt-types:mpls-label
| | +--rw end-label?
| | | rt-types:mpls-label
| | +--rw label-position?
Saad, et al. Expires September 8, 2022 [Page 8]
Internet-Draft NRP Policy YANG Data Model March 2022
| | | identityref
| | +--rw label-position-offset?
| | uint8
| +--rw ipv4
| | +--rw destination-prefix* inet:ipv4-prefix
| +--rw ipv6
| | +--rw (fas-type)?
| | +--:(ipv6-destination)
| | | +--rw destination-prefix*
| | | inet:ipv6-prefix
| | +--:(ipv6-hbh-eh)
| | +--rw fas-hbh-eh* uint32
| +--rw acl-ref* nrp-policy-acl-ref
+--rw phb? string
2.4. YANG Module
<CODE BEGINS> file "ietf-nrp-policy@2022-03-07.yang"
module ietf-nrp-policy {
yang-version 1.1;
namespace "urn:ietf:params:xml:ns:yang:ietf-nrp-policy";
prefix nrp-pol;
import ietf-inet-types {
prefix inet;
reference
"RFC 6991: Common YANG Data Types";
}
import ietf-routing-types {
prefix rt-types;
reference
"RFC 8294: Common YANG Data Types for the Routing Area";
}
import ietf-network {
prefix nw;
reference
"RFC 8345: A YANG Data Model for Network Topologies";
}
import ietf-access-control-list {
prefix acl;
reference
"RFC 8519: YANG Data Model for Network Access Control Lists
(ACLs)";
}
import ietf-topology-filter {
prefix topo-filt;
reference
"draft-bestbar-teas-yang-topology-filter: YANG Data Model
Saad, et al. Expires September 8, 2022 [Page 9]
Internet-Draft NRP Policy YANG Data Model March 2022
for Topology Filter";
}
organization
"IETF Traffic Engineering Architecture and Signaling (TEAS)
Working Group.";
contact
"WG Web: <http://tools.ietf.org/wg/teas/>
WG List: <mailto:teas@ietf.org>
Editor: Vishnu Pavan Beeram
<mailto:vbeeram@juniper.net>
Editor: Tarek Saad
<mailto:tsaad@juniper.net>
Editor: Bin Wen
<mailto:Bin_Wen@cable.comcast.com>
Editor: Daniele Ceccarelli
<mailto:daniele.ceccarelli@ericsson.com>
Editor: Shaofu Peng
<mailto:peng.shaofu@zte.com.cn>
Editor: Ran Chen
<mailto:chen.ran@zte.com.cn>
Editor: Luis M. Contreras
<mailto:luismiguel.contrerasmurillo@telefonica.com>
Editor: Xufeng Liu
<mailto:xufeng.liu.ietf@gmail.com>";
description
"This YANG module defines a data model for managing Network
Resource Partition Policies on Network Resource Partition
capable nodes and controllers.
Copyright (c) 2022 IETF Trust and the persons identified as
authors of the code. All rights reserved.
Redistribution and use in source and binary forms, with or
without modification, is permitted pursuant to, and subject to
the license terms contained in, the Simplified BSD License set
forth in Section 4.c of the IETF Trust's Legal Provisions
Relating to IETF Documents
(https://trustee.ietf.org/license-info).
Saad, et al. Expires September 8, 2022 [Page 10]
Internet-Draft NRP Policy YANG Data Model March 2022
This version of this YANG module is part of RFC XXXX; see the
RFC itself for full legal notices.";
revision 2022-03-07 {
description
"Initial revision.";
reference
"RFC XXXX: YANG Data Model for Network Resource Partition
Policies.";
}
/*
* I D E N T I T I E S
*/
/*
* Identity:
* MPLS Flow Aggregate Selector (FAS) Label Position Type.
