<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc2629 version 1.5.26 (Ruby 2.6.10) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

<!ENTITY I-D.ietf-mpls-mna-hdr SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-hdr.xml">
<!ENTITY RFC2119 SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml">
<!ENTITY RFC3032 SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.3032.xml">
<!ENTITY RFC6790 SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6790.xml">
<!ENTITY RFC8174 SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8174.xml">
<!ENTITY I-D.ietf-mpls-mna-fwk SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-fwk.xml">
<!ENTITY RFC9543 SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.9543.xml">
<!ENTITY I-D.ietf-teas-ns-ip-mpls SYSTEM "https://xml2rfc.tools.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-teas-ns-ip-mpls.xml">
]>


<rfc ipr="trust200902" docName="draft-li-mpls-mna-nrp-selector-01" category="std" consensus="true" submissionType="IETF">
  <front>
    <title abbrev="MNA NRP Selector">MPLS Network Actions for Network Resource Partition Selector</title>

    <author initials="T." surname="Li" fullname="Tony Li">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>tony.li@tony.li</email>
      </address>
    </author>
    <author initials="J." surname="Drake" fullname="John Drake">
      <organization></organization>
      <address>
        <email>je_drake@yahoo.com</email>
      </address>
    </author>
    <author initials="V. P." surname="Beeram" fullname="Vishnu Pavan Beeram">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>vbeeram@juniper.net</email>
      </address>
    </author>
    <author initials="T." surname="Saad" fullname="Tarek Saad">
      <organization>Cisco Systems</organization>
      <address>
        <email>tsaad.net@gmail.com</email>
      </address>
    </author>
    <author initials="I." surname="Meilik" fullname="Israel Meilik">
      <organization>Broadcom</organization>
      <address>
        <email>israel.meilik@broadcom.com</email>
      </address>
    </author>

    <date year="2024" month="June" day="25"/>

    
    <workgroup>MPLS Working Group</workgroup>
    

    <abstract>


<t>An IETF Network Slice service provides connectivity coupled with a set
of network resource commitments and is expressed in terms of one or
more connectivity constructs. A Network Resource Partition (NRP) is a
collection of resources identified in the underlay network to support
IETF Network Slice services.  A Slice-Flow Aggregate refers to the set
of traffic streams from one or more connectivity constructs belonging
to one or more IETF Network Slices that are mapped to a specific NRP
and provided the same forwarding treatment.  The packets associated
with a Slice-Flow Aggregate may carry a marking in the packet's
network layer header to identify this association and this marking is
referred to as NRP Selector.  The NRP Selector is used to map
the packet to the associated NRP and provide the
corresponding forwarding treatment to the packet.</t>

<t>MPLS Network Actions (MNA) technologies are used to indicate actions
for Label Switched Paths (LSPs) and/or MPLS packets and to transfer
data needed for these actions.  This document discusses options for
using MPLS Network Actions (MNAs) to carry the NRP Selector in MPLS packets.</t>



    </abstract>



  </front>

  <middle>


<section anchor="introduction"><name>Introduction</name>

<t>An IETF Network Slice <xref target="RFC9543"/> service
provides connectivity coupled with a set of specific commitments of
network resources between a number of endpoints over a shared
underlay network.  The IETF Network Slice service is expressed in
terms of one or more connectivity constructs.  A Network Resource
Partition (NRP) <xref target="RFC9543"/> is a collection
of resources identified in the underlay network to support IETF
Network Slice services (or any other services that need logical
network structures with required characteristics to be created).  An
NRP Policy <xref target="I-D.ietf-teas-ns-ip-mpls"/> is a policy construct that
enables instantiation of mechanisms in support of service specific
control and data plane behaviors on select topological elements
associated with the NRP.</t>

