<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.14 (Ruby 2.6.10) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

<!ENTITY I-D.ietf-mpls-mna-hdr SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-hdr.xml">
<!ENTITY RFC2119 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.2119.xml">
<!ENTITY RFC3032 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.3032.xml">
<!ENTITY RFC6790 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.6790.xml">
<!ENTITY RFC8174 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.8174.xml">
<!ENTITY I-D.ietf-mpls-mna-fwk SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-mpls-mna-fwk.xml">
<!ENTITY RFC9543 SYSTEM "https://bib.ietf.org/public/rfc/bibxml/reference.RFC.9543.xml">
<!ENTITY I-D.ietf-teas-ns-ip-mpls SYSTEM "https://bib.ietf.org/public/rfc/bibxml3/reference.I-D.ietf-teas-ns-ip-mpls.xml">
]>


<rfc ipr="trust200902" docName="draft-li-mpls-mna-nrp-selector-02" category="std" consensus="true" submissionType="IETF">
  <front>
    <title abbrev="MNA NRP Selector">MPLS Network Actions for Network Resource Partition Selector</title>

    <author initials="T." surname="Li" fullname="Tony Li">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>tony.li@tony.li</email>
      </address>
    </author>
    <author initials="J." surname="Drake" fullname="John Drake">
      <organization></organization>
      <address>
        <email>je_drake@yahoo.com</email>
      </address>
    </author>
    <author initials="V. P." surname="Beeram" fullname="Vishnu Pavan Beeram">
      <organization>Juniper Networks</organization>
      <address>
        <postal>
          <street>1133 Innovation Way</street>
          <city>Sunnyvale</city>
          <region>CA</region>
          <code>94089</code>
          <country>United States</country>
        </postal>
        <email>vbeeram@juniper.net</email>
      </address>
    </author>
    <author initials="T." surname="Saad" fullname="Tarek Saad">
      <organization>Cisco Systems</organization>
      <address>
        <email>tsaad.net@gmail.com</email>
      </address>
    </author>
    <author initials="I." surname="Meilik" fullname="Israel Meilik">
      <organization>Broadcom</organization>
      <address>
        <email>israel.meilik@broadcom.com</email>
      </address>
    </author>

    <date year="2025" month="January" day="21"/>

    
    <workgroup>MPLS Working Group</workgroup>
    

    <abstract>


<t>An IETF Network Slice service provides connectivity coupled with a set
of network resource commitments and is expressed in terms of one or
more connectivity constructs. A Network Resource Partition (NRP) is a
collection of resources identified in the underlay network to support
IETF Network Slice services.  A Slice-Flow Aggregate refers to the set
of traffic streams from one or more connectivity constructs belonging
to one or more IETF Network Slices that are mapped to a specific NRP
and provided the same forwarding treatment.  The packets associated
with a Slice-Flow Aggregate may carry a marking in the packet's
network layer header to identify this association and this marking is
referred to as NRP Selector.  The NRP Selector is used to map
the packet to the associated NRP and provide the
corresponding forwarding treatment to the packet.</t>

<t>MPLS Network Actions (MNA) technologies are used to indicate actions
for Label Switched Paths (LSPs) and/or MPLS packets and to transfer
data needed for these actions.  This document discusses options for
using MPLS Network Actions (MNAs) to carry the NRP Selector in MPLS packets.</t>



    </abstract>



  </front>

  <middle>


<section anchor="introduction"><name>Introduction</name>

<t>An IETF Network Slice <xref target="RFC9543"/> service
provides connectivity coupled with a set of specific commitments of
network resources between a number of endpoints over a shared
underlay network.  The IETF Network Slice service is expressed in
terms of one or more connectivity constructs.  A Network Resource
Partition (NRP) <xref target="RFC9543"/> is a collection
of resources identified in the underlay network to support IETF
Network Slice services (or any other services that need logical
network structures with required characteristics to be created).  An
NRP Policy <xref target="I-D.ietf-teas-ns-ip-mpls"/> is a policy construct that
enables instantiation of mechanisms in support of service specific
control and data plane behaviors on select topological elements
associated with the NRP.</t>

