<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE rfc [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">
]>
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
<!-- generated by https://github.com/cabo/kramdown-rfc version 1.6.39 (Ruby 3.2.2) -->
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" ipr="trust200902" docName="draft-ietf-core-comi-16" category="std" consensus="true" submissionType="IETF" tocInclude="true" sortRefs="true" symRefs="true" version="3">
  <!-- xml2rfc v2v3 conversion 3.18.0 -->
  <front>
    <title abbrev="CORECONF">CoAP Management Interface (CORECONF)</title>
    <seriesInfo name="Internet-Draft" value="draft-ietf-core-comi-16"/>
    <author initials="M. V." surname="Veillette" fullname="Michel Veillette" role="editor">
      <organization>Trilliant Networks Inc.</organization>
      <address>
        <postal>
          <street>610 Rue du Luxembourg</street>
          <city>Granby</city>
          <region>Quebec</region>
          <code>J2J 2V2</code>
          <country>Canada</country>
        </postal>
        <email>michel.veillette@trilliant.com</email>
      </address>
    </author>
    <author initials="P." surname="van der Stok" fullname="Peter van der Stok" role="editor">
      <organization abbrev="consultant">consultant</organization>
      <address>
        <phone>+31-492474673 (Netherlands), +33-966015248 (France)</phone>
        <email>stokcons@bbhmail.nl</email>
        <uri>www.vanderstok.org</uri>
      </address>
    </author>
    <author initials="A. P." surname="Pelov" fullname="Alexander Pelov">
      <organization>Acklio</organization>
      <address>
        <postal>
          <street>2bis rue de la Chataigneraie</street>
          <city>Cesson-Sevigne</city>
          <code>35510</code>
          <country>France</country>
        </postal>
        <email>a@ackl.io</email>
      </address>
    </author>
    <author initials="A." surname="Bierman" fullname="Andy Bierman">
      <organization>YumaWorks</organization>
      <address>
        <postal>
          <street>685 Cochran St.</street>
          <street>Suite #160</street>
          <city>Simi Valley</city>
          <region>CA</region>
          <code>93065</code>
          <country>USA</country>
        </postal>
        <email>andy@yumaworks.com</email>
      </address>
    </author>
    <author initials="C." surname="Bormann" fullname="Carsten Bormann" role="editor">
      <organization>Universität Bremen TZI</organization>
      <address>
        <postal>
          <street>Postfach 330440</street>
          <city>Bremen</city>
          <code>D-28359</code>
          <country>Germany</country>
        </postal>
        <phone>+49-421-218-63921</phone>
        <email>cabo@tzi.org</email>
      </address>
    </author>
    <date year="2023" month="September" day="04"/>
    <area>Applications</area>
    <workgroup>CoRE</workgroup>
    <abstract>
      <?line 106?>

<t>This document describes a network management interface for constrained devices
and networks, called CoAP Management Interface (CORECONF). The Constrained Application
Protocol (CoAP) is used to access datastore and data node resources specified
in YANG, or SMIv2 converted to YANG. CORECONF uses the YANG to CBOR mapping and converts
YANG identifier strings to numeric identifiers for payload size reduction.
CORECONF extends the set of YANG based
protocols, NETCONF and RESTCONF, with the capability to manage constrained devices
and networks.</t>
    </abstract>
    <note removeInRFC="true">
      <name>About This Document</name>
      <t>
        The latest revision of this draft can be found at <eref target="https://core-wg.github.io/comi/draft-ietf-core-comi.html"/>.
        Status information for this document may be found at <eref target="https://datatracker.ietf.org/doc/draft-ietf-core-comi/"/>.
      </t>
      <t>
        Discussion of this document takes place on the
        core Working Group mailing list (<eref target="mailto:core@ietf.org"/>),
        which is archived at <eref target="https://mailarchive.ietf.org/arch/browse/core/"/>.
