Data Model for Computing-Aware Traffic Steering (CATS)

Introduction introduces a framework for Computing-Aware Traffic Steering (CATS). This document defines a YANG data model for managing the CATS system. The model extends the "ietf-routing" YANG model defined in , is agnostic to specific protocol extensions, and conforms to the framework definition to serve as a critical diagnostic or control mechanism.

Terminology The following terms as defined in are used:

CS-ID: CATS Service ID.
CSCI-ID: CATS Service Contact Instance ID.
C-SMA: CATS Service Metric Agent.
C-NMA: CATS Network Metric Agent.
C-PS: CATS Path Selector.
C-TC: CATS Traffic Classifier.

The new defined terms:

C-CIB: CATS Computing Information Base, as shown in , responsible for maintaining CATS network computing information. Provides basic data for the C-SMA.
C-NIB: CATS Network Information Base, as shown in , responsible for maintaining CATS network information. Provides basic data for the C-NMA.
CATS-SBI: The CATS Southbound Interface, as shown in . The interface between the CATS Forwarders and the CATS Control Plane (regardless of the protocols used in the Control Plane). It could be used to report service metric information from CATS Forwarders to the Control Plane, and also could be used to send path and service policy information or service information from the Control Plane to CATS Forwarders.
C-SMA API: An extended interface between the Control Plane or Management Plane and the C-SMA, or between CATS Forwarders and service instances, as shown in , it is used to report service metric information to the Control Plane or CATS Forwarders.

Conventions Used in This Document The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Tree Diagrams Tree diagrams used in this document follow the notation defined in .

Prefixes in Data Node Names In this document, names of data nodes, actions, and other data model objects are often used without a prefix, as long as it is clear from the context in which YANG module each name is defined. Otherwise, names are prefixed using the standard prefix associated with the corresponding YANG module, as shown in . Prefixes and Corresponding YANG Modules

Prefix	YANG module	Reference
ip	ietf-ip
rt	ietf-routing
cats	ietf-cats
yang	ietf-yang-types
inet	ietf-inet-types

CATS System Overview As defined in , the CATS framework structure consists of the C-SMA (responsible for maintaining service metrics), the C-NMA (responsible for maintaining network metrics), the C-PS (responsible for maintaining forwarding table entries), and the C-TC (responsible for traffic classification), as shown in . The C-CIB and C-NIB are defined in the management plane. The CATS-SBI is used to exchange information between CATS Forwarders and the Control Plane. The C-SMA API is an extended interface to report service metric information between the Control Plane and the C-SMA or between CATS Forwarders and service instances.

CATS System Architecture | C-PS | | | | +-------+ | | +----------------------------------+ | /\ CATS-SBI C-SMA API/\ /\ CATS-SBI | || || || | \/ || \/ | +----------------+ +-----------------------+ | |CATS Forwarder1 | |CATS Forwarder2 | | | +------+ | | +------+------+ | C-SMA API +--------+ | | C-TC | | | | C-TC | C-PS | |<==========| +--------+ | +------+ | | +------+--+---+ | | |Service | | | | | | | |Contact | +----------------+ | | | +-|Instance| | +---+---+ | +--------+ | | | | | | +---+--+ +--+--+ | +--------+ | |C-SMA | |C-NMA| | | +--------+ | +------+ +-----+ | | |Service | +-----------------------+ +-|Instance| +--------+ ]]>

Design of CATS Data Model

Scope of Model The model covers CATS systems as described in . This model can be used to manage CATS systems. The operational state data and statistics can be retrieved by this model. The subscription and push mechanism defined in and can be implemented by the user to subscribe to notifications on the data nodes in this model. The model contains all the basic configuration parameters to operate the CATS system. Depending on the implementation choices, some systems might not allow some of the advanced parameters to be configurable. Occasionally-implemented parameters are modeled as optional features in this model. This model can be extended, and it has been structured in a way that such extensions can be conveniently made.

