A Service YANG Data Model for dynamic-L3VPN

  module ietf-l3vpn-svc-dynamic-ext {
  yang-version 1.1;
  namespace "urn:ietf:params:xml:ns:yang:ietf-l3vpn-svc-dynamic-ext";
  prefix l3vpn-svc-dyn;

  import ietf-l3vpn-svc {
    prefix l3vpn-svc;
    revision-date 2018-01-19;
  }

  import ietf-yang-types {
    prefix yang;
    revision-date 2013-07-15;
  }

  organization
    "IETF ONSEN Working Group";

  contact
    "Editor:  Fengchao Fu
              <fufengc@chinatelecom.cn>
              Cancan Huang
              <huangcanc@chinatelecom.cn>
              Bo Wu
              <lana.wubo@huawei.com>
              Chongfeng Xie
              <xiechf@chinatelecom.cn>";

  description
    "This module defines extensions to the L3VPN service model
    for supporting dynamic bandwidth adjustment, SLO/SLE profile
    binding, quantum-safe encryption, and QoS enhancement.

     Copyright (c) 2026 IETF Trust and the persons identified
     as authors of the code.
     All rights reserved.";

  revision 2026-02-11 {
    description
      "Initial revision with dynamic bandwidth, SLO/SLE,
      and quantum encryption extensions.
       Compatible with RFC 7950 (YANG 1.1).";
    reference "I-D: draft-fu-onions-update-l3sm-service-models-00";
  }

  identity metric-type-base {
    description "Base identity for performance metric types";
  }

  identity latency {
    base metric-type-base;
    description "End-to-end latency metric";
  }

  identity bandwidth {
    base metric-type-base;
    description "Available bandwidth metric";
  }

  identity availability-level-base {
    description "Base identity for service availability levels";
  }

  identity security-policy-base {
    description "Base identity for security policy types";
  }

  identity isolation-level-base {
    description "Base identity for isolation levels";
  }

  identity te-link-disjoint {
    description "Link-disjoint path diversity
    (IETF TE type semantics)";
  }

  augment /l3vpn-svc:l3vpn-svc/l3vpn-svc:vpn-profiles {
    container maximum-adjustment-profiles {
      description "Collection of maximum adjustment profiles
      for dynamic bandwidth";

      list maximum-adjustment-profile {
        key "id";
        description "Single maximum adjustment profile
        for dynamic bandwidth";

        leaf id {
          type string;
          description "Unique identifier
          for the maximum adjustment profile";
        }
      }
    }

    container slo-sle-profiles {
      description "Reusable SLO/SLE profiles
      for Dynamic-L3VPN QoS binding";

      list slo-sle-profile {
        key "id";
        description "SLO/SLE profile defining performance
        and experience constraints";

        leaf id {
          type string;
          description "Unique identifier for the SLO/SLE profile";
        }

        leaf description {
          type string;
          mandatory false;
          description "Human-readable description
          of the SLO/SLE profile";
        }

        leaf profile-ref {
          type leafref {
            path "/l3vpn-svc:l3vpn-svc/
              l3vpn-svc:vpn-profiles/
              l3vpn-svc-dyn:maximum-adjustment-profiles/
              l3vpn-svc-dyn:maximum-adjustment-profile/id";
          }
          mandatory false;
          description "Reference to an associated
          network slice profile";
        }

        container slo-policy {
          description "Service Level Objective (SLO)
          policy constraints";

          list metric-bound {
            key "metric-type";
            description "Bound on a specific performance metric";

            leaf metric-type {
              type identityref {
                base metric-type-base;
              }
              description "Type of performance metric
              (latency, bandwidth, etc.)";
            }

            leaf metric-unit {
              type string;
              description "Unit of measurement for the metric
              (ms, Mbps, %)";
            }

            leaf value-description {
              type string;
              mandatory false;
              description "Additional context for the metric value";
            }

            leaf percentile-value {
              type uint8;
              mandatory false;
              description "Percentile for the metric bound (0-100)";
            }

            leaf bound {
              type uint64;
              mandatory false;
              description "Threshold value
              for the performance metric";
            }
          }

          leaf availability {
            type identityref {
              base availability-level-base;
            }
            mandatory false;
            description "Required service availability level
            (99.999%, etc.)";
          }

          leaf mtu {
            type uint32;
            mandatory false;
            description "Maximum Transmission Unit (bytes)
            for the service";
          }
        }

        container sle-policy {
          description "Service Level Experience
          (SLE) policy constraints";

          leaf-list security {
            type identityref {
              base security-policy-base;
            }
            description "Security policies applied
            (TLS 1.3, IPsec, etc.)";
          }

          leaf-list isolation {
            type identityref {
              base isolation-level-base;
            }
            description "Isolation requirements
            (network, tenant, etc.)";
          }

