<?xml version="1.0"encoding="US-ASCII"?>encoding="UTF-8"?> <!DOCTYPE rfc SYSTEM"rfc2629.dtd"> <?rfc toc="yes"?> <?rfc tocompact="yes"?> <?rfc tocdepth="3"?> <?rfc tocindent="yes"?> <?rfc symrefs="yes"?> <?rfc sortrefs="yes"?> <?rfc comments="yes"?> <?rfc inline="yes"?> <?rfc compact="yes"?> <?rfc subcompact="no"?>"rfc2629-xhtml.ent"> <rfccategory="info"xmlns:xi="http://www.w3.org/2001/XInclude" docName="draft-boucadair-connectivity-provisioning-protocol-22" number="8921" ipr="trust200902"updates="">updates="" obsoletes="" submissionType="independent" category="info" xml:lang="en" tocInclude="true" tocDepth="3" symRefs="true" sortRefs="true" version="3"> <!-- xml2rfc v2v3 conversion 2.46.0 --> <front> <title abbrev="CPNP">Dynamic ServiceNegotiation</title>Negotiation: The Connectivity Provisioning Negotiation Protocol (CPNP)</title> <seriesInfo name="RFC" value="8921"/> <author fullname="Mohamed Boucadair" initials="M." role="editor" surname="Boucadair"> <organization>Orange</organization> <address> <postal><street></street><city>Rennes</city><region></region><code>35000</code> <country>France</country> </postal> <email>mohamed.boucadair@orange.com</email> </address> </author> <author fullname="Christian Jacquenet" initials="C." surname="Jacquenet"> <organization>Orange</organization> <address> <postal><street></street><city>Rennes</city><region></region><code>35000</code> <country>France</country> </postal> <email>christian.jacquenet@orange.com</email> </address> </author> <author fullname="Dacheng Zhang" initials="D." surname="Zhang"> <organization>Huawei Technologies</organization> <address><postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile><email>dacheng.zhang@huawei.com</email><uri></uri></address> </author> <author fullname="Panos Georgatsos" initials="P." surname="Georgatsos"> <organization abbrev="CERTH">Centre for Research and Innovation Hellas</organization> <address> <postal> <street>78, Filikis Etairias str.</street> <city>Volos</city> <region>Hellas</region> <code>38334</code> <country>Greece</country> </postal> <phone>+302421306070</phone> <email>pgeorgat@gmail.com</email> </address> </author> <date month="October" year="2020" /><keyword>SDN, Order<keyword>SDN</keyword> <keyword>Order RequestHandling, Automation, Dynamic Provisioning, CDN, Interconnection, Service Delivery, ServiceHandling</keyword> <keyword>Automation</keyword> <keyword>Dynamic Provisioning</keyword> <keyword>CDN</keyword> <keyword>Interconnection</keyword> <keyword>Service Delivery</keyword> <keyword>Service Activation</keyword> <abstract> <t>This document defines the Connectivity Provisioning Negotiation Protocol(CPNP)(CPNP), which is designed to facilitate the dynamic negotiation of service parameters.</t> <t>CPNP is a generic protocol that can be used for various negotiation purposes that include (but are not necessarily limited to) connectivity provisioning services, storage facilities, Content Delivery Networks, etc.</t> </abstract> </front> <middle> <sectiontitle="Introduction">numbered="true" toc="default"> <name>Introduction</name> <t>This document defines the Connectivity Provisioning Negotiation Protocol (CPNP) that is meant to dynamically exchange and negotiate connectivity provisioning parameters and other service-specific parameters between a Customer and a Provider. CPNP is a tool that introduces automationinto the service negotiation and activation procedures, thus fostering the overall service provisioning process. CPNP can be seen as a component of the dynamic negotiationmeta-domainmetadomain described inSection 3.4 of<xreftarget="RFC7149"></xref>.</t>target="RFC7149" sectionFormat="of" section="2.4"/>.</t> <t>CPNP is a generic protocol that can be used forothernegotiation purposes other than connectivity provisioning. For example, CPNP can be used to request extra storage resources, to extend the footprint of aCDN (ContentContent DeliveryNetworks),Network (CDN), to enable additional features from a cloud Provider, etc. CPNP can be extended with new Information Elements (IEs). Sample negotiation use cases are described in <xreftarget="suc"></xref>.target="suc" format="default"/>. <xreftarget="opm"></xref>target="opm" format="default"/> introduces several order processing models andprecisesdefines those that are targeted by CPNP. The CPNP negotiation model is then detailed in <xreftarget="cnm"></xref>.</t>target="cnm" format="default"/>.</t> <t><xreftarget="RFC7297"></xref>target="RFC7297" format="default"/> describes a Connectivity Provisioning Profile (CPP) template to capture connectivity requirements to be met by a transport infrastructure for the delivery of various services such as Voice over IP (VoIP), IPTV, and Virtual Private Network (VPN) services <xreftarget="RFC4026"></xref>.target="RFC4026" format="default"/>. The CPP document defines the set of IP transfer parameters that reflect the guarantees that can be provided by the underlying transport network together with reachability scope and capacity needs. CPNP uses the CPP template to encode connectivity provisioning clauses that are subject to negotiation. Theagreedaccepted CPP willbethen be passed to other functional elements that are responsible for the actual service activation and provisioning. For example,NETCONFNetwork Configuration Protocol (NETCONF) <xreftarget="RFC6241"></xref>target="RFC6241" format="default"/> or RESTCONF <xreftarget="RFC8040"></xref>target="RFC8040" format="default"/> can be used to activate adequate network features that are required to deliver theagreedaccepted service. How the outcome of CPNP negotiation is translated into service and network provisioning actions is out of scope of this document.</t> <t>As a reminder, several proposals have been made in the past by the (research) community (e.g.,COPS-SLSCommon Open Policy Service protocol for supporting Service Level Specification <xreftarget="I-D.nguyen-rap-cops-sls"></xref>,target="I-D.nguyen-rap-cops-sls" format="default"/>, Service Negotiation Protocol(SrNP)<xreftarget="TEQUILA"></xref>,target="SrNP" format="default"/>, Dynamic Service Negotiation Protocol(DSNP)<xreftarget="I-D.itsumo-dsnp"></xref>,target="I-D.itsumo-dsnp" format="default"/>, Resource Negotiation and Pricing Protocol(RNAP)<xreftarget="Xin"></xref>,target="RNAP" format="default"/>, Service Negotiation and Acquisition Protocol(SNAP)<xreftarget="Karl"></xref>).target="SNAP" format="default"/>). CPNP leverages the authors' experienceof the authorswith SrNP by separating the negotiation primitives from the service under negotiation. Moreover, careful examination of the other proposals revealed certain deficiencies that were easier to address through the creation of a new protocol rather thanmodifyingthe modification of existing protocols. Forexample:<list style="symbols"> <t>COPS-SLSexample:</t> <ul spacing="normal"> <li>COPS-SLS relies uponCOPS-PRthe COPS usage for policy provisioning (COPS-PR) <xreftarget="RFC3084"></xref>,target="RFC3084" format="default"/>, which isana HistoricRFC.</t> <t>DSNPRFC.</li> <li>DSNP is tightly designed with one specific service in mind (QoS) and does not make any distinction between a quotation phase and the actualservice ordering phase.</t> </list></t>service-ordering phase.</li> </ul> <t>One of the primary motivations of this document is to provide a permanent reference to exemplify how service negotiation can be automated.</t> <t>Implementation details are out of scope. An example of required modules and interfaces to implement this specification is sketched in Section 4 of <xreftarget="AGAVE"></xref>.target="AGAVE" format="default"/>. This specification builds on that effort.</t> </section> <sectiontitle="Terminology">numbered="true" toc="default"> <name>Terminology</name> <t>This document makes use of the followingterms:<list style="hanging"> <t hangText="Customer:">Isterms:</t> <dl newline="false" spacing="normal"> <dt>Customer:</dt> <dd> <t>Is a business rolewhichthat denotes an entity that is involved in the definition and the possible negotiation of an order, including a Connectivity Provisioning Agreement, with a Provider. A connectivity provisioningorderdocument is captured in a dedicated CPP template-based document, which may specify (among otherinformation):information) the sites to be connected, border nodes, outsourced operations (e.g., routing,force via points). <vspace blankLines="1" />Thetraffic steering). </t> <t>The right to invoke the subscribed service may be delegated by the Customer to third-partyEnd Users,end users or brokeringservices.<vspace blankLines="1" />Aservices.</t> <t>A Customer can be a Service Provider, an application owner, an enterprise, a user, etc.</t><t hangText="Network</dd> <dt>Network Provider (orProvider):">OwnsProvider):</dt> <dd> <t>Owns and administers one or many transport domain(s) (typically AutonomousSystem (AS))Systems (ASes)) composed of (IP) switching and transmission resources (e.g., routing, switching, forwarding, etc.). Network Providers are responsible for delivering and operating connectivity services (e.g., offering global or restricted reachability at specific rates). Offered connectivity services may not necessarily be restricted to IP.<vspace blankLines="1" />The</t> <t>The policies to be enforced by the connectivity service delivery components can be derived from the technology-specific clauses that might be included in agreements with the Customers. If no such clauses are included in the agreement, the mapping between the connectivity requirements and the underlying technology-specific policies to be enforced isdeployment-specific.</t> <t hangText="Quotation Order:">Denotesdeployment specific.</t> </dd> <dt>Quotation Order:</dt> <dd>Denotes a request made by the Customer to the Provider that includes a set of requirements. The Customer may express its service-specific requirements by assigning (strictly or loosely defined) values to the information items included in the commonly understood template (e.g., CPP template) describing the offered service. These requirements constitute the parameters to be mutually agreedupon.</t> <t hangText="Offer:">Refersupon.</dd> <dt>Offer:</dt> <dd> <t>Refers to a response made by the Provider to a Customer's quotation order that describes the ability of the Provider to satisfy the order at the time of its receipt. Offers reflect the capability of the Provider in accommodating received Customer orders beyond monolithic‘yes/no’'yes/no' answers.<vspace blankLines="1" />An</t> <t>An offer may fully or partially meet the requirements of the corresponding order. In the latter case, it may include alternative suggestionswhichthat the Customer may take into account by issuing a new order.</t><t hangText="Agreement:">Refers</dd> <dt>Agreement:</dt> <dd>Refers to an order placed by the Customer and accepted by the Provider. It signals the successful conclusion of a negotiationcycle.</t> </list></t>cycle.</dd> </dl> </section> <section anchor="fe"title="CPNPnumbered="true" toc="default"> <name>CPNP FunctionalElements">Elements</name> <t>The following functional elements aredefined:<list style="hanging"> <t hangText="CPNPdefined:</t> <dl newline="false" spacing="normal"> <dt>CPNP client (or client):">Denotes</dt> <dd> <t>Denotes a software instance that sends CPNP requests and receives CPNP responses. The current operations that can be performed by a CPNP client are listedbelow:<list style="numbers"> <t>Createbelow:</t> <ol spacing="normal" type="1"> <li>Create a quotation order (<xreftarget="provision"></xref>).</t> <t>Canceltarget="provision" format="default"/>).</li> <li>Cancel an ongoing quotation order under negotiation (<xreftarget="cancel"></xref>).</t> <t>Accepttarget="cancel" format="default"/>).</li> <li>Accept an offer made by a server (<xreftarget="accept"></xref>).</t> <t>Withdrawtarget="accept" format="default"/>).</li> <li>Withdraw an agreement (<xreftarget="with"></xref>).</t> <t>Updatetarget="with" format="default"/>).</li> <li>Update an agreement (<xreftarget="upd"></xref>).</t> </list></t> <t hangText="CPNPtarget="upd" format="default"/>).</li> </ol> </dd> <dt>CPNP server (orserver):">Denotesserver):</dt> <dd> <t>Denotes a software instance that receives CPNP requests and sends back CPNP responses accordingly. The CPNP server is responsible for the followingoperations:<list style="numbers"> <t>Processoperations:</t> <ol spacing="normal" type="1"> <li>Process a quotation order (<xreftarget="proc"></xref>).</t> <t>Maketarget="proc" format="default"/>).</li> <li>Make an offer (<xreftarget="offer"></xref>).</t> <t>Canceltarget="offer" format="default"/>).</li> <li>Cancel an ongoing quotation order (<xreftarget="sordu"></xref>).</t> <t>Processtarget="sordu" format="default"/>).</li> <li>Process an order withdrawal (<xreftarget="sordu"></xref>).</t> </list></t> </list></t>target="sordu" format="default"/>).</li> </ol> </dd> </dl> </section> <section anchor="opm"title="Ordernumbered="true" toc="default"> <name>Order ProcessingModels">Models</name> <t>For preparing their service orders, Customers may need to be aware of the offered services. Therefore, Providers should first proceed with the announcement (or the exposure) of the services they can provide. The service announcement process may take place at designated global or Provider-specific servicemarkets,markets or through explicit interactions with the Providers. The details of this process are outside the scope of this document.</t> <t>With or without such service announcement/exposure mechanisms in place, the following order processing models can be distinguished:</t><t><list style="hanging"> <t hangText="Frozen model:"><vspace blankLines="1" />The<dl newline="true" spacing="normal"> <dt>Frozen model:</dt> <dd>The Customer cannot actually negotiate the parameters of the service(s) offered by a Provider. After consulting the Provider's service portfolio, the Customer selects the service offerhe/sheto which he or she wants to subscribe and places an order to the Provider. Order handling is quite simple on the Provider side because the service is not customizedasper Customer's requirements, but ratherpre-designeddesigned to address a Customer base that shares the same requirements (i.e., thesecustomersCustomers share the sameCustomerConnectivity Provisioning Profile). This mode can be implemented using existing tools such as <xreftarget="RFC8309"></xref>.</t> <t hangText="Negotiation-based model:"><vspace blankLines="1" />Unliketarget="RFC8309" format="default"/>.</dd> <dt>Negotiation-based model:</dt> <dd>Unlike the frozen model, the Customer documents his/her requirements in a request for a quotation, which is then sent to one or several Providers. Solicited Providers check whether they can address these requirements or not, and get back to the Customer accordingly, possibly with an offer that may not exactly matchcustomer'sthe Customer's requirements (e.g., a 100 Mbps connection cannot be provisioned given the amount of available resources, but an 80 Mbps connection can be provided). A negotiation between the Customer and the Provider(s) then follows until both parties reach an agreement (or donot).</t> </list></t>not).</dd> </dl> <t>Both frozen and negotiation-based models require the existence of appropriate service templates like a CPP template and their instantiation for expressing specific offerings from Providers and service requirements from Customers, respectively. CPNP can be used in either model for automating the required Customer-Provider interactions. The frozen model can be seen as a special case of the negotiation-based model. This document focuses on the negotiation-based model. Not only‘yes/no’'yes/no' answers but alsocounter-proposalscounterproposals may be offered by the Provider in response to Customer orders.</t> <t>Order processing management on the Network Provider's side usually solicits features supported by the following functional blocks:<?rfc subcompact="yes"?><list style="symbols"> <t>Network Provisioning</t> <ul spacing="normal"> <li>Network provisioning (includingOrder Activation,order activation, Network Planning,etc.)</t> <t>Authentication, Authorization and Accounting (AAA)</t> <t>Networketc.)</li> <li>Authentication, authorization, and accounting (AAA)</li> <li>Network and service management (performance measurement and assessment, fault detection,etc.)</t> <t>Sales-relatedetc.)</li> <li>Sales-related functional blocks (e.g., billing, invoicevalidation)</t> <t>Network Impact Analysis<?rfc subcompact="no"?></t> </list></t>validation)</li> <li>Network impact analysis</li> </ul> <t>CPNP does not assume any specific knowledge about these functional blocks, drawing an explicit line between protocol operation and the logic for handling connectivity provisioning requests. An order processing logic is typically fed with the information manipulated by the aforementioned functional blocks. For example, the resources that can be allocated to accommodate the Customer's requirements may depend on network availability estimates as calculated by the planning functions and related policies, as well as the number of orders to be processed simultaneously over a given period of time.</t> <t>This document does not elaborate on how Customers are identified and subsequently managed by the Provider'sInformation System.