Internet Engineering Task Force | M. Veillette, Ed. |
Internet-Draft | Trilliant Networks Inc. |
Intended status: Standards Track | A. Pelov, Ed. |
Expires: December 6, 2018 | Acklio |
June 04, 2018 |
YANG Schema Item iDentifier (SID)
draft-ietf-core-sid-04
YANG Schema Item iDentifiers (SID) are globally unique 64-bit unsigned numbers used to identify YANG items. This document defines the semantics, the registration, and assignment processes of SIDs. To enable the implementation of these processes, this document also defines a file format used to persist and publish assigned SIDs.
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."
This Internet-Draft will expire on December 6, 2018.
Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
Some of the items defined in YANG [RFC7950] require the use of a unique identifier. In both NETCONF [RFC6241] and RESTCONF [RFC8040], these identifiers are implemented using names. To allow the implementation of data models defined in YANG in constrained devices and constrained networks, a more compact method to identify YANG items is required. This compact identifier, called SID, is encoded using a 64-bit unsigned integer. The following items are identified using SIDs:
To minimize their size, SIDs are often represented as a difference between the current SID and a reference SID. Such difference is called “delta”, shorthand for “delta-encoded SID”. Conversion from SIDs to deltas and back to SIDs is a stateless process. Each protocol implementing deltas must unambiguously define the reference SID for each YANG item.
SIDs are globally unique numbers, a registration system is used in order to guarantee their uniqueness. SIDs are registered in blocks called “SID ranges”.
Assignment of SIDs to YANG items can be automated, the recommended process to assign SIDs is as follows:
SIDs are assigned permanently, items introduced by a new revision of a YANG module are added to the list of SIDs already assigned. This process can also be automated using the same method described above, only unassigned YÀNG items are processed at step #3.
Section 3 provides more details about the registration process of YANG modules and associated SIDs. To enable the implementation of this registry, Section 4 defines a standard file format used to store and publish SIDs.
The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to be interpreted as described in [RFC2119].
The following terms are defined in [RFC7950]:
The following term is defined in [RFC8040]:
This specification also makes use of the following terminology:
YANG is a language designed to model data accessed using one of the compatible protocols (e.g. NETCONF [RFC6241], RESCONF [RFC8040] and CoMI [I-D.ietf-core-comi]). A YANG module defines hierarchies of data, including configuration, state data, RPCs, actions and notifications.
YANG modules are not necessary created in the context of constrained applications. YANG modules can be implemented using NETCONF [RFC6241] or RESTCONF [RFC8040] without the need to assign SIDs.
As needed, authors of YANG modules can assign SIDs to their YANG modules. This process starts by the registration of a SID range. Once a SID range is registered, the owner of this range assigns sub-ranges to each YANG module in order to generate the associated “.sid” files. Generation of “.sid” files SHOULD be performed using an automated tool.
Registration of the .sid file associated to a YANG module is optional but recommended to promote interoperability between devices and to avoid duplicate allocation of SIDs to a single YANG module.
The following activity diagram summarizes the creation of a YANG module and its associated .sid file.
+---------------+ O | Creation of a | -|- ->| YANG module | / \ +---------------+ | V /-------------\ / Standardized \ yes \ YANG module ? /-------------+ \-------------/ | | no | V V /-------------\ +---------------+ / Constrained \ yes | SID range | +-->\ application ? /---->| registration | | \-------------/ +---------------+ | | no | | V V | +---------------+ +---------------+ +---| YANG module | | SID sub-range | | update | | assignment | +---------------+ +---------------+ | V +---------------+ | .sid file | | generation | +---------------+ | V /-------------\ +---------------+ / Publicly \ yes | YANG module | \ available ? /---->| registration | \-------------/ +---------------+ | no | +---------------------+ | [DONE]
Each time a YANG module or one of its imported module(s) or included sub-module(s) is updated, the “.sid” file MAY need to be updated. This update SHOULD also be performed using an automated tool.
If a new revision requires more SIDs than initially allocated, a new SID range MUST be added to the ‘assignment-ranges’. These extra SIDs are used for subsequent assignements.
The following activity diagram summarizes the update of a YANG module and its associated .sid file.
+---------------+ O | Update of the | -|- ->| YANG module | / \ | or include(s) | | or import(s) | +---------------+ | V /-------------\ / New items \ yes \ created ? /------+ \-------------/ | | no V | /-------------\ +----------------+ | / SID range \ yes | Extra sub-range| | \ exhausted ? /---->| assignment | | \-------------/ +----------------+ | | no | | +---------------------+ | | | V | +---------------+ | | .sid file | | | update based | | | on previous | | | .sid file | | +---------------+ | | | V | /-------------\ +---------------+ | / Publicly \ yes | YANG module | | \ available ? /---->| registration | | \-------------/ +---------------+ | | no | +--------------+---------------------+ | [DONE]
“.sid” files are used to persist and publish SIDs assigned to the different YANG items of a specific YANG module. The following YANG module defined the structure of this file, encoding is performed using the rules defined in [RFC7951].
