]> Amazon

1 Principal Place, Worship Street London EC2A 2FA UK jevanamz@amazon.co.uk

Amazon

410 Terry Ave N Seattle WA 98109 US opyl@amazon.com

Juniper Networks

1133 Innovation Way Sunnyvale CA 94089 US jhaas@juniper.net

Cisco Systems, Inc.

170 West Tasman Dr. San Jose CA 95134 US akadosh@cisco.com

Orange

France mohamed.boucadair@orange.com

Operations and Management Area Operations and Management Area Working Group Internet-Draft This document defines an information model and a corresponding YANG data model for packet discard reporting. The information model provides an implementation-independent framework for classifying packet loss to enable automated network mitigation of unintended packet loss. The YANG data model specifies an implementation of this framework for network elements. About This Document The latest revision of this draft can be found at . Status information for this document may be found at . Discussion of this document takes place on the Operations and Management Area Working Group mailing list (), which is archived at . Subscribe at . Source for this draft and an issue tracker can be found at .

Introduction The primary function of a network is to transport and deliver packets according to service level objectives. For network operators, understanding both where and why packet loss occurs within a network is essential for effective operation. Device-reported packet loss provides the most direct signal for identifying service impact. While certain types of packet loss, such as policy-based discards, are intentional and part of normal network operation, unintended packet loss can impact customer services. To automate network operations, operators must be able to detect customer-impacting packet loss, determine its root cause, and apply appropriate mitigation actions. Precise classification of packet loss is crucial to ensure that anomalous packet loss is easily detected and that the right action is taken to mitigate the impact. Taking the wrong action can make problems worse; for example, removing a congested device from service can exacerbate congestion by redirecting traffic to other already congested links or devices. Existing metrics for reporting packet loss, such as ifInDiscards, ifOutDiscards, ifInErrors, and ifOutErrors defined in MIB-II and the YANG Data Model for Interface Management , are insufficient for automating network operations. First, they lack precision; for instance, ifInDiscards aggregates all discarded inbound packets without specifying the cause, making it challenging to distinguish between intended and unintended discards. Second, these definitions are ambiguous, leading to inconsistent vendor implementations. For example, in some implementations ifInErrors accounts only for errored packets that are dropped, while in others, it includes all errored packets, whether they are dropped or not. Many implementations support more discard metrics than these, however, they have been inconsistently implemented due to the lack of a standardised classification scheme and clear semantics for packet loss reporting. For example, provides support for reporting discards per flow in IPFIX using forwardingStatus, however, the defined drop reason codes also lack sufficient clarity to facilitate automated root cause analysis and impact mitigation, e.g., the "For us" reason code. This document defines an information model and corresponding YANG data model for packet loss reporting which address these issues. The information model provides precise classification of packet loss to enable accurate automated mitigation. The data model specifies a YANG implementation of this framework for network elements, while maintaining consistency through clear semantics. The scope of this document is limited to reporting packet loss at Layer 3 and frames discarded at Layer 2. This document considers only the signals that may trigger automated mitigation actions and not how the actions are defined or executed. describes the problem space and requirements. defines the information model and classification scheme. specifies the corresponding YANG data model and implementation requirements together with a set of usage examples, and the complete YANG module definition. The appendices provide additional context and implementation guidance.

Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here. A packet discard accounts for any instance where a packet is dropped by a device, regardless of whether the discard was intentional or unintentional. Intended discards are packets dropped due to deliberate network policies or configurations designed to enforce security or Quality of Service (QoS). For example, packets dropped because they match an Access Control List (ACL) denying certain traffic types. Unintended discards are packets that were dropped, which the network operator otherwise intended to deliver, i.e. which indicates an error state. There are many possible reasons for unintended packet loss, including: erroring links may corrupt packets in transit; incorrect routing tables may result in packets being dropped because they do not match a valid route; configuration errors may result in a valid packet incorrectly matching an ACL and being dropped. Tree diagrams used in this document follow the notation defined in .

Problem Statement The fundamental problem for network operators is how to automatically detect when unintended packet loss is occurring and determine the appropriate action to mitigate it. For any network, there are a small set of potential actions that can be taken to mitigate customer impact when unintended packet loss is detected:

1. Take a problematic device, link, or set of devices and/or links out of service.
2. Return a device, link, or set of devices and/or links back into service.
3. Move traffic to other links or devices to alleviate congestion or avoid problematic paths.
4. Roll back a recent change to a device that might have caused the problem.
5. Escalate to a network operator as a last resort when automated mitigation is not possible.

The ability to select the appropriate mitigation action depends on four key features of packet loss:

FEATURE-DISCARD-LOCATION:

Determines which devices, interfaces and/or flows are impacted.