</t>information system.</t> </section> <section anchor="suc"title="Samplenumbered="true" toc="default"> <name>Sample UseCases ">Cases</name> <t>A non-exhaustive list of CPNP use cases is providedbelow:<list style="numbers">below:</t> <ol spacing="normal" type="1"> <li> <t><xreftarget="RFC4176"></xref>target="RFC4176" format="default"/> introduces the Layer 3 VPN (L3VPN) Service Order Management functionalblockblock, which is responsible for managing the requests initiated by the Customers and tracks the status of the completion of the related operations. CPNP can be used between the Customer and the Provider to negotiate L3VPN service parameters.<vspace blankLines="1" />A</t> <t>A CPNP server could therefore be part of the L3VPN Service Order Management functional block discussed in <xreftarget="RFC4176"></xref>.target="RFC4176" format="default"/>. A L3VPN Service YANG dataModelmodel (L3SM) is defined in <xreftarget="RFC8299"></xref>.target="RFC8299" format="default"/>. Once an agreement is reached, the service can be provisioned using, e.g., the L3VPN Network YANGModeldata model specified in <xreftarget="I-D.ietf-opsawg-l3sm-l3nm"></xref>.<vspace blankLines="1" />Likewise, Atarget="I-D.ietf-opsawg-l3sm-l3nm" format="default"/>.</t> <t>Likewise, a CPNP server could be part of the Layer 2 VPN (L2VPN) Service Order Management functional block. A YANG data model for L2VPN service delivery is defined in <xreftarget="RFC8466"></xref>.target="RFC8466" format="default"/>. Once an agreement is reached, the L2VPN service can be provisioned using, e.g., the L2VPN Network YANGModeldata model specified in <xreftarget="I-D.barguil-opsawg-l2sm-l2nm"></xref>.</t>target="I-D.ietf-opsawg-l2nm" format="default"/>.</t> </li> <li> <t>CPNP can be used between two adjacent domains to deliver IP interconnection services (e.g., enable, update, disconnect). For example, two Autonomous Systems (ASes) can be connected via several interconnection points. CPNP can be used between these ASes to upgrade existing links, request additional resources, provision a new interconnection point, etc.<vspace blankLines="1" />See,</t> <t>See, for example, the framework documented in <xreftarget="ETICS"></xref>.</t> <t>Antarget="ETICS" format="default"/>.</t> </li> <li>An integrated Provider can use CPNP to rationalize connectivity provisioning needs related to its service portfolio. A CPNP server function is used by network operations teams. A CPNP interface to trigger CPNP negotiation cycles is exposed to service managementteams.</t>teams.</li> <li> <t>Service Providers can use CPNP to initiate connectivity provisioning requests towards a number of Network Providers so as to optimize the cost of delivering their services. Although multiple CPNP ordering cycles can be initiated by a Service Provider towards multiple Network Providers, a subset of these orders may actually be put intoeffect.<vspace blankLines="1" />Foreffect.</t> <t>For example, a cloud Service Provider can use CPNP to request more resources from Network Providers.</t><t>CPNP</li> <li>CPNP can also be used in the context of network slicing(<xref target="I-D.geng-netslices-architecture"></xref>)<xref target="I-D.geng-netslices-architecture" format="default"/> to request network resources together with a set of requirements that need to be satisfied by the Provider. Such requirements are not restricted to basic IP forwarding capabilities, but may also include a characterization of a set of service functions that may be invoked. For the network slicing case, the instances of a CPP template could be derived from the network slicetemplates inputs astemplate documented in <xreftarget="I-D.contreras-teas-slice-nbi"></xref>.</t>target="I-D.contreras-teas-slice-nbi" format="default"/>.</li> <li> <t>CPNP can be used in Machine-to-Machine (M2M) environments to dynamically subscribe to M2M services (e.g., accesstodata retrieved by a set of sensors, extend sensor coverage,etc.).<vspace blankLines="1" />Also,etc.).</t> <t>Also, Internet of Things(IoT,(IoT) <xreftarget="RFC6574"></xref>)target="RFC6574" format="default"/> domains may rely on CPNP to enable dynamic access to data produced by involved objects, according to their specific policies, to various external stakeholders such as data analytics and business intelligence companies. Direct CPNP-based interactions between IoT domains and interested parties enable open access to diverse sets of data across the Internet, e.g., from multiple types of sensors, usergroupsgroups, and/or geographical areas.</t><t>CPNP</li> <li>CPNP can be used in the context ofI2NSF (<xref target="RFC8329"></xref>)Interface to Network Security Functions (I2NSF) <xref target="RFC8329" format="default"/> to capture thecustomer-drivenCustomer-driven policies to be enforced by a set of Network SecurityFunctions.</t>Functions.</li> <li> <t>A Provider offering cloud services can expose a CPNP interface to allow Customers to dynamically negotiate typical data center resources, such as additional storage, processing and networking resources, enhanced security filters,etc.<vspace blankLines="1" />Cloudetc.</t> <t>Cloud computingprovidersProviders typically structure their computation service offerings by bundling CPU, RAM, and storage units as quotas, instances, or flavors that can be consumed in an ephemeral or temporal fashion during the lifetime of the required function. A similar approach is followed by CPNP (see for example, <xreftarget="activate"></xref>).</t> <t>Intarget="activate" format="default"/>).</t> </li> <li>In the inter-cloud context (also called cloud of clouds or cloud federation), CPNP can be used to reserve computing and networking resources hosted by various cloudinfrastructures.</t>infrastructures.</li> <li> <t>CDN Providers can use CPNP to extend their footprint by interconnecting their respective CDN infrastructures <xreftarget="RFC6770"></xref>target="RFC6770" format="default"/> (see <xreftarget="cdni"></xref>).<vspace blankLines="1" /><figure align="center" anchor="cdni" title="CDN Interconnection">target="cdni" format="default"/>).</t> <figure anchor="cdni"> <name>CDN Interconnection</name> <artworkalign="center"><![CDATA[align="center" name="" type="" alt=""><![CDATA[ ,--,--,--. ,--,--,--. ,-' `-. ,-' `-. (CDN Provider 'A')=====(CDN Provider 'B') `-. (CDN-A) ,-' `-. (CDN-B) ,-' `--'--'--'`--'--'--']]></artwork> </figure></t>`--'--'--' ]]></artwork> </figure> </li> <li> <t>Mapping Service Providers(MSPs,(MSPs) <xreftarget="RFC7215"></xref>)target="RFC7215" format="default"/> can use CPNP to enrich their mapping database by interconnecting their mapping system (see <xreftarget="map"></xref>).target="map" format="default"/>). This interconnection allowsto relaxthe relaxation of the constraints on PxTR (Proxy Ingress/Egress Tunnel Router) in favour of native LISP (Locator/ID Separation Protocol) forwarding <xreftarget="RFC6830"></xref>.target="RFC6830" format="default"/>. Also, it prevents the fragmentation of the LISP mapping database. A framework is described in <xreftarget="I-D.boucadair-lisp-idr-ms-discovery"></xref>.<vspace blankLines="1" /><figure align="center" anchor="map" title="LISPtarget="I-D.boucadair-lisp-idr-ms-discovery" format="default"/>.</t> <figure anchor="map"> <name>LISP Mapping SystemInterconnect">Interconnect</name> <artworkalign="center"><![CDATA[align="center" name="" type="" alt=""><![CDATA[ ,--,--,--. ,--,--,--. ,-' `-. ,-' `-. (Mapping System 'A')===(Mapping System 'B') `-. ,-' `-. ,-' `--'--'--'`--'--'--']]></artwork> </figure></t> <t>CPNP`--'--'--' ]]></artwork> </figure> </li> <li>CPNP may also be used between SDN (Software-Defined Networking) controllers in contexts where Cooperating Layered Architecture for Software-Defined Networking (CLAS) is enabled <xreftarget="RFC8597"></xref>.</t> </list></t>target="RFC8597" format="default"/>.</li> </ol> </section> <section anchor="dm"title="CPNPnumbered="true" toc="default"> <name>CPNP DeploymentModels">Models</name> <t>Several CPNP deployment models can be envisaged. Two examples are listedbelow:<?rfc subcompact="yes"?><list style="symbols"> <t>Thebelow:</t> <ul spacing="normal"> <li>The Customer deploys a CPNP client while one or several CPNP servers are deployed by the Provider. A CPNP client can discover its CPNP servers using a variety of means (static, dynamic,etc.).</t> <t>Theetc.).</li> <li>The Customer does not enable any CPNP client. The Provider maintains a Customer Order Management portal. The Customer can initiate connectivity provisioning quotation orders via the portal; appropriate CPNP messages are then generated and sent to the relevant CPNP server. In this model, both the CPNP client and CPNP server are under the responsibility of the same administrative entity (i.e., NetworkProvider).<?rfc subcompact="no"?></t> </list></t>Provider).</li> </ul> <t>Once the negotiation of connectivity provisioning parameters is successfully concluded, that is, an order has been placed by the Customer, the actual network provisioning operations are initiated. The specification of related dynamic resource allocation and policy enforcement schemes, as well as how CPNP servers interact with the network provisioning functional blocksaton the Providersidesside, are out of the scope of this document.</t> <t>This document does not make anyassumptionassumptions about the CPNP deployment model either.</t> </section> <section anchor="cnm"title="CPNPnumbered="true" toc="default"> <name>CPNP NegotiationModel">Model</name> <t>CPNP runs between a Customer and aProviderProvider, carrying service orders from the Customer and corresponding responses from the Provider in order tothe end of reachingreach a service provisioning agreement. As the services offered by the Provider arewell-described,well described, by means of the CPP template for connectivity matters, the negotiation process is essentially a value-settlement process, where an agreement is pursued on the values of the commonly understood information items (service parameters) included in the service description template (<xreftarget="service_template"></xref>).</t>target="service_template" format="default"/>).</t> <t>Theprotocol is transparent to thecontent thatitCPNP carries andtothe negotiation logic invoked at Customer and Providersides, and which manipulatessides to manipulate the content (i.e., the information carried in CPNP messages to proceed with thenegotiation).</t>negotiation) is transparent to the protocol. </t> <t>The protocol aimsat facilitatingto facilitate the execution of the negotiation logic by providing the required generic communication primitives.</t> <t>Since negotiations are initiated and primarily driven by the Customer's negotiation logic, it is reasonable to assume that the Customer is the only party that can call for an agreement. An implicit approach is adopted for not overloading the protocol with additional messages. In particular, the acceptance of an offer made by the Provider signals a call for agreement from the Customer. Note that it is almost certain the Provider will accept this call since it refers to an offer thatitselfthe Provider made. Of course, at any point the Provider or the Customer may quit the negotiations, each on its own grounds.</t> <t>Based on the above, CPNP adopts aQuotation Order/Offer/Answerquotation order/offer/answer model, which proceeds through the following basic steps (<xreftarget="service_variants"></xref>):</t> <t><list style="numbers"> <t>Thetarget="service_variants" format="default"/>):</t> <ol spacing="normal" type="1"> <li>The CPNP client specifies its service requirementsviain aProvisionProvisioning Quotation Order (PQO). The order may include strictly or loosely defined values in the clauses describing service provisioningcharacteristics.</t> <t>Thecharacteristics.</li> <li>The CPNP server declines the PQO, or makes an offer to address the requirements of the PQO, or suggests acounter-proposalcounterproposal that partially addresses the requirements of the PQO in case specific requirements cannot beaccommodated.</t> <t>Theaccommodated.</li> <li>The CPNP client either accepts or declines the offer.AcceptingThe acceptance of the offer by the CPNP client implies a call foragreement; thusagreement and, thus, the agreement between both parties and the conclusion of thenegotiation.</t> </list></t> <t><figure align="center" anchor="service_variants" title="Simplifiednegotiation.</li> </ol> <figure anchor="service_variants"> <name>Simplified ServiceNegotiation">Negotiation</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |=====Requested Service=====>| |<=====Offered Service=======||======Agreed Service=======>||=====Accepted Service======>| ]]></artwork></figure></t></figure> <t>Multiple instances of CPNP may run at a Customer's or a Provider's domains. A CPNP client may be engaged in multiple, simultaneous negotiations with the same or different CPNP servers (parallel negotiations, see <xreftarget="mser"></xref>)target="mser" format="default"/>), and a CPNP server may need to negotiate with other Provider(s) as part of negotiations that are ongoing with a CPNP client (cascaded negotiations, see <xreftarget="cascaded"></xref>).</t>target="cascaded" format="default"/>).</t> <t>CPNP relies on various timers to run its operations. Two types of timers are defined: those that are specific to CPNP message transmission and those that are specific to the negotiation logic. The latter are used to guide the negotiation logic at both CPNP client and CPNP server sides, particularly in cases where the CPNP client is involved in parallel negotiations with several CPNP servers or in cases where the CPNP serverisis, inturnturn, involved in negotiations with other Providers for processing a givencustomer-originatedCustomer-originated quotation order. CPNP allows a CPNP server to requestanextra time to proceed with the negotiation. This request may be accepted or rejected by the CPNP client.</t> <t>Providers may need to publish available services to the Customers (see <xreftarget="opm"></xref>).target="opm" format="default"/>). CPNP may optionally support this functionality. Dedicated templates can be defined for the purpose of service announcement, which will be used by the CPNP clients to initiate their CPNP negotiation cycles.</t> <t>For the sake of simplicity, a singleOffer/Answeroffer/answer stage is assumed within one CPNP negotiation cycle. Nevertheless, as already stated, multiple CPNP negotiation cycles can be undertaken by a CPNP client (see <xreftarget="examples"></xref>).</t>target="examples" format="default"/>).</t> <t>The model is flexible enough to accommodate changing conditions during the lifetime of a service (e.g., the introduction of an additional VPN site).</t><t><figure align="center" anchor="examples" title="Overall<figure anchor="examples"> <name>Overall NegotiationProcess">Process</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ +------+ +------+ |Client| |Server| |Client| |Server| +------+ +------+ +------+ +------+ |=====Quotation Order=====>| |=====Quotation Order=====>| |<==========Offer==========| |<==========Offer==========| |===========Accept========>| |==========Decline========>| 1-Step Successful Negotiation 1-Step Failed Negotiation Cycle Cycle +------+ +------+ +------+ +------+ |Client| |Server| |Client| |Server| +------+ +------+ +------+ +------+ |===Quotation Order(a)====>| |===Quotation Order(i)====>| |<==========Offer==========| |<==========Offer==========| |==========Decline========>| |==========Decline========>| |===Quotation Order(b)====>| |===Quotation Order(j)====>| |<==========Offer==========| |<==========Offer==========| |===========Accept========>| |==========Decline========>| |===Quotation Order(k)====>| |<==========Offer==========| |==========Decline========>| |===Quotation Order(l)====>| |<==Fail to make an offer==| N-Step Negotiation Cycle: N-Step Negotiation Cycle: Successful Negotiation Failed Negotiation ]]></artwork></figure></t> <t>Means</figure> <t>The means used by a CPNP client to retrieve a list ofactive/agreedactive/accepted offers are not defined in this document.</t> <t>An order can be implicitly or explicitly activated.Section 3.11 of<xreftarget="RFC7297"></xref>target="RFC7297" sectionFormat="of" section="3.11"/> specifies a dedicated clause called Activation Means. Such a clause indicates the required action(s) to be undertaken to activate access to the (IP connectivity) service. This document defines a dedicated CPNP message that can be used for explicit activation (<xreftarget="activate"></xref>)).</t>target="activate" format="default"/>).</t> </section> <section anchor="po"title="Protocol Overview"> <t></t> <section title="Client/Server Communication">numbered="true" toc="default"> <name>Protocol Overview</name> <section numbered="true" toc="default"> <name>Client/Server Communication</name> <t>CPNP is a client/server protocol that can run over any transport protocol.Yet, UDP is theThe default transport mode is UDP secured with Datagram Transport Layer Security (DTLS) <xreftarget="RFC6347"></xref>.target="RFC6347" format="default"/>. No permanent CPNP transport session needs to be maintained between the client and the server.