<CODE BEGINS> file "ietf-sid-file@2017-11-26.yang" module ietf-sid-file { namespace "urn:ietf:params:xml:ns:yang:ietf-sid-file"; prefix sid; import ietf-yang-types { prefix yang; } import ietf-comi { prefix comi; } organization "IETF Core Working Group"; contact "Michel Veillette <mailto:michel.veillette@trilliant.com> Andy Bierman <mailto:andy@yumaworks.com> Alexander Pelov <mailto:a@ackl.io>"; description "This module defines the structure of the .sid files. Each .sid file contains the mapping between the different string identifiers defined by a YANG module and a corresponding numeric value called SID."; revision 2017-11-26 { description "Initial revision."; reference "[I-D.ietf-core-sid] YANG Schema Item iDentifier (SID)"; } typedef revision-identifier { type string { pattern '\d{4}-\d{2}-\d{2}'; } description "Represents a date in YYYY-MM-DD format."; } typedef schema-node-path { type string { pattern '/[a-zA-Z_][a-zA-Z0-9\-_.]*:[a-zA-Z_][a-zA-Z0-9\-_.]*' + '(/[a-zA-Z_][a-zA-Z0-9\-_.]*(:[a-zA-Z_][a-zA-Z0-9\-_.]*)?)*'; } description "Identifies a schema-node path string for use in the SID registry. This string format follows the rules for an instance-identifier, as defined in RFC 7959, except that no predicates are allowed. This format is intended to support the YANG 1.1 ABNF for a schema node identifier, except module names are used instead of prefixes, as specified in RFC 7951."; reference "RFC 7950, The YANG 1.1 Data Modeling Language; Section 6.5: Schema Node Identifier; RFC 7951, JSON Encoding of YANG Data; Section 6.11: The instance-identifier type"; } leaf module-name { type yang:yang-identifier; description "Name of the YANG module associated with this .sid file."; } leaf module-revision { type revision-identifier; description "Revision of the YANG module associated with this .sid file. This leaf is not present if no revision statement is defined in the YANG module."; } list assigment-ranges { key "entry-point"; description "SID range(s) allocated to the YANG module identified by 'module-name' and 'module-revision'."; leaf entry-point { type comi:sid; mandatory true; description "Lowest SID available for assignment."; } leaf size { type uint64; mandatory true; description "Number of SIDs available for assignment."; } } list items { key "namespace identifier"; description "Each entry within this list defined the mapping between a YANG item string identifier and a SID. This list MUST include a mapping entry for each YANG item defined by the YANG module identified by 'module-name' and 'module-revision'."; leaf namespace { type enumeration { enum module { value 0; description "All module and submodule names share the same global module identifier namespace."; } enum identity { value 1; description "All identity names defined in a module and its submodules share the same identity identifier namespace."; } enum feature { value 2; description "All feature names defined in a module and its submodules share the same feature identifier namespace."; } enum data { value 3; description "The namespace for all data nodes, as defined in YANG."; } } description "Namespace of the YANG item for this mapping entry."; } leaf identifier { type union { type yang:yang-identifier; type schema-node-path; } description "String identifier of the YANG item for this mapping entry. If the corresponding 'namespace' field is 'module', 'feature', or 'identity', then this field MUST contain a valid YANG identifier string. If the corresponding 'namespace' field is 'data', then this field MUST contain a valid schema node path."; } leaf sid { type comi:sid; mandatory true; description "SID assigned to the YANG item for this mapping entry."; } } } <CODE ENDS>
The security considerations of [RFC7049] and [RFC7950] apply.
This document defines a new type of identifier used to encode data models defined in YANG [RFC7950]. As such, this identifier does not contribute to any new security issues in addition of those identified for the specific protocols or contexts for which it is used.
The name of this registry is “SID mega-range”. This registry is used to delegate the management of block of SIDs for third party’s (e.g. SDO, registrar).
Each entry in this registry must include:
The initial entry in this registry is allocated to IANA:
Entry Point | Size | Organization name |
---|---|---|
0 | 1000000 | IANA |
The IANA policies for future additions to this registry are “Hierarchical Allocation, Expert Review” [RFC5226]. Prior to a first allocation, the requesting organization must demonstrate a functional registry infrastructure. On subsequent allocation request(s), the organization must demonstrate the exhaustion of the prior range. These conditions need to be asserted by the assigned expert(s).