*/
identity fas-mpls-label-position-type {
description
"Base identity for the position of the MPLS FAS label.";
}
identity fas-mpls-label-position-top {
base fas-mpls-label-position-type;
description
"MPLS FAS label is at the top of the label stack.";
}
identity fas-mpls-label-position-bottom {
base fas-mpls-label-position-type;
description
"MPLS FAS label is either at the bottom or at a specific
offset from the bottom of the label stack.";
}
identity fas-mpls-label-position-indicator {
base fas-mpls-label-position-type;
description
"MPLS FAS is preceded by a special purpose
indicator label in the label stack.";
}
/*
* T Y P E D E F S
Saad, et al. Expires September 8, 2022 [Page 11]
Internet-Draft NRP Policy YANG Data Model March 2022
*/
typedef nrp-policy-acl-ref {
type leafref {
path "/acl:acls/acl:acl/acl:name";
}
description
"This type is used to reference an ACL.";
}
typedef nrp-policy-topo-filter-ref {
type leafref {
path "/nw:networks/topo-filt:topology-filters/"
+ "topo-filt:topology-filter/topo-filt:name";
}
description
"This type is used to reference a Topology Filter.";
}
/*
* G R O U P I N G S
*/
/*
* Grouping - MPLS FAS label location specific fields
*/
grouping nrp-pol-fas-mpls-label-location {
description
"Grouping for MPLS FAS label location specific fields.";
leaf label-position {
type identityref {
base fas-mpls-label-position-type;
}
description
"MPLS FAS label position.";
}
leaf label-position-offset {
when "derived-from-or-self(../label-position,"
+ "'nrp-pol:fas-mpls-label-position-bottom')" {
description
"MPLS label position offset is relevant only when the
label-position is set to 'bottom'.";
}
type uint8;
description
"MPLS label position offset.";
}
Saad, et al. Expires September 8, 2022 [Page 12]
Internet-Draft NRP Policy YANG Data Model March 2022
}
/*
* Grouping - Flow-Aggregate Selector (FAS)
*/
grouping nrp-pol-flow-agg-selector {
description
"Grouping for Flow-Aggregate Selector (FAS).";
container flow-agg-selector {
description
"Container for FAS.";
container mpls {
description
"Container for MPLS FAS.";
choice fas-type {
description
"Choices for MPLS FAS.";
case label {
choice specification-type {
description
"Choices for MPLS label specification.";
case derived {
leaf forwarding-label {
type empty;
description
"MPLS FAS Label is derived from
forwarding label.";
}
}
case explicit {
leaf label {
type rt-types:mpls-label;
description
"MPLS FAS Label is explicitly
specified.";
}
uses nrp-pol-fas-mpls-label-location;
}
}
}
case label-ranges {
list label-range {
key "index";
unique "start-label end-label";
description
"Any label from the specified set of MPLS label
ranges can be used as the FAS.";
Saad, et al. Expires September 8, 2022 [Page 13]
Internet-Draft NRP Policy YANG Data Model March 2022
leaf index {
type string;
description
"A string that uniquely identifies a label
range.";
}
leaf start-label {
type rt-types:mpls-label;
must '. <= ../end-label' {
error-message
"The start-label must be less than or equal "
+ "to end-label";
}
description
"Label-range start.";
}
leaf end-label {
type rt-types:mpls-label;
must '. >= ../start-label' {
error-message
"The end-label must be greater than or equal "
+ "to start-label";
}
description
"Label-range end.";
}
uses nrp-pol-fas-mpls-label-location;
}
}
}
}
container ipv4 {
description
"Container for IPv4 FAS.";
leaf-list destination-prefix {
type inet:ipv4-prefix;
description
"Any prefix from the specified set of IPv4
destination prefixes can be the FAS.";
}
}
container ipv6 {
description
"Container for IPv6 FAS.";
choice fas-type {
description
"Choices for IPv6 FAS.";
case ipv6-destination {
Saad, et al. Expires September 8, 2022 [Page 14]
Internet-Draft NRP Policy YANG Data Model March 2022
leaf-list destination-prefix {
type inet:ipv6-prefix;
description