</t> <t>The CPNP client can be configured with the CPNP server(s). Typically, the CPNP client is configured with an IP address together with a port numberare configured to the CPNP client, based uponusing manual or dynamic configuration means (e.g., DHCP). Alternatively, a Provider may advertise the port number (CPNP_PORT) it uses to bind the CPNP service using SRV <xreftarget="RFC2782"></xref>.</t>target="RFC2782" format="default"/>.</t> <t>The CPNP client may be provided with a domain name of the CPNP server for PKIX-based authentication purposes. CPNP servers should prefer the use of DNS-ID and SRV-ID over CN-ID identifier types in certificate requests(Section 2.3 of <xref target="RFC6125"></xref>).(<xref target="RFC6125" sectionFormat="of" section="2.3"/>). URI-IDs should not be used for CPNP server identity verification.</t> <t>The client sends CPNP requests using CPNP_PORT as the destination port number. The same port number used as the source port number of a CPNP request sent to a CPNP server is used by the server to reply to that request.</t> <t>CPNP is independent of the IP address family.</t> <t>CPNP retransmission for unreliable transports is discussed in <xreftarget="retrans"></xref> for unreliable transports.</t>target="retrans" format="default"/>.</t> <t>Considerations related to mutual authentication are discussed in <xreftarget="Security"></xref>.</t>target="Security" format="default"/>.</t> </section> <sectiontitle="Policynumbered="true" toc="default"> <name>Policy Configuration on the CPNPServer">Server</name> <t>As an input to its decision-making process, the CPNP server may be connected to various external modules suchas:as Customer Profiles, Network Topology, Network Resource Management, Order Repositories, AAA, and Network Provisioning Manager (an example is shown in <xreftarget="fb"></xref>).</t>target="fb" format="default"/>).</t> <t>These external modules provide inputs to the CPNPserver,server so that itcan:<list style="symbols"> <t>Checkcan do the following:</t> <ul spacing="normal"> <li>Check whether acustomerCustomer is entitled to initiate a provisioning quotationrequest.</t> <t>Checkrequest.</li> <li>Check whether acustomerCustomer is entitled to cancel an ongoingorder.</t> <t>Checkorder.</li> <li>Check whether administrative data (e.g., billing-related information) have been verified before the processing of the requeststarts.</t> <t>Checkstarts.</li> <li>Check whether network capacity is available or additional capacity isrequired.</t> <t>Receiverequired.</li> <li>Receive guidelines from network design and sales blocks (e.g., pricing, network usage levels, thresholds associated with the number of CPP templates that can be processed over a given period of time as a function of the nature of the service to be delivered,etc.).</t> <t>Transferetc.).</li> <li>Transfer completed orders to network provisioning blocks (referred to as "Network Provisioning Manager" in <xreftarget="fb"></xref>).target="fb" format="default"/>). For example, the outcome of CPNP may be passed to modules such as Application-Based Network Operations (ABNO) <xreftarget="RFC7491"></xref>target="RFC7491" format="default"/> or network controllers. These controllers will use protocols such as NETCONF <xreftarget="RFC6241"></xref>target="RFC6241" format="default"/> to interact with the appropriate network nodes and functions for the sake of proper service activation and delivery.<?rfc subcompact="no"?></t> </list>The</li> </ul> <t>The above list of CPNP server operations is not exhaustive.</t><t><figure align="center" anchor="fb" title="Order<figure anchor="fb"> <name>Order Handling Management Functional Block (Focus on InternalInterfaces)">Interfaces)</name> <artworkalign="center"><![CDATA[align="center" name="" type="" alt=""><![CDATA[ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Business & Administrative Management . .+------------------------++---------------------------+. .| Business Guidelines || Billing & Charging |. .+-----------+------------++-----------+---------------+. . | | . . +-------------------+ | . . . . . . . . . . . . . . . . . .|. . .|. . . . . . . . . . . . . . . . . . . . . . . . . .|. . .|. . . . . . . . . .Order Handling Management | | . . +-------------------+ +-------+-----+--------------+ . . |Network Topology DB+--+ CPNP Server | . . +-------------------+ +-+---+---+---+---+-----+----+ . . | | | | | | . . +------------------------+-+ | | | | | . . | Network Dimensioning | | | | | | . . | & Planning | | | | | | . . +--------------------------+ | | | | | . . +----------------------------+-+ | | | +---+----+ . . | | | | | | AAA | . . | Network +------------+ | | | +--------+ . . | Resource | +------------+-+ | +-+----------+ . . | Management | | Customer | | | Orders | . . | | | Profiles | | | Repository | . . +-----------------+ +--------------+ | +------------+ . . . . . . . . . . . . . . . . . . . . .|. . . . . . . . . +--------------------------------------+----------------+ | Network Provisioning Manager | +-------------------------------------------------------+ ]]></artwork></figure></t> <t><?rfc subcompact="no"?></t></figure> <t>The followingorder handlingorder-handling modes can also be configured on theserver:<list style="numbers"> <t>Fullyserver:</t> <dl spacing="normal"> <dt>Fully automatedmode: Thismode:</dt><dd>This mode does not require any action from the administrator when receiving a request for a service. The server can execute its decision-making process related to the orders received and can generate correspondingoffers.</t> <t>Administrativeoffers.</dd> <dt>Administrative validationchecking: Somechecking:</dt><dd>Some or all of the server's operations are subject to administrative validation procedures. This mode requires an action from the administrator for every request received. To that aim, the CPNP methodswhichthat can be automatically handled by the server (or are subject to one or several validation administrative checks) can be configured on theserver.</t> </list></t>server.</dd> </dl> </section> <section anchor="session"title="CPNPnumbered="true" toc="default"> <name>CPNP SessionEntries">Entries</name> <t>A CPNP session entry isdenotedrepresented by a tuple defined asfollows:<list style="symbols"> <t>Transportfollows:</t> <ul spacing="normal"> <li>Transport session (typically, the IP address of the CPNP client, the client's port number, the IP address of the CPNP server, and the CPNP server's portnumber).</t> <t>Incremented Sequence Numbernumber).</li> <li>Incremented sequence number (<xreftarget="sq_nu"></xref>)</t> <t>Customer Agreement Identifier:target="sq_nu" format="default"/>).</li> <li>Customer agreement identifier: This is a unique identifier assigned to the order under negotiation by the CPNP client (<xreftarget="cu_id"></xref>).target="cu_id" format="default"/>). This identifier is also used by the client to identify the agreement that will result from a successfulnegotiation.</t> <t>Provider Agreement Identifier:negotiation.</li> <li>Provider agreement identifier: This is a unique identifier assigned to the order under negotiation by the CPNP server (<xreftarget="pr_id"></xref>).target="pr_id" format="default"/>). This identifier is also used by the server to identify the agreement that will result from a successfulnegotiation.</t> <t>Transaction-IDnegotiation.</li> <li>Transaction-ID (<xreftarget="trans"></xref>).</t> </list></t>target="trans" format="default"/>).</li> </ul> </section> <section anchor="trans"title="CPNP Transaction">numbered="true" toc="default"> <name>CPNP Transactions</name> <t>A CPNP transaction occurs between a client and a server for completing, modifying, or withdrawing a service agreement, and comprises all CPNP messages exchanged between the client and the server, from the first request sent by the client to the final response sent by the server. A CPNP transaction is bound to a CPNP session (<xreftarget="session"></xref>).</t>target="session" format="default"/>).</t> <t>Because multiple CPNP transactions can be maintained by the CPNP client, the client must assign an identifier to uniquely identify a given transaction. This identifier isdenoted asthe Transaction-ID.</t> <t>The Transaction-ID must be randomly assigned by the CPNP client, according to the best current practice for generating random numbers <xreftarget="RFC4086"></xref>target="RFC4086" format="default"/> that cannot be guessed easily. The Transaction-ID is used for validating CPNP responses received by the client.</t> <t>In the context of a transaction, the client needs torandomlyselect a sequence number randomly and then needs to assign it to the first CPNP message to send. This number is then incremented for each request message that is subsequently sent within the ongoing CPNP transaction (see <xreftarget="sq_nu"></xref>).</t>target="sq_nu" format="default"/>).</t> </section> <section anchor="timers"title="CPNP Timers">numbered="true" toc="default"> <name>CPNP Timers</name> <t>CPNP adopts a simple retransmission procedurewhichthat relies on a retransmission timerdenoted asrepresented by RETRANS_TIMER and a maximum retry threshold. The use of RETRANS_TIMER and a maximum retry threshold are described in <xreftarget="behavior"></xref>.</t>target="behavior" format="default"/>.</t> <t>The response timer (EXPECTED_RESPONSE_TIME) is set by the client to denote the time, in seconds, the client will waitfor receivingto receive a response from the server to aprovisioning quotation orderPQO request (see <xreftarget="extime"></xref>).target="extime" format="default"/>). If the timer expires, the respectivequotation orderPQO is cancelled by theclientclient, and a CANCEL message is generated accordingly.</t> <t>The expected offer timer (EXPECTED_OFFER_TIME) is set by the server to indicate the time by when the CPNP server isexpectingexpected to make an offer to the CPNP client (see <xreftarget="EXPECTED_OFFER_TIME"></xref>).target="EXPECTED_OFFER_TIME" format="default"/>). If no offer is received by then, the CPNP client will consider the order as rejected.</t> <t>An offer expiration timer (VALIDITY_OFFER_TIME) is set by the server to represent the time, in minutes, after which an offer made by the server becomes invalid (see <xreftarget="valtime"></xref>).</t>target="valtime" format="default"/>).</t> </section> <sectiontitle="CPNP Operations">numbered="true" toc="default"> <name>CPNP Operations</name> <t>CPNP operations are listed below. They may beaugmented,augmented depending on the nature of some transactions or because of security considerations that may necessitate a distinct CPNP client/server authentication phase before negotiation begins.<list style="symbols"> <t>QUOTATION (<xref target="provision"></xref>): <vspace blankLines="1" />This</t> <dl spacing="normal" newline="true"> <dt>QUOTATION (<xref target="provision" format="default"/>): </dt> <dd>This operation is used by the client to initiate aprovisioning quotation order.PQO. Upon receipt of a QUOTATION request, the server may respond with a PROCESSING,OFFEROFFER, or a FAIL message. A QUOTATION-initiated transaction can be terminated by a FAILmessage.</t> <t>PROCESSINGmessage.</dd> <dt>PROCESSING (<xreftarget="proc"></xref>): <vspace blankLines="1" />Thistarget="proc" format="default"/>): </dt> <dd>This operation is used to inform the remote party thattheits message (the order quotation or the offer)sentwas received and it is being processed. This message can also be issued by the server to request more time, in whichcasecase, the client may reply with an ACK or FAIL message depending on whether extra time can or cannot begranted.</t> <t>OFFERgranted.</dd> <dt>OFFER (<xreftarget="offer"></xref>): <vspace blankLines="1" />Thistarget="offer" format="default"/>): </dt> <dd>This operation is used by the server to inform the client about an offer that can best accommodate the requirements indicated in the previously received QUOTATIONmessage.</t> <t>ACCEPTmessage.</dd> <dt>ACCEPT (<xreftarget="accept"></xref>): <vspace blankLines="1" />Thistarget="accept" format="default"/>): </dt> <dd>This operation is used by the client to confirm the acceptance of an offer made by the server. This message implies a call for agreement. An agreement is reached when an ACK is subsequently received from the server, which is likely to happen if the message is sent before the offer validity time expires; the server is unlikely to reject an offer that it has alreadymade.</t> <t>DECLINEmade.</dd> <dt>DECLINE (<xreftarget="dec"></xref>): <vspace blankLines="1" />Thistarget="dec" format="default"/>): </dt> <dd>This operation is used by the client to reject an offer made by the server. The ongoing transaction may not be terminated immediately, e.g., theserver/clientclient may issue another order or the server may issue anotheroffer/order.</t> <t>ACKoffer.</dd> <dt>ACK (<xreftarget="ack"></xref>): <vspace blankLines="1" />Thistarget="ack" format="default"/>): </dt> <dd>This operation is used by the server to acknowledge the receipt of an ACCEPT or WITHDRAWmessage,message or by the client to confirm the server's request for a time extensionrequested(conveyed in a PROCESSING message)by the server for processingin order to process the last received quotationorder.</t> <t>CANCELorder.</dd> <dt>CANCEL (<xreftarget="cancel"></xref>): <vspace blankLines="1" />Thistarget="cancel" format="default"/>): </dt> <dd>This operation is used by the client to cancel (quit) the ongoingtransaction.</t> <t>WITHDRAWtransaction.</dd> <dt>WITHDRAW (<xreftarget="with"></xref>): <vspace blankLines="1" />Thistarget="with" format="default"/>): </dt> <dd>This operation is used by the client to withdraw a completed order (i.e., anagreement).</t> <t>UPDATEagreement).</dd> <dt>UPDATE (<xreftarget="upd"></xref>): <vspace blankLines="1" />Thistarget="upd" format="default"/>): </dt> <dd>This operation is used by the client to update an existing agreement. For example, this method can be invoked to add a new VPN site. This method will trigger a new negotiationcycle.</t> <t>FAILcycle.</dd> <dt>FAIL (<xreftarget="fail"></xref>): <vspace blankLines="1" />Thistarget="fail" format="default"/>): </dt> <dd> <t>This operation is used by the server to indicate that it cannot accommodate the requirements documented in the PQO conveyed in the QUOTATION message or to inform the client about an error encountered when processing the received message. In either case, the message implies that the server is unable to makeoffers andoffers, and, as a consequence, it terminates the ongoing transaction.<vspace blankLines="1" />This</t> <t>This message is also used by the client to reject a time extension request in a PROCESSING message received from theserver (in a PROCESSING message).server. The message includes a status codefor providingthat provides explanatory information.</t></list></t></dd> </dl> <t>The above CPNP primitives areservice-independent.service independent. CPNP messages may transparently carry service-specific objectswhichthat are handled by the negotiation logic at either side.</t> <t>The document defines the service objects that are required for connectivity provisioning negotiation purposes (see <xreftarget="cpd"></xref>) purposes.target="cpd" format="default"/>). Additional service-specific objectsto be carried infor CPNP messagescan be defined in the future for accommodatingto accommodate alternative deployment schemes or other service provisioningneeds.</t>needs can be defined in the future.</t> </section> <section anchor="cpd"title="Connectivitynumbered="true" toc="default"> <name>Connectivity ProvisioningDocuments">Documents</name> <t>CPNP makes use of several flavors of Connectivity Provisioning Documents (CPD). These documents follow the same CPP template described in <xreftarget="RFC7297"></xref>.<list style="hanging"> <t hangText="Requested Connectivity Provisioning Document (Requested CPD): ">Referstarget="RFC7297" format="default"/>.</t> <dl newline="true" spacing="normal"> <dt>Requested CPD: </dt> <dd>Refers to the CPD included by a CPNP client in a QUOTATIONrequest.</t> <t hangText="Offered Connectivity Provisioning Document (Offered CPD): ">Thisrequest.</dd> <dt>Offered CPD: </dt> <dd>This document is included by a CPNP server in an OFFER message. Its information reflects the proposal of the server to accommodate all or a subset of the clauses depicted in a Requested CPD. A validity time is associated with the offermade.</t> <t hangText="Agreed Connectivity Provisioning Document (Agreed CPD): ">Ifmade.</dd> <dt>Accepted CPD: </dt> <dd>If the client accepts an offer made by the server, the Offered CPD is included in an ACCEPT message. This CPD is also included in an ACK message. Thus, a3-waythree-way handshake procedure is followed for successfully completing thenegotiation.</t> </list></t>negotiation.</dd> </dl> <t><xreftarget="example"></xref>target="example" format="default"/> shows a typical CPNP negotiation cycle and the use of the different types ofConnectivityCPDs.</t> <figure anchor="example"> <name>Connectivity ProvisioningDocuments.