<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-ietf-cats-oam-fw-02" category="info" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <front>
    <title abbrev="CATS OAM Framework">Computing-Aware Traffic Steering (CATS) Operations, Administration, and Maintenance (OAM) Framework</title>
    <seriesInfo name="Internet-Draft" value="draft-ietf-cats-oam-fw-02"/>
    <author initials="H." surname="Fu" fullname="Huakai Fu">
      <organization>ZTE Corporation</organization>
      <address>
        <email>fu.huakai@zte.com.cn</email>
      </address>
    </author>
    <author initials="Q." surname="Xiong" fullname="Quan Xiong">
      <organization>ZTE Corporation</organization>
      <address>
        <email>xiong.quan@zte.com.cn</email>
      </address>
    </author>
    <author initials="Z." surname="Du" fullname="Zongpeng Du">
      <organization>China Mobile</organization>
      <address>
        <email>duzongpeng@chinamobile.com</email>
      </address>
    </author>
    <author initials="B." surname="Liu" fullname="Bo Liu">
      <organization>China Mobile</organization>
      <address>
        <email>liubo@chinamobile.com</email>
      </address>
    </author>
    <author initials="Z." surname="Li" fullname="Zhenqiang Li">
      <organization>China Mobile</organization>
      <address>
        <email>lizhenqiang@chinamobile.com</email>
      </address>
    </author>
    <date year="2026"/>
    <workgroup>CATS</workgroup>
    <abstract>
      <t>This document describes the Operations, Administration, and Maintenance (OAM) framework and requirements for Computing-Aware Traffic Steering (CATS). The framework defines the CATS OAM layering model and functional components. It also specifies the requirements to enable fault management and performance monitoring for CATS end-to-end connections across clients, network paths, and service instances within a single domain. This document does not define concrete OAM protocol designs or protocol extensions.</t>
    </abstract>
  </front>
  <middle>
    <section anchor="introduction">
      <name>Introduction</name>
      <t>As described in <xref target="RFC10054"/>, edge computing provides lower response time and higher transmission rate than cloud computing by moving computing resources to the network edge. To meet the requirements of users that are highly distributive, service providers deploy the same type of service instances at multiple edge sites, which involves steering traffic from clients to the most appropriate computing instance.</t>
      <t>Computing-Aware Traffic Steering (CATS) <xref target="RFC10053"/> provides a traffic engineering approach <xref target="RFC9522"/> that incorporates the dynamic states of both computing and network resources to optimize service instance selection. While such policies rely on multi-dimensional metrics to achieve service assurance, existing network-centric Operations, Administration, and Maintenance (OAM) technologies are insufficient as they focus solely on infrastructure-layer maintenance and fail to provide E2E (end-to-end) visibility from the client to the service instance. Consequently, a dedicated CATS OAM framework is required to bridge the gap between network reachability and service availability, transforming CATS steering logic into a manageable, carrier-grade service capable of sustaining performance in distributed computing environments.</t>
      <t>To this end, and aligned with the single domain model defined in <xref target="RFC10053"/>, this document specifies the OAM framework and requirements for CATS. It establishes a layering OAM model and defines the functional components to monitor the system. Furthermore, it outlines the requirements for fault management and performance monitoring of the CATS service, covering the connection from the client through the network to the final service instance. Specific OAM protocol design, protocol extensions, and inter-domain operations are out of scope.</t>
    </section>

    <section anchor="requirements-language">
      <name>Requirements Language</name>
      <t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they appear in all capitals, as shown here.</t>
    </section>

    <section anchor="terminology">
      <name>Terminology</name>
      <t>This document makes use of the terms defined in <xref target="RFC10053"/> and defines the following terms.</t>
      <dl>
        <dt>CATS Domain:</dt>
        <dd><t>A single network and compute administrative domain controlled by one service provider, in alignment with the single domain model of the CATS framework.</t></dd>
        <dt>CS-ID:</dt>
        <dd><t>CATS Service Identifier, identifier for a CATS service instance.</t></dd>
        <dt>C-PS:</dt>
        <dd><t>CATS Path Selector, the component that makes traffic-steering decisions.</t></dd>
        <dt>C-SMA:</dt>
        <dd><t>CATS Service Metric Agent, responsible for collecting and reporting service-related metrics.</t></dd>
        <dt>SI:</dt>
        <dd><t>Service Instance, instantiated service workload in CATS.</t></dd>
        <dt>IOAM:</dt>
        <dd><t>In-situ Operations, Administration, and Maintenance. A mechanism that records OAM and telemetry data in the packet while it traverses a path, as defined in <xref target="RFC9197"/>.</t></dd>
        <dt>In-Band Flow Detection:</dt>
        <dd><t>A Service OAM mode in which OAM data is carried in, or derived from, service traffic along the actual forwarding path. Representative techniques include data-carrying on-path telemetry (e.g., in-situ OAM) and marking-based passive/hybrid measurement (e.g., Alternate Marking).</t></dd>
        <dt>Alternate Marking:</dt>
        <dd><t>A passive or hybrid performance measurement technique that uses a marking bit (e.g., a color bit) to partition service traffic into blocks, enabling measurement of packet loss, delay, and delay variation on live traffic, as defined in <xref target="RFC8321"/>.</t></dd>
        <dt>Push Mode:</dt>
        <dd><t>A mode of operation where OAM data, after being locally aggregated by the OAM node, is periodically pushed to a receiving entity (e.g., collector, analyzer, or controller) without an explicit request from the receiver.</t></dd>
        <dt>Pull Mode:</dt>
        <dd><t>A mode of operation where OAM data is pulled by a receiving entity on-demand, rather than being proactively sent by the OAM node.</t></dd>
      </dl>
    </section>