The first million SIDs assigned to IANA is sub-divided as follow:
Entry Point | Size | IANA policy |
---|---|---|
0 | 1,000 | IETF review |
1,000 | 59,000 | RFC required |
60,000 | 40,000 | Experimental use |
100,000 | 1,000,000,000 | Specification Required |
The size of a SID range assigned to a YANG module should be at least 33% above the current number of YANG items. This headroom allows assignment within the same range of new YANG items introduced by subsequent revisions. A larger SID range size may be requested by the authors if this recommendation is considered insufficient. It is important to note that an extra SID range can be allocated to an existing YANG module if the initial range is exhausted.
The name of this sub-registry is “RFC SID range assignment”. This sub-registry corresponds to the SID entry point 1000, size 59000. Each entry in this sub-registry must include the SID range entry point, the SID range size, the YANG module name, the RFC number.
Initial entries in this registry are as follows:
Entry Point | Size | Module name | RFC number |
---|---|---|---|
1000 | 100 | ietf-comi | [I-D.ietf-core-comi] |
1100 | 50 | ietf-yang-types | [RFC6021] |
1150 | 50 | ietf-inet-types | [RFC6021] |
1200 | 50 | iana-crypt-hash | [RFC7317] |
1250 | 50 | ietf-netconf-acm | [RFC6536] |
1300 | 50 | ietf-sid-file | RFCXXXX |
1500 | 100 | ietf-interfaces | [RFC7223] |
1600 | 100 | ietf-ip | [RFC7277] |
1700 | 100 | ietf-system | [RFC7317] |
1800 | 400 | iana-if-type | [RFC7224] |
// RFC Ed.: replace XXXX with RFC number assigned to this draft.
The name of this registry is “YANG module assignment”. This registry is used to track which YANG modules have been assigned and the specific YANG items assignment. Each entry in this sub-registry must include:
The validity of the “.yang” and “.sid” files added to this registry MUST be verified.
The IANA policy for future additions to this registry is “First Come First Served” as described in [RFC5226].
The authors would like to thank Andy Bierman, Carsten Bormann, Abhinav Somaraju, Laurent Toutain and Randy Turner for their help during the development of this document and their useful comments during the review process.
[RFC2119] | Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997. |
[RFC7049] | Bormann, C. and P. Hoffman, "Concise Binary Object Representation (CBOR)", RFC 7049, DOI 10.17487/RFC7049, October 2013. |
[RFC7950] | Bjorklund, M., "The YANG 1.1 Data Modeling Language", RFC 7950, DOI 10.17487/RFC7950, August 2016. |
[RFC7951] | Lhotka, L., "JSON Encoding of Data Modeled with YANG", RFC 7951, DOI 10.17487/RFC7951, August 2016. |
[I-D.ietf-core-comi] | Veillette, M., Stok, P., Pelov, A. and A. Bierman, "CoAP Management Interface", Internet-Draft draft-ietf-core-comi-02, December 2017. |
[RFC5226] | Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA Considerations Section in RFCs", RFC 5226, DOI 10.17487/RFC5226, May 2008. |
[RFC6021] | Schoenwaelder, J., "Common YANG Data Types", RFC 6021, DOI 10.17487/RFC6021, October 2010. |
[RFC6241] | Enns, R., Bjorklund, M., Schoenwaelder, J. and A. Bierman, "Network Configuration Protocol (NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011. |
[RFC6536] | Bierman, A. and M. Bjorklund, "Network Configuration Protocol (NETCONF) Access Control Model", RFC 6536, DOI 10.17487/RFC6536, March 2012. |
[RFC7223] | Bjorklund, M., "A YANG Data Model for Interface Management", RFC 7223, DOI 10.17487/RFC7223, May 2014. |
[RFC7224] | Bjorklund, M., "IANA Interface Type YANG Module", RFC 7224, DOI 10.17487/RFC7224, May 2014. |
[RFC7277] | Bjorklund, M., "A YANG Data Model for IP Management", RFC 7277, DOI 10.17487/RFC7277, June 2014. |
[RFC7317] | Bierman, A. and M. Bjorklund, "A YANG Data Model for System Management", RFC 7317, DOI 10.17487/RFC7317, August 2014. |
[RFC8040] | Bierman, A., Bjorklund, M. and K. Watsen, "RESTCONF Protocol", RFC 8040, DOI 10.17487/RFC8040, January 2017. |
The following .sid file (ietf-system@2014-08-06.sid) have been generated using the following yang modules:
{ "assignment-ranges": [ { "entry-point": 1700, "size": 100 } ], "module-name": "ietf-system", "module-revision": "2014-08-06", "items": [ { "namespace": "module", "identifier": "ietf-system", "sid": 1700 }, { "namespace": "identity", "identifier": "authentication-method", "sid": 1701 }, { "namespace": "identity", "identifier": "local-users", "sid": 1702 }, { "namespace": "identity", "identifier": "radius", "sid": 1703 }, { "namespace": "identity", "identifier": "radius-authentication-type", "sid": 1704 }, { "namespace": "identity", "identifier": "radius-chap", "sid": 1705 }, { "namespace": "identity", "identifier": "radius-pap", "sid": 1706 }, { "namespace": "feature", "identifier": "authentication", "sid": 1707 }, { "namespace": "feature", "identifier": "dns-udp-tcp-port", "sid": 1708 }, { "namespace": "feature", "identifier": "local-users", "sid": 1709 }, { "namespace": "feature", "identifier": "ntp", "sid": 1710 }, { "namespace": "feature", "identifier": "ntp-udp-port", "sid": 1711 }, { "namespace": "feature", "identifier": "radius", "sid": 1712 }, { "namespace": "feature", "identifier": "radius-authentication", "sid": 1713 }, { "namespace": "feature", "identifier": "timezone-name", "sid": 1714 }, { "namespace": "data", "identifier": "/ietf-system:set-current-datetime", "sid": 1715 }, { "namespace": "data", "identifier": "/ietf-system:set-current-datetime/ current-datetime", "sid": 1716 }, { "namespace": "data", "identifier": "/ietf-system:system", "sid": 1717 }, { "namespace": "data", "identifier": "/ietf-system:system-restart", "sid": 1718 }, { "namespace": "data", "identifier": "/ietf-system:system-shutdown", "sid": 1719 }, { "namespace": "data", "identifier": "/ietf-system:system-state", "sid": 1720 }, { "namespace": "data", "identifier": "/ietf-system:system-state/clock", "sid": 1721 }, { "namespace": "data", "identifier": "/ietf-system:system-state/clock/boot-datetime", "sid": 1722 }, { "namespace": "data", "identifier": "/ietf-system:system-state/clock/ current-datetime", "sid": 1723 }, { "namespace": "data", "identifier": "/ietf-system:system-state/platform", "sid": 1724 }, { "namespace": "data", "identifier": "/ietf-system:system-state/platform/machine", "sid": 1725 }, { "namespace": "data", "identifier": "/ietf-system:system-state/platform/os-name", "sid": 1726 }, { "namespace": "data", "identifier": "/ietf-system:system-state/platform/os-release", "sid": 1727 }, { "namespace": "data", "identifier": "/ietf-system:system-state/platform/os-version", "sid": 1728 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication", "sid": 1729 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user", "sid": 1730 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/ user-authentication-order", "sid": 1731 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ authorized-key", "sid": 1732 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ authorized-key/algorithm", "sid": 1733 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ authorized-key/key-data", "sid": 1734 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ authorized-key/name", "sid": 1735 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ name", "sid": 1736 }, { "namespace": "data", "identifier": "/ietf-system:system/authentication/user/ password", "sid": 1737 }, { "namespace": "data", "identifier": "/ietf-system:system/clock", "sid": 1738 }, { "namespace": "data", "identifier": "/ietf-system:system/clock/timezone-name", "sid": 1739 }, { "namespace": "data", "identifier": "/ietf-system:system/clock/timezone-utc-offset", "sid": 1740 }, { "namespace": "data", "identifier": "/ietf-system:system/contact", "sid": 1741 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver", "sid": 1742 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/options", "sid": 1743 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/options/ attempts", "sid": 1744 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/options/ timeout", "sid": 1745 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/search", "sid": 1746 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/server", "sid": 1747 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/server/name", "sid": 1748 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/server/ udp-and-tcp", "sid": 1749 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/server/ udp-and-tcp/address", "sid": 1750 }, { "namespace": "data", "identifier": "/ietf-system:system/dns-resolver/server/ udp-and-tcp/port", "sid": 1751 }, { "namespace": "data", "identifier": "/ietf-system:system/hostname", "sid": 1752 }, { "namespace": "data", "identifier": "/ietf-system:system/location", "sid": 1753 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp", "sid": 1754 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/enabled", "sid": 1755 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server", "sid": 1756 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/ association-type", "sid": 1757 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/iburst", "sid": 1758 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/name", "sid": 1759 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/prefer", "sid": 1760 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/udp", "sid": 1761 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/udp/address", "sid": 1762 }, { "namespace": "data", "identifier": "/ietf-system:system/ntp/server/udp/port", "sid": 1763 }, { "namespace": "data", "identifier": "/ietf-system:system/radius", "sid": 1764 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/options", "sid": 1765 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/options/attempts", "sid": 1766 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/options/timeout", "sid": 1767 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server", "sid": 1768 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/ authentication-type", "sid": 1769 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/name", "sid": 1770 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/udp", "sid": 1771 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/udp/ address", "sid": 1772 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/udp/ authentication-port", "sid": 1773 }, { "namespace": "data", "identifier": "/ietf-system:system/radius/server/udp/ shared-secret", "sid": 1774 } ] }