<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.14 (Ruby 2.6.10) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

<!ENTITY I-D.ietf-mpls-mna-hdr SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-hdr.xml">
<!ENTITY RFC2119 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml">
<!ENTITY RFC3032 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.3032.xml">
<!ENTITY RFC6790 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.6790.xml">
<!ENTITY RFC8174 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8174.xml">
<!ENTITY I-D.ietf-mpls-mna-fwk SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-fwk.xml">
<!ENTITY RFC9543 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.9543.xml">
<!ENTITY I-D.ietf-teas-ns-ip-mpls SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-teas-ns-ip-mpls.xml">
]>


<rfc ipr="trust200902" docName="draft-ietf-mpls-mna-nrp-selector-00" category="std" consensus="true" submissionType="IETF">
  <front>
    <title abbrev="MNA NRP Selector">MPLS Network Actions for Network Resource Partition Selector</title>

    <author initials="T." surname="Li" fullname="Tony Li">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>tony.li@tony.li</email>
      </address>
    </author>
    <author initials="J." surname="Drake" fullname="John Drake">
      <organization></organization>
      <address>
        <email>je_drake@yahoo.com</email>
      </address>
    </author>
    <author initials="V. P." surname="Beeram" fullname="Vishnu Pavan Beeram">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>vbeeram@juniper.net</email>
      </address>
    </author>
    <author initials="T." surname="Saad" fullname="Tarek Saad">
      <organization>Cisco Systems</organization>
      <address>
        <email>tsaad.net@gmail.com</email>
      </address>
    </author>
    <author initials="I." surname="Meilik" fullname="Israel Meilik">
      <organization>Broadcom</organization>
      <address>
        <email>israel.meilik@broadcom.com</email>
      </address>
    </author>

    <date year="2025" month="May" day="13"/>

    
    <workgroup>MPLS Working Group</workgroup>
    

    <abstract>


<t>An IETF Network Slice service provides connectivity coupled with a set
of network resource commitments and is expressed in terms of one or
more connectivity constructs. A Network Resource Partition (NRP) is a
collection of resources identified in the underlay network to support
IETF Network Slice services.  A Slice-Flow Aggregate refers to the set
of traffic streams from one or more connectivity constructs belonging
to one or more IETF Network Slices that are mapped to a specific NRP
and provided the same forwarding treatment.  The packets associated
with a Slice-Flow Aggregate may carry a marking in the packet's
network layer header to identify this association and this marking is
referred to as NRP Selector.  The NRP Selector is used to map
the packet to the associated NRP and provide the
corresponding forwarding treatment to the packet.</t>

<t>MPLS Network Actions (MNA) technologies are used to indicate actions
for Label Switched Paths (LSPs) and/or MPLS packets and to transfer
data needed for these actions.  This document discusses options for
using MPLS Network Actions (MNAs) to carry the NRP Selector in MPLS packets.</t>



    </abstract>



  </front>

  <middle>


<section anchor="introduction"><name>Introduction</name>

<t>An IETF Network Slice <xref target="RFC9543"/> service
provides connectivity coupled with a set of specific commitments of
network resources between a number of endpoints over a shared
underlay network.  The IETF Network Slice service is expressed in
terms of one or more connectivity constructs.  A Network Resource
Partition (NRP) <xref target="RFC9543"/> is a collection
of resources identified in the underlay network to support IETF
Network Slice services (or any other services that need logical
network structures with required characteristics to be created).  An
NRP Policy <xref target="I-D.ietf-teas-ns-ip-mpls"/> is a policy construct that
enables instantiation of mechanisms in support of service specific
control and data plane behaviors on select topological elements
associated with the NRP.</t>

<t>A Slice-Flow Aggregate refers to the set of traffic streams from one
or more connectivity constructs belonging to one or more IETF Network
Slices that are mapped to a specific NRP and are provided the same
forwarding treatment.  The NRP policy dictates the identification of
the flow aggregate that the packet belongs to and the corresponding
forwarding treatment that needs to be applied to the packet.  The
packets associated with a Slice-Flow Aggregate may carry a marking in
the packet's network layer header to identify this association and
this marking is referred to as NRP Selector (NRPS).
<xref target="I-D.ietf-teas-ns-ip-mpls"/> discusses a few options for carrying the
NRP Selector in MPLS packets, including overloading the semantics of
forwarding/service labels and using a dedicated identifier field.</t>

<t><xref target="I-D.ietf-mpls-mna-fwk"/> specifies an architectural framework for the
MPLS Network Actions (MNA) technologies.  MNA technologies are used
to indicate actions for Label Switched Paths (LSPs) and/or MPLS
packets and to transfer data needed for these actions.  The MNA
architecture can facilitate carrying the dedicated identifier based
NRP Selector in the MPLS label stack.  This document discusses a few options
for using MPLS network actions to carry the NRP Selector.  The proposed
encodings are compliant with the MNA header encoding formats defined
in <xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<t>The reader is expected to be familiar with terminology specified in
<xref target="I-D.ietf-mpls-mna-fwk"/> and MNA header encoding formats defined in
<xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<section anchor="REQ-lang"><name>Requirements Language</name>

<t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL
NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED",
"MAY", and "OPTIONAL" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.
These words may also appear in this document in
lower case as plain English words, absent their normative meanings.</t>

</section>
</section>
<section anchor="mpls-network-actions"><name>MPLS Network Actions</name>

<section anchor="bit-nrp-selector-nrps13-action"><name>13-bit NRP Selector (NRPS13) Action</name>

<t>The format of the 13-bit NRP Selector (NRPS13) Action (when encoded in
the second label stack entry in the Network Action Sub-Stack):</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 | Opcode=TBA1 |         NRPS            |R|IHS|S| Res |U|  NASL |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 13-bit NRP Selector (NRPS13) Action</t>
  <t>Network Action Indication: The NRPS13 Action indication is opcode
   TBA1.</t>
  <t>Scope: The NRPS13 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS13 Action carries 13 bits of ancillary data.
   The NRPS is encoded in the 13 bits.  The packet carrying the NRPS13
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: B.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-nrp-selector-nrps20-action"><name>20-bit NRP Selector (NRPS20) Action</name>

<t>The format of the 20-bit NRP Selector (NRPS20) Action:</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |  Opcode=TBA2|             NRPS              |S|  NRPS |  NAL  |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit NRP Selector (NRPS20) Action</t>
  <t>Network Action Indication: The NRPS20 Action indication is opcode
   TBA2.</t>
  <t>Scope: The NRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS20 Action carries 20 bits of ancillary data.
   The NRPS is encoded in the 20 bits.  The packet carrying the NRPS20
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-entropy-and-nrp-selector-enrps20-action"><name>20-bit Entropy and NRP Selector (ENRPS20) Action</name>

<t>The format of the 20-bit Entropy and NRP Selector (ENRPS20)
Action:</t>

<figure><artwork><![CDATA[
 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|  Opcode=TBA3|        Entropy        | NRPS  |S| NRPS  |  NAL  |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit Entropy and NRP Selector (ENRPS20) Action</t>
  <t>Network Action Indication: The ENRPS20 Action indication is opcode
   TBA3.</t>
  <t>Scope: The ENRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The ENRPS20 Action carries 20 bits of ancillary
   data.  The most significant 12 bits of ancillary data is the
   Entropy Value.  The least significant 8 bits of ancillary data is
   the NRPS.  The Entropy Value has semantics consistent with the
   Entropy Label <xref target="RFC6790"/>.  While the RFC 6790 Entropy Label has
   some restrictions to avoid collisions with the reserved label
   space (0-15) <xref target="RFC3032"/>, those restrictions are not necessary for
   the Entropy Value and do not apply.  The packet carrying the
   ENRPS20 action should be given the forwarding treatment specified
   by the associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<section anchor="bit-nrp-selector-action"><name>13-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA1) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
13-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-nrp-selector-action-1"><name>20-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA2) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-entropy-and-nrp-selector-action"><name>20-bit Entropy and NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA3) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit Entropy and NRP Selector Action.  The
allocation should reference this document.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<t>The forwarding plane is insecure. If an adversary can affect the
forwarding plane, then they can inject data, remove data, corrupt
data, or modify data. MNA additionally allows an adversary to make
packets perform arbitrary network actions.</t>

<t>Link-level security mechanisms can help mitigate some on-link attacks,
but does nothing to preclude hostile nodes.</t>

</section>
<section anchor="contributors"><name>Contributors</name>

<t>The following individuals contributed to this document:</t>

<figure><artwork><![CDATA[
Colby Barth
Juniper Networks
Email: cbarth@juniper.net

Srihari R.  Sangli
Juniper Networks
Email: ssangli@juniper.net

Chandra Ramachandran
Juniper Networks
Email: csekar@juniper.net

Kireeti Kompella
Juniper Networks
Email: kireeti@juniper.net
]]></artwork></figure>

</section>


  </middle>

  <back>


    <references title='Normative References'>

&I-D.ietf-mpls-mna-hdr;
&RFC2119;
&RFC3032;
&RFC6790;
&RFC8174;


    </references>

    <references title='Informative References'>

&I-D.ietf-mpls-mna-fwk;
&RFC9543;
&I-D.ietf-teas-ns-ip-mpls;


    </references>



  </back>

<!-- ##markdown-source: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-->

</rfc>