    <section anchor="motivation">
      <name>Motivation and Problem Statement</name>
      <t>Existing OAM mechanisms, such as those defined in <xref target="RFC7276"/>, are primarily optimized for network-layer connectivity verification and path-level performance monitoring. However, the CATS <xref target="RFC10053"/> introduces a multidimensional decision-making process. An OAM framework is required to be capable of perceiving both network transport characteristics and service-level operational capabilities.</t>
      <t>The primary objective of a CATS-specific OAM framework is to ensure that traffic steering decisions are aligned with the real-time operational status of distributed computing resources. This is critical to prevent "service black-holing" (i.e., traffic reaches a network-reachable node but hits a functionally non-functional service instance), a condition where traffic is steered to a service instance that remains reachable at the network layer, but is functionally unresponsive or degraded at the application level.</t>
      <t>In the absence of a dedicated OAM framework for CATS, several critical gaps persist:</t>
      <ul>
        <li>
          <t>Distinguishing Network Reachability from Service Availability: Traditional network OAM protocols (e.g., Bidirectional Forwarding Detection (BFD) <xref target="RFC5880"/>, Internet Control Message Protocol (ICMP) <xref target="RFC4443"/>, Two-Way Active Measurement Protocol (TWAMP) <xref target="RFC5357"/>) verify the liveness of the routing path and the operational status of the node's IP interface on network nodes. However, these mechanisms operate at the network layer and lack the necessary granularity to assess the health of a specific service instance hosted on a given node. As a result, the CATS Path Selector (C-PS) may continue to direct traffic toward a node that remains network-reachable, even when the application process on that node has crashed, deadlocked, or exhausted its resource limits, ultimately rendering the service unavailable.</t>
        </li>
        <li>
          <t>Addressing the Volatility of Computing Metrics: Computing metrics (e.g., CPU utilization, active thread count, and task queue depth) exhibit significantly higher volatility compared to network topology states. Standard control-plane advertisement or polling-based collection mechanisms are often unable to provide the update frequency required to capture such transient spikes (i.e., micro-bursts, transient short-term load spikes), thereby introducing stale telemetry data. This synchronization latency can, in turn, lead to sub-optimal steering decisions, increased traffic flapping, and degraded consistency of client experience.</t>
        </li>
        <li>
          <t>Precise Localization of End-to-end Faults: When E2E service degradation occurs (e.g., increased response latency), current OAM tools cannot natively distinguish between network-induced bottlenecks (e.g., path congestion) and compute-induced bottlenecks (e.g., resource exhaustion at the Service Instance (SI)). This ambiguity hampers rapid fault localization, significantly increases the Mean Time to Repair (MTTR), and complicates Service Level Agreement (SLA) enforcement in deployments spanning multi-vendor environments within a single CATS domain.</t>
        </li>
        <li>
          <t>Verifying the Network and Computing Metrics: Network metrics (e.g., one-way delay, jitter, packet loss) and computing metrics (e.g., CPU utilization, memory watermark) characterize fundamentally distinct dimensions of service delivery. The verification results serve for the C-PS, ensuring that the computed composite cost accurately reflects the real-time operational status of both the network and computing metrics. Such validation is critical to preserving the determinism and overall reliability of path computation in CATS.</t>
        </li>
      </ul>
    </section>

    <section anchor="framework">
      <name>CATS OAM Framework</name>
      <section anchor="layering-model">
        <name>CATS OAM Layering Model</name>
        <t>The CATS OAM hierarchical model leverages the principles of Maintenance Domain (MD) levels, as defined in IEEE 802.1ag and ITU-T Y.1731, to extend traditional connectivity and performance management into the computing environment. This framework enables CATS-Forwarders and underlying network nodes to perform integrated anomaly detection and performance monitoring.</t>
        <t>Based on the scope of awareness and functional granularity, the CATS OAM mechanisms are organized into four distinct layers: Link OAM, Path OAM, Instance OAM, and Service OAM. The architecture is illustrated in Figure 1.</t>
        <figure anchor="fig-layering">
          <name>CATS OAM Layering Model</name>
          <artwork type="ascii-art"><![CDATA[
      +------+ +------------+   +----------+   +-----------+   +--------+
      |client+-+  CATS-     +---+underlay  +---+  CATS-    +---+service |
      |      | | Forwarder 1|   |  nodes   |   |Forwarder 2|   |instance|
      +------+ +------------+   +----------+   +-----------+   +--------+
               o-------------------- Service OAM(E2E)  ---------------o
               o------------o---o--- Service OAM(TRACE)--o---o--------o
                                             o---- Instance OAM ------o
               o--------------- Path OAM ----------------o
                            o---o        o---o           o---o Link OAM
          ]]></artwork>
        </figure>
        <t>In Figure 1, Service OAM (TRACE) performs hop-by-hop inspection over the forwarding path between ingress CATS-Forwarder and service instance.</t>
        <ul>
          <li>
            <t>Link OAM: This layer is targeted at the detection of the operational status of physical links or single-hop IP interfaces, serving as the foundational underlay infrastructure in the CATS framework <xref target="RFC10053"/>. It covers both internal links within the operator's infrastructure and external interfaces interconnecting network and compute environments. The primary objective is to monitor the health and availability of the link between two adjacent devices, so as to ensure basic IP reachability. Common detection tools include IEEE 802.3ah (Ethernet EFM), ICMP <xref target="RFC4443"/>, and single-hop BFD <xref target="RFC5881"/>. These tools serve complementary roles: EFM monitors the physical layer status of the Ethernet link, ICMP provides basic reachability verification, and BFD enables rapid failure detection for IP connectivity.</t>
          </li>
          <li>
            <t>Path OAM: This layer focuses on the monitoring of the paths between an ingress CATS-Forwarder and an egress CATS-Forwarder in CATS framework <xref target="RFC10053"/>. As an aggregate path which typically carries multiple services, Path OAM is critical for ensuring that network-layer faults or resource contention from traffic multiplexing do not degrade specific service performance. Fault detection and performance monitoring are executed at the Label Switched Path (LSP) or Segment Routing (SR) path layer <xref target="RFC8402"/> to facilitate rapid service protection. The existing detection mechanisms include ITU-T Y.1711, MPLS Loss and Delay Measurement (LM-DM) <xref target="RFC6374"/>, and BFD for LSP.</t>
          </li>
          <li>
            <t>Instance OAM: This layer is dedicated to the status monitoring of computing resource and the operational health of service instances in CATS framework <xref target="RFC10053"/>. The metrics collected at this layer, such as CPU load and memory availability, are defined in <xref target="I-D.ietf-cats-metric-definition"/>. Monitoring mechanisms MUST support flexible implementation modes, including a Push Mode, where computing nodes report dynamic load status in real-time, and a Pull Mode, where the egress CATS-Forwarder proactively retrieves computing metrics by extending the existing OAM mechanisms. The two modes can be deployed independently or enabled simultaneously.</t>
          </li>
          <li>
            <t>Service OAM: This layer provides either E2E or trace performance measurement and fault detection between the ingress CATS-Forwarder and the target SI, as defined in the CATS framework <xref target="RFC10053"/>. In addition to basic reachability verification, it is responsible to monitor the service-specific liveness, transaction success rates, and application-layer latency, thereby ensuring consistent end-to-end Quality of Experience (QoE). In trace mode, it can be used for fault localization. The supported mechanisms include active probes, such as TWAMP <xref target="RFC5357"/>, STAMP <xref target="RFC8762"/> (including optional extensions <xref target="RFC8972"/>), application-aware probing, and HTTP-based health checks, as well as in-band flow detection. In-band flow detection includes both data-carrying on-path telemetry, such as In-situ OAM (IOAM) <xref target="RFC9197"/> (see deployment considerations in <xref target="RFC9378"/>), and marking-based passive/hybrid measurement, such as Alternate Marking (coloring) <xref target="RFC8321"/>. Active probe mode is suitable for on-demand reachability, liveness verification, and synthetic SLA measurement. In-band flow detection observes or derives OAM data from the actual service traffic along the forwarding path, and is suitable for continuous performance measurement, path/trace correlation, and fault localization when synthetic probes are insufficient or unsuitable. Active probe mode and in-band flow detection mode can be deployed independently or enabled simultaneously. The mechanism set is designed to be extensible to accommodate emerging application-specific requirements.</t>
          </li>
        </ul>
      </section>

      <section anchor="components">
        <name>CATS OAM Components</name>
        <t>In accordance with Section 5.2 of the CATS framework <xref target="RFC10053"/>, the CATS OAM layering model is designed to flexibly accommodate diverse OAM detection mechanisms. As described in Section 5.1, among the four OAM layers, Link OAM and Path OAM are already supported by existing mechanisms. Accordingly, this document proposes two new sets of components corresponding to the remaining two layers, namely, Instance OAM and Service OAM. These two newly introduced components can be integrated, upon deployment, with the existing entities defined in the CATS framework <xref target="RFC10053"/>. Furthermore, the specific protocol implementations for Instance OAM and Service OAM are outside the scope of this document. In principle, however, existing protocols and their corresponding extensions should be preferred whenever possible.</t>

        <section anchor="instance-oam-comp">
          <name>Instance OAM Component</name>
          <t>The Instance OAM component is responsible for monitoring the operational status and computing capabilities of individual service instances. It facilitates granular perception of service instance availability and performance. Its key functions include:</t>
          <ul>
            <li>
              <t>Status Monitoring: The mechanism is responsible for periodically verifying the availability and operational state (e.g., active, inactive, or maintenance mode) of a specific service instance. This process is executed between an egress CATS-Forwarder and its associated service instance to ensure real-time reachability and prevent traffic from being steered to an unavailable or degraded target.</t>
            </li>
            <li>
              <t>Computing Metric Collection: The process is responsible for gathering real-time computing resource telemetry from the service instance or its hosting environment. Relevant metrics are defined in <xref target="I-D.ietf-cats-metric-definition"/>. Note that Instance OAM can also be the data source and enabler for the CATS Service Metric Agent (C-SMA), acting as the measurement executor while C-SMA serves as the information reporter. It provides normalized computing telemetry to the C-SMA. This function ensures that raw resource data is translated into a consistent format to support the dynamic update of computing-aware traffic steering policies within the CATS control plane.</t>
            </li>
          </ul>
          <t>As specified in Section 5.1, Instance OAM supports both Push Mode and Pull Mode. When inconsistencies are detected between the values obtained via the two modes, the system MUST be capable of detecting such inconsistency. This document does not mandate a single conflict resolution strategy, as the optimal approach depends on deployment scenarios.</t>
          <t>It is RECOMMENDED to log inconsistency events before applying any resolution actions.</t>
          <t>Instance OAM does not instrument application-internal logic. It monitors the operational status and computing resource telemetry exposed by the service instance or its hosting environment (e.g., VM, container, or orchestrator). Instance OAM does not inspect application payload or internal business logic; it only consumes monitoring data exposed by platform interfaces. Active probes from the egress CATS-Forwarder verify endpoint liveness and reachability, not application-internal behavior. In virtualized environments, computing metrics are collected via platform management interfaces or sidecar agents, rather than by probing application internals.</t>
        </section>

        <section anchor="service-oam-comp">
          <name>Service OAM Component</name>
          <t>The Service OAM component provides E2E visibility and performance assessment for a CATS service across the entire delivery path, originating from an ingress CATS-Forwarder to the target service instances. Its key functions include:</t>
          <ul>
            <li>
              <t>Policy Verification: Ensuring that the actual traffic forwarding path from the ingress CATS-Forwarder to the selected service instance aligns with the steering decisions made by the C-PS.</t>
            </li>
            <li>
              <t>Joint Performance Measurement: Measuring E2E performance metrics, such as total latency (the sum of network transmission time and service processing time) and jitter, to verify SLA compliance.</t>
            </li>
            <li>
              <t>Multi-Layer Fault Isolation: Correlating Link OAM, Path OAM, Instance OAM, and Service OAM within a single CATS domain to differentiate whether service degradation is caused by network transport bottlenecks (e.g., path congestion, link failure) or computing resource exhaustion (e.g., CPU saturation, memory depletion) at the Service Instance.</t>
            </li>
          </ul>
        </section>
      </section>

      <section anchor="workflows">
        <name>CATS OAM Workflows and Mechanisms Considerations</name>
        <t>This section provides a non-exhaustive mapping of candidate mechanisms considerations per OAM layer and illustrates how Instance OAM and Service OAM function together to enable CATS-specific fault isolation and policy verification.</t>
        <table>
          <thead>
            <tr>
              <th>Layer</th>
              <th>Example mechanisms</th>
              <th>Primary data/consumer</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td>Link OAM</td>
              <td>EFM, ICMP, single-hop BFD</td>
              <td>Link state, reachability</td>
            </tr>
            <tr>
              <td>Path OAM</td>
              <td>Y.1711, MPLS LM/DM, BFD-LSP</td>
              <td>Path loss/delay, path state</td>
            </tr>
            <tr>
              <td>Instance OAM</td>
              <td>Active liveness probe, Telemetry pull/push</td>
              <td>SI state, CPU/mem/queue, reported to C-SMA</td>
            </tr>
            <tr>
              <td>Service OAM</td>
              <td>TWAMP, STAMP, HTTP-based health check, Application-aware probe; In-band: IOAM, Alternate Marking (coloring); Trace mode</td>
              <td>E2E latency/loss, policy verification, localization</td>
            </tr>
          </tbody>
        </table>
          <ul>
            <li>
        <t>Instance OAM Workflow: The egress CATS-Forwarder maintains the binding between the CS-ID and the target service instance endpoint, verifies the SI liveness, and collects computing metrics. The collected metrics are normalized and reported to the C-SMA, which makes them available to the C-PS. If Push Mode and Pull Mode yield inconsistent values, the SI SHOULD be marked as requiring revalidation and the inconsistency SHOULD be reported. This document does not specify revalidation timer values; revalidation timing is implementation- and configuration-driven.</t>
           </li>
		  <li>
        <t>Service OAM Workflow: In active probe mode, the ingress CATS-Forwarder sends a Service OAM probe carrying the CS-ID toward the selected service instance. The probe follows the same steering policy as the service traffic. In in-band flow detection mode, OAM data is carried in, or derived from, the actual service traffic along the same path. For IOAM, telemetry data is recorded in the packet as it traverses the path; for Alternate Marking, service packets are marked/colored to form blocks, enabling passive or hybrid measurement of loss, delay, and delay variation on live traffic. E2E latency, jitter, loss, and service liveness are measured and compared with the SLA and the C-PS decision. When degradation is detected, Link OAM, Path OAM, Instance OAM, and Service OAM results are correlated by timestamp and CS-ID to classify the fault as network-induced, compute-induced, or compound.</t>

           </li>
		  <li>
        <t>Forwarding Consistency Check: The OAM system compares the actual forwarding path and target SI with the C-PS decision. Any mismatch between the intended steering policy and the observed forwarding state MUST trigger an alarm and re-synchronization, as specified in Section 6.3 (M-REQ-3).</t>
      </li>
	  </ul>
	  </section>
    </section>

    <section anchor="requirements">
      <name>CATS OAM Requirements</name>
      <t>This section specifies the OAM requirements for CATS, adhering to the operational and management guidelines defined in <xref target="I-D.draft-ietf-opsawg-rfc5706bis"/>. CATS OAM must bridge the gap between traditional network connectivity checks and the awareness of computing resource availability.</t>

      <section anchor="operation">
        <name>Operation</name>
        <t>The operation requirements include the generating and collecting metrics, as well as real-time reporting of the combined network and computing status.</t>
        <ul>
          <li>
            <t>O-REQ-1: Multi-Dimensional Status Monitoring. The system MUST support the collection of both network metrics (latency, jitter, packet loss) and computing metrics (e.g., processing capacity, load, and availability) defined in <xref target="I-D.ietf-cats-metric-definition"/>. To balance precision and control plane overhead, the system SHOULD support both periodic and threshold-triggered reporting.</t>
          </li>
          <li>
            <t>O-REQ-2: Service ID and Location Mapping. The OAM component MUST maintain the binding between a Service ID (representing the service instance) and its specific network location (e.g., egress CATS-Forwarder). OAM mechanisms MUST be able to target or associate with specific service instances to verify that the traffic steering policy correctly reaches the intended destination.</t>
          </li>
          <li>
            <t>O-REQ-3: Telemetry Integration with C-SMA. All collected computing metrics SHOULD be reported to the C-SMA. This ensures that the C-PS has access to synchronized telemetry to perform real-time path computation and selection.</t>
          </li>
          <li>
            <t>O-REQ-4: Computing Metric Freshness Handling. Computing metrics SHOULD be accompanied by timestamps indicating the time of collection. This enables the C-SMA or C-PS to optionally configure a maximum acceptable staleness threshold for each metric type to determine subsequent handling.</t>
          </li>
        </ul>
      </section>

      <section anchor="administration">
        <name>Administration</name>
        <t>The administration requirements include policy definition, security boundary enforcement, and the configuration of steering behaviors.</t>
        <ul>
          <li>
            <t>A-REQ-1: Policy-Based Steering Configuration. The system MUST allow administrators to define CATS-specific policies, such as weighting factors for network vs. computing metrics. These policies dictate how the C-PS interprets raw telemetry when calculating the "best" service instance.</t>
          </li>
          <li>
            <t>A-REQ-2: Differentiated Monitoring Intensity. Based on the SLA, the system SHOULD support variable OAM intensities. High-priority services (e.g., autonomous driving or remote surgery) may require millisecond-level BFD-like monitoring, while standard web services use lower-frequency heartbeats.</t>
          </li>
          <li>
            <t>A-REQ-3: Security and Metric Integrity. Reporting of computing and network metrics MUST be protected via encryption and authentication. This prevents malicious actors from injecting "fake" high-performance metrics to attract and intercept traffic (sinkhole attacks) or triggering oscillations in the CATS-Forwarder.</t>
          </li>
        </ul>
      </section>

      <section anchor="maintenance">
        <name>Maintenance</name>
        <t>The maintenance requirements include fault isolation, performance backtracking, and steering state consistency assurance.</t>
        <ul>
          <li>
            <t>M-REQ-1: Joint Fault Demarcation. The system MUST be able to distinguish whether a service failure is caused by a network-layer issue (e.g., connectivity loss between CATS-Forwarders) or computing resource exhaustion at the Service Instance. This requires the correlation of multi-layer OAM data, including Link OAM, Path OAM, Instance OAM, and Service OAM, to accurately isolate the fault type.</t>
          </li>
          <li>
            <t>M-REQ-2: Historical Traceability. The OAM system SHOULD record historical snapshots of both network paths and computing status. This is critical for post-mortem analysis of "flapping" steering decisions where traffic frequently oscillates between different service instances.</t>
          </li>
          <li>
            <t>M-REQ-3: Forwarding Plane Consistency Check. The system MUST provide mechanisms to verify that the actual traffic path taken by a packet matches the decision made by the C-PS. Any inconsistency between the intended steering policy and the actual forwarding state MUST trigger an immediate alarm and re-synchronization.</t>
          </li>
        </ul>
      </section>
    </section>

    <section anchor="deployment">
      <name>CATS OAM Deployment Consideration</name>
      <section anchor="deployment-locations">
        <name>Deployment Locations</name>
        <t>Service OAM: Primarily deployed between the ingress CATS-Forwarder and the target Service Instance, providing end-to-end service quality measurement. In specific scenarios (e.g., fault localization), deployment or cooperative probing at intermediate nodes such as the egress CATS-Forwarder may be performed as appropriate.</t>
        <t>Instance OAM: Deployed between the egress CATS-Forwarder and its associated service instances. Its deployment modes are classified into active and passive:</t>
        <ul>
          <li><t>Active mode: The OAM originator resides at the egress CATS-Forwarder, while the reflector resides at the service instance.</t></li>
          <li>
            <t>Passive mode: The deployment endpoint (either the egress CATS-Forwarder or the service instance) may be flexibly selected according to the specific implementation.</t>
          </li>
        </ul>
      </section>

      <section anchor="config-params">
        <name>Configuration Parameters</name>
        <t>The specific configuration requirements for Service OAM are as follows:</t>
        <ul>
          <li><t>SLA Target Parameters: Define explicit performance objectives (e.g., latency, packet loss rate, throughput) for end-to-end paths, serving as the basis for policy verification and alarm triggering.</t></li>
          <li><t>Service ID Mapping: OAM mechanisms (e.g., active probes or in-band flow detection) MUST be associated with a distinct CATS Service Identifier (CS-ID) to ensure that OAM measurement is fully aligned with service traffic, thereby enabling verification of the correctness of CATS traffic policies. For in-band flow detection, the CS-ID may be associated through flow classification, encapsulation, or other binding mechanisms, which are outside the scope of this document.</t></li>
        </ul>
        <t>The specific configuration requirements for Instance OAM are as follows:</t>
        <ul>
          <li><t>Instance Location and Identification: Configure the network address (IP address, port number, etc.) of the target Service Instance as the destination for OAM probing.</t></li>
          <li>
            <t>Compute Metric Collection Policy: Configure the collection granularity (e.g., collection interval, sampling period) and reporting mode (Push or Pull) for compute resource metrics including CPU, GPU, and memory.</t>
          </li>
        </ul>
      </section>
      </section>	  

    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>This section covers OAM-specific security. General CATS threats are addressed in <xref target="I-D.draft-wang-cats-security-considerations"/>.</t>
      <section anchor="protection">
        <name>Protection of OAM Metric Reporting Channel</name>
        <t>Per Section 6.2 (A-REQ-3), OAM implementations follow the metric security mechanisms:</t>
        <ul>
          <li><t>All OAM metric reports (e.g., Service OAM and Instance OAM) MUST be authenticated and integrity-protected.</t></li>
          <li><t>The reporting channel SHOULD provide confidentiality for sensitive information (e.g., service instance locations).</t></li>
          <li>
            <t>OAM control messages MUST be protected against replay attacks.</t>
          </li>
        </ul>
      </section>
      <section anchor="oam-specific">
        <name>OAM-Specific Considerations</name>
        <ul>
          <li>
            <t>When in-band flow detection is employed for Service OAM, it MUST NOT leak any client-identifiable information. For IOAM, implementations SHOULD adhere to the security guidelines, including integrity and encryption, as specified in <xref target="RFC9197"/>. For Alternate Marking, the marking bits and associated measurement data SHOULD be protected against tampering that could falsify loss or delay results.</t>
          </li>
          <li><t>OAM systems SHOULD collect only metrics necessary for the telemetry purpose.</t></li>
        </ul>
      </section>
    </section>

    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <t>This document does not currently require any IANA actions.</t>
    </section>

    <section anchor="acknowledgements">
      <name>Acknowledgements</name>
      <t>The authors would like to thank Adrian Farrel, Peng Liu, Erum Welling, Cheng Li, Guanming Zeng, Haomian Zheng, Chuanyang Miao, Bin Zhang, Xueyan Mao, Jipeng Zhang and Shuai Zhang for their review, suggestions and comments to this document.</t>
    </section>
  </middle>
  <back>
    <references>
      <name>References</name>
      <references>
        <name>Normative References</name>
	       <reference anchor="RFC10053">
          <front>
            <title>A Framework for Computing-Aware Traffic Steering (CATS)</title>
            <author fullname="C. Li" initials="C." role="editor" surname="Li"/>
            <author fullname="Z. Du" initials="Z." surname="Du"/>
            <author fullname="M. Boucadair" initials="M." role="editor" surname="Boucadair"/>
            <author fullname="L. M. Contreras" initials="L. M." surname="Contreras"/>
            <author fullname="J. Drake" initials="J." surname="Drake"/>
            <date month="October" year="2026"/>
            <abstract>
              <t>This document describes a framework for Computing-Aware Traffic
 Steering (CATS). Specifically, the document identifies a set of CATS
 functional components, describes their interactions, and provides
 illustrative workflows of the control and data planes. The framework
 covers only the case of a single service provider.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="10053"/>
          <seriesInfo name="DOI" value="10.17487/RFC10053"/>
        </reference>
        <reference anchor="RFC10054">
          <front>
            <title>Computing-Aware Traffic Steering (CATS) Problem Statement, Use Cases, and Requirements</title>
            <author fullname="K. Yao" initials="K." surname="Yao"/>
            <author fullname="L. M. Contreras" initials="L. M." surname="Contreras"/>
            <author fullname="H. Shi" initials="H." surname="Shi"/>
            <author fullname="S. Zhang" initials="S." surname="Zhang"/>
            <author fullname="Q. An" initials="Q." surname="An"/>
            <date month="October" year="2026"/>
            <abstract>
              <t>Distributed computing enhances service response time and energy efficiency by utilizing diverse computing facilities for compute-intensive and delay-sensitive services. To optimize throughput and response time, Computing-Aware Traffic Steering (CATS) selects servers and directs traffic based on compute capabilities and resources, rather than static dispatch or connectivity metrics alone. This document outlines the problem statement and scenarios for CATS within a single domain and drives requirements for the CATS framework.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="10054"/>
          <seriesInfo name="DOI" value="10.17487/RFC10054"/>
        </reference>
        <reference anchor="I-D.draft-ietf-opsawg-rfc5706bis">
          <front>
            <title>Guidelines for Considering Operations and Management in IETF Specifications</title>
            <author initials="B." surname="Claise" fullname="Benoit Claise"/>
            <author initials="J." surname="Clarke" fullname="John Clarke"/>
            <author initials="A." surname="Farrel" fullname="Adrian Farrel"/>
            <author initials="S." surname="Barguil" fullname="Sergio Barguil"/>
            <author initials="C." surname="Pignataro" fullname="Carlos Pignataro"/>
            <author initials="R." surname="Chen" fullname="R. Chen"/>
            <date year="2026" month="March" day="15"/>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-opsawg-rfc5706bis-04"/>
        </reference>
        <reference anchor="I-D.ietf-cats-metric-definition">
          <front>
            <title>CATS Metrics Definition</title>
            <author initials="K." surname="Yao" fullname="Kai Yao"/>
            <author initials="C." surname="Li" fullname="Cheng Li"/>
            <author initials="L." surname="Contreras" fullname="Luis M. Contreras"/>
            <author initials="J." surname="Ros-Giralt" fullname="Jordi Ros-Giralt"/>
            <author initials="G." surname="Zeng" fullname="Guanming Zeng"/>
            <date year="2026" month="May" day="15"/>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-cats-metric-definition-08"/>
        </reference>
        <reference anchor="RFC2119">
          <front>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author initials="S." surname="Bradner" fullname="S. Bradner"/>
            <date year="1997" month="March"/>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
        </reference>
        <reference anchor="RFC4656">
          <front>
            <title>A One-way Active Measurement Protocol (OWAMP)</title>
            <author initials="S." surname="Shalunov" fullname="S. Shalunov"/>
            <author initials="B." surname="Teitelbaum" fullname="B. Teitelbaum"/>
            <author initials="A." surname="Karp" fullname="A. Karp"/>
            <author initials="J." surname="Boote" fullname="J. Boote"/>
            <author initials="M." surname="Zekauskas" fullname="M. Zekauskas"/>
            <date year="2006" month="September"/>
          </front>
          <seriesInfo name="RFC" value="4656"/>
        </reference>
        <reference anchor="RFC7276">
          <front>
            <title>An Overview of Operations, Administration, and Maintenance (OAM) Tools</title>
            <author initials="T." surname="Mizrahi" fullname="T. Mizrahi"/>
            <author initials="N." surname="Sprecher" fullname="N. Sprecher"/>
            <author initials="E." surname="Bellagamba" fullname="E. Bellagamba"/>
            <author initials="Y." surname="Weingarten" fullname="Y. Weingarten"/>
            <date year="2014" month="June"/>
          </front>
          <seriesInfo name="RFC" value="7276"/>
        </reference>
        <reference anchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author initials="B." surname="Leiba" fullname="B. Leiba"/>
            <date year="2017" month="May"/>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
        </reference>
        <reference anchor="RFC8402">
          <front>
            <title>Segment Routing Architecture</title>
            <author initials="C." surname="Filsfils" fullname="C. Filsfils" role="editor"/>
            <author initials="S." surname="Previdi" fullname="S. Previdi" role="editor"/>
            <author initials="L." surname="Ginsberg" fullname="L. Ginsberg"/>
            <author initials="B." surname="Decraene" fullname="B. Decraene"/>
            <author initials="S." surname="Litkowski" fullname="S. Litkowski"/>
            <author initials="R." surname="Shakir" fullname="R. Shakir"/>
            <date year="2018" month="July"/>
          </front>
          <seriesInfo name="RFC" value="8402"/>
        </reference>
        <reference anchor="RFC8754">
          <front>
            <title>IPv6 Segment Routing Header (SRH)</title>
            <author initials="C." surname="Filsfils" fullname="C. Filsfils" role="editor"/>
            <author initials="D." surname="Dukes" fullname="D. Dukes" role="editor"/>
            <author initials="S." surname="Previdi" fullname="S. Previdi"/>
            <author initials="J." surname="Leddy" fullname="J. Leddy"/>
            <author initials="S." surname="Matsushima" fullname="S. Matsushima"/>
            <author initials="D." surname="Voyer" fullname="D. Voyer"/>
            <date year="2020" month="March"/>
          </front>
          <seriesInfo name="RFC" value="8754"/>
        </reference>
        <reference anchor="RFC9378">
          <front>
            <title>In Situ Operations, Administration, and Maintenance (IOAM) Deployment</title>
            <author initials="F." surname="Brockners" fullname="F. Brockners" role="editor"/>
            <author initials="S." surname="Bhandari" fullname="S. Bhandari" role="editor"/>
            <author initials="D." surname="Bernier" fullname="D. Bernier"/>
            <author initials="T." surname="Mizrahi" fullname="T. Mizrahi" role="editor"/>
            <date year="2023" month="April"/>
          </front>
          <seriesInfo name="RFC" value="9378"/>
        </reference>
        <reference anchor="RFC8762">
          <front>
            <title>Simple Two-Way Active Measurement Protocol</title>
            <author initials="G." surname="Mirsky" fullname="G. Mirsky"/>
            <author initials="H." surname="Song" fullname="H. Song"/>
            <author initials="D." surname="Trossen" fullname="D. Trossen"/>
            <author initials="S." surname="Wang" fullname="S. Wang"/>
            <date year="2020" month="March"/>
          </front>
          <seriesInfo name="RFC" value="8762"/>
        </reference>
        <reference anchor="RFC8972">
          <front>
            <title>Simple Two-Way Active Measurement Protocol Optional Extensions</title>
            <author initials="G." surname="Mirsky" fullname="G. Mirsky"/>
            <author initials="X." surname="Min" fullname="X. Min"/>
            <author initials="H." surname="Song" fullname="H. Song"/>
            <date year="2021" month="January"/>
          </front>
          <seriesInfo name="RFC" value="8972"/>
        </reference>
      </references>

      <references>
        <name>Informative References</name>
        <reference anchor="I-D.draft-wang-cats-security-considerations">
          <front>
            <title>Security Considerations for Computing-Aware Traffic Steering</title>
            <author initials="J." surname="Shi" fullname="J. Shi"/>
            <author initials="C." surname="Wang" fullname="C. Wang"/>
            <author initials="Y." surname="Fu" fullname="Y. Fu"/>
            <date year="2026" month="March" day="2"/>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-wang-cats-security-considerations-04"/>
        </reference>
        <reference anchor="RFC4443">
          <front>
            <title>Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification</title>
            <author initials="A." surname="Conta" fullname="A. Conta"/>
            <author initials="S." surname="Deering" fullname="S. Deering"/>
            <author initials="M." surname="Gupta" fullname="M. Gupta" role="editor"/>
            <date year="2006" month="March"/>
          </front>
          <seriesInfo name="STD" value="89"/>
          <seriesInfo name="RFC" value="4443"/>
        </reference>
        <reference anchor="RFC5357">
          <front>
            <title>A Two-Way Active Measurement Protocol (TWAMP)</title>
            <author initials="K." surname="Hedayat" fullname="K. Hedayat"/>
            <author initials="R." surname="Krzanowski" fullname="R. Krzanowski"/>
            <author initials="A." surname="Morton" fullname="A. Morton"/>
            <author initials="K." surname="Yum" fullname="K. Yum"/>
            <author initials="J." surname="Babiarz" fullname="J. Babiarz"/>
            <date year="2008" month="October"/>
          </front>
          <seriesInfo name="RFC" value="5357"/>
        </reference>
        <reference anchor="RFC5880">
          <front>
            <title>Bidirectional Forwarding Detection (BFD)</title>
            <author initials="D." surname="Katz" fullname="D. Katz"/>
            <author initials="D." surname="Ward" fullname="D. Ward"/>
            <date year="2010" month="June"/>
          </front>
          <seriesInfo name="RFC" value="5880"/>
        </reference>
        <reference anchor="RFC5881">
          <front>
            <title>Bidirectional Forwarding Detection (BFD) for IPv4 and IPv6 (Single Hop)</title>
            <author initials="D." surname="Katz" fullname="D. Katz"/>
            <author initials="D." surname="Ward" fullname="D. Ward"/>
            <date year="2010" month="June"/>
          </front>
          <seriesInfo name="RFC" value="5881"/>
        </reference>
        <reference anchor="RFC6374">
          <front>
            <title>Packet Loss and Delay Measurement for MPLS Networks</title>
            <author initials="D." surname="Frost" fullname="D. Frost"/>
            <author initials="S." surname="Bryant" fullname="S. Bryant"/>
            <date year="2011" month="September"/>
          </front>
          <seriesInfo name="RFC" value="6374"/>
        </reference>
        <reference anchor="RFC8321">
          <front>
            <title>Alternate-Marking Method for Passive and Hybrid Performance Monitoring</title>
            <author initials="G." surname="Fioccola" fullname="G. Fioccola"/>
            <author initials="A." surname="Capello" fullname="A. Capello"/>
            <author initials="M." surname="Cociglio" fullname="M. Cociglio"/>
            <author initials="L." surname="Castaldelli" fullname="L. Castaldelli"/>
            <author initials="M." surname="Chen" fullname="M. Chen"/>
            <author initials="L." surname="Zheng" fullname="L. Zheng"/>
            <author initials="G." surname="Mirsky" fullname="G. Mirsky"/>
            <author initials="T." surname="Mizrahi" fullname="T. Mizrahi"/>
            <date year="2018" month="January"/>
          </front>
          <seriesInfo name="RFC" value="8321"/>
        </reference>
        <reference anchor="RFC9197">
          <front>
            <title>Data Fields for In Situ Operations, Administration, and Maintenance (IOAM)</title>
            <author initials="F." surname="Brockners" fullname="F. Brockners" role="editor"/>
            <author initials="S." surname="Bhandari" fullname="S. Bhandari" role="editor"/>
            <author initials="T." surname="Mizrahi" fullname="T. Mizrahi" role="editor"/>
            <date year="2022" month="May"/>
          </front>
          <seriesInfo name="RFC" value="9197"/>
        </reference>
        <reference anchor="RFC9522">
          <front>
            <title>Overview and Principles of Internet Traffic Engineering</title>
            <author initials="A." surname="Farrel" fullname="A. Farrel" role="editor"/>
            <date year="2024" month="January"/>
          </front>
          <seriesInfo name="RFC" value="9522"/>
        </reference>
      </references>
    </references>
    <section anchor="contributors" numbered="false">
      <name>Contributors</name>
      <contact initials="D." surname="Huang" fullname="Daniel Huang">
        <organization>ZTE Corporation</organization>
        <address><email>huang.guangping@zte.com.cn</email></address>
      </contact>
      <contact initials="C." surname="Huang" fullname="Cheng Huang">
        <organization>ZTE Corporation</organization>
        <address><email>huang.cheng13@zte.com.cn</email></address>
      </contact>
      <contact initials="W." surname="Duan" fullname="Wei Duan">
        <organization>ZTE Corporation</organization>
        <address><email>duan.wei1@zte.com.cn</email></address>
      </contact>
    </section>
  </back>
</rfc>