</t> <t><figure align="center" anchor="example" title="Connectivity Provisioning Documents">Documents</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |======QUOTATION (Requested CPD)=====>| |<============PROCESSING==============| |<========OFFER (Offered CPD)=========| |=============PROCESSING=============>||=========ACCEPT (Agreed|=======ACCEPT (Accepted CPD)========>||<=========ACK (Agreed|<=======ACK (Accepted CPD)===========| | | ]]></artwork></figure></t></figure> <t>Aprovisioning documentCPD can include parameters with fixed values,loosely-definedloosely defined values, or any combination thereof. Aprovisioning documentCPD is said to be concrete if all clauses have fixed values.</t> <t>A typical evolution of a negotiation cycle would start with a quotation order withloosely-definedloosely defined parameters, and then, as offers are made, it would conclude with a concreteprovisioning documentCPD for calling for the agreement.</t> </section> <section anchor="cascaded"title="Child Provisioning Quotation Orders">numbered="true" toc="default"> <name>Child PQOs</name> <t>If the server detects that network resources from another Network Provider need to be allocated in order to accommodate the requirements described in a PQO (e.g., in the context of an inter-domain VPN service, additionalPEProvider Edge (PE) router resources need to be allocated), the server may generate child PQOs to request the appropriate network provisioning operations (see <xreftarget="child"></xref>).target="child" format="default"/>). In such a situation, the serverbehavesalso behaves as a CPNP client. The server associates the parent order with its child PQOs. How this is achieved isimplementation-specificimplementation specific (e.g., this can be typically achieved by locally adding the reference of the child PQO to the parent order).</t><t><figure align="center" anchor="child" title="Example<figure anchor="child"> <name>Example of ChildOrders">Orders</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +--------+ +--------+ |Client| |Server A| |Server B| +------+ +--------+ +--------+ | | | |=====QUOTATION=====>| | |<====PROCESSING=====| | | |=====QUOTATION=====>| | |<====PROCESSING=====| | |<=======OFFER=======| | |=====PROCESSING====>| | |=======ACCEPT======>| | |<=======ACK=========| |<=======OFFER=======| | |=====PROCESSING====>| | |=======ACCEPT======>| | |<=======ACK=========| | | | | ]]></artwork></figure></t></figure> <t>Note thatrecursion must not be activated bythe server must not activate recursion for an order if the client includes a negotiation option to restrict the negotiation scope to the resources of the server's domain (<xreftarget="nego"></xref>).</t>target="nego" format="default"/>).</t> <t>If recursion is not explicitly disabled, the server may notify the client when appropriate (<xreftarget="proc"></xref>).target="proc" format="default"/>). Such notification mayalsodepend on the nature of the servicebutand also regulatory considerations.</t> </section> <sectiontitle="Multi-Segment Service">numbered="true" toc="default"> <name>Multi-Segment Service</name> <t>A composite service (e.g., connectivity) requested by acustomerCustomer could imply multi-segment services (e.g., multi-segment connectivity spanning an end-to-end scope), in the sense that one single CPNP request is decomposed intoNmultiple connectivity requestsaton theprovider'sProvider's side (thereby leading to child orders). The Provider is in charge of handling the complexity of splitting the generic provisioning order in a multi-segment context. Such complexity is local to the Provider.</t> </section> <section anchor="mser"title="Negotiatingnumbered="true" toc="default"> <name>Negotiating with Multiple CPNPServers">Servers</name> <t>A CPNP client may undertake multiple negotiations in parallel with several servers for various reasons, such as cost optimization and fail-safety. These multiple negotiations may lead to one or many agreements.</t> <t>The salient point underlining the parallel negotiation scenarios is that, although the negotiation protocol is strictly between two parties, this may not be the case of the negotiation logic. The CPNP client negotiation logic may need to collectively drive parallel negotiations, as the negotiation with one server may affect the negotiation with other servers; for example, it may need to use the responses from all servers as an input for determining the messages (and their content) to subsequently send within the course of each individual negotiation.TimingTherefore, timing isthereforean important aspectaton the client's side. The CPNP client needs to have the ability to synchronize the receipt of the responses from the servers. CPNP takes into account this requirement by allowing clients to specify in the QUOTATION message the time by which the server needs to respond (see <xreftarget="extime"></xref>).</t>target="extime" format="default"/>).</t> </section> <sectiontitle="State Management">numbered="true" toc="default"> <name>State Management</name> <t>Both the client and the server maintain repositories to store ongoing orders. How these repositories are maintained isdeployment-specific.deployment specific. It is out of scope of this document to elaborate on such considerations. Timestamps are also logged to track state change. Tracking may be needed for various reasons, including regulatory or billing ones.</t> <t>In order to accommodate failures that may lead to the reboot of the client or the server, the use of permanent storage is recommended, thereby facilitating state recovery.<!-- --></t></t> <sectiontitle="Onnumbered="true" toc="default"> <name>On the ClientSide">Side</name> <t>This is the list of the typical states that can be associated with a given order on the client's side:</t><t><list style="symbols"> <t>Created: when the<dl spacing="normal"> <dt>Created:</dt><dd>The order has been created. It is not handled by the client until the administrator allows it toprocess it.</t> <t>AwaitingProcessing: when thebe processed.</dd> <dt>AwaitingProcessing:</dt><dd>The administrator has approved the processing of a createdorder andorder, but the order has not been handledyet.</t> <t>PQOSent: when theyet.</dd> <dt>PQOSent:</dt><dd> The order has been sent to theserver.</t> <t>ServerProcessing: when theserver.</dd> <dt>ServerProcessing:</dt><dd>The server has confirmed the receipt of theorder.</t> <t>OfferReceived: when anorder.</dd> <dt>OfferReceived:</dt><dd>An offer has been received from theserver.</t> <t>OfferProcessing: when aserver.</dd> <dt>OfferProcessing:</dt><dd>A received offer iscurrentlybeing processed by theclient.</t> <t>AcceptSent: when theclient.</dd> <dt>AcceptSent:</dt><dd>The client has confirmed the offer to theserver.</t> <t>Completed: when theserver.</dd> <dt>Completed:</dt><dd>The offerishas been acknowledged by theserver.</t> <t>Cancelled: when theserver.</dd> <dt>Cancelled:</dt><dd>The order has failed orcancelled.</t> </list></t>was cancelled.</dd> </dl> <t>Sub-states may be defined (e.g., to track failed vs. cancelledorders)orders), but those are not shown in <xreftarget="clientstate"></xref>.</t> <t><figure align="center" anchor="clientstate" title="Exampletarget="clientstate" format="default"/>.</t> <figure anchor="clientstate"> <name>Example of a CPNP Finite State Machine (ClientSide)">Side)</name> <artworkalign="center"><![CDATA[+------------------+align="center" name="" type="" alt=""><![CDATA[ +------------------+ | Created |-----------------+ +------------------+ | | | v | +------------------+ | |AwaitingProcessing|----------------+| +------------------+ || | || QUOTATION/UPDATE || v || +------------------+ || | PQOSent |---CANCEL------+|| +------------------+ vvv | +-----+ PROCESSING | | v | | +------------------+ CANCEL | C | | ServerProcessing |------------>| A | +------------------+ FAIL | N | | | C | | | E | OFFER | L | | | L | v | E | +------------------+ | D | | OfferReceived |---CANCEL--->| | +------------------+ | | | PROCESSING +-----+ v ^^^ +------------------+ ||| | OfferProcessing |---DECLINE-----+|| +------------------+ || | ACCEPT || v || +------------------+ || | AcceptSent |---CANCEL-------+| +------------------+ | | ACK | v | +------------------+ | | Completed |---WITHDRAW------+ +------------------+ ]]></artwork></figure></t> <t></t></figure> </section> <sectiontitle="Onnumbered="true" toc="default"> <name>On the ServerSide">Side</name> <t>The following lists the stateswhichon the server's side that can be associated with a given order and a correspondingoffer on the server's side:</t> <t><list style="symbols"> <t>PQOReceived: when theoffer:</t> <dl spacing="normal"> <dt>PQOReceived:</dt><dd>The order has been received from theclient.</t> <t>AwaitingProcessing: when theclient.</dd> <dt>AwaitingProcessing: </dt><dd>The order is being processed by the server. An action from the server administrator may beneeded.</t> <t>OfferProposed: when theneeded.</dd> <dt>OfferProposed:</dt><dd>The request has been successfullyhandledhandled, and an offer has been sent to theclient.</t> <t>ProcessingReceived: when theclient.</dd> <dt>ProcessingReceived:</dt><dd>The server has received a PROCESSING message for an offer sent to theclient.</t> <t>AcceptReceived: when theclient.</dd> <dt>AcceptReceived:</dt><dd>The server has received a confirmation for the offer from theclient.</t> <t>Completed: when theclient.</dd> <dt>Completed:</dt><dd>The server has acknowledged the offer (accepted by client) to the client. Transitioning to this state assumes that the ACK was received by the client (this can be detected by the server if it receives a retransmitted ACCEPT message from theclient).</t> <t>Cancelled: when theclient).</dd> <dt>Cancelled:</dt><dd>The order cannot beaccommodatedaccommodated, or it has been cancelled by the client.AssociateAssociated resources must be released in the latter case, if previouslyreserved.</t> <t>ChildCreated: when areserved.</dd> <dt>ChildCreated:</dt><dd>A child order has been created in cases where resources from another Network Provider areneeded.</t> <t>ChildPQOSent: when aneeded.</dd> <dt>ChildPQOSent:</dt><dd>A child order has been sent to the remoteserver.</t> <t>ChildServerProcessing: when aserver.</dd> <dt>ChildServerProcessing:</dt><dd>A child order iscurrentlybeing processed by the remoteserver.</t> <t>ChildOfferReceived: when an offerserver.</dd> <dt>ChildOfferReceived:</dt><dd> The remote server hasbeenreceived an offer to a childorder from the remote server.</t> <t>ChildOfferProcessing: when aorder.</dd> <dt>ChildOfferProcessing:</dt><dd> A received offer to a child order iscurrently processed.</t> <t>ChildAcceptSent: when thebeing processed.</dd> <dt>ChildAcceptSent: </dt><dd>The child offer(offer(the offer received from the remote server in response to a child order) is confirmed to the remoteserver.</t> <t>ChildCompleted: when anserver.</dd> <dt>ChildCompleted:</dt><dd> The accepted child offerishas been acknowledged by the remoteserver.</t> </list></t> <t><figure align="center" anchor="serverstate" title="CPNPserver.</dd> </dl> <figure anchor="serverstate"> <name>CPNP Finite State Machine (ServerSide)">Side)</name> <artworkalign="center"><![CDATA[+------------------+align="center" name="" type="" alt=""><![CDATA[ +------------------+ +------------------+ |AwaitingProcessing|<----------| ChildCreated | +------------------+ +------------------+ | | ^ v | | +------------------+ | | | ChildPQOSent |----------------+| Q +------------------+ || U | || O QUOTATION/UPDATE || T v || A +--------------------+ +---------------------+ CANCEL || T | PQOReceived | |ChildServerProcessing|------------+|| I +--------------------+ +---------------------+ FAIL vvv O | | | +-----+ N CANCEL | PROCESSING | |<---|-------+ PROCESSING v | | | v +------------------+ | | +------------------------+ |ChildOfferReceived|----CANCEL---| C |<--| AwaitingProcessing | +------------------+ | A | +------------------------+ | | N | ^ | OFFER OFFER | C | | +------------------+ | | E |<DECLINE-| OfferProposed | | | L | | +------------------+ v | L | | | +------------------+ | E | | PROCESSING |ChildOfferReceived|---CANCEL----| D | | v +------------------+ | | | +------------------+ | | |<DECLINE-| Proc'ingReceived | PROCESSING | | |+------------------+ | +-----+ | | ACCEPT v ^^^^^ | v +------------------+ ||||| | +------------------+ |ChildOfferProc'ing|---DECLINE----+|||+-CANCEL-|-| AcceptReceived | +------------------+ ||| | +------------------+ |ACCEPT ||| | |ACK v ||| | v +------------------+ ||| | +------------------+ | ChildAcceptSent |---CANCEL------+|+-WITHDRAW|-| Completed | +------------------+ | | +------------------+ | ACK | | v | | +------------------+ | | | ChildCompleted |---WITHDRAW-----+ | | +---------------------------+ +------------------+ ]]></artwork></figure></t> <t></t></figure> </section> </section> </section> <section anchor="co"title="CPNP Objects">numbered="true" toc="default"> <name>CPNP Objects</name> <t>This section defines CPNP objects using theRBNFRouting Backus-Naur Form (RBNF) format definedatin <xreftarget="RFC5511"></xref>.</t> <t><list style="empty"> <t>Notetarget="RFC5511" format="default"/>. Please also note the following:</t> <aside><t>Note 1: The formats of CPNP messages are provided using a generic format. Implementors can adapt RBNF definitions to their "favorite" message format. For example, JSON <xreftarget="RFC8259"></xref>target="RFC8259" format="default"/> orCBORConcise Binary Object Representation (CBOR) <xreftarget="RFC7049"></xref>target="RFC7049" format="default"/> can beused.</t> <t>Noteused.</t></aside> <aside><t>Note 2: CPNP messages cannot be blindly mapped to RESTCONF messages with the target service being modelled as configuration data because such data is supposed to be manipulated by a RESTCONF client only. In such a model, the RESTCONF server cannot use a value other than the one set by the client (e.g., <xreftarget="offer"></xref>)target="offer" format="default"/>) or remove offers from its own initiative (e.g., <xreftarget="valtime"></xref>).target="valtime" format="default"/>). An alternate approach might be to map CPNP operations into RESTCONF actions(rpc).(RPC). Assessing the feasibility of such approach is out ofscope.</t> </list></t> <t><?rfc subcompact="yes" ?></t>scope.</t></aside> <sectiontitle="Attributes"> <t></t>numbered="true" toc="default"> <name>Attributes</name> <section anchor="cu_id"title="CUSTOMER_AGREEMENT_IDENTIFIER"> <t>CUSTOMER_AGREEMENT_IDENTIFIERnumbered="true" toc="default"> <name>CUSTOMER_ORDER_IDENTIFIER</name> <t>The CUSTOMER_ORDER_IDENTIFIER (Customer Order Identifier) is an identifierwhichthat is assigned by a client to identify an agreement. This identifier must be unique to the client.</t> <t>Rules for assigning this identifier (including the structure andsemantic)semantics) are specific to the client (Customer). The value ofCUSTOMER_AGREEMENT_IDENTIFIERCUSTOMER_ORDER_IDENTIFIER is included in all CPNP messages.</t> <t>The client (Customer) assigns an identifier to an order under negotiation before an agreement is reached. This identifier will be used to unambiguously identify the resulting agreement at the client side (Customer).</t> <t>The server handlesCUSTOMER_AGREEMENT_IDENTIFIERthe CUSTOMER_ORDER_IDENTIFIER as an opaque value.</t> </section> <section anchor="pr_id"title="PROVIDER_AGREEMENT_IDENTIFIER"> <t>PROVIDER_AGREEMENT_IDENTIFIERnumbered="true" toc="default"> <name>PROVIDER_ORDER_IDENTIFIER</name> <t>The PROVIDER_ORDER_IDENTIFIER (Provider Order Identifier) is an identifierwhichthat is assigned by a server to identify an order. This identifier must be unique to the server.</t> <t>Rules for assigning this identifier (including the structure andsemantic)semantics) are specific to the server (Provider).PROVIDER_AGREEMENT_IDENTIFIERThe PROVIDER_ORDER_IDENTIFIER is included in all CPNPmessages,messages except QUOTATION messages (because the state is only present at the client side).</t> <t>The server (Provider) assigns an identifier to an order under negotiation before an agreement is reached. This identifier will be used to unambiguously identify the resulting agreement at the server side (Provider).</t> <t>The client handlesPROVIDER_AGREEMENT_IDENTIFIERthe PROVIDER_ORDER_IDENTIFIER as an opaque value.</t> </section> <section anchor="trans_id"title="TRANSACTION_ID">numbered="true" toc="default"> <name>TRANSACTION_ID</name> <t>This object conveys the Transaction-ID introduced in <xreftarget="trans"></xref>.</t>target="trans" format="default"/>.</t> </section> <sectiontitle="SEQUENCE_NUMBER"> <t>Sequence Numbernumbered="true" toc="default"> <name>SEQUENCE_NUMBER</name> <t>The sequence number is a number that is monotonically incremented in every new CPNP message pertaining to a given CPNP transaction. This number is used to avoidreplyreplay attacks.</t> <t>Refer to <xreftarget="sq_nu"></xref>.</t>target="sq_nu" format="default"/>.</t> </section> <sectiontitle="NONCE"> <t>NONCEnumbered="true" toc="default"> <name>NONCE</name> <t>The NONCE is a random value assigned by the CPNP server.It is recommended to assignAssigning a unique NONCEvaluesvalue for eachorder.</t> <t>NONCEorder is recommended.</t> <t>It isthenmandatory tobe includedthen include the NONCE in subsequent CPNP client operations on the associated order (including the resulting agreement) suchas: withdrawas withdrawing the order orupdateupdating the order.