FEATURE-DISCARD-RATE:

The rate and/or magnitude of the discards, indicating the severity and urgency of the problem.

FEATURE-DISCARD-DURATION:

The duration of the discards which helps to distinguish transient from persistent issues.

FEATURE-DISCARD-CLASS:

The type or class of discards, which is crucial for selecting the appropriate of mitigation - for example: error discards may require taking faulty components out of service; no-buffer discards may require traffic redistribution; policy discards typically require no automated action

While FEATURE-DISCARD-LOCATION, FEATURE-DISCARD-RATE, and FEATURE-DISCARD-DURATION are implicitly supported by MIB-II and the YANG Data Model for Interface Management , FEATURE-DISCARD-CLASS requires a more detailed classification scheme than they define. The following information model defines such a classification scheme to enable automated mapping from loss signals to appropriate mitigation actions.

Information Model The information model is defined using YANG , with Data Structure Extensions , allowing the model to remain abstract and decoupled from specific implementations in accordance with . This abstraction supports different data model implementations - for example, in YANG, IPFIX , gMNI or SNMPv3 - while ensuring consistency across implementations. Using YANG for the information model enables this abstraction, leverages the community's familiarity with its syntax, and ensures lossless translation to the corresponding YANG data model, which is defined in .

Structure The information model defines a hierarchical classification scheme for packet discards, which captures where in a device the discards are accounted (component), in which direction they were flowing (direction), whether they were successfully processed or discarded (type), what protocol layer they belong to (layer), and the specific reason for any discards (sub-types). This structure enables both high-level monitoring of total discards and more detailed triage to map to mitigation actions. The abstract structure of the IM is depicted in . The full YANG tree diagram of the IM is provided in .

Abstract IM Tree Structure

The discard reporting can be organized into several types: control plane, interface, flow, and device. In order to allow for better mapping to underlying data models, the IM supports a set of "features" to declare the supported type. A complete classification path follows the pattern: component/direction/type/layer/sub-type/sub-sub-type/.../metric. illustrates where these discards typically occur in a network device. The elements of the tree are defined as follows:

• Component:
  • control-plane: discards of traffic to or from a device's control plane.
  • interface: discards of traffic to or from a specific network interface.
  • flow: discards of traffic associated with a specific traffic flow.
  • device: discards of traffic transiting the device.
• Direction:
  • ingress: counters for incoming packets or frames.
  • egress: counters for outgoing packets or frames.
• Type:
  • traffic: counters for successfully received or transmitted packets or frames.
  • discards: counters for packets or frames that were dropped.
• Layer:
  • l2: Layer 2 traffic and discards, i.e., frame and byte counts.
  • l3: Layer 3 traffic and discards, i.e., packet and byte counts.

The hierarchical structure allows for future extension while maintaining backward compatibility. New discard types can be added as new branches without affecting existing implementations. The corresponding YANG module is defined in .

Sub-type Definitions

discards/policy/:

These are intended discards, meaning packets dropped by a device due to a configured policy, including: ACLs, traffic policers, Reverse Path Forwarding (RPF) checks, DDoS protection rules, and explicit null routes

discards/error/:

These are unintended discards due to errors in processing packets or frames. There are multiple sub-classes.

discards/error/l2/rx/:

These are frames discarded due to errors in the received Layer 2 frame, including: CRC errors, invalid MAC addresses, invalid VLAN tags, frame size violations and other malformed frame conditions

discards/error/l3/rx/:

These are discards which occur due to errors in the received packet, indicating an upstream problem rather than an issue with the device dropping the errored packets, including: header checksum errors, MTU exceeded, invalid packet errors, i.e., incorrect version, incorrect header length, invalid options and other malformed packet conditions

discards/error/l3/rx/ttl-expired:

These are discards due to TTL (or Hop limit) expiry, which can occur for the following reasons: normal trace-route operations, end-system TTL/Hop limit set too low, routing loops in the network.

discards/error/l3/no-route/:

These are discards which occur due to a packet not matching any route in the routing table, e.g., which may be due to routing configuration errors or may be transient discards during convergence.

discards/error/internal/:

These are discards due to internal device issues, including: parity errors in device memory or other internal hardware errors. Any errored discards not explicitly assigned to other classes are also accounted for here.

discards/no-buffer/:

These are discards due to buffer exhaustion, i.e. congestion related discards. These can be tail-drop discards or due to an active queue management algorithm, such as RED or CODEL .

An example of possible signal-to-mitigation action mapping is provided in .