        Subscribe at <eref target="https://www.ietf.org/mailman/listinfo/core/"/>.
      </t>
      <t>Source for this draft and an issue tracker can be found at
        <eref target="https://github.com/core-wg/comi"/>.</t>
    </note>
  </front>
  <middle>
    <?line 117?>

<section anchor="introduction">
      <name>Introduction</name>
      <t>The Constrained Application Protocol (CoAP) <xref target="RFC7252"/> is designed for
Machine to Machine (M2M) applications such as smart energy, smart city, and building control.
Constrained devices need to be managed in an automatic fashion to handle
the large quantities of devices that are expected in
future installations. Messages between devices need to be as small and
infrequent as possible. The implementation
complexity and runtime resources need to be as small as possible.</t>
      <t>This draft describes the CoAP Management Interface (CORECONF) which uses CoAP methods
to access structured data defined in YANG <xref target="RFC7950"/>. This draft is
complementary to <xref target="RFC8040"/> which describes a REST-like interface
called RESTCONF, which uses HTTP methods to access structured data
defined in YANG.</t>
      <t>The use of standardized data models specified in a standardized language, such
as YANG, promotes interoperability between devices and applications from
different manufacturers.</t>
      <t>CORECONF and RESTCONF are intended to work in a stateless client-server fashion.
They use a single round-trip to complete a single editing transaction, where
NETCONF needs multiple round trips.</t>
      <t>To promote small messages, CORECONF uses a YANG to CBOR mapping
<xref target="RFC9254"/> and numeric identifiers <xref target="I-D.ietf-core-sid"/>
to minimize CBOR payloads and URI length.</t>
      <section anchor="terminology">
        <name>Terminology</name>
        <t>The following terms are defined in the YANG data modeling language <xref target="RFC7950"/>: action, anydata, anyxml, client, container, data model, data node, identity, instance identifier, leaf, leaf-list, list, module, RPC, schema node, server, submodule.</t>
        <t>The following terms are defined in <xref target="RFC6241"/>: configuration data, datastore, state data.</t>
        <t>The following term is defined in <xref target="I-D.ietf-core-sid"/>: YANG schema item identifier (YANG SID, often shortened to simply SID).</t>
        <t>The following terms are defined in the CoAP protocol <xref target="RFC7252"/>: Confirmable Message, Content-Format, Endpoint.</t>
        <t>The following terms are defined in this document:</t>
        <dl>
          <dt>data node resource:</dt>
          <dd>
            <t>a CoAP resource that models a YANG data node.</t>
          </dd>
          <dt>datastore resource:</dt>
          <dd>
            <t>a CoAP resource that models a YANG datastore.</t>
          </dd>
          <dt>event stream resource:</dt>
          <dd>
            <t>a CoAP resource used by clients to observe YANG notifications.</t>
          </dd>
          <dt>notification instance:</dt>
          <dd>
            <t>An instance of a schema node of type notification, specified in a YANG module
implemented by the server. The instance is generated in the server at the occurrence
of the corresponding event and reported by an event stream resource.</t>
          </dd>
          <dt>list instance identifier:</dt>
          <dd>
            <t>Handle used to identify a YANG data node that is an instance of a YANG "list",
specified with the values of the key leaves of the list.</t>
          </dd>
          <dt>single instance identifier:</dt>
          <dd>
            <t>Handle used to identify a specific data node which can be instantiated only
once. This includes data nodes defined at the root of a YANG module and
data nodes defined within a container. This excludes data nodes defined
within a list or any children of these data nodes.</t>
          </dd>
          <dt>instance-identifier:</dt>
          <dd>
            <t>List instance identifier or single instance identifier.</t>
          </dd>
          <dt>instance-value:</dt>
          <dd>
            <t>The value assigned to a data node instance. Instance-values are serialized into
the payload according to the rules defined in <xref section="4" sectionFormat="of" target="RFC9254"/>.
