Extensions to the YANG Data Model for L3VPN Service Delivery

  module ietf-l3vpn-svc-ext {
  yang-version 1.1;
  namespace "urn:ietf:params:xml:ns:yang:ietf-l3vpn-svc-ext";
  prefix l3vpn-svc-ext;

  import ietf-l3vpn-svc {
    prefix l3vpn-svc;
    revision-date 2018-01-19;
  }

  import ietf-yang-types {
    prefix yang;
    revision-date 2013-07-15;
  }

  organization
    "IETF ONSEN Working Group";

  contact
    "Editor:  Fengchao Fu
              <fufengc@chinatelecom.cn>
              Cancan Huang
              <huangcanc@chinatelecom.cn>
              Bo Wu
              <lana.wubo@huawei.com>
              Chongfeng Xie
              <xiechf@chinatelecom.cn>";

  description
    "This module defines extensions to the L3VPN service model
    for supporting
     dynamic bandwidth adjustment, SLO/SLE profile binding,
     quantum-safe encryption,
     performance  monitoring, and QoS enhancement.

     Copyright (c) 2026 IETF Trust and the persons identified as
     authors of the code.
     All rights reserved.

     Redistribution and use in source and binary forms, with or
    without modification, is permitted pursuant to, and subject
    to the license terms contained in, Simplified BSD License
    set forth in Section 4.c of the IETF Trust's Legal Provisions
    Relating to IETF Documents
    (http://trustee.ietf.org/license-info).

    This version of this YANG module is part of
    I-D:draft-fu-onsen-update-L3SM-service-models-00; see
    the I-D itself for full legal notices.";

  revision 2026-04-26 {
    description
      "Added performance  monitoring for service
      quality visibility. ";
    reference "I-D: draft-fu-onsen-L3SM-extensions-01";
  }

  revision 2026-02-10 {
    description
      "Initial revision with dynamic networking and
      bandwidth adjustment, SLO/SLE,
      and quantum encryption extensions.
       Compatible with RFC 7950 (YANG 1.1).";
    reference "I-D: draft-ietf-l3vpn-dynamic-ext-00";
  }

  identity metric-type-base {
    description "Base identity for performance metric types";
  }

  identity latency {
    base metric-type-base;
    description "End-to-end latency metric";
  }

  identity bandwidth {
    base metric-type-base;
    description "Available bandwidth metric";
  }

  identity availability-level-base {
    description "Base identity for service availability levels";
  }

  identity security-policy-base {
    description "Base identity for security policy types";
  }

  identity isolation-level-base {
    description "Base identity for isolation levels";
  }

  identity te-link-disjoint {
    description "Link-disjoint path diversity
    (IETF TE type semantics)";
  }

  augment /l3vpn-svc:l3vpn-svc/l3vpn-svc:vpn-profiles {
    container maximum-bandwidth-adjustment-profiles {
      description "Collection of maximum bandwidth
      adjustment profiles for dynamic bandwidth";

      list maximum-bandwidth-adjustment-profile {
        key "id";
        description "Single maximum bandwidth adjustment
        profile for dynamic bandwidth";

        leaf id {
          type string;
          description "Unique identifier
          for the maximum bandwidth adjustment profile";
        }
      }
    }

    container slo-sle-profiles {
      description "Reusable SLO/SLE profiles for
      Dynamic-L3VPN QoS binding";

      list slo-sle-profile {
        key "id";
        description "SLO/SLE profile defining performance
        and experience constraints";

        leaf id {
          type string;
          description "Unique identifier for the SLO/SLE profile";
        }

        leaf description {
          type string;
          mandatory false;
          description "Human-readable description
          of the SLO/SLE profile";
        }

        leaf profile-ref {
          type leafref {
            path "/l3vpn-svc:l3vpn-svc
                 /l3vpn-svc:vpn-profiles
                 /l3vpn-svc-ext:maximum-bandwidth-adjustment-profiles
                 /l3vpn-svc-ext:maximum-bandwidth-adjustment-profile
                 /id";
          }
          mandatory false;
          description "Reference to an associated network
          slice profile";
        }

        container slo-policy {
          description "Service Level Objective (SLO)
          policy constraints";

          list metric-bound {
            key "metric-type";
            description "Bound on a specific performance metric";

            leaf metric-type {
              type identityref {
                base metric-type-base;
              }
              description "Type of performance metric
              (latency, bandwidth, etc.)";
            }

            leaf metric-unit {
              type string;
              description "Unit of measurement for
              the metric (ms, Mbps, %)";
            }

            leaf value-description {
              type string;
              mandatory false;
              description "Additional context for the metric value";
            }

            leaf percentile-value {
              type uint8;
              mandatory false;
              description "Percentile for the metric bound (0-100)";
            }

            leaf bound {
              type uint64;
              mandatory false;
              description "Threshold value for the
              performance metric";
            }
          }

          leaf availability {
            type identityref {
              base availability-level-base;
            }
            mandatory false;
            description "Required service availability level
            (99.999%, etc.)";
          }

          leaf mtu {
            type uint32;
            mandatory false;
            description "Maximum Transmission Unit
            (bytes) for the service";
          }
        }

        container sle-policy {
          description "Service Level Experience (SLE)
          policy constraints";

          leaf-list security {
            type identityref {
              base security-policy-base;
            }
            description "Security policies applied
            (TLS 1.3, IPsec, etc.)";
          }

          leaf-list isolation {
            type identityref {
              base isolation-level-base;
            }
            description "Isolation requirements
            (network, tenant, etc.)";
          }

          leaf max-occupancy-level {
            type uint8;
            mandatory false;
            description "Maximum resource occupancy level
             (0-255, percentage scale)";
          }