<t>A Slice-Flow Aggregate refers to the set of traffic streams from one
or more connectivity constructs belonging to one or more IETF Network
Slices that are mapped to a specific NRP and are provided the same
forwarding treatment.  The NRP policy dictates the identification of
the flow aggregate that the packet belongs to and the corresponding
forwarding treatment that needs to be applied to the packet.  The
packets associated with a Slice-Flow Aggregate may carry a marking in
the packet's network layer header to identify this association and
this marking is referred to as NRP Selector (NRPS).
<xref target="I-D.ietf-teas-ns-ip-mpls"/> discusses a few options for carrying the
NRP Selector in MPLS packets, including overloading the semantics of
forwarding/service labels and using a dedicated identifier field.</t>

<t><xref target="I-D.ietf-mpls-mna-fwk"/> specifies an architectural framework for the
MPLS Network Actions (MNA) technologies.  MNA technologies are used
to indicate actions for Label Switched Paths (LSPs) and/or MPLS
packets and to transfer data needed for these actions.  The MNA
architecture can facilitate carrying the dedicated identifier based
NRP Selector in the MPLS label stack.  This document discusses a few options
for using MPLS network actions to carry the NRP Selector.  The proposed
encodings are compliant with the MNA header encoding formats defined
in <xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<t>The reader is expected to be familiar with terminology specified in
<xref target="I-D.ietf-mpls-mna-fwk"/> and MNA header encoding formats defined in
<xref target="I-D.ietf-mpls-mna-hdr"/>.</t>

<section anchor="REQ-lang"><name>Requirements Language</name>

<t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL
NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED",
"MAY", and "OPTIONAL" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.
These words may also appear in this document in
lower case as plain English words, absent their normative meanings.</t>

</section>
</section>
<section anchor="mpls-network-actions"><name>MPLS Network Actions</name>

<section anchor="bit-nrp-selector-nrps13-action"><name>13-bit NRP Selector (NRPS13) Action</name>

<t>The format of the 13-bit NRP Selector (NRPS13) Action (when encoded in
the second label stack entry in the Network Action Sub-Stack):</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 | Opcode=TBA1 |         NRPS            |R|IHS|S| Res |U|  NASL |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 13-bit NRP Selector (NRPS13) Action</t>
  <t>Network Action Indication: The NRPS13 Action indication is opcode
   TBA1.</t>
  <t>Scope: The NRPS13 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS13 Action carries 13 bits of ancillary data.
   The NRPS is encoded in the 13 bits.  The packet carrying the NRPS13
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: B.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-nrp-selector-nrps20-action"><name>20-bit NRP Selector (NRPS20) Action</name>

<t>The format of the 20-bit NRP Selector (NRPS20) Action:</t>

<figure><artwork><![CDATA[
  0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |  Opcode=TBA2|             NRPS              |S|  NRPS |  NAL  |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit NRP Selector (NRPS20) Action</t>
  <t>Network Action Indication: The NRPS20 Action indication is opcode
   TBA2.</t>
  <t>Scope: The NRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The NRPS20 Action carries 20 bits of ancillary data.
   The NRPS is encoded in the 20 bits.  The packet carrying the NRPS20
   action should be given the forwarding treatment specified by the
   associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
<section anchor="bit-entropy-and-nrp-selector-enrps20-action"><name>20-bit Entropy and NRP Selector (ENRPS20) Action</name>

<t>The format of the 20-bit Entropy and NRP Selector (ENRPS20)
Action:</t>

<figure><artwork><![CDATA[
 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|  Opcode=TBA3|        Entropy        | NRPS  |S| NRPS  |  NAL  |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
]]></artwork></figure>