In a yang-instances data item, the reference SID applying to the
instance-value is provided by the SID in the corresponding instance-identifier.</t>
          </dd>
        </dl>
        <t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>
        <?line -18?>

</section>
      <section anchor="example-syntax">
        <name>Example syntax</name>
        <t>CBOR is used to encode CORECONF request and response payloads. The CBOR syntax
of the YANG payloads is specified in <xref target="RFC9254"/>, based on <xref target="RFC8949"/>
and <xref target="RFC8742"/>.
The payload examples are
notated in Diagnostic notation (defined in <xref section="8" sectionFormat="of" target="RFC8949"/> and
<xref section="G" sectionFormat="of" target="RFC8610"/>), which
can be automatically converted to CBOR.</t>
      </section>
    </section>
    <section anchor="comi-architecture">
      <name>CORECONF Architecture</name>
      <t>This section describes the CORECONF architecture to use CoAP for reading and
modifying the content of datastore(s) used for the management of the instrumented
node.</t>
      <figure anchor="archit">
        <name>Abstract CORECONF architecture</name>
        <artset>
          <artwork type="svg" align="left"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" height="384" width="536" viewBox="0 0 536 384" class="diagram" text-anchor="middle" font-family="monospace" font-size="13px">
              <path d="M 8,32 L 8,64" fill="none" stroke="black"/>
              <path d="M 8,112 L 8,144" fill="none" stroke="black"/>
              <path d="M 8,192 L 8,272" fill="none" stroke="black"/>
              <path d="M 80,144 L 80,184" fill="none" stroke="black"/>
              <path d="M 128,192 L 128,272" fill="none" stroke="black"/>
              <path d="M 256,64 L 256,104" fill="none" stroke="black"/>
              <path d="M 320,192 L 320,368" fill="none" stroke="black"/>
              <path d="M 336,256 L 336,288" fill="none" stroke="black"/>
              <path d="M 336,320 L 336,352" fill="none" stroke="black"/>
              <path d="M 440,144 L 440,184" fill="none" stroke="black"/>
              <path d="M 512,256 L 512,288" fill="none" stroke="black"/>
              <path d="M 512,320 L 512,352" fill="none" stroke="black"/>
              <path d="M 528,32 L 528,64" fill="none" stroke="black"/>
              <path d="M 528,112 L 528,144" fill="none" stroke="black"/>
              <path d="M 528,192 L 528,368" fill="none" stroke="black"/>
              <path d="M 8,32 L 528,32" fill="none" stroke="black"/>
              <path d="M 8,64 L 528,64" fill="none" stroke="black"/>
              <path d="M 8,112 L 528,112" fill="none" stroke="black"/>
              <path d="M 8,144 L 528,144" fill="none" stroke="black"/>
              <path d="M 8,192 L 128,192" fill="none" stroke="black"/>
              <path d="M 320,192 L 528,192" fill="none" stroke="black"/>
              <path d="M 128,208 L 152,208" fill="none" stroke="black"/>
              <path d="M 296,208 L 312,208" fill="none" stroke="black"/>
              <path d="M 136,224 L 152,224" fill="none" stroke="black"/>
              <path d="M 296,224 L 320,224" fill="none" stroke="black"/>
              <path d="M 136,254 L 168,254" fill="none" stroke="black"/>
              <path d="M 136,258 L 168,258" fill="none" stroke="black"/>
              <path d="M 288,254 L 312,254" fill="none" stroke="black"/>
              <path d="M 288,258 L 312,258" fill="none" stroke="black"/>
              <path d="M 336,256 L 512,256" fill="none" stroke="black"/>
              <path d="M 8,272 L 128,272" fill="none" stroke="black"/>
              <path d="M 336,288 L 512,288" fill="none" stroke="black"/>
              <path d="M 336,320 L 512,320" fill="none" stroke="black"/>
              <path d="M 336,352 L 512,352" fill="none" stroke="black"/>
              <path d="M 320,368 L 528,368" fill="none" stroke="black"/>
              <polygon class="arrowhead" points="448,184 436,178.4 436,189.6 " fill="black" transform="rotate(90,440,184)"/>
              <polygon class="arrowhead" points="320,256 308,250.4 308,261.6 " fill="black" transform="rotate(0,312,256)"/>