"ietf-packet-discard-reporting-sx" YANG Module The "ietf-packet-discard-reporting-sx" module uses the "sx" structure defined in . Author: Oleksandr Pylypenko Author: Jeffrey Haas Author: Aviran Kadosh Author: Mohamed Boucadair "; description "This module defines an information model for packet discard reporting. Copyright (c) 2025 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Revised BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info). This version of this YANG module is part of RFC XXXX; see the RFC itself for full legal notices."; revision 2024-06-04 { description "Initial revision."; reference "RFC XXXX: Information and Data Models for Packet Discard Reporting"; } /* * Features */ feature interface-stats { description "Indicates support of interface statistics on this device."; } feature device-stats { description "Indicates support of global device statistics on this device."; } feature control-plane-stats { description "Indicates support of control plane statistics on this device."; } feature flow-reporting { description "Indicates support of flow reporting on this device."; } /* * Identities */ identity direction { description "Defines a direction for the reported statistics."; } identity ingress { base direction; description "Reports statistics for the received from the network packets."; } identity egress { base direction; description "Reports statistics for the sent to the network packets."; } identity address-family { description "Defines a type for the address family."; } identity ipv4 { base address-family; description "Identity for an IPv4 address family."; } identity ipv6 { base address-family; description "Identity for an IPv6 address family."; } identity all { base address-family; description "Identity for all address families."; } /* * Groupings */ grouping basic-packets { description "Grouping for Layer 3 packet counters."; leaf packets { type yang:counter64; description "Number of Layer 3 packets."; } } grouping basic-packets-bytes { description "Grouping for Layer 3 packet and byte counters."; uses basic-packets; leaf bytes { type yang:counter64; description "Number of Layer 3 bytes."; } } grouping basic-frames { description "Grouping for Layer 2 frame counters."; leaf frames { type yang:counter64; description "Number of Layer 2 frames."; } } grouping basic-frames-bytes { description "Grouping for Layer 2 frame and byte counters."; uses basic-frames; leaf bytes { type yang:counter64; description "Number of Layer 2 bytes."; } } grouping l2-traffic { description "Layer 2 traffic counters."; uses basic-frames-bytes; } grouping ip { description "Layer 3 traffic counters per address family."; list address-family-stat { key "address-family"; description "Reports per address family traffic counters."; leaf address-family { type identityref { base address-family; } description "Specifies an address family."; } uses basic-packets-bytes; container unicast { description "Unicast traffic counters."; uses basic-packets-bytes; } container multicast { description "Multicast traffic counters."; uses basic-packets-bytes; } } } grouping l3-traffic { description "Layer 3 traffic counters."; uses ip; } grouping qos { description "Quality of Service (QoS) traffic counters."; list class { key "id"; min-elements 1; description "QoS class traffic counters."; leaf id { type string; description "QoS class identifier."; } uses basic-packets-bytes; } } grouping traffic { description "All traffic counters."; container l2 { description "Layer 2 traffic counters."; uses l2-traffic; } container l3 { description "Layer 3 traffic counters."; uses l3-traffic; } container qos { description "QoS traffic counters."; uses qos; } } grouping errors-l2-rx { description "Layer 2 ingress frame error discard counters."; container rx { description "Layer 2 ingress frame receive error discard counters."; leaf frames { type yang:counter64; description "The number of frames discarded due to errors with the received frame."; } leaf crc-error { type yang:counter64; description "The number of frames discarded due to CRC error."; } leaf invalid-mac { type yang:counter64; description "The number of frames discarded due to an invalid MAC address."; } leaf invalid-vlan { type yang:counter64; description "The number of frames discarded due to an invalid VLAN tag."; } leaf invalid-frame { type yang:counter64; description "The number of invalid frames discarded due to other reasons, not limited to: malformed frames, frame-size violations."; } } } grouping errors-l3-rx { description "Layer 3 ingress packet error discard counters."; container rx { description "Layer 3 ingress packet receive error discard counters."; leaf packets { type yang:counter64; description "The number of Layer 3 packets discarded due to errors in the received packet."; } leaf checksum-error { type yang:counter64; description "The number of received packets discarded due to a checksum error."; } leaf mtu-exceeded { type yang:counter64; description "The number of received packets discarded due to MTU exceeded."; } leaf invalid-packet { type yang:counter64; description "The number of invalid packets discarded due to other reasons, not limited to: invalid packet length, invalid header fields, invalid options, invalid protocol version, invalid flags or control bits, malformed packets."; } } leaf ttl-expired { type yang:counter64; description "The number of received packets discarded due to expired TTL."; } leaf no-route { type