Specification This model imports from and augments the "ietf-routing" YANG model defined in . Both configuration branch and state branch of are augmented. The configuration branch covers node base and policy configuration. The container 'cats' is the top level container in this data model. The YANG data model defined in this document conforms to the Network Management Datastore Architecture (NMDA) . The operational state data is combined with the associated configuration data in the same hierarchy .

Model Structure This document defines a YANG data model for the management of CATS corresponding data. The data model is applicable to the CATS-SBI interface and the C-SMA API interface in . The CATS YANG model includes basic CATS objects, traffic-classifier objects, and service-metric objects. The model also includes YANG notifications.

The CATS base table provides interfaces for the functionality of the C-PS component, which can be used for communication between the Control Plane and the C-SMA, as well as for the interface between the Control Plane and the CATS Forwarder.
The CATS traffic-classifier table provides interfaces for the functionality of the C-TC component, which can be used for communication between the Control Plane and the CATS Forwarder. The Control Plane can distribute directly CATS traffic-classifier table to the CATS Forwarder, allowing the CATS Forwarder to proactively select paths according to forwarding policies.
The CATS service-metric table provides interfaces for the C-SMA component, which can be used for communication between the Control Plane and the CATS Forwarder, as well as for transmitting service metric information from the C-SMA to the Control Plane. It is also used for forwarding service metric information from the Control Plane to the CATS Forwarder.
The CATS notify table is used by the management layer component and can be utilized for the CATS Forwarder to report events to the Control Plane.

The full tree diagram of the "ietf-cats" YANG module is provided in . And the is overall tree structure of the CATS YANG module:

Yang Organization and Hierarchy

CATS Base

Base Configuration Tree View In the base shown in , you can set the 'enable' attribute to enable/disable CATS function on a per-device basis. When set to false, the CATS function component is shut down. You can set the 'update-interval' parameter to determine the interval at which the C-SMA notifies the C-PS of metric changes. The default value for this interval is 30 seconds. You can set the maximum number of metric table entries by configuring 'metric-limits'. You can set the maximum number of flow tables by configuring 'flow-limits'. When flow tables have been inactive for a long period of time, it is necessary to age out the stale state entries. This can be achieved by configuring 'flow-timeout' to control the aging time of flow tables. You can set the 'service-policy' table for traffic steering, which includes affinity-based, service-metric-based, network-metric-based, and combined service-metric and network-metric-based steering.

CATS Traffic-classifier

Traffic-classifier Tree View The CATS traffic-classifier table is used to define the features of the service and to classify the traffic, as shown in . The 'cs-id' is used to uniquely identify a CATS service, and the 'description' serves to document its content. The 'server-port' defines the application port for a CATS service. This port number matches the destination port in the IP packets of data flows destined for the service. The 'protocol' defines the application transport protocol for a CATS service. This protocol number matches the protocol in the IP packets of data flows destined for the service. The 'matched-packets' and 'matched-bytes' indicate the statistics of traffic matching the specified service.

CATS Service-metric

Service-metric Tree View The CATS service-metric table is used to control the delivery service metrics on the control plane, as shown in , thereby generating the forwarding table on the forwarding plane in conjunction with network metrics. The 'cs-id' is used to uniquely identify a CATS service, and the 'csci-id' is used to represent an instance of that service. The 'source-type' indicates the source protocol of this service metric information, such as a static protocol. The 'priority' indicates the priority of different service instances of the same service, and the 'affinity' indicates the affinity between this service and its service site. The 'location' indicates the IP address of the service site where this service instance resides. And the 'metrics' indicates different types of service metric values. The 'forwarded-packets' and 'forwarded-bytes' indicate the statistics of traffic forwarded by the specified service metric entry.

CATS Notify

Notify Tree View When the number of CATS (metric or flow) table entries reaches the maximum and when the number of entries goes from maximum to not being maximum, an event notification will be sent indicating the change, as shown in .