<t><list style="symbols">
  <t>Name: 20-bit Entropy and NRP Selector (ENRPS20) Action</t>
  <t>Network Action Indication: The ENRPS20 Action indication is opcode
   TBA3.</t>
  <t>Scope: The ENRPS20 Action is valid in all scopes.</t>
  <t>In-Stack Data: The ENRPS20 Action carries 20 bits of ancillary
   data.  The most significant 12 bits of ancillary data is the
   Entropy Value.  The least significant 8 bits of ancillary data is
   the NRPS.  The Entropy Value has semantics consistent with the
   Entropy Label <xref target="RFC6790"/>.  While the RFC 6790 Entropy Label has
   some restrictions to avoid collisions with the reserved label
   space (0-15) <xref target="RFC3032"/>, those restrictions are not necessary for
   the Entropy Value and do not apply.  The packet carrying the
   ENRPS20 action should be given the forwarding treatment specified
   by the associated policy.</t>
  <t>LSE Format: C. The Network Action Length (NAL) field SHOULD be
transmitted as zero.</t>
  <t>Post-Stack Data: None.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<section anchor="bit-nrp-selector-action"><name>13-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA1) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
13-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-nrp-selector-action-1"><name>20-bit NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA2) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit NRP Selector Action.  The allocation
should reference this document.</t>

</section>
<section anchor="bit-entropy-and-nrp-selector-action"><name>20-bit Entropy and NRP Selector Action</name>

<t>This document requests that IANA allocate a codepoint (TBA3) from the
"Multiprotocol Label Switching Architecture (MPLS)"/"MPLS Network
Actions Parameters"/"Network Action Opcodes" registry for the
20-bit Entropy and NRP Selector Action.  The
allocation should reference this document.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<t>The forwarding plane is insecure. If an adversary can affect the
forwarding plane, then they can inject data, remove data, corrupt
data, or modify data. MNA additionally allows an adversary to make
packets perform arbitrary network actions.</t>

<t>Link-level security mechanisms can help mitigate some on-link attacks,
but does nothing to preclude hostile nodes.</t>

</section>
<section anchor="contributors"><name>Contributors</name>

<t>The following individuals contributed to this document:</t>

<figure><artwork><![CDATA[
Colby Barth
Juniper Networks
Email: cbarth@juniper.net

Srihari R.  Sangli
Juniper Networks
Email: ssangli@juniper.net

Chandra Ramachandran
Juniper Networks
Email: csekar@juniper.net

Kireeti Kompella
Juniper Networks
Email: kireeti@juniper.net
]]></artwork></figure>

</section>


  </middle>

  <back>


    <references title='Normative References'>

&I-D.ietf-mpls-mna-hdr;
&RFC2119;
&RFC3032;
&RFC6790;
&RFC8174;


    </references>

    <references title='Informative References'>

&I-D.ietf-mpls-mna-fwk;
&RFC9543;
&I-D.ietf-teas-ns-ip-mpls;