yang:counter64; description "The number of packets discarded due to not matching a valid route."; } leaf invalid-sid { type yang:counter64; description "The number of packets discarded due to an invalid Segment Routing (SR) SID."; } leaf invalid-label { type yang:counter64; description "The number of packets discarded due to an invalid MPLS label."; } } grouping errors-l3-int { description "Internal error discard counters."; leaf packets { type yang:counter64; description "The number of packets discarded due to internal errors."; } leaf parity-error { type yang:counter64; description "The number of packets discarded due to parity errors."; } } grouping errors-l2-tx { description "Layer 2 transmit error discard counters."; container tx { description "Layer 2 transmit frame error discard counters."; leaf frames { type yang:counter64; description "The number of Layer 2 frames discarded due to errors when transmitting."; } } } grouping errors-l3-tx { description "Layer 3 transmit error discard counters."; container tx { description "Layer 3 transmit packet error discard counters."; leaf packets { type yang:counter64; description "The number of Layer 3 packets discarded due to errors when transmitting."; } } } grouping errors { description "Error discard counters."; container l2 { description "Layer 2 frame error discard counters."; uses errors-l2-rx; uses errors-l2-tx; } container l3 { description "Layer 3 packet error discard counters."; uses errors-l3-rx; uses errors-l3-tx; } container internal { description "Internal error discard counters."; uses errors-l3-int; } } grouping policy-l2 { description "Layer 2 policy frame discard counters."; leaf frames { type yang:counter64; description "The number of Layer 2 frames discarded due to policy."; } leaf acl { type yang:counter64; description "The number of frames discarded due to Layer 2 ACLs."; } } grouping policy-l3 { description "Layer 3 policy packet discard counters."; leaf packets { type yang:counter64; description "The number of Layer 3 packets discarded due to policy."; } leaf acl { type yang:counter64; description "The number of packets discarded due to Layer 3 ACLs."; } container policer { description "The number of packets discarded due to policer violations."; uses basic-packets-bytes; } leaf null-route { type yang:counter64; description "The number of packets discarded due to matching a null route."; } leaf rpf { type yang:counter64; description "The number of packets discarded due to failing Reverse Path Forwarding (RPF) check."; } leaf ddos { type yang:counter64; description "The number of packets discarded due to DDoS protection policies."; } } grouping discards { description "Discard counters."; container l2 { description "Layer 2 frame discard counters."; uses l2-traffic; } container l3 { description "Layer 3 packet discard counters."; uses l3-traffic; } container errors { description "Error discard counters."; uses errors; } container policy { description "Policy-related discard counters."; uses policy; } container no-buffer { description "Discard counters due to buffer unavailability."; uses qos; } } grouping policy { description "Policy-related discard counters."; container l2 { description "Layer 2 policy frame discard counters."; uses policy-l2; } container l3 { description "Layer 3 policy packet discard counters."; uses policy-l3; } } grouping device { description "Device-level traffic and discard counters."; container traffic { description "Traffic counters."; uses traffic; } container discards { description "Discard counters."; uses discards; } } grouping interface { description "Interface-level traffic and discard counters."; list traffic { key "direction"; description "Traffic counters."; leaf direction { type identityref { base direction; } description "Specifies a direction."; } uses traffic; } list discards { key "direction"; description "Discard counters."; leaf direction { type identityref { base direction; } description "Specifies a direction."; } uses discards; } } grouping control-plane { description "Control plane packet counters."; list traffic { key "direction"; description "Total control plane packets."; leaf direction { type identityref { base direction; } description "Specifies a direction."; } uses basic-packets-bytes; } list discards { key "direction"; description "Control plane packet discard counters."; leaf direction { type identityref { base direction; } description "Specifies a direction."; } uses basic-packets-bytes; container policy { description "Number of control plane packets discarded due to policy."; uses basic-packets; } } } /* * Main structure definition */ sx:structure packet-discard-reporting { description "Specifies the abstract structure of packet discard reporting data."; container control-plane { if-feature "control-plane-stats"; description "Control plane packet counters."; uses control-plane; } list interface { if-feature "interface-stats"; key "name"; description "Indicates a list of interfaces for which packet discard reporting data is provided."; leaf name { type string; description "Indicates the name of the interface."; } uses interface; } list flow { if-feature "flow-reporting"; key "direction"; leaf direction { type identityref { base direction; } description "Specifies a direction."; } description "Flow packet counters."; uses device; } container device { if-feature "device-stats"; description "Device level packet counters."; uses device; } } } ]]>