</t> <t>If the NONCE validation checks fail, the server rejects the request with a FAIL messageincludingthat includes the appropriate failure reason code.</t> </section> <section anchor="extime"title="EXPECTED_RESPONSE_TIME">numbered="true" toc="default"> <name>EXPECTED_RESPONSE_TIME</name> <t>This attribute indicates the time by when the CPNP client is expecting to receive a response from the CPNP server to a given PQO. If no offer is received by then, the CPNP client will consider the quotation orderasto be rejected.</t><t>EXPECTED_RESPONSE_TIME<t>The EXPECTED_RESPONSE_TIME follows the date format specified in <xreftarget="RFC3339"></xref>.</t>target="RFC3339" format="default"/>.</t> </section> <section anchor="EXPECTED_OFFER_TIME"title="EXPECTED_OFFER_TIME">numbered="true" toc="default"> <name>EXPECTED_OFFER_TIME</name> <t>This attribute indicates the time by when the CPNP server is expecting to make an offer to the CPNP client. If no offer is received by then, the CPNP client will consider the orderasrejected.</t> <t>The CPNP server may propose an expected offer time that does not match the expected response time indicated in the quotation order message. The CPNP client can accept or reject the proposed expected time by when the CPNP server will make an offer.</t> <t>The CPNP server can always request extra time for its processing, but this may be accepted or rejected by the CPNP client.</t><t>EXPECTED_OFFER_TIME<t>The EXPECTED_OFFER_TIME follows the date format specified in <xreftarget="RFC3339"></xref>.</t>target="RFC3339" format="default"/>.</t> </section> <section anchor="valtime"title="VALIDITY_OFFER_TIME">numbered="true" toc="default"> <name>VALIDITY_OFFER_TIME</name> <t>This attribute indicates the time of validity of an offer made by the CPNP server. If the offer is not accepted before thisdatetime expires, the CPNP server will consider the CPNP clienthasas having rejected the offer; the CPNP server will silently remove this order from its base.</t><t>VALIDITY_OFFER_TIME<t>The VALIDITY_OFFER_TIME follows date format specified in <xreftarget="RFC3339"></xref>.</t>target="RFC3339" format="default"/>.</t> </section> <section anchor="service_template"title="SERVICE_DESCRIPTION">numbered="true" toc="default"> <name>SERVICE_DESCRIPTION</name> <t>This document defines a machinery to negotiate any aspect subject to negotiation. Service clauses that are under negotiation are conveyed using this attribute.</t> <t>The structure of the connectivity provisioning clauses is provided in the followingsub-section.</t>subsection.</t> <section anchor="cpd_template"title="CONNECTIVITY_PROVISIONING_DOCUMENT">numbered="true" toc="default"> <name>CPD</name> <t>The RBNF format of theConnectivity Provisioning Document (CPD)CPD is shown in <xreftarget="rbnf_cpd"></xref>:</t> <t><figure anchor="rbnf_cpd" title="Thetarget="rbnf_cpd" format="default"/>.</t> <figure anchor="rbnf_cpd"> <name>The RBNF format of theConnectivity Provisioning Document (CPD)"> <artwork><![CDATA[<CONNECTIVITY_PROVISIONING_DOCUMENT>CPD</name> <sourcecode type="rbnf"><![CDATA[ <CPD> ::= <Connectivity Provisioning Component> ... <Connectivity Provisioning Component> ::= <CONNECTIVITY_PROVISIONING_PROFILE> ... <CONNECTIVITY_PROVISIONING_PROFILE> ::= <Customer Nodes Map> <SCOPE> <QoS Guarantees> <Availability> <CAPACITY> <Traffic Isolation> <Conformance Traffic> <Flow Identification> <Overall Traffic Guarantees> <Routing and Forwarding> <Activation Means> <Invocation Means> <Notifications> <Customer Nodes Map> ::= <Customer Node> ... <Customer Node> ::= <IDENTIFIER> <LINK_IDENTIFIER><LOCALISATION>]]></artwork> </figure></t><LOCALISATION> ]]></sourcecode> </figure> </section> </section> <sectiontitle="CPNPnumbered="true" toc="default"> <name>CPNP InformationElements">Elements</name> <t>An Information Element (IE) is an optional objectwhichthat can be included in a CPNP message.</t> <sectiontitle="Customer Description">numbered="true" toc="default"> <name>Customer Description</name> <t>The client may include administrative information suchas:<?rfc subcompact="yes"?><list style="symbols"> <t>Name</t> <t>Contact Information<?rfc subcompact="no"?></t> </list>Theas the following:</t> <ul spacing="normal"> <li>Name</li> <li>Contact Information</li> </ul> <t>The format of this Information Element is as follows:</t><t><figure> <artwork><![CDATA[<Customer<sourcecode type="rbnf"><![CDATA[ <Customer Description> ::= [<NAME>] [<Contact Information>] <Contact Information> ::= [<EMAIL_ADDRESS>] [<POSTAL_ADDRESS>] [<TELEPHONE_NUMBER> ...]]]></artwork> </figure></t>]]></sourcecode> </section> <sectiontitle="Provider Description">numbered="true" toc="default"> <name>Provider Description</name> <t>The server may include administrative information in an offer suchas:<?rfc subcompact="yes"?><list style="symbols"> <t>Name</t> <t>ASas the following:</t> <ul spacing="normal"> <li>Name</li> <li>AS Number(<xref target="RFC6793"></xref>)</t> <t>Contact Information<?rfc subcompact="no"?></t> </list>The<xref target="RFC6793" format="default"/></li> <li>Contact Information</li> </ul> <t>The format of this Information Element is as follows:</t><t><figure> <artwork><![CDATA[<Provider<sourcecode type="rbnf"><![CDATA[ <Provider Description> ::= [<NAME>][<ContactInformation>][<AS_NUMBER>] ]]></artwork> </figure></t>Information>] [<AS_NUMBER>] ]]></sourcecode> </section> <section anchor="nego"title="Negotiation Options">numbered="true" toc="default"> <name>Negotiation Options</name> <t>The client may include some negotiation options suchas:<?rfc subcompact="yes"?><list style="symbols"> <t>Setup purpose: Aas the following:</t> <dl spacing="normal"> <dt>Setup purpose:</dt><dd>A client may request the setup of a service (e.g., connectivity) only for testing purposes during a limited period. The order can be extended to become permanent if the client was satisfied during the test period. This operation is achieved using the UPDATEmethod.</t> <t>Activation type:method.</dd> <dt>Activation type:</dt><dd> A client may request a permanent or scheduled activation type. If no activation type clause is included during the negotiation, this means that the order will be immediately activated right after the negotiationends.<?rfc subcompact="no"?></t> </list></t>ends.</dd> </dl> <t>The format of this Information Element is as follows:</t><t><figure> <artwork><![CDATA[<Negotiation<sourcecode type="rbnf"><![CDATA[ <Negotiation Options> ::= [<PURPOSE>]]]></artwork> </figure></t>]]></sourcecode> </section> </section> </section> <sectiontitle="Operation Messages">numbered="true" toc="default"> <name>Operation Messages</name> <t>This section defines the RBNF format of CPNP operation messages. The following operation codes are used:<?rfc subcompact="yes" ?></t> <t><list style="format %d:"> <t>QUOTATION (<xref target="provision"></xref>)</t> <t>PROCESSING (<xref target="proc"></xref>)</t> <t>OFFER (<xref target="offer"></xref>)</t> <t>ACCEPT (<xref target="accept"></xref>)</t> <t>DECLINE (<xref target="dec"></xref>)</t> <t>ACK (<xref target="ack"></xref>)</t> <t>CANCEL (<xref target="cancel"></xref>)</t> <t>WITHDRAW (<xref target="with"></xref>)</t> <t>UPDATE (<xref target="upd"></xref>)</t> <t>FAIL (<xref target="fail"></xref>)</t> <t>ACTIVATE (<xref target="activate"></xref>)<?rfc subcompact="no"?></t> </list></t></t> <table align="left"> <name>CPNP Operation Message Codes</name> <thead> <tr> <th>Code</th> <th>Operation Message</th> <th>Reference</th> </tr> </thead> <tbody> <tr> <td>1</td> <td>QUOTATION</td> <td><xref target="provision" format="default"/></td> </tr> <tr> <td>2</td> <td>PROCESSING</td> <td><xref target="proc" format="default"/></td> </tr> <tr> <td>3</td> <td>OFFER</td> <td><xref target="offer" format="default"/></td> </tr> <tr> <td>4</td> <td>ACCEPT</td> <td><xref target="accept" format="default"/></td> </tr> <tr> <td>5</td> <td>DECLINE</td> <td><xref target="dec" format="default"/></td> </tr> <tr> <td>6</td> <td>ACK</td> <td><xref target="ack" format="default"/></td> </tr> <tr> <td>7</td> <td>CANCEL</td> <td><xref target="cancel" format="default"/></td> </tr> <tr> <td>8</td> <td>WITHDRAW</td> <td><xref target="with" format="default"/></td> </tr> <tr> <td>9</td> <td>UPDATE</td> <td><xref target="upd" format="default"/></td> </tr> <tr> <td>10</td> <td>FAIL</td> <td><xref target="fail" format="default"/></td> </tr> <tr> <td>11</td> <td>ACTIVATE</td> <td><xref target="activate" format="default"/></td> </tr> </tbody> </table> <t>These codes are used to unambiguously identify a CPNP operation; the operation code is conveyed in the"METHOD_CODE"METHOD_CODE attribute mentioned in the followingsub-sections.</t>subsections.</t> <t>In the following,"VERSION"VERSION refers to the CPNP version number. This attribute must be set to 1.</t> <section anchor="provision"title="QUOTATION">numbered="true" toc="default"> <name>QUOTATION</name> <t>The format of the QUOTATION message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="23" style="hanging"> <t hangText="<QUOTATION Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t>[<EXPECTED_RESPONSE_TIME>]</t> <t><REQUESTED_CONNECTIVITY_PROVISIONING_DOCUMENT></t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Abelow:</t> <sourcecode type="rbnf"><![CDATA[ <QUOTATION Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> [<EXPECTED_RESPONSE_TIME>] <REQUESTED_CPD> [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>A QUOTATION message must include an order identifierwhichthat is generated by the client(CUSTOMER_AGREEMENT_IDENTIFIER).(CUSTOMER_ORDER_IDENTIFIER). Because several orders can be issued to several servers, the QUOTATION message must also include a Transaction-ID.</t> <t>The message may include anEXPECTED_RESPONSE_TIMEEXPECTED_RESPONSE_TIME, which indicates by when the clientis expectingexpects to receive an offer from the server. The QUOTATION message must also include a requested service description (that is,requested connectivity provisioning documenta Requested CPD for connectivity services).</t> <t>The message may include ACTIVATION_TYPE to request a permanent or scheduled activation type (e.g., using the ACTIVATE method defined in <xreftarget="activate"></xref>).target="activate" format="default"/>). If no such clause is included, the default mode is to assume that the order will be active once theagreedaccepted activation means are successfully invoked (e.g.,Section 3.11 of<xreftarget="RFC7297"></xref>).</t>target="RFC7297" sectionFormat="of" section="3.11"/>).</t> <t>When the client sends the QUOTATION message to the server, the state of the order changes to "PQOSent" at the client side.</t> </section> <section anchor="proc"title="PROCESSING">numbered="true" toc="default"> <name>PROCESSING</name> <t>The format of the PROCESSING message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="25" style="hanging"> <t hangText="<PROCESSING Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t>[<EXPECTED_OFFER_TIME>]</t> <t>[<PROCESSING_SUBCODE>]</t> </list></t> <t><?rfc subcompact="no" ?>Uponbelow:</t> <sourcecode type="rbnf"><![CDATA[ <PROCESSING Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> [<EXPECTED_OFFER_TIME>] [<PROCESSING_SUBCODE>] ]]></sourcecode> <t>Upon receipt of a QUOTATION message, the server proceeds with the parsing rules (see <xreftarget="validation"></xref>).target="validation" format="default"/>). If no error is encountered, the server generates a PROCESSING response to the client to indicate the PQO has been received and it is being processed. The server must generate an order identifierwhichthat identifies the order in its local order repository. The server must copy the content ofCUSTOMER_AGREEMENT_IDENTIFIERthe CUSTOMER_ORDER_IDENTIFIER and TRANSACTION_ID fields as conveyed in the QUOTATION message. The server may include an EXPECTED_OFFER_TIME by when it expects to make an offer to the client.</t> <t>Upon receipt of a PROCESSING message, the client verifies whether it has issued a PQOtothatserver and whichcontains theCUSTOMER_AGREEMENT_IDENTIFIERCUSTOMER_ORDER_IDENTIFIER andTRANSACTION_ID.TRANSACTION_ID to that server. If no such PQO is found, the PROCESSING message must be silently ignored. If a PQO is found, the client may check whether it accepts theEXPECTED_OFFER_TIMEEXPECTED_OFFER_TIME, andthen,then it changes to state of the order to "ServerProcessing".</t> <t>Ifmore time is required bythe server requires more time to process the quotation order, it may send a PROCESSING message that includes a new EXPECTED_OFFER_TIME. The client can answer with an ACK message if more time is granted (<xreftarget="timegranted"></xref>)target="timegranted" format="default"/>) or with a FAIL message if the time extension request is rejected (<xreftarget="timerejected"></xref>).</t>target="timerejected" format="default"/>).</t> <t>The server may provide more details in the PROCESSING_SUBCODE attribute about the reason for requesting more time to process the request. The following codes are defined:</t><t><list style="empty"> <t>(1) Upgrade<table align="left"> <name>PROCESSING_SUBCODE Codes</name> <thead> <tr> <th>Subcode</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td>1</td> <td>Upgrade of localresources</t> <t>(2) Requestresources</td> </tr> <tr> <td>2</td> <td>Request externalresources</t> </list></t> <t><figure align="center" anchor="timegranted" title="Requestresources</td> </tr> </tbody> </table> <figure anchor="timegranted"> <name>Request More Negotiation Time:Granted">Granted</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |=======QUOTATION(Requested CPD)=====>| |<========PROCESSING(time1)===========| ... |<========PROCESSING(MoreTime)========| |============ACK(TimeGranted)========>| ... |<=========OFFER(Offered CPD)=========| |=============PROCESSING=============>||==========ACCEPT(Agreed CPD)========>| |<==========ACK(Agreed CPD)===========||=========ACCEPT(Accepted CPD)=======>| |<=========ACK(Accepted CPD)==========| | | ]]></artwork></figure></t> <t><figure align="center" anchor="timerejected" title="Request</figure> <figure anchor="timerejected"> <name>Request More Negotiation Time:Rejected">Rejected</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |=======QUOTATION(Requested CPD)=====>| |<========PROCESSING(time1)===========| ... |<========PROCESSING(MoreTime)========| |=====FAIL(More Time Rejected)=======>| ]]></artwork></figure></t></figure> </section> <section anchor="offer"title="OFFER">numbered="true" toc="default"> <name>OFFER</name> <t>The format of the OFFER message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="20" style="hanging"> <t hangText="<OFFER Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t><VALIDITY_OFFER_TIME></t> <t><OFFERED_CONNECTIVITY_PROVISIONING_DOCUMENT></t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thebelow:</t> <sourcecode type="rbnf"><![CDATA[ <OFFER Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> <VALIDITY_OFFER_TIME> <OFFERED_CPD> [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>The server answerswith an OFFER message toa QUOTATION request received from theclient.client with an OFFER message. The offer will be consideredasto be rejected by the client if no confirmation(ACCEPT(i.e., an ACCEPT message sent by the client) is received by the server before the expiration of the validity time.</t> <t>The server may include ACTIVATION_TYPE to indicate whether the offer is about a permanent or scheduled activation type. The message may include ACTIVATION_SCHEDULE to indicate when the order is to be activated. If no such clause is included, the default mode is to assume that the order will be active once theagreedaccepted activation means are successfully invoked (e.g.,Section 3.11 of<xreftarget="RFC7297"></xref>target="RFC7297" sectionFormat="of" section="3.11"/> or <xreftarget="activate"></xref>).</t>target="activate" format="default"/>).</t> </section> <section anchor="accept"title="ACCEPT">numbered="true" toc="default"> <name>ACCEPT</name> <t>The format of the ACCEPT message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="22" style="hanging"> <t hangText="<ACCEPT Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t><AGREED_CONNECTIVITY_PROVISIONING_DOCUMENT></t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <ACCEPT Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> <ACCEPTED_CPD> [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>This message is used by a client to confirm the acceptance of an offer received from a server. The fields of this message must be copied from the received OFFER message. This message should not be sent after the validity time of the offer expires, as indicated by the server (<xreftarget="offer"></xref>).</t>target="offer" format="default"/>).</t> </section> <section anchor="dec"title="DECLINE">numbered="true" toc="default"> <name>DECLINE</name> <t>The format of the DECLINE message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="21" style="hanging"> <t hangText="<DECLINE Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t>[<REASON>...]</t> </list><?rfc subcompact="no" ?