    </references>



  </back>

<!-- ##markdown-source:
H4sIAIQQkGcAA81a3XIbtxW+x1Og8kWl1mT04yS2ZjpjWZZrJZSsinIyveqA
uyCJaBfYArtU2Uh9lj5Ln6zfAbDLXYqkaLvpWJlYJPbg4Jzv/OKser0eS0yq
9OSYV+W495KVqszkMb+4Ggz5pSzvjL3lJ0mpjHZ8bGyzdi2dqWwi+ZWw2IPn
fCgzmZTGMjEaWTkDk8sTfnl9tXiQmkSLHOxTK8ZlL1O9vMhcL9eip23Rc5Gu
t3/I7iZRiJ9xGuTjf7amKlgiSjkxdn7MXZkyV41y5RwOL+cF2J6f3bxjqrDH
vLSVKw/391+BFRNVOTX2mHHew//+R2l3zG/6fKDqlSDYjdHz1qKxEOOHSqtC
Nqq7+qErrZTlMT84ODri51qbmfA4/CzmNUmiSog6rLSez0Qm62UrJyA85qcn
DaFJcfqrF/svXy2WKl2Sph+1KmXKhyV0bw6XuVAZ9IS8/Uy9jr8fqfhDn7+1
4lZ2tfzBTHV3PbL7Rf4tpeXXczE1pp+YvOHo2f3Uv+rzN1JakbMFu5+Um+oK
njATuv10PXpPQbcKtyXQlhHbAFdUbjbyor3+JUjU17Lsagd/GAqRtjS7EVbe
Lha9QqfKJYYP566UeYd/6UBHXF9PaOExeud9fiFVpm5bJ5w7K2TWXveHvLFG
pIFBw1950n7uSV+PIoU/hmljc0A4k+Tl5723fSURzk10TVPv/tfvTg8PDl7F
j0f7R4fx43ffv9qPH18efP/imDOlx5tZju9u445X37446tCUUriedj1VePJj
xnq9HhcjWF0kJWMn2kdqk0uGmUIicdLO6HdhzUyl0sGiWiMfqBmcgcxbZDDr
nSqnXIC4ZGbMdeRg62wEMHJV5lKXjgudAjMu/1HgscNepXkpbe44dhotgTTL
jZXLB2nIWSWl6/OTTeluF6ltjw4QSKEZZS5aBetaGMehhi7VWMWzp5JXOpU2
E/NG8tJwVxWFsSVbjwlEgSx+qfcuM3f8ZDJBOMDBcdhYWkdsiH2EBTiPxyrx
YSag79iaPGrMN2nMRzIzeoJ0y8CwveGxbDhzKkqOAOG5KAqoiC0wTCETRWcD
HUYWiOZMg3zweSojd8JS0eEkn7cWFLzB80Ikt5JM55xJFPRLWTT4SuVzAJkI
a+cgyEWoExHowOn3jtVAA3RkoakUMACJGm0zB7VaHEgmJKn9YsPSMQ+zjUq6
TlWLoreXyCsqF6gBDlsIVBtqoaDf2AKKHsOhcJgrjPYorQKsZhTY9hlbWbF3
UYL34PTJVJvMTBSsRgarZVPgTxWVi0DPqMIPBLyAD4F7MgXZlSinYDQYXrk9
kvMbkPizGltpzws+px1AYqkoBdxbks2JH6R0zQkeLKCDTqDyaqTIphWiE0FZ
NF0Gqxwpu1YlSIITg+XLR9jrjnz9kH1ylaYoJOwZyk1pTVp5duty0a+/xrz2
8FDHINs2L1EKaKKgnY/MmC3nK4q48k5KOB3XVT6Ca2K31GlhlN8ywwq4TmG1
lC0nj+h5G3LpUvpjS+lvYzLwOWc5/7Hl/NdGiuKIL3Ih+/xcGDq51bmQ70Jw
gTbNgIldLPt0RH7HydMTkTVoB4UqyBLMZOXfK0XBnABXOKa0ypUq8Vl0BDwo
xmS6RwBoRr51ZSDBHLquK3G18kUgbED0QjGpxSgjCLAqAIKoK0WOwBRauZye
NbqT/0T71X6EhEBem/lg8wFWZAImHMmpmCmDAgCGoX2GEoWJCHCseN9jrXzj
IYhRg+DYtq7wDXWFbV1X+Ia6wratKx4FInhUW9iG2kIbo32Q9Xx36PfVjpnU
ZvHpekxwiAYOL1MrjQeFPD6hXJDurZy9UpCFi9auBgUzFVRsJXMvL3tcC/mn
10LWroX8s2ohW6qFfEMt9ElhuNdnG0NlkfMFH8u7duYPKnjUAMGmvP4cC0lW
eYQpTWZoh+M+uGtOcZb4nLuwxDd1WGVU4kLlCpVGcHiRL4XpIlFZjn+yFDHS