Data Model This data model implements the Information Model defined in for the interface, device and control-plane components. This is classified as a Network Element model as defined by .

Structure There is a direct mapping between the Information Model components and their data model implementations, with each component in the hierarchy represented by corresponding YANG containers and leaf data nodes. The abstract tree is shown in .

Abstract DM Tree Structure

The full tree structure is provided in .

Implementation Requirements The following requirements apply to the implementation of the data model and are intended to ensure consistent implementation across different vendors and platforms while allowing for platform-specific optimisations where needed. While the model defines a comprehensive set of counters and statistics, implementations MAY support a subset of the defined features based on device capabilities and operational requirements. However, implementations MUST clearly document which features are supported and how they map to the model. Requirements 1-10 relate to packets forwarded or discarded by the device, while requirement 11 relates to packets destined for or originating from the device:

1. All instances of Layer 2 frame or Layer 3 packet receipt, transmission, and discards MUST be accounted for.
2. All instances of Layer 2 frame or Layer 3 packet receipt, transmission, and discards SHOULD be attributed to the physical or logical interface of the device where they occur. Where they cannot be attributed to the interface, they MUST be attributed to the device.
3. An individual frame MUST only be accounted for by either the Layer 2 traffic class or the Layer 2 discard classes within a single direction or context, i.e., ingress or egress or device. This is to avoid double counting.
4. An individual packet MUST only be accounted for by either the Layer 3 traffic class or the Layer 3 discard classes within a single direction or context, i.e., ingress or egress or device. This is to avoid double counting.
5. A frame accounted for at Layer 2 SHOULD NOT be accounted for at Layer 3 and vice versa. An implementation MUST indicate which layers traffic and discards are counted against. This is to avoid double counting.
6. The aggregate Layer 2 and Layer 3 traffic and discard classes SHOULD account for all underlying frames or packets received, transmitted, and discarded across all other classes.
7. The aggregate QoS traffic and no-buffer discard classes MUST account for all underlying packets received, transmitted, and discarded across all other classes.
8. In addition to the Layer 2 and Layer 3 aggregate classes, an individual discarded packet MUST only account against a single error, policy, or no-buffer discard subclass.
9. When there are multiple reasons for discarding a packet, the ordering of discard class reporting MUST be defined.
10. If Diffserv is not used, no-buffer discards SHOULD be reported as class[id="0"], which represents the default class.
11. Traffic to the device control plane has its own class, however, traffic from the device control plane SHOULD be accounted for in the same way as other egress traffic.

Usage Examples If all of the requirements listed in are met, a "good" unicast IPv4 packet received would increment:

• interface/ingress/traffic/l3/v4/unicast/packets
• interface/ingress/traffic/l3/v4/unicast/bytes
• interface/ingress/traffic/qos/class[id="0"]/packets
• interface/ingress/traffic/qos/class[id="0"]/bytes

A received unicast IPv6 packet discarded due to Hop Limit expiry would increment:

• interface/ingress/discards/l3/v6/unicast/packets
• interface/ingress/discards/l3/v6/unicast/bytes
• interface/ingress/discards/l3/rx/ttl-expired/packets

An IPv4 packet discarded on egress due to no buffers would increment:

• interface/egress/discards/l3/v4/unicast/packets
• interface/egress/discards/l3/v4/unicast/bytes
• interface/egress/discards/no-buffer/class[id="0"]/packets
• interface/egress/discards/no-buffer/class[id="0"]/bytes

A multicast IPv6 packet dropped due to RPF check failure would increment:

• interface/ingress/discards/l3/v6/multicast/packets
• interface/ingress/discards/l3/v6/multicast/bytes
• interface/ingress/discards/policy/l3/rpf/packets

"ietf-packet-discard-reporting" YANG Module The "ietf-packet-discard-reporting" module imports "ietf-packet-discard-reporting-sx" module. Author: Oleksandr Pylypenko Author: Jeffrey Haas Author: Aviran Kadosh Author: Mohamed Boucadair "; description "This module defines a data model for packet discard reporting. Copyright (c) 2025 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Revised BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info). All revisions of IETF and IANA published modules can be found at the YANG Parameters registry (https://www.iana.org/assignments/yang-parameters). This version of this YANG module is part of RFC XXXX; see the RFC itself for full legal notices."; revision 2025-03-03 { description "Initial revision."; reference "RFC XXXX: Information and Data Models for Packet Discard Reporting"; } /* * Features */ feature control-plane-stats { description "Indicates support of control plane statistics on this device."; } feature interface-stats { description "Indicates support of interface statistics on this device."; } feature device-stats { description "Indicates support of global device statistics on this device."; } /* * Main structure definition */ container control-plane { if-feature "control-plane-stats"; nacm:default-deny-all; presence "Control plane statistics are available."; config false; description "Control plane packet counters."; uses plr-sx:control-plane; } list interface { if-feature "interface-stats"; key "name"; nacm:default-deny-all; config false; description "Indicates a list of interfaces for which packet discard reporting data is provided."; leaf name { type string; description "Indicates the name of the interface."; } uses plr-sx:interface; } container device { if-feature "device-stats"; presence "Device-level statistics are available."; nacm:default-deny-all; config false; description "Device level packet counters."; uses plr-sx:device; } } ]]>