CATS YANG Module Editor: Huijuan Yao Editor: Changwang Lin Editor: Zhenqiang Li Editor: Quan Xiong Editor: Luis M. Contreras "; description "This module describes a YANG model for managing the CATS system. The key words 'MUST', 'MUST NOT', 'REQUIRED', 'SHALL', 'SHALL NOT', 'SHOULD', 'SHOULD NOT', 'RECOMMENDED', 'NOT RECOMMENDED', 'MAY', and 'OPTIONAL' in this document are to be interpreted as described in BCP 14 (RFC 2119) (RFC 8174) when, and only when, they appear in all capitals, as shown here. Copyright (c) 2026 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Revised BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info). All revisions of IETF and IANA published modules can be found at the YANG Parameters registry group (https://www.iana.org/assignments/yang-parameters). This version of this YANG module is part of RFC XXXX; see the RFC itself for full legal notices."; revision 2026-06-25 { description "Initial Version"; reference "RFC XXXX: YANG Data Model for CATS"; } typedef cs-id { type union { type uint32; type inet:ipv4-address; type inet:ipv6-address; } description "This type is for CATS CS-ID."; reference "RFC XXXX: YANG Data Model for CATS"; } typedef csci-id { type union { type uint32; type inet:ipv4-address; type inet:ipv6-address; } description "This type is for CATS CSCI-ID."; reference "RFC XXXX: YANG Data Model for CATS"; } grouping service-policy-type { description "Service policy type"; leaf policy-type { type enumeration { enum base-on-affinity { value 0; description "Base on affinity"; } enum base-on-sm-only { value 1; description "Base on service metric only"; } enum base-on-nm-only { value 2; description "Base on network metric only"; } enum base-on-sm-nm { value 3; description "Base on the combination of service metric and network metric"; } } description "Service policy type"; } } augment "/rt:routing" { description "This augments the CATS configuration."; container cats { description "Support for the CATS configuration."; container base { description "CATS base configuration."; leaf enable { type boolean; description "Enable CATS"; } leaf update-interval { type uint32; units "seconds"; default "30"; description "Update interval of CATS metric. A value of 0 indicates that metrics are sent only when a significant change occurs and not on a periodic basis."; } leaf metric-limits { type uint32; description "CATS metric entry limit"; } leaf flow-limits { type uint32; description "CATS flow entry limit"; } leaf flow-timeout { type uint32; units "seconds"; default "120"; description "CATS flow timeout when no flow. A value of 0 means that the flow does not time out due to inactivity (i.e., infinite timeout), and must be terminated explicitly (e.g., via signaling or administrative action)."; } list service-policy { key "cs-id"; description "CATS service policy"; leaf cs-id { type cs-id; description "The cs-id"; } uses service-policy-type; } } container traffic-classifiers { description "CATS traffic-classifier feature"; list traffic-classifier { key "cs-id"; description "CATS traffic-classifier feature"; leaf cs-id { type cs-id; description "CATS CS-ID"; } leaf description { type string; description "The description of this service, example: http"; } leaf server-port { type uint16; description "Server-port of the service, matches the destination port in the IP packets of data flows destined for the service."; } leaf protocol { type uint8; description "The protocol of the service."; } leaf matched-packets { type yang:zero-based-counter64; config false; description "The number of packets matching the specified service."; } leaf matched-bytes { type yang:zero-based-counter64; config false; description "The byte number of packets matching the specified service."; } } } container service-metrics { description "CATS service metric entry"; list service-metric { key "cs-id csci-id source-type"; description "CATS service metric entry"; leaf cs-id { type cs-id; description "CATS cs-id"; } leaf csci-id { type csci-id; description "CATS csci-id"; } leaf source-type { type enumeration { enum static { value 0; description "Static configuration"; } } description "The source type of the service computing metric"; } leaf priority { type uint8; description "The server priority, the smaller the value, the higher the priority."; } leaf affinity { type uint8; description "The server affinity, the higher the value, the higher the affinity."; } leaf location { type inet:ip-address; description "The server location"; } container metrics { description "The service metric"; list metric { key "metric-type"; description "Different types of service."; leaf metric-type { type enumeration { enum delay { value 0; description "Calculate the metric based on transmission delay, where the metric value is the delay time in milliseconds."; } enum service-ratio { value 1; description "Calculate the metric based on business capacity, where the metric value is the current capacity percentage."; } enum memory-ratio { value 2; description "Calculate the metric based on memory utilization percentage, where the metric value is the current memory utilization percentage"; } } description "The metric type"; reference "RFC YYYY: CATS Metrics Definition"; } leaf metric-value { type uint32; description "The metric value"; } } } leaf forwarded-packets { type yang:zero-based-counter64; config false; description "The number of packets forwarded by the specified service"; } leaf forwarded-bytes { type yang:zero-based-counter64; config false; description "The byte number of packets forwarded by the specified service"; } } } notification notify { description "The event notify"; leaf metric-limit-reached { type boolean; description "Metric entry limit reached"; } leaf flow-limit-reached { type boolean; description "Flow entry limit reached"; } } } } } ]]>