"Any prefix from the specified set of IPv6
destination prefixes can be the FAS.";
}
}
case ipv6-hbh-eh {
leaf-list fas-hbh-eh {
type uint32;
description
"Set of FAS values carried in Hop-by-Hop
Option of IPv6 extension header.";
}
}
}
}
leaf-list acl-ref {
type nrp-policy-acl-ref;
description
"Flow Aggregate selection is done based on the
specified list of ACLs.";
}
}
}
/*
* Grouping - NRP Policy Resource Reservation
*/
grouping nrp-pol-resource-reservation {
description
"Grouping for NRP policy resource reservation.";
container resource-reservation {
description
"Container for NRP policy resource reservation.";
leaf preference {
type uint16;
description
"Control plane preference for the corresponding
Network Resource Partition (NRP). A higher
preference indicates a more favorable resource
reservation than a lower preference.";
}
choice max-bw-type {
description
"Choice of maximum bandwidth specification.";
case bw-value {
Saad, et al. Expires September 8, 2022 [Page 15]
Internet-Draft NRP Policy YANG Data Model March 2022
leaf maximum-bandwidth {
type uint64;
description
"The maximum bandwidth allocated to an NRP
- specified as absolute value.";
}
}
case bw-percentage {
leaf maximum-bandwidth-percent {
type rt-types:percentage;
description
"The maximum bandwidth allocated to an NRP
- specified as percentage of link
capacity.";
}
}
}
leaf-list shared-resource-groups {
type uint32;
description
"List of shared resource groups that an NRP
shares its allocated resources with.";
}
container protection {
description
"Container for NRP protection reservation.";
leaf backup-nrp-id {
type uint32;
description
"The ID that identifies the NRP used for
backup paths that protect primary paths
setup over a specific NRP.";
}
choice backup-bw-type {
description
"Choice of backup bandwidth specification.";
case backup-bw-value {
leaf backup-bandwidth {
type uint64;
description
"The maximum bandwidth on a network resource that
is allocated for backup traffic - specified as
absolute value.";
}
}
case backup-bw-percentage {
leaf backup-bandwidth-percent {
type rt-types:percentage;
Saad, et al. Expires September 8, 2022 [Page 16]
Internet-Draft NRP Policy YANG Data Model March 2022
description
"The maximum bandwidth on a network resource that
is allocated for backup traffic - specified as
percentage of the link capacity.";
}
}
}
}
}
}
/*
* Grouping - NRP policy - PHB (NRP-PHB)
*/
grouping nrp-pol-phb {
description
"Grouping for NRP-PHB.";
leaf phb {
type string;
description
"PHB profile identifier.";
}
}
/*
* Grouping - NRP Policy - Topology
*/
grouping nrp-pol-topology {
description
"Grouping for NRP topology.";
container topology {
description
"Container for NRP topology.";
container filters {
description
"Container for filters.";
list filter {
key "filter-ref";
description
"List of filters.";
leaf filter-ref {
type nrp-policy-topo-filter-ref;
description
"Reference to a specific topology filter from the
list of global topology filters.";
}
Saad, et al. Expires September 8, 2022 [Page 17]
Internet-Draft NRP Policy YANG Data Model March 2022
uses nrp-pol-resource-reservation;
uses nrp-pol-flow-agg-selector;
uses nrp-pol-phb;
}
}
}
}
/*
* Grouping - Network Resource Partition Policies
*/
grouping nrp-pol {
description
"Grouping for NRP policies.";
container nrp-policies {
description
"Container for nrp policies.";
list nrp-policy {
key "name";
unique "nrp-id";
description
"List of NRP policies.";
leaf name {
type string;
description
"A string that uniquely identifies the NRP policy.";
}
leaf nrp-id {
type uint32;
description
"A 32-bit ID that uniquely identifies the NRP
created by the enforcement of this NRP policy.";
}
uses nrp-pol-resource-reservation;
uses nrp-pol-flow-agg-selector;
uses nrp-pol-phb;
uses nrp-pol-topology;
}
}
}
/*
* Augment - Network Resource Partition Policies.