Security Considerations

Information Model The information model defined in specifies a YANG module using data extensions. It defines a set of identities, types, and groupings. These nodes are intended to be reused by other YANG modules. The module by itself does not expose any data nodes that are writable, data nodes that contain read-only state, or RPCs. As such, there are no additional security issues related to the YANG module that need to be considered.

Data Model This section is modeled after the template described in . The YANG module specified in defines a data model that is designed to be accessed via YANG-based management protocols, such as NETCONF and RESTCONF . These YANG-based management protocols (1) have to use a secure transport layer (e.g., SSH , TLS , and QUIC ) and (2) have to use mutual authentication. The Network Configuration Access Control Model (NACM) provides the means to restrict access for particular NETCONF or RESTCONF users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content. There are no particularly sensitive writable data nodes. Some of the readable data nodes in this YANG module may be considered sensitive or vulnerable in some network environments. It is thus important to control read access (e.g., via get, get-config, or notification) to these data nodes. Specifically, the following subtrees and data nodes have particular sensitivities/ vulnerabilities:

control-plane, interfaces, and devices:

Access to these data nodes would reveal information about the attacks to which an element is subject, misconfigurations, etc.

Also, an attacker who can inject packets can infer the efficiency of its attack by monitoring (the increase of) some discard counters (e.g., policy) and adjust its attack strategy accordingly.

IANA Considerations IANA is requested to register the following URI in the "ns" subregistry within the "IETF XML Registry" : IANA is requested to register the following YANG module in the "YANG Module Names" subregistry within the "YANG Parameters" registry:

Contributors

Acknowledgments The content of this document has benefitted from feedback from JR Rivers, Ronan Waide, Chris DeBruin, and Marcoz Sanz.