>Thebelow:</t> <sourcecode type="rbnf"><![CDATA[ <DECLINE Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> [<REASON>...] ]]></sourcecode> <t>The client may issue a DECLINE message to reject an offer.CUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, TRANSACTION_ID, and NONCE are used by the server as keys to find the corresponding order. If an order matches, the server changes the state of this order to "Cancelled" and then returns an ACK with a copy of therequestedRequested CPD to the requesting client.</t> <t>A DECLINE message may include aninformation elementInformation Element to indicate the reason for declining an offer. The following codes are defined:<list style="empty"> <t>1 (Unacceptable</t> <table align="left"> <name>DECLINE Message Codes</name> <thead> <tr> <th>Code</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td>1</td> <td>Unacceptable gap between the request and theoffer)</t> <t>2 (Conflictoffer</td> </tr> <tr> <td>2</td> <td>Conflict with another offer from anotherserver)</t> <t>3 (Activationserver</td> </tr> <tr> <td>3</td> <td>Activation typemismatch)</t> </list></t>mismatch</td> </tr> </tbody> </table> <t>If no order is found, the server returns a FAIL message to the requesting client. In order to prevent DDoS (Distributed Denial of Service) attacks, the server should restrict the number of FAIL messages sent to a requesting client. It may also rate-limit FAIL messages.</t> <t>A flow example is shown in <xreftarget="decline"></xref>.</t> <t><figure align="center" anchor="decline" title="DECLINEtarget="decline" format="default"/>.</t> <figure anchor="decline"> <name>DECLINE FlowExample">Example</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[+------+ +------+ |Client| |Server| +------+ +------+ |=======QUOTATION(Requested CPD)=====>| |<============PROCESSING==============| |<=========OFFER(Offered CPD)=========| |=============PROCESSING=============>| |===============DECLINE==============>| |<================ACK=================| | | ]]></artwork></figure></t> <t></t></figure> </section> <section anchor="ack"title="ACK">numbered="true" toc="default"> <name>ACK</name> <t>The format of the ACK message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="17" style="hanging"> <t hangText="<ACK Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t>[<EXPECTED_RESPONSE_TIME>]</t> <t>[<CONNECTIVITY_PROVISIONING_DOCUMENT>]</t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <ACK Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> [<EXPECTED_RESPONSE_TIME>] [<CPD>] [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>This message is issued by the server to close a CPNP transaction or by a client to grant more negotiation time to the server.</t> <t>This message is sent by the server as a response to an ACCEPT, WITHDRAW, DECLINE, or CANCEL message. In this case, the ACK message must include the copy of the service descriptiondocument(i.e., CPD for connectivity services) as stored by the server. In particular, the following considerations are taken into account for connectivity provisioningservices:<?rfc subcompact="yes"?><list style="symbols"> <t>Aservices:</t> <ul spacing="normal"> <li>A copy of therequested/offeredRequested/Offered CPD is included by the server if it successfully handled a CANCELmessage.</t> <t>Amessage.</li> <li>A copy of theupdatedUpdated CPD is included by the server if it successfully handled an UPDATEmessage.</t> <t>Amessage.</li> <li>A copy of theofferedOffered CPD is included by the server if it successfully handled an ACCEPT message in the context of a QUOTATION transaction (refer to"Agreed"Accepted CPD" in <xreftarget="cpd"></xref>).</t> <t>An emptytarget="cpd" format="default"/>).</li> <li>An Empty CPD is included by the server if it successfully handled a DECLINE or WITHDRAWmessage.<?rfc subcompact="no"?></t> </list></t>message.</li> </ul> <t>A client may issue an ACK message as a response to a time extension request (conveyed in PROCESSING) received from the server. In such case, the ACK message must include an EXPECTED_RESPONSE_TIME that is likely to be set to the time extension requested by the server.</t> </section> <section anchor="cancel"title="CANCEL">numbered="true" toc="default"> <name>CANCEL</name> <t>The format of the CANCEL message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="21" style="hanging"> <t hangText="<CANCEL Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t>[<CONNECTIVITY_PROVISIONING_DOCUMENT>]</t> </list><?rfc subcompact="no" ?>Thebelow:</t> <sourcecode type="rbnf"><![CDATA[ <CANCEL Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> [<CPD>] ]]></sourcecode> <t>The client can issue a CANCEL message at any stage during the CPNP negotiation process before an agreement is reached.CUSTOMER_AGREEMENT_IDENTIFIERThe CUSTOMER_ORDER_IDENTIFIER and TRANSACTION_ID are used by the server as keys to find the corresponding order. If a quotation order matches, the server changes the state of this quotation order to "Cancelled" and then returns an ACK with a copy of therequestedRequested CPD to the requesting client.</t> <t>If no quotation order is found, the server returns a FAIL message to the requesting client.</t> </section> <section anchor="with"title="WITHDRAW">numbered="true" toc="default"> <name>WITHDRAW</name> <t>The format of the WITHDRAW message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="23" style="hanging"> <t hangText="<WITHDRAW Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t>[<AGREED_CONNECTIVITY_PROVISIONING_DOCUMENT>]</t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <WITHDRAW Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> [<ACCEPTED_CPD>] [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>This message is used to withdraw an offer already accepted by the Customer. <xreftarget="withdraw"></xref>target="withdraw" format="default"/> shows a typical usage of this message.</t><t><figure align="center" anchor="withdraw" title="WITHDRAW<figure anchor="withdraw"> <name>WITHDRAW FlowExample">Example</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |============WITHDRAW(CPD)===========>| |<============PROCESSING==============| |<===========ACK(Empty CPD)===========| | | ]]></artwork></figure></t></figure> <t>The WITHDRAW message must include the sameCUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE as those used when creating the order.</t> <t>Upon receipt of a WITHDRAW message, the server checks whether an order matching the request is found. If an order is found, the state of the order is changed to"Cancelled""Cancelled", and an ACK message including an Empty CPD is returned to the requesting client. If no order is found, the server returns a FAIL message to the requesting client.</t> </section> <section anchor="upd"title="UPDATE">numbered="true" toc="default"> <name>UPDATE</name> <t>The format of the UPDATE message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="21" style="hanging"> <t hangText="<UPDATE Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t><EXPECTED_RESPONSE_TIME></t> <t><REQUESTED_CONNECTIVITY_PROVISIONING_DOCUMENT></t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <UPDATE Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> <EXPECTED_RESPONSE_TIME> <REQUESTED_CPD> [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>This message is sent by the CPNP client to update an existing service agreement (e.g.,connectivity provisioning agreement).Accepted CPD). The UPDATE message must include the sameCUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE as those used when creating the order. The CPNP client includes a new service description (e.g.,updatedUpdated CPD)whichthat integrates the requested modifications. A new Transaction_ID must be assigned by the client.</t> <t>Upon receipt of an UPDATE message, the server checks whether an order, having state "Completed", matchesCUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE.<?rfc subcompact="yes"?><list style="symbols"> <t>If</t> <ul spacing="normal"> <li>If no order is found, the CPNP server generates a FAIL error with the appropriate error code (<xreftarget="fail"></xref>).</t>target="fail" format="default"/>).</li> <li> <t>If an order is found, the server checks whether it can honor therequest:<list style="symbols"> <t>Arequest:</t> <ul spacing="normal"> <li>A FAIL message is sent to the client if the server cannot honor the request. The client may initiate a new PQO negotiation cycle (that is, send a newUPDATE).</t>UPDATE message).</li> <li> <t>An OFFER message including the updated clauses (e.g.,updated connectivity provisioning document)Updated CPD) is sent to the client. For example, the server maintains an order for provisioning a VPN service that connects sites A, B, and C. If the client sends an UPDATE message to remove site C, only sites A and B will be included in the OFFER sent by the server to the requestingclient.<vspace blankLines="1" />Noteclient.</t> <t>Note that the cycle that is triggered by an UPDATE message is also consideredasto be a negotiationcycle.<?rfc subcompact="no"?></t> </list></t> </list></t>cycle.</t> </li> </ul> </li> </ul> <t>A flow chart that illustrates the use of UPDATE operation is shown in <xreftarget="update"></xref>.<figure align="center" anchor="update" title="UPDATEtarget="update" format="default"/>.</t> <figure anchor="update"> <name>UPDATE FlowExample">Example</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |=========UPDATE(Requested CPD)======>| |<============PROCESSING==============| |<=========OFFER(Updated CPD)=========| |=============PROCESSING=============>| |==========ACCEPT(Updated CPD)=======>| |<==========ACK(Updated CPD)==========| | | ]]></artwork></figure></t> <t></t></figure> </section> <section anchor="fail"title="FAIL">numbered="true" toc="default"> <name>FAIL</name> <t>The format of the FAIL message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="19" style="hanging"> <t hangText="<FAIL Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><STATUS_CODE></t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <FAIL Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <STATUS_CODE> ]]></sourcecode> <t>This message is sent in the followingcases:<?rfc subcompact="yes"?><list style="symbols"> <t>Thecases:</t> <ul spacing="normal"> <li>The server cannot honor an order received from the client (i.e., received in a QUOTATION or UPDATErequest).</t> <t>Therequest).</li> <li>The server encounters an error when processing a CPNP request received from theclient.</t> <t>Theclient.</li> <li>The client cannot grant more time to the server. This is a response to a time extension request carried in a PROCESSINGmessage.</t> </list></t>message.</li> </ul> <t>The status code indicates the error code. The following codes aresupported:<list hangIndent="5" style="hanging"> <t hangText="1 (Messagesupported:</t> <table> <name>FAIL Message Error Codes</name> <thead> <tr> <th>Status Code</th> <th>Error Code</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td>1</td> <td>Message ValidationError): "><vspace blankLines="0" />TheError</td> <td>The message cannot be validated (see <xreftarget="validation"></xref>).</t> <t hangText="2 (Authentication Required):"><vspace blankLines="0" />Thetarget="validation" format="default"/>).</td> </tr> <tr> <td>2</td> <td>Authentication Required</td> <td>The request cannot be handled because authentication isrequired.</t> <t hangText="3 (Authorization Failed): "><vspace blankLines="0" />Therequired.</td> </tr> <tr> <td>3</td> <td>Authorization Failed</td> <td>The request cannot be handled because authorizationfailed.</t> <t hangText="4 (Administratively prohibited): "><vspace blankLines="0" />Thefailed.</td> </tr> <tr> <td>4</td> <td>Administratively prohibited</td> <td>The request cannot be handled because of administrativepolicies.</t> <t hangText="5 (Out of Resources): "><vspace blankLines="0" />Thepolicies.</td> </tr> <tr> <td>5</td> <td>Out of Resources</td> <td>The request cannot be honored because resources (e.g., capacity) areinsufficient.</t> <t hangText="6 (Networkinsufficient.</td> </tr> <tr> <td>6</td> <td>Network PresenceError): "><vspace blankLines="0" />TheError</td> <td>The request cannot be honored because there is no networkpresence.</t> <t hangText="7 (Morepresence.</td> </tr> <tr> <td>7</td> <td>More TimeRejected):"><vspace blankLines="0" />TheRejected</td> <td>The request to extend the time for negotiation is rejected by theclient.</t> <t hangText="8 (Unsupportedclient.</td> </tr> <tr> <td>8</td> <td>Unsupported ActivationType):"><vspace blankLines="0" />TheType</td> <td>The request cannot be handled because the requested activation type is notsupported.</t> </list></t> <t><?rfc subcompact="no"?></t>supported.</td> </tr> </tbody> </table> </section> <section anchor="activate"title="ACTIVATE">numbered="true" toc="default"> <name>ACTIVATE</name> <t>The format of the ACTIVATE message is shownbelow:<?rfc subcompact="yes" ?></t> <t><list hangIndent="21" style="hanging"> <t hangText="<ACTIVATE Message> ::="><VERSION></t> <t><METHOD_CODE></t> <t><SEQUENCE_NUMBER></t> <t><TRANSACTION_ID></t> <t><CUSTOMER_AGREEMENT_IDENTIFIER></t> <t><PROVIDER_AGREEMENT_IDENTIFIER></t> <t><NONCE></t> <t><ACTIVATION_SCHEDULE></t> <t>[<INFORMATION_ELEMENT>...]</t> </list></t> <t><?rfc subcompact="no" ?>Thisbelow:</t> <sourcecode type="rbnf"><![CDATA[ <ACTIVATE Message> ::= <VERSION> <METHOD_CODE> <SEQUENCE_NUMBER> <TRANSACTION_ID> <CUSTOMER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER> <NONCE> <ACTIVATION_SCHEDULE> [<INFORMATION_ELEMENT>...] ]]></sourcecode> <t>This message is sent by the CPNP client to request the activation of an existing service agreement. The message must include the sameCUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE as those used when creating the order. The CPNP client mayincludesinclude a schedule target for activating this order. A new Transaction_ID must be assigned by the client.</t> <t>Upon receipt of an ACTIVATE message, the server checks whether an order, having state "Completed", matchesCUSTOMER_AGREEMENT_IDENTIFIER, PROVIDER_AGREEMENT_IDENTIFIER,CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE.<?rfc subcompact="yes"?><list style="symbols"> <t>If</t> <ul spacing="normal"> <li>If no completed order is found, the CPNP server generates a FAIL error with the appropriate error code (<xreftarget="fail"></xref>).</t>target="fail" format="default"/>).</li> <li> <t>If an order is found, the server checks whether it can honor therequest:<list style="symbols"> <t>Arequest:</t> <ul spacing="normal"> <li>A FAIL message is sent to the client if the server cannot honor the request (e.g., out of resources or explicit activation wasn't negotiated with thisclient).</t> <t>Anclient).</li> <li>An ACK is sent to the client to confirm that the immediate activation (orde-activation)deactivation) of the order or its successful scheduling if a non-null ACTIVATION_SCHEDULE was included in the request. Note that setting ACTIVATION_SCHEDULE to 0 in an ACTIVATE request has a special meaning: it is used to request ade-activationdeactivation of anagreedaccepted order.<?rfc subcompact="no"?></t> </list></t> </list></t></li> </ul> </li> </ul> <t><xreftarget="activateex"></xref>target="activateex" format="default"/> illustrates the use of the ACTIVATEoperation.<figure align="center" anchor="activateex" title="ACTIVATEoperation.</t> <figure anchor="activateex"> <name>ACTIVATE FlowExample">Example</name> <artworkalign="center"><![CDATA[+------+align="center" name="" type="" alt=""><![CDATA[ +------+ +------+ |Client| |Server| +------+ +------+ |================ACTIVATE()==========>| |<==============ACK()=================| | | ]]></artwork></figure></t> <t></t></figure> </section> </section> </section> <section anchor="validation"title="CPNPnumbered="true" toc="default"> <name>CPNP MessageValidation">Validation</name> <t>Both the client and the server proceed with CPNP message validation. The following tables summarize the validation checks to be followed.</t> <sectiontitle="Onnumbered="true" toc="default"> <name>On the ClientSide"> <t></t> <texttable align="left" style="headers"> <ttcol align="left">Operation</ttcol> <ttcolSide</name> <table align="left"> <name>Client Side Validation Checks</name> <thead> <tr> <th align="left">Operation</th> <th align="left">ValidationChecks</ttcol> <c>PROCESSING</c> <c>{SourceChecks</th> </tr> </thead> <tbody> <tr> <td align="left">PROCESSING</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier} must match an existing PQO with a state set to "PQOSent". The sequence number carried in the packet must be larger than the sequence number maintained by theclient.</c> <c>OFFER</c> <c>{Sourceclient.</td> </tr> <tr> <td align="left">OFFER</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier} must match an existing order with state set to"PQOSent""PQOSent", or {Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier} must match an existing order with a state set to "ServerProcessing". The sequence number carried in the packet must be larger than the sequence number maintained by theclient.</c> <c>ACKclient.</td> </tr> <tr> <td align="left">ACK (QUOTATIONTransaction)</c> <c>{SourceTransaction)</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier, Offered Connectivity ProvisioningOrder}Document} must match an order with a state set to "AcceptSent". The sequence number carried in the packet must be larger than the sequence number maintained by theclient.