OpenPacketCore SDK RFC Index
This directory contains the foundational RFCs for the OpenPacketCore SDK and CNF architecture. These documents are intended to be implementation inputs for engineers.
Foundation Set
| RFC | Title | Primary Scope |
|---|---|---|
| 001 | Transactional Management Substrate | Config commits, persistence, recovery, NACM boundary |
| 002 | YANG-to-Rust Projection | Codegen, RFC 7951, validation, memory layout |
| 003 | Security Substrate | SPIFFE, gNSI, tenant identity, keys, audit |
| 004 | High-Performance Session Store | Session state, leases, fencing, handover, geo-redundancy |
| 005 | Zero-Copy Protocol Framework | Parsers, codecs, lifetimes, fuzzing, spec tags |
| 006 | Conformance and Evidence Pipeline | SBOM, VEX, provenance, signing, known gaps |
| 007 | SBI Service Framework | TS 29.500/29.510, NRF, OAuth2, overload, retries |
| 008 | CNF Runtime Chassis | Startup, supervision, shutdown, health, resource budgets |
| 009 | Operator Lifecycle and Upgrade | CRDs, rollout, migration, drain, rollback |
| 010 | Data Governance and Privacy | Data classes, redaction, retention, LI, regulated records |
| 011 | Node and Data-Plane Resource Contract | SR-IOV, Multus, AF_XDP, CPU, NUMA, pod security |
| 012 | Testbed and Simulator Framework | Scenario DSL, simulators, fixtures, virtual time |
| 013 | Fault Management and Alarm Substrate | Alarms, severity, probable cause, FM sinks |
| 014 | Interactive Operational Console and Command Framework | CNF command catalogs, human login, typed operations, first-class TUI |
| 015 | Live SA Keymat Mirror | Keys-never-persist failover, standby custody, mTLS keymat transport, re-pin composition |
| 016 | Opaque Durable GTP-U Selector Namespace | Experimental durable whole-group selector authority, affine admissions, tombstones, eBPF control binding |
| 017 | Mixed Selector Provenance and Loss-Qualified Restore | Experimental mixed per-atom provenance and marker-retaining namespace restore under RFC 016's ledger |
Recommended Reading Order
- RFC 008: runtime chassis.
- RFC 003: security substrate.
- RFC 001: management substrate.
- RFC 002: YANG projection.
- RFC 007: SBI framework.
- RFC 004: session store.
- RFC 015: live SA keymat mirror.
- RFC 005: protocol framework.
- RFC 009: operator lifecycle.
- RFC 010: data governance.
- RFC 011: node/data-plane resources.
- RFC 013: fault management.
- RFC 014: interactive operational console.
- RFC 012: testbed framework.
- RFC 006: evidence pipeline.
- RFC 016: opaque durable GTP-U selector namespace (after RFC 004, RFC 006, RFC 011, ADR 0018, and ADR 0019).
- RFC 017: mixed selector provenance and loss-qualified restore (after RFC 016).
RFC 006 should be revisited after each implementation slice because it defines the evidence required to claim that the slice is complete.