References Normative References In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. This document describes YANG mechanisms for defining abstract data structures with YANG. The standardization of network configuration interfaces for use with the Network Configuration Protocol (NETCONF) or the RESTCONF protocol requires a structured and secure operating environment that promotes human usability and multi-vendor interoperability. There is a need for standard mechanisms to restrict NETCONF or RESTCONF protocol access for particular users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content. This document defines such an access control model. This document obsoletes RFC 6536. This document describes an IANA maintained registry for IETF standards which use Extensible Markup Language (XML) related items such as Namespaces, Document Type Declarations (DTDs), Schemas, and Resource Description Framework (RDF) Schemas. YANG is a data modeling language used to model configuration and state data manipulated by the Network Configuration Protocol (NETCONF), NETCONF remote procedure calls, and NETCONF notifications. [STANDARDS-TRACK] Informative References n.d. n.d. This document defines an architecture for implementing scalable service differentiation in the Internet. This memo provides information for the Internet community. This memo discusses the 'interfaces' group of MIB-II, especially the experience gained from the definition of numerous media-specific MIB modules for use in conjunction with the 'interfaces' group for managing various sub-layers beneath the internetwork-layer. It specifies clarifications to, and extensions of, the architectural issues within the MIB-II model of the 'interfaces' group. [STANDARDS-TRACK] This document defines a YANG data model for the management of network interfaces. It is expected that interface-type-specific data models augment the generic interfaces data model defined in this document. The data model includes definitions for configuration and system state (status information and counters for the collection of statistics). The YANG data model in this document conforms to the Network Management Datastore Architecture (NMDA) defined in RFC 8342. This document obsoletes RFC 7223. This document describes some additional IP Flow Information Export (IPFIX) Information Elements in the range of 1-127, which is the range compatible with field types used by NetFlow version 9 in RFC 3954, as specified in the IPFIX Information Model in RFC 7012. This document captures the current syntax used in YANG module tree diagrams. The purpose of this document is to provide a single location for this definition. This syntax may be updated from time to time based on the evolution of the YANG language. YANG is a data modeling language used to model configuration data, state data, Remote Procedure Calls, and notifications for network management protocols. This document describes the syntax and semantics of version 1.1 of the YANG language. YANG version 1.1 is a maintenance release of the YANG language, addressing ambiguities and defects in the original specification. There are a small number of backward incompatibilities from YANG version 1. This document also specifies the YANG mappings to the Network Configuration Protocol (NETCONF). There has been ongoing confusion about the differences between Information Models and Data Models for defining managed objects in network management. This document explains the differences between these terms by analyzing how existing network management model specifications (from the IETF and other bodies such as the International Telecommunication Union (ITU) or the Distributed Management Task Force (DMTF)) fit into the universe of Information Models and Data Models. This memo documents the main results of the 8th workshop of the Network Management Research Group (NMRG) of the Internet Research Task Force (IRTF) hosted by the University of Texas at Austin. This memo provides information for the Internet community. This document specifies the IP Flow Information Export (IPFIX) protocol, which serves as a means for transmitting Traffic Flow information over the network. In order to transmit Traffic Flow information from an Exporting Process to a Collecting Process, a common representation of flow data and a standard means of communicating them are required. This document describes how the IPFIX Data and Template Records are carried over a number of transport protocols from an IPFIX Exporting Process to an IPFIX Collecting Process. This document obsoletes RFC 5101. This document describes an architecture for describing Simple Network Management Protocol (SNMP) Management Frameworks. The architecture is designed to be modular to allow the evolution of the SNMP protocol standards over time. The major portions of the architecture are an SNMP engine containing a Message Processing Subsystem, a Security Subsystem and an Access Control Subsystem, and possibly multiple SNMP applications which provide specific functional processing of management data. This document obsoletes RFC 2571. [STANDARDS-TRACK] This document describes CoDel (Controlled Delay) -- a general framework that controls bufferbloat-generated excess delay in modern networking environments. CoDel consists of an estimator, a setpoint, and a control loop. It requires no configuration in normal Internet deployments. This RFC is a re-release of RFC 1098, with a changed "Status of this Memo" section plus a few minor typographical corrections. This memo defines a simple protocol by which management information for a network element may be inspected or altered by logically remote users. [STANDARDS-TRACK] YumaWorks Orange Huawei This memo provides guidelines for authors and reviewers of specifications containing YANG modules, including IANA-maintained modules. Recommendations and procedures are defined, which are intended to increase interoperability and usability of Network Configuration Protocol (NETCONF) and RESTCONF Protocol implementations that utilize YANG modules. This document obsoletes RFC 8407. Also, this document updates RFC 8126 by providing additional guidelines for writing the IANA considerations for RFCs that specify IANA-maintained modules. The Network Configuration Protocol (NETCONF) defined in this document provides mechanisms to install, manipulate, and delete the configuration of network devices. It uses an Extensible Markup Language (XML)-based data encoding for the configuration data as well as the protocol messages. The NETCONF protocol operations are realized as remote procedure calls (RPCs). This document obsoletes RFC 4741. [STANDARDS-TRACK] This document describes an HTTP-based protocol that provides a programmatic interface for accessing data defined in YANG, using the datastore concepts defined in the Network Configuration Protocol (NETCONF). The Secure Shell Protocol (SSH) is a protocol for secure remote login and other secure network services over an insecure network. This document describes the SSH authentication protocol framework and public key, password, and host-based client authentication methods. Additional authentication methods are described in separate documents. The SSH authentication protocol runs on top of the SSH transport layer protocol and provides a single authenticated tunnel for the SSH connection protocol. [STANDARDS-TRACK] This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document updates RFCs 5705 and 6066, and obsoletes RFCs 5077, 5246, and 6961. This document also specifies new requirements for TLS 1.2 implementations. This document defines the core of the QUIC transport protocol. QUIC provides applications with flow-controlled streams for structured communication, low-latency connection establishment, and network path migration. QUIC includes security measures that ensure confidentiality, integrity, and availability in a range of deployment circumstances. Accompanying documents describe the integration of TLS for key negotiation, loss detection, and an exemplary congestion control algorithm.

Where Do Packets Get Dropped? Understanding where packets are discarded in a network device is essential for interpreting discard signals and determining appropriate mitigation actions. depicts an example of where and why packets may be discarded in a typical single-ASIC, shared-buffered type device. While actual device architectures vary between vendors and platforms, with some using multiple ASICs, distributed forwarding, or different buffering architectures, this example illustrates the common processing stages where packets may be dropped. The logical model for classifying and reporting discards remains consistent regardless of the underlying hardware architecture. Packets ingress on the left and egress on the right:

Example of where packets get dropped PHY/MAC +--> Ingress +--> Buffers +--> Egress +--> PHY/MAC +-> Tx | | | Pipeline | | | | Pipeline | | | +---------+ +----------+ +---------+ +----------+ +---------+ Unintended: error/rx/l2 error/l3/rx no-buffer error/l3/tx error/l3/no-route error/l3/rx/ttl-expired error/internal Intended: policy/acl policy/acl policy/policer policy/policer policy/urpf policy/null-route ]]>

See Appendix B for examples of how these discard signals map to root causes and mitigation actions.