0qbd/1JxCG5JqgAsm0xx96BUg9gb464hPdyxCm5bomF/ujmvrNpsRdXmn1C1
2ZqqzZ+u2pKkYi0d4fJQeiwS3EconDq2Ww3oSJAOy2Ylco+NtwuyC2Tc0Ch0
nMa3LK12oXbxGpu1fULdcVqkSxJK6jAICVijbiMy4USLdEk2iSFT0/JwR4KU
cqw0mECZVb6C69fDA/yIDrSBRajMkCTEEXLBWOQAUth4Iiq18uafN07mS/h6
XySTbiHkOia1kM+eodr7AhnaloHQk0pM0BQ9uz77Sw91Z/IQVLmVcw6wkc12
Lj4Ob3aeh9/88oP/DOqP59dnb+nz8P3JYNB8YJFi+P7Dx8HbxafFztMPFxdn
l2/DZqzyzhLbuTj5K56Qxjsfrm7OP1yeDHaCK7V9hiwZwEU3JS0aIYJbOIY2
LrFqFHqRN6dX//n3wQtY7nfxggwwwxe6DOPL3VTqcJrR2Tx+hU/MGVUo4Z1Y
ZBk8rUAkZMhNyItuau40jGFln9BCNAWsKFGDxvDF3q7UsA9Su6RcSCHoqNaD
6ExPMuWmgctzuk6HkiKV5c31Hy0FGgp4MQyJXndVxvEWPjjqjVS5IncfHO1F
wmDj4Dy++OPbFtv4LsETvC82nT4joxtI2wEOihJhGcO/KyMfVqPekKj2jhn7
F34Y5/v8gB/yI/6Cf8u/499/6nfG/9j7wv8Yv+cfCtLrTzdvTg7wrf4hCHjr
5/76/vz98H54T40zv/8IysuT4YDf/y+k8HiwP4ClnyBtZUqi7kJ8HqqIH6nF
9gg76qeqeUqZynil46yQVO97jsPE0NR1xW7HZyJTaR0Xjghd2HSug2X5W1Sc
VZspXVPJwwr08rcVoVFjMgF3oTLVrwWJW30ubdwt+qnf25kqdMtTODNyCsWC
IrbKUkoXE4RS4LSyj1sk5JEvLDWbRacWGs2g8WB4xt/5MDrmb8LSlXFlB4ZL
NMUh9x7urzHn4f6myNxi29cWSq1YOrxvR8+jcEJADe/jsg+lAf9NQmkr7LcL
pcP97ULpcGUotXZ/eigtNtehhJXPDqW494lQOtz/v4fSaT+I3bXFQOoJ2qdd
+Mhe6N957C1GnrdveHNVhkaA/1Nas21IntEVvJj7PqDrImdbx+fTPNhSsH5p
rH55kHQi9aiJ1FqVOkJj1FKkxk9NpP5WgfoJFnk6as8+JWyPHoXt8vZPi9uz
7QM3CuHDNwRlDtflTk20n2IgqA4O18Q7ibUIshq+n0RWycgrw229y+zlel6R
T50EIosOWz6lVri5j9NMSLlSti5WS8KEi6wfK9JbKVxJOP95qjI/GKfXTZyW
l8hxSGTjTE53LFdatbgBipmBJWgyqZxfay51oJR2JmNnWvNAlpN8d7938G0c
cNKrsocH6vlxV+yypzuGNjTWSaRzBA4NsBfAdNHw8zvjN9DsZ74+rdawRMf4
7Lwa+YTs+jXlVX5+gsvqKTkErqti891kkVjbNyUa5MIWcWTo+SHWTBiO+DfE
fo7Od6ln3QvjSoJ256LKSoWrf2ngFJ3ZCaF40p5x7NIdam/nm532XYrV05sr
QVMe3C0dKJYgC0nT7fg3164MnuHPX69h9IeoBakcLe6HbijNsntZXN8zfjli
h18RYus1/CLE1haQL0fv6OtD7wlt49x5gSR/GknwSCpL0/7lQL7pZqbwvkL5
lyC0BfXmfOyHpukM2lDepGmiGI/9O4xpZ5TvN/uJi894gVTpX4iUStFziJib
mYxfaBJfFSUL3/yrhpSm26Fk0ohMpKl/iQVd596Ed64ri39xe7sYwhfSUj+H
bA8gLVEsDRoBxkDp214mZzThqFFpveEhmacyKziypPIje1+rjO5l2MhFSTnS
PWejCkoZFH8UiWl8ZVJYSbNuVFNkU6qFmiztDXBKb4YUNhkL1GMvPzakU3gF
kKqZSiuR+eIbSOs3Di1j1v3mqclQKt4IW07Zoz/dOQt/iJKM6HHn72jY0Kqp
sIpfw4uGgkZVa7ejStLz7v5TwJRawa9FLpLwWa8XwMlbYbsMflT0J0WK/2jy
QqJLWbv5NhB2dnvV/wv5gTS1DScAAA==

-->

</rfc>