<t>A Slice-Flow Aggregate refers to the set of traffic streams from one
or more connectivity constructs belonging to one or more IETF Network
Slices that are mapped to a specific NRP and are provided the same
forwarding treatment.  The NRP policy dictates the identification of
the flow aggregate that the packet belongs to and the corresponding
forwarding treatment that needs to be applied to the packet.  The
packets associated with a Slice-Flow Aggregate may carry a marking in
the packet's network layer header to identify this association and
this marking is referred to as NRP Selector (NRPS).
<xref target="I-D.ietf-teas-ns-ip-mpls"/> discusses a few options for carrying the
NRP Selector in MPLS packets, including overloading the semantics of
forwarding/service labels and using a dedicated identifier field.</t>

<t><xref target="I-D.ietf-mpls-mna-fwk"/> specifies an architectural framework for the
MPLS Network Actions (MNA) technologies.  MNA technologies are used
to indicate actions for Label Switched Paths (LSPs) and/or MPLS
packets and to transfer data needed for these actions.  The MNA
architecture can facilitate carrying the dedicated identifier based
NRP Selector in the MPLS label stack.  This document discusses a few options
for using MPLS network actions to carry the NRP Selector.  The proposed
encodings are compliant with the MNA header encoding formats defined
in <xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<t>The reader is expected to be familiar with terminology specified in
<xref target="I-D.ietf-mpls-mna-fwk"/> and MNA header encoding formats defined in
<xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<section anchor="REQ-lang"><name>Requirements Language</name>

<t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL
NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED",
"MAY", and "OPTIONAL" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.
These words may also appear in this document in
lower case as plain English words, absent their normative meanings.</t>

</section>
</section>
<section anchor="mpls-network-actions"><name>MPLS Network Actions</name>

<section anchor="bit-nrp-selector-nrps13-action"><name>13-bit NRP Selector (NRPS13) Action</name>

<t>The format of the 13-bit NRP Selector (NRPS13) Action (when encoded in
the second label stack entry in the Network Action Sub-Stack):</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 | Opcode=TBA1 |         NRPS            |R|IHS|S| Res |U|  NASL |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 13-bit NRP Selector (NRPS13) Action</t>
  <t>Network Action Indication: The NRPS13 Action indication is opcode
   TBA1.</t>
  <t>Scope: The NRPS13 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS13 Action carries 13 bits of ancillary data.
   The NRPS is encoded in the 13 bits.  The packet carrying the NRPS13
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: B.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-nrp-selector-nrps20-action"><name>20-bit NRP Selector (NRPS20) Action</name>

<t>The format of the 20-bit NRP Selector (NRPS20) Action:</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |  Opcode=TBA2|             NRPS              |S|  NRPS |  NAL  |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit NRP Selector (NRPS20) Action</t>
  <t>Network Action Indication: The NRPS20 Action indication is opcode
   TBA2.</t>
  <t>Scope: The NRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS20 Action carries 20 bits of ancillary data.
   The NRPS is encoded in the 20 bits.  The packet carrying the NRPS20
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-entropy-and-nrp-selector-enrps20-action"><name>20-bit Entropy and NRP Selector (ENRPS20) Action</name>

<t>The format of the 20-bit Entropy and NRP Selector (ENRPS20)
Action:</t>

<figure><artwork><![CDATA[
 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|  Opcode=TBA3|        Entropy        | NRPS  |S| NRPS  |  NAL  |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit Entropy and NRP Selector (ENRPS20) Action</t>
  <t>Network Action Indication: The ENRPS20 Action indication is opcode
   TBA3.</t>
  <t>Scope: The ENRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The ENRPS20 Action carries 20 bits of ancillary
   data.  The most significant 12 bits of ancillary data is the
   Entropy Value.  The least significant 8 bits of ancillary data is
   the NRPS.  The Entropy Value has semantics consistent with the
   Entropy Label <xref target="RFC6790"/>.  While the RFC 6790 Entropy Label has
   some restrictions to avoid collisions with the reserved label
   space (0-15) <xref target="RFC3032"/>, those restrictions are not necessary for
   the Entropy Value and do not apply.  The packet carrying the
   ENRPS20 action should be given the forwarding treatment specified
   by the associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<section anchor="bit-nrp-selector-action"><name>13-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA1) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
13-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-nrp-selector-action-1"><name>20-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA2) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-entropy-and-nrp-selector-action"><name>20-bit Entropy and NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA3) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit Entropy and NRP Selector Action.  The
allocation should reference this document.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<t>The forwarding plane is insecure. If an adversary can affect the
forwarding plane, then they can inject data, remove data, corrupt
data, or modify data. MNA additionally allows an adversary to make
packets perform arbitrary network actions.</t>

<t>Link-level security mechanisms can help mitigate some on-link attacks,
but does nothing to preclude hostile nodes.</t>

</section>
<section anchor="contributors"><name>Contributors</name>

<t>The following individuals contributed to this document:</t>

<figure><artwork><![CDATA[
Colby Barth
Juniper Networks
Email: cbarth@juniper.net

Srihari R.  Sangli
Juniper Networks
Email: ssangli@juniper.net

Chandra Ramachandran
Juniper Networks
Email: csekar@juniper.net

Kireeti Kompella
Juniper Networks
Email: kireeti@juniper.net
]]></artwork></figure>

</section>


  </middle>

  <back>

    <references title='Normative References'>

&I-D.ietf-mpls-mna-hdr;
&RFC2119;
&RFC3032;
&RFC6790;
&RFC8174;


    </references>

    <references title='Informative References'>

&I-D.ietf-mpls-mna-fwk;
&RFC9543;
&I-D.ietf-teas-ns-ip-mpls;


    </references>



  </back>

<!-- ##markdown-source:
H4sIAITzemYAA81a3XIbtxW+x1Og8kWl1mT04yS2ZjpjWZZrJZSsinIyveqA
uyCJaBfYArtU2Uh9lj5Ln6zfAbDLXYqkaLvpWJlYJPbg4Jzv/OKser0eS0yq
9OSYV+W495KVqszkMb+4Ggz5pSzvjL3lJ0mpjHZ8bGyzdi2dqWwi+ZWw2IPn
fCgzmZTGMjEaWTkDk8sTfnl9tXiQmkSLHOxTK8ZlL1O9vMhcL9eip23Rc5Gu
t3/A7iZRiJ9xGuTjf7amKlgiSjkxdn7MXZkyV41y5RwOL+cF2J6f3bxjqrDH
vLSVKw/391/tHzImqnJq7DHjvIf//Y/S7pjf9PlA1StBsBuj561FYyHGD5VW
hWxUd/VDV1opy2N+cHB0xM+1NjPhcfhZzGuSRJUQdVhpPZ+JTNbLVk5AeMxP
TxpCk+L0Vy/2X75aLFW6JE0/alXKlA9L6N4cLnOhMugJefuZeh1/P1Lxhz5/
a8Wt7Gr5g5nq7npk94v8W0rLr+diakw/MXnD0bP7qX/V52+ktCJnC3Y/KTfV
FTxhJnT76Xr0noJuFW5LoC0jtgGuqNxs5EV7/UuQqK9l2dUO/jAUIm1pdiOs
vF0seoVOlUsMH85dKfMO/9KBjri+ntDCY/TO+/xCqkzdtk44d1bIrL3uD3lj
jUgDg4a/8qT93JO+HkUKfwzTxuaAcCbJy897b/tKIpyb6Jqm3v2v350eHhy8
ih+P9o8O48fvvn+1Hz++PPj+xTFnSo83sxzf3cYdr759cdShKaVwPe16qvDk
x4z1ej0uRrC6SErGTrSP1CaXDDOFROKkndHvwpqZSqWDRbVGPlAzOAOZt8hg
1jtVTrkAccnMmOvIwdbZCGDkqsylLh0XOgVmXP6jwGOHvUrzUtrccew0WgJp
lhsrlw/SkLNKStfnJ5vS3S5S2x4dIJBCM8pctArWtTCOQw1dqrGKZ08lr3Qq
bSbmjeSl4a4qCmNLth4TiAJZ/FLvXWbu+MlkgnCAg+OwsbSO2BD7CAtwHo9V
4sNMQN+xNXnUmG/SmI9kZvQE6ZaBYXvDY9lw5lSUHAHCc1EUUBFbYJhCJorO
BjqMLBDNmQb54PNURu6EpaLDST5vLSh4g+eFSG4lmc45kyjol7Jo8JXK5wAy
EdbOQZCLUCci0IHT7x2rgQboyEJTKWAAEjXaZg5qtTiQTEhS+8WGpWMeZhuV
dJ2qFkVvL5FXVC5QAxy2EKg21EJBv7EFFD2GQ+EwVxjtUVoFWM0osO0ztrJi
76IE78Hpk6k2mZkoWI0MVsumwJ8qKheBnlGFHwh4AR8C92QKsitRTsFoMLxy
eyTnNyDxZzW20p4XfE47gMRSUQq4tySbEz9I6ZoTPFhAB51A5dVIkU0rRCeC
smi6DFY5UnatSpAEJwbLl4+w1x35+iH75CpNUUjYM5Sb0pq08uzW5aJff415
7eGhjkG2bV6iFNBEQTsfmTFbzlcUceWdlHA6rqt8BNfEbqnTwii/ZYYVcJ3C
ailbTh7R8zbk0qX0x5bS38Zk4HPOcv5jy/mvjRTFEV/kQvb5uTB0cqtzId+F
4AJtmgETu1j26Yj8jpOnJyJr0A4KVZAlmMnKv1eKgjkBrnBMaZUrVeKz6Ah4
UIzJdI8A0Ix868pAgjl0XVfiauWLQNiA6IViUotRRhBgVQAEUVeKHIEptHI5
PWt0J/+J9qv9CAmBvDbzweYDrMgETDiSUzFTBgUADEP7DCUKExHgWPG+x1r5
xkMQowbBsW1d4RvqCtu6rvANdYVtW1c8CkTwqLawDbWFNkb7IOv57tDvqx0z
qc3i0/WY4BANHF6mVhoPCnl8Qrkg3Vs5e6UgCxetXQ0KZiqo2ErmXl72uBby
T6+FrF0L+WfVQrZUC/mGWuiTwnCvzzaGyiLnCz6Wd+3MH1TwqAGCTXn9ORaS
rPIIU5rM0A7HfXDXnOIs8Tl3YYlv6rDKqMSFyhUqjeDwIl8K00Wishz/ZCli
pKVNu/+l4hDcklQBWDaZ4u5BqQaxN8ZdQ3q4YxXctkTD/nRzXlm12YqqzT+h
arM1VZs/XbUlScVaOsLlofRYJLiPUDh1bLca0JEgHZbNSuQeG28XZBfIuKFR
6DiNb1la7ULt4jU2a/uEuuO0SJcklNRhEBKwRt1GZMKJFumSbBJDpqbl4Y4E
KeVYaTCBMqt8Bdevhwf4ER1oA4tQmSFJiCPkgrHIAaSw8URUauXNP2+czJfw
9b5IJt1CyHVMaiGfPUO19wUytC0DoSeVmKApenZ99pce6s7kIahyK+ccYCOb
7Vx8HN7sPA+/+eUH/xnUH8+vz97S5+H7k8Gg+cAixfD9h4+Dt4tPi52nHy4u
zi7fhs1Y5Z0ltnNx8lc8IY13PlzdnH+4PBnsBFdq+wxZMoCLbkpaNEIEt3AM