Example Signal-to-mitigation Action Mapping The effectiveness of automated mitigation depends on correctly mapping discard signals to root causes and appropriate actions. gives example discard signal-to-mitigation action mappings based on the features described in section 3. Example Signal-Cause-Mitigation Mapping

DISCARD-CLASS	Discard cause	DISCARD-RATE	DISCARD-DURATION	Unintended?	Possible actions
ingress/discards/errors/l2/rx	Upstream device or link error	>Baseline	O(1min)	Y	Take upstream link or device out-of-service
ingress/discards/errors/l3/rx/ttl-expired	Tracert	<=Baseline		N	no action
ingress/discards/errors/l3/rx/ttl-expired	Convergence	>Baseline	O(1s)	Y	No action
ingress/discards/errors/l3/rx/ttl-expired	Routing loop	>Baseline	O(1min)	Y	Roll-back change
.*/policy/.*	Policy			N	No action
ingress/discards/errors/l3/no-route	Convergence	>Baseline	O(1s)	Y	No action
ingress/discards/errors/l3/no-route	Config error	>Baseline	O(1min)	Y	Roll-back change
ingress/discards/errors/l3/no-route	Invalid destination	>Baseline	O(10min)	N	Escalate to operator
ingress/discards/errors/internal	Device errors	>Baseline	O(1min)	Y	Take device out-of-service
egress/discards/no-buffer	Congestion	<=Baseline		N	No action
egress/discards/no-buffer	Congestion	>Baseline	O(1min)	Y	Bring capacity back into service or move traffic

The 'Baseline' in the 'DISCARD-RATE' column is both DISCARD-CLASS and network dependent.

Implementation Experience This appendix captures practical insights gained from implementing this information model across multiple vendors' platforms, as guidance for future implementers.

1. The number and granularity of discard classes defined in the information model represent a compromise. It aims to provide sufficient detail to enable appropriate automated actions while avoiding excessive detail, which may hinder quick problem identification. Additionally, it helps to limit the quantity of data produced per interface, constraining the data volume and device CPU impacts. While further granularity is possible, the defined schema has generally proven to be sufficient for the task of mitigating unintended packet loss.
2. There are many possible ways to define the discard classification tree. For example, we could have used a multi-rooted tree, rooted in each protocol. Instead, we opted to define a tree where protocol discards and causal discard classes are accounted for orthogonally. This decision reduces the number of combinations of classes and has proven sufficient for determining mitigation actions.
3. NoBuffer discards can be realized differently with different memory architectures. Whether a NoBuffer discard is attributed to ingress or egress can differ accordingly. For successful auto-mitigation, discards due to egress interface congestion should be reported on egress, while discards due to device-level congestion (e.g. due to exceeding the device forwarding rate) should be reported on ingress.
4. Platforms often account for the number of packets discarded where the TTL has expired (or Hop Limit exceeded), and the device CPU has returned an ICMP Time Exceeded message. There is typically a policer applied to limit the number of packets sent to the device CPU, however, which implicitly limits the rate of TTL discards that are processed. One method to account for all packet discards due to TTL expired, even those that are dropped by a policer when being forwarded to the CPU, is to use accounting of all ingress packets received with TTL=1 as a proxy measure.
5. Where no route discards are implemented with a default null route, separate discard accounting is required for any explicit null routes configured, in order to differentiate between interface/ingress/discards/policy/null-route/packets and interface/ingress/discards/errors/no-route/packets.
6. It is useful to account separately for transit packets discarded by ACLs or policers, and packets discarded by ACLs or policers which limit the number of packets to the device control plane.
7. It is not possible to identify a configuration error - e.g., when intended discards are unintended - with device discard metrics alone. For example, additional context is needed to determine if ACL discards are intended or due to a misconfigured ACL, i.e., with configuration validation before deployment or by detecting a significant change in ACL discards after a configuration change compared to before.
8. Aggregate counters need to be able to deal with the possibility of discontinuities in the underlying counters.
9. In cases where the reporting device is the source or destination of a tunnel, the ingress protocol for a packet may differ from the egress protocol (e.g., if IPv4 is tunneled over IPv6). Some implementations may attribute egress discards to the ingress protocol.
10. While the classification tree is seven layers deep, a minimal implementation may only implement the top six layers.

Full Information Model Tree The following YANG tree diagram shows the complete IM structure:

Full Data Model Tree The following YANG tree diagram shows the complete data module structure: