RFC9061 · A YANG Data Model for IPsec Flow Protection Based on Software-Defined Networking (SDN)

{
  "id": "RFC9061",
  "number": 9061,
  "title_en": "A YANG Data Model for IPsec Flow Protection Based on Software-Defined Networking (SDN)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes how to provide IPsec-based flow protection (integrity and confidentiality) by means of an Interface to Network Security Function (I2NSF) Controller. It considers two main well-known scenarios in IPsec: gateway-to-gateway and host-to-host. The service described in this document allows the configuration and monitoring of IPsec Security Associations (IPsec SAs) from an I2NSF Controller to one or several flow-based Network Security Functions (NSFs) that rely on IPsec to protect data traffic. This document focuses on the I2NSF NSF-Facing Interface by providing YANG data models for configuring the IPsec databases, namely Security Policy Database (SPD), Security Association Database (SAD), Peer Authorization Database (PAD), and Internet Key Exchange Version 2 (IKEv2). This allows IPsec SA establishment with minimal intervention by the network administrator. This document defines three YANG modules, but it does not define any new protocol.",
  "authors": [
    "R. Marin-Lopez",
    "G. Lopez-Millan",
    "F. Pereniguez-Garcia"
  ],
  "organizations": [],
  "publication_date": "2021-07-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "i2nsf",
  "source_draft": "draft-ietf-i2nsf-sdn-ipsec-flow-protection-14",
  "page_count": 90,
  "doi": "10.17487/RFC9061",
  "keywords": [
    "NSF",
    "SDN",
    "IPsec"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9061/",
    "html": "https://www.rfc-editor.org/rfc/rfc9061.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9061.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9061/"
  }
}