*/
augment "/nw:networks" {
description
Saad, et al. Expires September 8, 2022 [Page 18]
Internet-Draft NRP Policy YANG Data Model March 2022
"Augment networks with network resource partition
policies.";
uses nrp-pol;
}
}
<CODE ENDS>
3. Acknowledgements
The authors would like to thank Krzysztof Szarkowicz for his input
from discussions.
4. Contributors
The following individuals contributed to this document:
Colby Barth
Juniper Networks
Email: cbarth@juniper.net
Srihari R. Sangli
Juniper Networks
Email: ssangli@juniper.net
Chandra Ramachandran
Juniper Networks
Email: csekar@juniper.net
5. IANA Considerations
This document registers the following URI in the IETF XML registry
[RFC3688]. Following the format in [RFC3688], the following
registration is requested to be made.
URI: urn:ietf:params:xml:ns:yang:ietf-nrp-policy
Registrant Contact: The TEAS WG of the IETF.
XML: N/A, the requested URI is an XML namespace.
This document registers a YANG module in the YANG Module Names
registry [RFC6020].
name: ietf-nrp-policy
namespace: urn:ietf:params:xml:ns:yang:ietf-nrp-policy
prefix: sl-pol
reference: RFCXXXX
Saad, et al. Expires September 8, 2022 [Page 19]
Internet-Draft NRP Policy YANG Data Model March 2022
6. Security Considerations
The YANG module specified in this document defines a schema for data
that is designed to be accessed via network management protocols such
as NETCONF [RFC6241] or RESTCONF [RFC8040]. The lowest NETCONF layer
is the secure transport layer, and the mandatory-to-implement secure
transport is Secure Shell (SSH) [RFC6242]. The lowest RESTCONF layer
is HTTPS, and the mandatory-to-implement secure transport is TLS
[RFC8446].
The Network Configuration Access Control Model (NACM) [RFC8341]
provides the means to restrict access for particular NETCONF or
RESTCONF users to a preconfigured subset of all available NETCONF or
RESTCONF protocol operations and content.
The data nodes defined in this YANG module that are
writable/creatable/deletable (i.e., config true, which is the
default) may be considered sensitive or vulnerable in some network
environments. Write operations (e.g., edit-config) to these data
nodes without proper protection can have a negative effect on network
operations. These are the subtrees and data nodes and their
sensitivity/vulnerability:
* "/networks/nrp-policies": This subtree specifies the
configurations for NRP policies on a given network element. By
manipulating these data nodes, a malicious attacker may cause
unauthorized and improper behavior to be provided for the flow
aggregate traffic on the network element.
The readable data nodes in this YANG module may be considered
sensitive or vulnerable in some network environments. It is thus
important to control read access (e.g., via get, get-config, or
notification) to these data nodes. These are the subtrees and data
nodes and their sensitivity/vulnerability:
* "/networks/nrp-policies": Unauthorized access to this subtree can
disclose the NRP policy definitions on the network element.
7. References
7.1. Normative References
[I-D.bestbar-teas-ns-packet]
Saad, T., Beeram, V. P., Dong, J., Wen, B., Ceccarelli,
D., Halpern, J., Peng, S., Chen, R., Liu, X., Contreras,
L. M., Rokui, R., and L. Jalil, "Realizing Network Slices
in IP/MPLS Networks", draft-bestbar-teas-ns-packet-08
(work in progress), February 2022.
Saad, et al. Expires September 8, 2022 [Page 20]
Internet-Draft NRP Policy YANG Data Model March 2022
[I-D.bestbar-teas-yang-topology-filter]
Beeram, V. P., Saad, T., Gandhi, R., and X. Liu, "YANG
Data Model for Topology Filter", draft-bestbar-teas-yang-
topology-filter-02 (work in progress), October 2021.
[I-D.ietf-teas-ietf-network-slices]
Farrel, A., Drake, J., Rokui, R., Homma, S., Makhijani,
K., Contreras, L. M., and J. Tantsura, "Framework for IETF
Network Slices", draft-ietf-teas-ietf-network-slices-07
(work in progress), March 2022.