Security Considerations This section is modeled after the template described in Section 3.7.1 of . The "ietf-cats" YANG module defines a data model that is designed to be accessed via YANG-based management protocols, such as the Network Configuration Protocol (NETCONF) and RESTCONF . These YANG-based management protocols (1) have to use a secure transport layer (e.g., Secure Shell (SSH) , TLS , and QUIC ) and (2) have to use mutual authentication. The Network Configuration Access Control Model (NACM) provides the means to restrict access for particular NETCONF or RESTCONF users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content. There are a number of data nodes defined in this YANG module that are writable/creatable/deletable (i.e., "config true", which is the default). All writable data nodes are likely to be sensitive or vulnerable in some network environments. Write operations (e.g., edit-config) and delete operations to these data nodes without proper protection or authentication can have a negative effect on network operations. The following subtrees and data nodes have particular sensitivities/vulnerabilities:

/cats:base/cats:enable
/cats:base/cats:update-interval
/cats:base/cats:metric-limits
/cats:base/cats:flow-limits
/cats:base/cats:flow-timeout
/cats:base/cats:service-policy/cats:cs-id
/cats:base/cats:service-policy/cats:policy-type
/cats:traffic-classifiers/cats:traffic-classifier/cats:cs-id
/cats:traffic-classifiers/cats:traffic-classifier/cats:description
/cats:traffic-classifiers/cats:traffic-classifier/cats:server-port
/cats:traffic-classifiers/cats:traffic-classifier/cats:protocol
/cats:service-metrics/cats:service-metric/cats:cs-id
/cats:service-metrics/cats:service-metric/cats:csci-id
/cats:service-metrics/cats:service-metric/cats:source-type
/cats:service-metrics/cats:service-metric/cats:priority
/cats:service-metrics/cats:service-metric/cats:affinity
/cats:service-metrics/cats:service-metric/cats:location
/cats:service-metrics/cats:service-metric/cats:metrics/cats:metric/cats:metric-type
/cats:service-metrics/cats:service-metric/cats:metrics/cats:metric/cats:metric-value

For these augmentations to ietf-routing.yang, the ability to delete, add, and modify CATS base configuration, traffic classifier configuration and service metric configuration would allow traffic to be misrouted. Some of the readable data nodes in this YANG module may be considered sensitive or vulnerable in some network environments. It is thus important to control read access (e.g., via get, get-config, or notification) to these data nodes. Specifically, the following subtrees and data nodes have particular sensitivities/vulnerabilities:

/cats:traffic-classifiers/cats:traffic-classifier/cats:matched-packets
/cats:traffic-classifiers/cats:traffic-classifier/cats:matched-bytes
/cats:service-metrics/cats:service-metric/cats:forwarded-packets
/cats:service-metrics/cats:service-metric/cats:forwarded-bytes
/cats:notify/cats:metric-limit-reached
/cats:notify/cats:flow-limit-reached

Exposing the notification will expose the CATS table information of the network device. This may be undesirable due to the fact that such exposure may facilitate other attacks. Additionally, network operators MAY consider their CATS table information to be sensitive confidential data. All the security considerations for writable and readable data nodes defined in apply to the augmentations described herein. There are no particularly sensitive RPC or action operations.

IANA Considerations The IANA is requested to assign the following URI in the "IETF XML Registry" : This document registers the following YANG module in the "YANG Module Names" registry :