bVxi1Sj0Im9Or/7z74MXsNzv4gUZYIYvdBnGl7up1OE0o7N5/AqfmDOqUMI7
scgyeFqBSMiQm5AX3dTcaRjDyj6hhWgKWFGiBo3hi71dqWEfpHZJuZBC0FGt
B9GZnmTKTQOX53SdDiVFKsub6z9aCjQU8GIYEr3uqozjLXxw1BupckXuPjja
i4TBxsF5fPHHty228V2CJ3hfbDp9RkY3kLYDHBQlwjKGf1dGPqxGvSFR7R0z
9i/8MM73+QE/5Ef8Bf+Wf8e//9TvjP+x94X/MX7PPxSk159u3pwc4Fv9QxDw
1s/99f35++H98J4aZ37/EZSXJ8MBv/9fSOHxYH8ASz9B2sqURN2F+DxUET9S
i+0RdtRPVfOUMpXxSsdZIane9xyHiaGp64rdjs9EptI6LhwRurDpXAfL8reo
OKs2U7qmkocV6OVvK0KjxmQC7kJlql8LErf6XNq4W/RTv7czVeiWp3Bm5BSK
BUVslaWULiYIpcBpZR+3SMgjX1hqNotOLTSaQePB8Iy/82F0zN+EpSvjyg4M
l2iKQ+493F9jzsP9TZG5xbavLZRasXR4346eR+GEgBrex2UfSgP+m4TSVthv
F0qH+9uF0uHKUGrt/vRQWmyuQwkrnx1Kce8ToXS4/38PpdN+ELtri4HUE7RP
u/CRvdC/89hbjDxv3/DmqgyNAP+ntGbbkDyjK3gx931A10XOto7Pp3mwpWD9
0lj98iDpROpRE6m1KnWExqilSI2fmkj9rQL1EyzydNSefUrYHj0K2+Xtnxa3
Z9sHbhTCh28Iyhyuy52aaD/FQFAdHK6JdxJrEWQ1fD+JrJKRV4bbepfZy/W8
Ip86CUQWHbZ8Sq1wcx+nmZBypWxdrJaECRdZP1akt1K4knD+81RlfjBOr5s4
LS+R45DIxpmc7liutGpxAxQzA0vQZFI5v9Zc6kAp7UzGzrTmgSwn+e5+7+Db
OOCkV2UPD9Tz467YZU93DG1orJNI5wgcGmAvgOmi4ed3xm+g2c98fVqtYYmO
8dl5NfIJ2fVryqv8/ASX1VNyCFxXxea7ySKxtm9KNMiFLeLI0PNDrJkwHPFv
iP0cne9Sz7oXxpUE7c5FlZUKV//SwCk6sxNC8aQ949ilO9Tezjc77bsUq6c3
V4KmPLhbOlAsQRaSptvxb65dGTzDn79ew+gPUQtSOVrcD91QmmX3sri+Z/xy
xA6/IsTWa/hFiK0tIF+O3tHXh94T2sa58wJJ/jSS4JFUlqb9y4F8081M4X2F
8i9BaAvqzfnYD03TGbShvEnTRDEe+3cY084o32/2Exef8QKp0r8QKZWi5xAx
NzMZv9AkvipKFr75Vw0pTbdDyaQRmUhT/xILus69Ce9cVxb/4vZ2MYQvpKV+
DtkeQFqiWBo0AoyB0re9TM5owlGj0nrDQzJPZVZwZEnlR/a+Vhndy7CRi5Jy
pHvORhWUMij+KBLT+MqksJJm3aimyKZUCzVZ2hvglN4MKWwyFqjHXn5sSKfw
CiBVM5VWIvPFN5DWbxxaxqz7zVOToVS8Ebacskd/unMW/hAlGdHjzt/RsKFV
U2EVv4YXDQWNqtZuR5Wk5939p4AptYJfi1wk4bNeL4CTt8J2Gfyo6E+KFP/R
5IVEl7J2820g7Oz2qv8XdseVJA0nAAA=

-->

</rfc>