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119,
DOI 10.17487/RFC2119, March 1997,
<https://www.rfc-editor.org/info/rfc2119>.
[RFC3688] Mealling, M., "The IETF XML Registry", BCP 81, RFC 3688,
DOI 10.17487/RFC3688, January 2004,
<https://www.rfc-editor.org/info/rfc3688>.
[RFC6020] Bjorklund, M., Ed., "YANG - A Data Modeling Language for
the Network Configuration Protocol (NETCONF)", RFC 6020,
DOI 10.17487/RFC6020, October 2010,
<https://www.rfc-editor.org/info/rfc6020>.
[RFC6241] Enns, R., Ed., Bjorklund, M., Ed., Schoenwaelder, J., Ed.,
and A. Bierman, Ed., "Network Configuration Protocol
(NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011,
<https://www.rfc-editor.org/info/rfc6241>.
[RFC6242] Wasserman, M., "Using the NETCONF Protocol over Secure
Shell (SSH)", RFC 6242, DOI 10.17487/RFC6242, June 2011,
<https://www.rfc-editor.org/info/rfc6242>.
[RFC7950] Bjorklund, M., Ed., "The YANG 1.1 Data Modeling Language",
RFC 7950, DOI 10.17487/RFC7950, August 2016,
<https://www.rfc-editor.org/info/rfc7950>.
[RFC8040] Bierman, A., Bjorklund, M., and K. Watsen, "RESTCONF
Protocol", RFC 8040, DOI 10.17487/RFC8040, January 2017,
<https://www.rfc-editor.org/info/rfc8040>.
[RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
May 2017, <https://www.rfc-editor.org/info/rfc8174>.
Saad, et al. Expires September 8, 2022 [Page 21]
Internet-Draft NRP Policy YANG Data Model March 2022
[RFC8341] Bierman, A. and M. Bjorklund, "Network Configuration
Access Control Model", STD 91, RFC 8341,
DOI 10.17487/RFC8341, March 2018,
<https://www.rfc-editor.org/info/rfc8341>.
[RFC8345] Clemm, A., Medved, J., Varga, R., Bahadur, N.,
Ananthakrishnan, H., and X. Liu, "A YANG Data Model for
Network Topologies", RFC 8345, DOI 10.17487/RFC8345, March
2018, <https://www.rfc-editor.org/info/rfc8345>.
[RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol
Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018,
<https://www.rfc-editor.org/info/rfc8446>.
7.2. Informative References
[RFC8340] Bjorklund, M. and L. Berger, Ed., "YANG Tree Diagrams",
BCP 215, RFC 8340, DOI 10.17487/RFC8340, March 2018,
<https://www.rfc-editor.org/info/rfc8340>.
Appendix A. Complete Model Tree Structure
module: ietf-nrp-policy
augment /nw:networks:
+--rw nrp-policies
+--rw nrp-policy* [name]
+--rw name string
+--rw nrp-id? uint32
+--rw resource-reservation
| +--rw preference? uint16
| +--rw (max-bw-type)?
| | +--:(bw-value)
| | | +--rw maximum-bandwidth? uint64
| | +--:(bw-percentage)
| | +--rw maximum-bandwidth-percent?
| | rt-types:percentage
| +--rw shared-resource-groups* uint32
| +--rw protection
| +--rw backup-nrp-id? uint32
| +--rw (backup-bw-type)?
| +--:(backup-bw-value)
| | +--rw backup-bandwidth? uint64
| +--:(backup-bw-percentage)
| +--rw backup-bandwidth-percent?
| rt-types:percentage
+--rw flow-agg-selector
| +--rw mpls
| | +--rw (fas-type)?