          leaf max-occupancy-level {
            type uint8;
            mandatory false;
            description "Maximum resource occupancy level
            (0-255, percentage scale)";
          }

          container path-constraints {
            description "Constraints on data path selection";

            leaf service-functions {
              type string;
              description "Required service functions on the path
              (firewall, IDS, etc.)";
            }

            container diversity {
              description "Path diversity requirements
              for redundancy";

              leaf diversity-type {
                type identityref {
                  base te-link-disjoint;
                }
                mandatory false;
                description "Type of path disjointness
                (link-disjoint)";
              }
            }
          }
        }
      }
    }
  }

  augment /l3vpn-svc:l3vpn-svc/l3vpn-svc:sites/l3vpn-svc:site {
    leaf temporary-connection-indicator {
      type boolean;
      default false;
      description "Indicator if this site has
      a temporary connection";
    }

    leaf effective-time-window {
      type yang:date-and-time;
      mandatory false;
      when "../l3vpn-svc-dyn:temporary-connection-indicator
      = 'true'";
      description "Time window for temporary connection validity";
    }

    container service {
      container qos {
        container qos-profile {
          leaf slo-sle-profile {
            type leafref {
              path "/l3vpn-svc:l3vpn-svc/
                l3vpn-svc:vpn-profiles/
                l3vpn-svc-dyn:slo-sle-profiles/
                l3vpn-svc-dyn:slo-sle-profile/id";
            }
            mandatory false;
            when "../qos-profile-enabled = 'true'";
            description "Reference to SLO/SLE profile
            for site-level QoS binding";
          }

          leaf qos-profile-enabled {
            type boolean;
            default false;
            description "QoS profile enable flag";
          }
        }
      }
    }

    container security-encryption {
      leaf quantum-encryption-enable {
        type boolean;
        default false;
        description "Enable quantum-resistant encryption
        for site security";
      }

      leaf quantum-encryption-mode {
        type uint8;
        default 1;
        mandatory false;
        when "../quantum-encryption-enable = 'true'";
        description "Quantum encryption mode
        (1=default, 2=enhanced)";
      }

      leaf quantum-encryption-status {
        type enumeration {
          enum idle {
            description "Quantum encryption not active";
          }
          enum active {
            description "Quantum encryption in use";
          }
          enum error {
            description "Quantum encryption error state";
          }
        }
        config false;
        description "Operational status of quantum encryption
        (read-only)";
      }
    }
  }

  augment "/l3vpn-svc:l3vpn-svc/l3vpn-svc:sites/l3vpn-svc:site"
        +"/l3vpn-svc:site-network-accesses"
        +"/l3vpn-svc:site-network-access" {
    container service {
      leaf dynamic-bandwidth-indicator {
        type boolean;
        default false;
        description "Enable dynamic bandwidth adjustment
        for this service";
      }

      leaf effective-time-window {
        type yang:date-and-time;
        mandatory false;
        when "../dynamic-bandwidth-indicator = 'true'";
        description "Time window for dynamic bandwidth validity";
      }

      leaf maximum-adjustment-bandwidth-range {
        type leafref {
          path "/l3vpn-svc:l3vpn-svc
            /l3vpn-svc:vpn-profiles
            /l3vpn-svc-dyn:maximum-adjustment-profiles
            /l3vpn-svc-dyn:maximum-adjustment-profile/id";
        }
        mandatory false;
        when "../dynamic-bandwidth-indicator = 'true'";
        description "Reference to maximum adjustment
        bandwidth profile";
      }
    }

    container ip-connection-security {
      leaf quantum-encryption-enable {
        type boolean;
        default false;
        description "Enable quantum-resistant encryption
        for IP connection security";
      }

      leaf quantum-encryption-mode {
        type uint8;
        default 1;
        mandatory false;
        when "../quantum-encryption-enable = 'true'";
        description "Quantum encryption mode
        (1=default, 2=enhanced)";
      }

      leaf quantum-encryption-status {
        type enumeration {
          enum idle {
            description "Quantum encryption not active";
          }
          enum active {
            description "Quantum encryption in use";
          }
          enum error {
            description "Quantum encryption error state";
          }
        }
        config false;
        description "Operational status of quantum encryption
        (read-only)";
      }

      container service {
        container qos {
          container qos-profile {
            leaf slo-sle-profile {
              type leafref {
                path "/l3vpn-svc:l3vpn-svc
                  /l3vpn-svc:vpn-profiles
                  /l3vpn-svc-dyn:slo-sle-profiles
                  /l3vpn-svc-dyn:slo-sle-profile/id";
              }
              mandatory false;
              when "../qos-profile-enabled = 'true'";
              description "Reference to SLO/SLE profile
              for IP connection-level QoS binding";
            }

            leaf qos-profile-enabled {
              type boolean;
              default false;
              description "QoS profile enable flag";
            }
          }
        }
      }
    }
  }
}