          container path-constraints {
            description "Constraints on data path selection";

            leaf service-functions {
              type string;
              description "Required service functions on the
               path (firewall, IDS, etc.)";
            }

            container diversity {
              description "Path diversity requirements
              for redundancy";

              leaf diversity-type {
                type identityref {
                  base te-link-disjoint;
                }
                mandatory false;
                description "Type of path disjointness
                (link-disjoint)";
              }
            }
          }
        }
      }
    }
  }

  augment /l3vpn-svc:l3vpn-svc/l3vpn-svc:sites/l3vpn-svc:site {
    leaf temporary-connection-indicator {
      type boolean;
      default false;
      description "Indicator if this site has a
      temporary connection";
    }

    leaf effective-time-window {
      type yang:date-and-time;
      mandatory false;
      when "../l3vpn-svc-ext:temporary-connection-indicator
           = 'true'";
      description "Time window for temporary connection validity";
    }

    container service {
      container qos {
        container qos-profile {
          leaf slo-sle-profile {
            type leafref {
              path "/l3vpn-svc:l3vpn-svc/l3vpn-svc:vpn-profiles
                    /l3vpn-svc-ext:slo-sle-profiles
                    /l3vpn-svc-ext:slo-sle-profile
                    /id";
            }
            mandatory false;
            when "../qos-profile-enabled = 'true'";
            description "Reference to SLO/SLE profile
            for site-level QoS binding";
          }

          leaf qos-profile-enabled {
            type boolean;
            default false;
            description "QoS profile enable flag";
          }
        }
      }
    }

    container security-encryption {
      leaf quantum-encryption-enable {
        type boolean;
        default false;
        description "Enable quantum-resistant encryption
        for site security";
      }

      leaf quantum-encryption-mode {
        type uint8;
        default 1;
        mandatory false;
        when "../quantum-encryption-enable = 'true'";
        description "Quantum encryption mode
        (1=default, 2=enhanced)";
      }

      leaf quantum-encryption-status {
        type enumeration {
          enum idle {
            description "Quantum encryption not active";
          }
          enum active {
            description "Quantum encryption in use";
          }
          enum error {
            description "Quantum encryption error state";
          }
        }
        config false;
        description "Operational status of quantum
        encryption (read-only)";
      }
    }
  }

  augment "/l3vpn-svc:l3vpn-svc/l3vpn-svc:sites"
        +"/l3vpn-svc:site/l3vpn-svc:site-network-accesses"
        +"/l3vpn-svc:site-network-access" {
    container service {
      leaf dynamic-bandwidth-indicator {
        type boolean;
        default false;
        description "Enable dynamic bandwidth adjustment
         for this service";
      }

      leaf effective-time-window {
        type yang:date-and-time;
        mandatory false;
        when "../dynamic-bandwidth-indicator = 'true'";
        description "Time window for dynamic bandwidth validity";
      }
      leaf maximum-bandwidth-adjustment-profile-ref {
        type leafref {
          path "/l3vpn-svc:l3vpn-svc/l3vpn-svc:vpn-profiles
                /l3vpn-svc-ext:maximum-bandwidth-adjustment-profiles
                /l3vpn-svc-ext:maximum-bandwidth-adjustment-profile
                /id";
        }
        mandatory false;
        when "../dynamic-bandwidth-indicator = 'true'";
        description "Reference to
        a maximum bandwidth adjustment profile.";
      }

      container performance-monitoring {
        description "Service-level performance monitoring.";

        leaf monitoring-enabled {
          type boolean;
          default false;
          description "Enable performance monitoring.";
        }

        leaf monitoring-mode {
          type enumeration {
            enum end-to-end;
          }
          default end-to-end;
          description "Performance monitoring mode.";
        }

        container operational-state {
          config false;
          description "Operational state and performance metrics.";

          leaf monitor-status {
            type enumeration {
              enum active;
              enum inactive;
              enum degraded;
              enum fault;
            }
            description "Current monitoring status.";
          }

          leaf average-delay {
            type uint32;
            units milliseconds;
            description "Average end-to-end packet delay.";
          }

          leaf packet-loss-rate {
            type decimal64 {
              fraction-digits 2;
              range "0 .. 100";
            }
            units percent;
            description "Packet loss rate.";
          }

          leaf jitter {
            type uint32;
            units milliseconds;
            description "Packet delay jitter.";

          }
        }
      }

    }

    container ip-connection-security {
      leaf quantum-encryption-enable {
        type boolean;
        default false;
        description "Enable quantum-resistant
        encryption for IP connection security";
      }

      leaf quantum-encryption-mode {
        type uint8;
        default 1;
        mandatory false;
        when "../quantum-encryption-enable = 'true'";
        description "Quantum encryption mode
        (1=default, 2=enhanced)";
      }

      leaf quantum-encryption-status {
        type enumeration {
          enum idle {
            description "Quantum encryption not active";
          }
          enum active {
            description "Quantum encryption in use";
          }
          enum error {
            description "Quantum encryption error state";
          }
        }
        config false;
        description "Operational status of quantum
        encryption (read-only)";
      }

      container service {
        container qos {
          container qos-profile {
            leaf slo-sle-profile {
              type leafref {
                path "/l3vpn-svc:l3vpn-svc
                      /l3vpn-svc:vpn-profiles
                      /l3vpn-svc-ext:slo-sle-profiles
                      /l3vpn-svc-ext:slo-sle-profile/id";
              }
              mandatory false;
              when "../qos-profile-enabled = 'true'";
              description "Reference to SLO/SLE profile
              for IP connection-level QoS binding";
            }

            leaf qos-profile-enabled {
              type boolean;
              default false;
              description "QoS profile enable flag";
            }
          }
        }
      }
    }
  }
}