Saad, et al. Expires September 8, 2022 [Page 22]
Internet-Draft NRP Policy YANG Data Model March 2022
| | +--:(label)
| | | +--rw (specification-type)?
| | | +--:(derived)
| | | | +--rw forwarding-label? empty
| | | +--:(explicit)
| | | +--rw label?
| | | | rt-types:mpls-label
| | | +--rw label-position?
| | | | identityref
| | | +--rw label-position-offset? uint8
| | +--:(label-ranges)
| | +--rw label-range* [index]
| | +--rw index string
| | +--rw start-label?
| | | rt-types:mpls-label
| | +--rw end-label?
| | | rt-types:mpls-label
| | +--rw label-position? identityref
| | +--rw label-position-offset? uint8
| +--rw ipv4
| | +--rw destination-prefix* inet:ipv4-prefix
| +--rw ipv6
| | +--rw (fas-type)?
| | +--:(ipv6-destination)
| | | +--rw destination-prefix* inet:ipv6-prefix
| | +--:(ipv6-hbh-eh)
| | +--rw fas-hbh-eh* uint32
| +--rw acl-ref* nrp-policy-acl-ref
+--rw phb? string
+--rw topology
+--rw filters
+--rw filter* [filter-ref]
+--rw filter-ref
| nrp-policy-topo-filter-ref
+--rw resource-reservation
| +--rw preference? uint16
| +--rw (max-bw-type)?
| | +--:(bw-value)
| | | +--rw maximum-bandwidth? uint64
| | +--:(bw-percentage)
| | +--rw maximum-bandwidth-percent?
| | rt-types:percentage
| +--rw shared-resource-groups* uint32
| +--rw protection
| +--rw backup-nrp-id?
| | uint32
| +--rw (backup-bw-type)?
| +--:(backup-bw-value)
Saad, et al. Expires September 8, 2022 [Page 23]
Internet-Draft NRP Policy YANG Data Model March 2022
| | +--rw backup-bandwidth?
| | uint64
| +--:(backup-bw-percentage)
| +--rw backup-bandwidth-percent?
| rt-types:percentage
+--rw flow-agg-selector
| +--rw mpls
| | +--rw (fas-type)?
| | +--:(label)
| | | +--rw (specification-type)?
| | | +--:(derived)
| | | | +--rw forwarding-label?
| | | | empty
| | | +--:(explicit)
| | | +--rw label?
| | | | rt-types:mpls-label
| | | +--rw label-position?
| | | | identityref
| | | +--rw label-position-offset?
| | | uint8
| | +--:(label-ranges)
| | +--rw label-range* [index]
| | +--rw index
| | | string
| | +--rw start-label?
| | | rt-types:mpls-label
| | +--rw end-label?
| | | rt-types:mpls-label
| | +--rw label-position?
| | | identityref
| | +--rw label-position-offset?
| | uint8
| +--rw ipv4
| | +--rw destination-prefix* inet:ipv4-prefix
| +--rw ipv6
| | +--rw (fas-type)?
| | +--:(ipv6-destination)
| | | +--rw destination-prefix*
| | | inet:ipv6-prefix
| | +--:(ipv6-hbh-eh)
| | +--rw fas-hbh-eh* uint32
| +--rw acl-ref* nrp-policy-acl-ref
+--rw phb? string
Saad, et al. Expires September 8, 2022 [Page 24]
Internet-Draft NRP Policy YANG Data Model March 2022
Authors' Addresses
Tarek Saad
Juniper Networks
Email: tsaad@juniper.net
Vishnu Pavan Beeram
Juniper Networks
Email: vbeeram@juniper.net
Bin Wen
Comcast
Email: Bin_Wen@cable.comcast.com
Daniele Ceccarelli
Ericsson
Email: daniele.ceccarelli@ericsson.com
Shaofu Peng
ZTE Corporation
Email: peng.shaofu@zte.com.cn
Ran Chen
ZTE Corporation
Email: chen.ran@zte.com.cn
Luis M. Contreras
Telefonica
Email: luismiguel.contrerasmurillo@telefonica.com
Xufeng Liu
IBM Corporation
Email: xufeng.liu.ietf@gmail.com
Saad, et al. Expires September 8, 2022 [Page 25]