</c> <c>ACKclient.</td> </tr> <tr> <td align="left">ACK (UPDATETransaction)</c> <c>{SourceTransaction)</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier, Updated Connectivity ProvisioningOrder}Document} must match an order with a state set to "AcceptSent". The sequence number carried in the packet must be larger than the sequence number maintained by theclient.</c> <c>ACKclient.</td> </tr> <tr> <td align="left">ACK (WITHDRAWTransaction)</c> <c>{SourceTransaction)</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier, Empty Connectivity ProvisioningOrder}Document} must match an order with a state set to "Cancelled". The sequence number carried in the packet must be larger than the sequence number maintained by theclient.</c> </texttable> <t></t>client.</td> </tr> </tbody> </table> </section> <sectiontitle="Onnumbered="true" toc="default"> <name>On the ServerSide"> <t></t> <texttable align="left" style="headers"> <ttcol>Method</ttcol> <ttcolSide</name> <table align="left"> <name>Server Side Validation Checks</name> <thead> <tr> <th align="left">Method</th> <th align="left">ValidationChecks</ttcol> <c>QUOTATION</c> <c>TheChecks</th> </tr> </thead> <tbody> <tr> <td align="left">QUOTATION</td> <td align="left">The source IP address passes existing access filters (if any). The sequence number carried in the packet must not be lower than the sequence number maintained by theserver.</c> <c>PROCESSING</c> <c>Theserver.</td> </tr> <tr> <td align="left">PROCESSING</td> <td align="left">The sequence number carried in the packet must be greater than the sequence number maintained by theserver.</c> <c>CANCEL</c> <c>{Sourceserver.</td> </tr> <tr> <td align="left">CANCEL</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier} must match an order with state set to "PQOReceived" or "OfferProposed" or "ProcessingReceived" or"AcceptReceived "."AcceptReceived". The sequence number carried in the packet must be greater than the sequence number maintained by theserver.</c> <c>ACCEPT</c> <c>{Sourceserver.</td> </tr> <tr> <td align="left">ACCEPT</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier, Nonce, Offered Connectivity ProvisioningOrder}Document} must match an order with state set to "OfferProposed" or "ProcessingReceived". The sequence number carried in the packet must be greater than the sequence number maintained by theserver.</c> <c>FAIL</c> <c>{Sourceserver.</td> </tr> <tr> <td align="left">FAIL</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier} must match an order with state set to "AwaitingProcessing" and for which a request to grant more time to process an offer was requested. The sequence number carried in the packet must be greater than the sequence number maintained by theserver.</c> <c>DECLINE</c> <c>{Sourceserver.</td> </tr> <tr> <td align="left">DECLINE</td> <td align="left">{Source IP address, source port number, destination IP address, destination port number, Transaction-ID, Customer Order Identifier, Provider Order Identifier, Nonce} must match an order with state set to "OfferProposed" or "ProcessingReceived". The sequence number carried in the packet must be greater than the sequence number maintained by theserver.</c> <c>UPDATE</c> <c>Theserver.</td> </tr> <tr> <td align="left">UPDATE</td> <td align="left">The source IP address passes existing access filters (ifany)any), and {Customer Order Identifier, Provider Order Identifier, Nonce} must match an existing order with state"Completed".</c> <c>WITHDRAW</c> <c>The"Completed".</td> </tr> <tr> <td align="left">WITHDRAW</td> <td align="left">The source IP address passes existing access filters (ifany)any), and {Customer Order Identifier, Provider Order Identifier, Nonce} must match an existing order with state"Completed".</c> <c>ACTIVATE</c> <c>The"Completed".</td> </tr> <tr> <td align="left">ACTIVATE</td> <td align="left">The source IP address passes existing access filters (ifany)any), and {Customer Order Identifier, Provider Order Identifier, Nonce} must match an existing order with a state of "Completed"for which theand its activation procedureis taggedset tobe explicit.</c> </texttable> <t></t>explicit.</td> </tr> </tbody> </table> </section> </section> <section anchor="behavior"title="Theorynumbered="true" toc="default"> <name>Theory ofOperation">Operation</name> <t>Both the CPNP client and server proceed with message validation checks as specified in <xreftarget="validation"></xref>.</t>target="validation" format="default"/>.</t> <sectiontitle="Client Behavior"> <t></t>numbered="true" toc="default"> <name>Client Behavior</name> <section anchor="creation"title="Ordernumbered="true" toc="default"> <name>Order NegotiationCycle">Cycle</name> <t>To place aprovisioning quotation order,PQO, the client first initiates a local quotation order object identified by a unique identifier assigned by the client (Client Order Identifier). The state of the quotation order is set to "Created". The client then generates a QUOTATION requestwhichthat includes the assigned identifier, possibly an expected response time, a Transaction-ID, and aRequested Servicerequested service (e.g., RequestedConnectivity Provisioning Document).CPD). The client may include additional Information Elements such asNegotiation OptionsCustomer Description orActivation Type.</t>Negotiation Options.</t> <t>The client may be configured to not enforce negotiation checks on EXPECTED_OFFER_TIME; if so,nothe client should either not include the EXPECTED_RESPONSE_TIME attribute(or EXPECTED_RESPONSE_TIME set to infinite) should be includedin thequotation order.</t>PQO or it should set the attribute to infinite. </t> <t>Once the request is sent to the server, the state of the request is set to"PQOSent""PQOSent", anda timer,if a response time is included in the quotation order, a timer is set to the expiration time as included in the QUOTATION request. The client also maintains a copy of the CPNP session entry details used to generate the QUOTATION request. The CPNP client must listen on the same port number that it used to send the QUOTATION request.</t> <t>If no answer is received from the server before the retransmission timer expires (i.e., RETRANS_TIMER, <xreftarget="timers"></xref>),target="timers" format="default"/>), the client retransmits the message until maximum retry is reached (e.g.,3three times). The same sequence number is used for retransmitted packets.</t> <t>If a FAIL message is received, the client may decide to issue another (corrected) request towards the same server, cancel the local order, or contact another server. The behavior of the client depends on the error code returned by the server in the FAIL message.</t> <t>If a PROCESSING message matching the CPNP session entry (<xreftarget="session"></xref>)target="session" format="default"/>) is received, the client updates the CPNP session entry with thePROVIDER_AGREEMENT_IDENTIFIERPROVIDER_ORDER_IDENTIFIER information. If the client does not accept the expected offer time that may have been indicated in the PROCESSING message, the client may decide to cancel the quotation order. If the client accepts the EXPECTED_OFFER_TIME, it changes the state of the order to "ServerProcessing" and sets a timer to the value of EXPECTED_OFFER_TIME. If no offer is made before the timer expires, the client changes the state of the order to "Cancelled".</t> <t>As a response to a time extension request (conveyed in a PROCESSING message that included a new EXPECTED_OFFER_TIME), the client may either grant this extension by issuing an ACK message or reject the time extensionwithby issuing a FAIL messagehavingwith a status code set to "More Time Rejected".</t> <t>If an OFFER message matching the CPNP session entry is received, the client checks if a PROCESSING message having the samePROVIDER_AGREEMENT_IDENTIFIERPROVIDER_ORDER_IDENTIFIER has been received from the server. If a PROCESSING message was already received for the sameorderorder, but thePROVIDER_AGREEMENT_IDENTIFIERPROVIDER_ORDER_IDENTIFIER does not match the identifier included in the OFFER message, the client silently ignores the message. If a PROCESSING messagehavingwith the samePROVIDER_AGREEMENT_IDENTIFIERPROVIDER_ORDER_IDENTIFIER was already received and matches the CPNP transaction identifier, the client changes the state of the order to "OfferReceived" and sets a timer to the value of VALIDITY_OFFER_TIME indicated in the OFFER message.</t> <t>If an offer is received from the server (i.e., as documented in an OFFER message), the client may accept or reject the offer. The client accepts the offer by generating an ACCEPT messagewhichthat confirms that the client agrees to subscribe to the offer documented in the OFFER message; the state of the order is passed to "AcceptSent". The transaction is terminated if an ACK message is received from the server. If no ACK is received from the server, the client proceeds with the retransmission of the ACCEPT message until the maximum retry is reached (<xreftarget="retrans"></xref>).</t>target="retrans" format="default"/>).</t> <t>The client may also decide to reject the offer by sending a DECLINE message. The state of the order is set by the client to "Cancelled". If an offer is not acceptablebyto the client, the client may decide to contact a new server or submit another order to the same server. Guidelines to issue an updated order or terminate the negotiation are specific to the client.</t> <t>An order can be activated (orde-activated)deactivated) using the ACTIVATE message or otheragreedaccepted activation means(Section 3.11 of <xref target="RFC7297"></xref>).</t>(<xref target="RFC7297" sectionFormat="of" section="3.11"/>).</t> </section> <section anchor="corw"title="Ordernumbered="true" toc="default"> <name>Order WithdrawalCycle">Cycle</name> <t>A client may withdraw a completed order. This is achieved by issuing a WITHDRAW message. This message must include the Customer Order Identifier, Provider Order Identifier, and Nonce returned during the order negotiation cycle, as specified in <xreftarget="creation"></xref>.</t>target="creation" format="default"/>.</t> <t>If no ACK is received from the server, the client proceeds with the retransmission of the message. If no ACK is received after the maximum retry is exhausted, the client should log the information and must send an alarm to the administrator. If there is no specific instruction from the administrator, the client should schedule another Withdrawal cycle. The client must not retry this Withdrawal cycle more frequently than every 300 seconds and must not retry more frequently than every 60 seconds.</t> </section> <section anchor="cordu"title="Ordernumbered="true" toc="default"> <name>Order UpdateCycle">Cycle</name> <t>A client may update a completed order. This is achieved by issuing an UPDATE message. This message must include the Customer Order Identifier, Provider OrderIdentifierIdentifier, and Nonce returned during the order negotiation cycle specified in <xreftarget="creation"></xref>.target="creation" format="default"/>. The client must include in the UPDATE message anupdatedUpdated CPD with the requested changes.</t><t>Subsequent messages<t>The subsequent message exchange is similar to what is documented in <xreftarget="creation"></xref>.</t>target="creation" format="default"/>.</t> </section> </section> <sectiontitle="Server Behavior"> <t></t>numbered="true" toc="default"> <name>Server Behavior</name> <section anchor="handling"title="Order Processing">numbered="true" toc="default"> <name>Order Processing</name> <t>Upon receipt of a QUOTATION message from a client, the server sets a CPNP session, storesTransaction-IDthe Transaction-ID, and generates a Provider Order Identifier. Once preliminary validation checks are completed( <xref target="validation"></xref>),(<xref target="validation" format="default"/>), the server may return a PROCESSING message to inform the client that the quotation order is received and it is under processing; the server may include an expected offer time to notify the client by when an offer will be proposed. An order with state "AwaitingProcessing" is created by the server. The server runs its decision-making process to decide which offer it can make to honor the received order. The offer should be made before the expected offer time expires.</t> <t>If the server cannot make an offer, it sends backs a FAIL message with the appropriate errorcode.</t>code (<xref target="fail" format="default"/>).</t> <t>If the server requires more negotiation time, it must send a PROCESSING message with a new EXPECTED_OFFER_TIME. The client may grant this extension by issuing an ACK message or reject the time extensionwithby issuing a FAIL messagehaving awith the status code set to "More Time Rejected". If the client doesn't grant more time, the server must answer before the initial expected offer time;otherwiseotherwise, the client will decline the quotation order.</t> <t>If the server can honor therequestrequest, or if it can make an offer that meets only some of the requirements, it creates an OFFER message. The server must indicate the Transaction-ID, the Customer Order Identifier as indicated in the QUOTATION message, and the Provider Order Identifier generated for this order. The server must also include the Nonce and the offered service document (e.g.,offered Connectivity Provisioning Document).Offered CPD). The server includes an offer validity time as well. Once sent to the client, the server changes the state of the order to"OfferProposed""OfferProposed", and a timer set to the validity time is initiated.</t> <t>If the server determines that additional network resources from anothernetwork providerNetwork Provider are needed to accommodate a quotation order, it will create child PQO(s) and will behave as a CPNP client to negotiate child PQO(s) with possible partneringprovidersProviders (see <xreftarget="child"></xref>).</t>target="child" format="default"/>).</t> <t>If no PROCESSING, ACCEPT, or DECLINE message is received before the expiry of the RETRANS_TIMER, the serverre-sendsresends the same offer to the client. This procedure is repeated until maximum retry is reached.</t> <t>If an ACCEPT message is received before the offered validity time expires, the server proceeds with validation checks as specified in <xreftarget="validation"></xref>.target="validation" format="default"/>. The state of the corresponding order is passed to "AcceptReceived". The server sends back an ACK message to terminate the order processing cycle.</t> <t>If aCANCEL/DECLINECANCEL or a DECLINE message is received, the server proceeds with the cancellation of the order. The state of the order is then passed to "Cancelled".</t> </section> <section anchor="sordw"title="Order Withdrawal">numbered="true" toc="default"> <name>Order Withdrawal</name> <t>A client may withdraw a completed order by issuing a WITHDRAW message. Upon receipt of a WITHDRAW message, the server proceeds with the validation checks, as specified in <xreftarget="validation"></xref>:<list style="symbols"> <t>Iftarget="validation" format="default"/>:</t> <ul spacing="normal"> <li>If the checks fail, a FAIL message is sent back to the client with the appropriate error code (e.g., 1 (Message Validation Error), 2 (Authentication Required), or 3 (AuthorizationFailed)).</t> <t>IfFailed)).</li> <li>If the checks succeed, the server clears the clauses of theConnectivity Provisioning Document,CPD, changes the state of the order to "Cancelled", and sends back an ACK message with an EmptyConnectivity Provisioning Document.</t> </list></t>CPD.</li> </ul> </section> <section anchor="sordu"title="Order Update">numbered="true" toc="default"> <name>Order Update</name> <t>A client may update an order by issuing an UPDATE message. Upon receipt of an UPDATE message, the server proceeds with the validation checks as specified in <xreftarget="validation"></xref>:<?rfc subcompact="yes"?><list style="symbols"> <t>Iftarget="validation" format="default"/>:</t> <ul spacing="normal"> <li>If the checks fail, a FAIL message is sent back to the client with the appropriate error code (e.g., 1 (Message Validation Error), 2 (Authentication Required), 3 (Authorization Failed), or 6 (Network PresenceError)).</t> <t>TheError)).</li> <li>The exchange of subsequent messages is similar to what is specified in <xreftarget="creation"></xref>.target="creation" format="default"/>. The server should generate a new Nonce value to be included in the offer made to theclient.<?rfc subcompact="no"?></t> </list></t>client.</li> </ul> </section> </section> <section anchor="sq_nu"title="Sequence Numbers">numbered="true" toc="default"> <name>Sequence Numbers</name> <t>In each transaction, sequence numbers are used to protect the transaction against replay attacks. Each communicating partner of the transaction maintains two sequence numbers, one for incoming packets and one for outgoing packets. When a partner receives a message, it will check whether the sequence number in the message is larger than the incoming sequence number maintained locally. If not, the message will be discarded. If the message is proved to be legitimate, the value of the incoming sequence number maintained locally will be replaced by the value of the sequence number in the message. When a partner sends out a message, it will insert the value of the outgoing sequence number into the message and increase the outgoing sequence number maintained locally by 1.</t> </section> <section anchor="retrans"title="Message Re-Transmission">numbered="true" toc="default"> <name>Message Retransmission</name> <t>If a transaction partner sends out a message and does not receive any expected reply before the retransmission timer expires (i.e., RETRANS_TIMER), a transaction partner will try tore-transmitretransmit the message. The procedure is reiterated until a maximum retry is reached (e.g.,3three times). An exception is the last message (e.g., ACK) sent from the server in a transaction. After sending this message, the retransmission timer will be disabled since no additional feedback is expected.</t> <t>In addition, if the partner receives a retransmission ofathe last incoming packet it handled, the partner canre-sendresend the same answer to the incoming packet with a limited frequency. Ifnoan answerwascannot be generatedatright after themoment,request is received, the partner needs to generate a PROCESSING message as the answer.</t> <t>To optimize message retransmission, a partner could also store the last incoming packet and the associated answer. Note that the times of retransmission could be decided by the localpolicypolicy, and retransmission will not cause any change of sequence numbers.</t> </section> </section> <section anchor="og"title="Somenumbered="true" toc="default"> <name>Some OperationalGuidelines"> <t></t>Guidelines</name> <sectiontitle="Logging on the CPNPnumbered="true" toc="default"> <name>CPNP Server">Logging</name> <t>The CPNP server should be configurable to log various events and associated information. Such information mayinclude:<?rfc subcompact="yes"?></t> <t><list style="symbols"> <t>Client'sinclude the following:</t> <ul spacing="normal"> <li>Client's IPaddress</t> <t>Anyaddress</li> <li>Any event change (e.g., new quotation order, offer sent, orderconfirm,confirmation, order cancellation, orderwithdraw, etc.)</t> <t>Timestamp<?rfc subcompact="no"?></t> </list>Thewithdrawal, etc.)</li> <li>Timestamp</li> </ul> <t>The exact logging details aredeployment-specific.</t>deployment specific.</t> </section> <sectiontitle="Businessnumbered="true" toc="default"> <name>Business Guidelines andObjectives">Objectives</name> <t>The CPNP server can operate in the following modes:<list style="numbers"> <t>Fully</t> <dl spacing="normal" newline="true"> <dt>Fully automated mode:<vspace blankLines="1" />The</dt> <dd>The CPNP server is provisioned with a set of business guidelines and objectives that will be used as an input to the decision-making process. The CPNP server will service received orders that fall into these business guidelines; otherwise, requests will be escalated to an administrator that will formallyvalidate/invalidatevalidate or invalidate an order request. The set of policies to be configured to the CPNP server are specific to each administrative entity managing a CPNPserver.</t> <t>Administrative-basedserver.</dd> <dt>Administrative-based mode:<vspace blankLines="1" />This</dt> <dd>This mode assumes some or all of the CPNPserver'server's operations are subject to a formal administrative validation. CPNP events will trigger appropriate validation requests that will be forwarded to the contact person(s) or departmentwhichthat is responsible for validating the orders. Administrative validation messages are relayed using another protocol (e.g., SMTP) or a dedicatedtool.</t> </list>Businesstool.</dd> </dl> <t>Business guidelines are local to each administrative entity. How validation requests are presented to an administrator are out of scope of this document; each administrative entity may decide the appropriate mechanism to enable for that purpose.</t> </section> </section> <section anchor="Security"title="Security Considerations">numbered="true" toc="default"> <name>Security Considerations</name> <t>Means to defend the server against denial-of-service attacks must be enabled. For example, access control lists can be enforced on the client, theserverserver, or the network inbetween,between to allow a trusted client to communicate with a trusted server.</t> <t>The client and the server must be mutually authenticated. Authenticated encryption must be used for data confidentiality and message integrity.</t> <t>The protocol does not provide security mechanisms to protect the confidentiality and integrity of the packets transported between the client and the server. An underlying security protocol such as (e.g., Datagram Transport Layer Security (DTLS) <xreftarget="RFC6347"></xref>,target="RFC6347" format="default"/>, Transport Layer Security (TLS) <xreftarget="RFC8446"></xref>)target="RFC8446" format="default"/>) must be used to protect the integrity and confidentiality of protocol messages. In this case, if it is possible to providean Automated Key Managementautomated key management (<xref target="RFC4107" section="2.1" sectionFormat="of" format="default"/>) and associate each transaction with a different key, inter-transaction replay attacks can naturally be addressed. If the client and the server use a single key, an additional mechanism should be provided to protect against inter-transaction replay attacks between them. Clients must implement DTLS record replay detection(Section 3.3 of <xref target="RFC6347"></xref>)(<xref target="RFC6347" sectionFormat="of" section="3.3" />) or an equivalent mechanism to protect against replay attacks.</t> <t>DTLS and TLS with a cipher suite offering confidentiality protection and the guidance given in <xreftarget="RFC7525"></xref>target="RFC7525" format="default"/> must be followed to avoid attacks on (D)TLS.</t> <t>The client must silently discard CPNP responses received from unknown CPNP servers. The use of a randomly generated Transaction-ID makes it hard to forge a response from a server with a spoofed IP address belonging to a legitimate CPNP server. Furthermore, CPNP demands that messages from the server must include the correct identifiers of the orders. Two order identifiers are used: one generated by the client and a second one generated by the server. Both the CPNP client and server maintain the local identifier they assigned and the one assigned by the peer for a given order. Means to detect swapping of these identifiers (even when such swapping occursby inadvertenceinadvertently at the client or the server) should be enabled by CPNP clients/servers. For example, the CPNP server should not assign aproviderProvider agreement identifier that is equal to acustomerCustomer agreement identifier used by the CPNP client. </t> <t>The Provider must enforce the means to protect privacy-related information included in the documents (see <xreftarget="cpd"></xref>)target="cpd" format="default"/>) exchanged in CPNP messages <xreftarget="RFC6462"></xref>.target="RFC6462" format="default"/>. In particular, this information must not be revealed to external parties without the consent of Customers. Providers should enforce policies to make Customer fingerprinting difficult to achieve (e.g., in a recursion request). For more discussion about privacy, refer to <xreftarget="RFC6462"></xref><xref target="RFC6973"></xref>.</t>target="RFC6462" format="default"/> <xref target="RFC6973" format="default"/>.</t> <t>The Nonce and theTransaction IDTransaction-ID attributes provide sufficient randomness and can effectively tolerate attacks raised by off-path adversaries, who do not have the capability of eavesdropping and intercepting the packets transported between the client and the server. Only authorized clients must be able to modifyagreedaccepted CPNP orders. The use of a randomly generated Nonce by the server makes it hard to modify an agreement on behalf of a maliciousthird-party.</t>third party.</t> </section> <section anchor="IANA"title="IANA Considerations">numbered="true" toc="default"> <name>IANA Considerations</name> <t>This documentdoes not request anyhas no IANAaction.</t> </section> <section title="Acknowledgements"> <t>Thanks to Diego R. Lopez, Adrian Farrel, Eric Vyncke, Eric Kline, and Benjamin Kaduk for the comments.</t> <t>Thanks to the ISE reviewers.</t> <t>Special thanks to Luis Miguel Contreras Murillo for the detailed review.</t>actions.</t> </section> </middle> <back><references title="Normative References"> <?rfc ?> <?rfc include='reference.RFC.4086'?> <?rfc include='reference.RFC.5511'?> <?rfc include='reference.RFC.7525'?> <?rfc include='reference.RFC.8446'?> <?rfc include='reference.RFC.6347'?> <?rfc include='reference.RFC.7297'?> <?rfc include='reference.RFC.3339'?><displayreference target="I-D.boucadair-lisp-idr-ms-discovery" to="LISP-MS-DISCOVERY"/> <displayreference target="I-D.geng-netslices-architecture" to="NETSLICES-ARCH"/> <displayreference target="I-D.contreras-teas-slice-nbi" to="TEAS-SLICE-NBI"/> <displayreference target="I-D.ietf-opsawg-l3sm-l3nm" to="L3VPN-NETWORK-YANG"/> <displayreference target="I-D.itsumo-dsnp" to="DSNP"/> <displayreference target="I-D.nguyen-rap-cops-sls" to="COPS-SLS"/> <displayreference target="I-D.ietf-opsawg-l2nm" to="L2VPN-NETWORK-YANG"/> <references> <name>References</name> <references> <name>Normative References</name> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.4086.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.5511.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7525.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8446.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6347.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7297.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.3339.xml"/> </references><references title="Informative References"> <?rfc include='reference.RFC.4176'?> <?rfc include='reference.RFC.6125'?> <?rfc include='reference.RFC.8309'?> <?rfc include='reference.RFC.6241'?> <?rfc include='reference.RFC.8259'?> <?rfc include='reference.RFC.7149'?> <?rfc include='reference.RFC.4026'?> <?rfc include='reference.RFC.6973'?> <?rfc include='reference.RFC.6462'?> <?rfc include='reference.RFC.6770'?> <?rfc include='reference.RFC.2782'?> <?rfc include='reference.RFC.6574'?> <?rfc include='reference.RFC.6793'?> <?rfc include='reference.RFC.6830'?> <?rfc include='reference.RFC.3084'?> <?rfc include='reference.RFC.7049'?> <?rfc include='reference.RFC.8299'?> <?rfc include='reference.RFC.8466'?> <?rfc include='reference.I-D.boucadair-lisp-idr-ms-discovery'?> <?rfc include='reference.I-D.geng-netslices-architecture'?> <?rfc include='reference.I-D.contreras-teas-slice-nbi'?> <?rfc include='reference.RFC.8329'?> <?rfc include='reference.RFC.7215'?> <?rfc include='reference.RFC.7491'?> <?rfc include='reference.RFC.8040'?> <?rfc include='reference.RFC.8597'?> <?rfc include='reference.I-D.ietf-opsawg-l3sm-l3nm'?> <?rfc include='reference.I-D.itsumo-dsnp'?> <?rfc include='reference.I-D.nguyen-rap-cops-sls'?> <?rfc include='reference.I-D.barguil-opsawg-l2sm-l2nm'?><references> <name>Informative References</name> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.4176.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6125.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8309.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6241.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8259.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7149.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.4026.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6973.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6462.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6770.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.2782.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6574.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6793.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.6830.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.3084.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7049.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8299.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8466.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.4107.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.boucadair-lisp-idr-ms-discovery.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.geng-netslices-architecture.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.contreras-teas-slice-nbi.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8329.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7215.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.7491.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8040.xml"/> <xi:include href="https://xml2rfc.tools.ietf.org/public/rfc/bibxml/reference.RFC.8597.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.ietf-opsawg-l3sm-l3nm.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.itsumo-dsnp.xml"/> <xi:include href="https://www.rfc-editor.org/refs/bibxml3/reference.I-D.nguyen-rap-cops-sls.xml"/> <xi:include href="https://datatracker.ietf.org/doc/bibxml3/reference.I-D.ietf-opsawg-l2nm.xml"/> <reference anchor="ETICS"target="https://www.ict-etics.eu/fileadmin/documents/news/ETICS_white_paper_final.pdf">target="https://cordis.europa.eu/project/id/248567"> <front> <title>Economics and Technologies of Inter-Carrier Services</title> <author fullname="" surname=""> <organization>EU FP7 ETICS Project</organization> </author> <dateday="0"month="January"year="2014" />year="2014"/> </front> </reference> <reference anchor="AGAVE" target="https://rd.springer.com/article/10.1007/s12243-009-0103-4"> <front> <title>The AGAVE Approach for Network Virtualization: Differentiated Services Delivery</title> <author fullname="Mohamed Boucadair" initials="M." surname="Boucadair"> <organization>EU FP7 ETICS Project</organization> </author> <author fullname="Panos Georgatsos" initials="P."surname="Georgatsos"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Georgatsos"/> <author fullname="N. Wang" initials="N."surname="Wang"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Wang"/> <author fullname="D. Griffin" initials="D."surname="Griffin"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Griffin"/> <author fullname="G. Pavlou" initials="G."surname="Pavlou"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Pavlou"/> <author fullname="M. Howarth" initials="M."surname="Howarth"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Howarth"/> <author fullname="A. Elizondo" initials="A."surname="Elizondo"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>surname="Elizondo"/> <dateday="10"month="April"year="2009" />year="2009"/> </front> <refcontent>Annals of Telecommunication, Volume 64, 277-288</refcontent> <seriesInfo name="DOI" value="10.1007/s12243-009-0103-4"/> </reference> <referenceanchor="TEQUILA"anchor="SrNP" target="https://www.ist-tequila.org/presentations/srnp-pipcm.pdf"> <front> <title>Service Negotiation Protocol (SrNP)</title> <author fullname="Panos Georgatsos" initials="P."surname="Georgatsos"> <organization></organization> </author>surname="Georgatsos"/> <author fullname="Dimitris Giannakopoulos" initials="G."surname="Giannakopoulos"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author> <date />surname="Giannakopoulos"/> <date/> </front> </reference> <referenceanchor="Xin"anchor="RNAP" target="http://www.cs.columbia.edu/~xinwang/public/projects/protocol.html"> <front><title>Resource<title>A Resource Negotiation and Pricing Protocol (RNAP)</title> <author fullname="Xin Wang" initials="X." surname="Wang"><organization></organization><organization/> </author><date /><date/> </front> </reference> <referenceanchor="Karl"anchor="SNAP" target="http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.19.5907"> <front> <title>SNAP: A Protocol for Negotiating Service Level Agreements and Coordinating Resource Management in Distributed Systems</title> <author fullname="KarlCzajkowski"> <organization></organization> </author>Czajkowski"/> <author fullname="IanFoster"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>Foster"/> <author fullname="CarlKesselman "> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>Kesselman"/> <author fullname="VolkerSander"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>Sander"/> <author fullname="StevenTuecke"> <organization></organization> <address> <postal> <street></street> <city></city> <region></region> <code></code> <country></country> </postal> <phone></phone> <facsimile></facsimile> <email></email> <uri></uri> </address> </author>Tuecke"/> <date/>year="2002"/> </front> <seriesInfo name="DOI" value="10.1.1.19.5907"/> </reference> </references> </references> <section numbered="false" toc="default"> <name>Acknowledgements</name> <t>Thanks to <contact fullname="Diego R. Lopez"/>, <contact fullname="Adrian Farrel"/>, <contact fullname="Éric Vyncke"/>, <contact fullname="Eric Kline"/>, and <contact fullname="Benjamin Kaduk"/> for the comments.</t> <t>Thanks to those that reviewed this document for publication in the Independent Stream.</t> <t>Special thanks to <contact fullname="Luis Miguel Contreras Murillo"/> for the detailed review.</t> </section> </back> </rfc>