              <polygon class="arrowhead" points="320,208 308,202.4 308,213.6 " fill="black" transform="rotate(0,312,208)"/>
              <polygon class="arrowhead" points="304,224 292,218.4 292,229.6 " fill="black" transform="rotate(180,296,224)"/>
              <polygon class="arrowhead" points="264,104 252,98.4 252,109.6 " fill="black" transform="rotate(90,256,104)"/>
              <polygon class="arrowhead" points="160,208 148,202.4 148,213.6 " fill="black" transform="rotate(0,152,208)"/>
              <polygon class="arrowhead" points="144,256 132,250.4 132,261.6 " fill="black" transform="rotate(180,136,256)"/>
              <polygon class="arrowhead" points="144,224 132,218.4 132,229.6 " fill="black" transform="rotate(180,136,224)"/>
              <polygon class="arrowhead" points="88,184 76,178.4 76,189.6 " fill="black" transform="rotate(90,80,184)"/>
              <g class="text">
                <text x="160" y="52">SMIv2</text>
                <text x="240" y="52">specification</text>
                <text x="340" y="52">(optional)</text>
                <text x="400" y="52">(2)</text>
                <text x="196" y="132">YANG</text>
                <text x="272" y="132">specification</text>
                <text x="352" y="132">(1)</text>
                <text x="36" y="180">Client</text>
                <text x="348" y="180">Server</text>
                <text x="88" y="212">Request</text>
                <text x="180" y="212">CoAP</text>
                <text x="244" y="212">request(3)</text>
                <text x="380" y="212">Indication</text>
                <text x="88" y="228">Confirm</text>
                <text x="180" y="228">CoAP</text>
                <text x="248" y="228">response(3)</text>
                <text x="372" y="228">Response</text>
                <text x="488" y="228">(4)</text>
                <text x="212" y="260">Security</text>
                <text x="264" y="260">(7)</text>
                <text x="396" y="276">Datastore(s)</text>
                <text x="488" y="276">(5)</text>
                <text x="368" y="340">Event</text>
                <text x="432" y="340">stream(s)</text>
                <text x="488" y="340">(6)</text>
              </g>
            </svg>
          </artwork>
          <artwork type="ascii-art" align="left"><![CDATA[
+----------------------------------------------------------------+
|                SMIv2 specification (optional) (2)              |
+------------------------------+---------------------------------+
                               |
                               v
+----------------------------------------------------------------+
|                     YANG specification  (1)                    |
+--------+--------------------------------------------+----------+
         |                                            |
 Client  v                              Server        v
+--------------+                       +-------------------------+
|      Request +--> CoAP request(3) -->|  Indication             |
|      Confirm |<-- CoAP response(3)<--+  Response         (4)   |
|              |                       |                         |
|              |<==== Security (7) ===>| +---------------------+ |
+--------------+                       | | Datastore(s)    (5) | |
                                       | +---------------------+ |
                                       |                         |
                                       | +---------------------+ |
                                       | | Event stream(s) (6) | |
                                       | +---------------------+ |
                                       +-------------------------+
]]></artwork>
        </artset>
      </figure>
      <t><xref target="archit"/> is a high-level representation of the main elements of the CORECONF management
architecture. The different numbered components of <xref target="archit"/> are discussed according to the component number.</t>
      <dl>
        <dt>(1) YANG specification:</dt>
        <dd>
          <t>contains a set of named and versioned modules.</t>
        </dd>
        <dt>(2) SMIv2 specification:</dt>
        <dd>
          <t>Optional part that consists of a named module which, specifies a set of variables and "conceptual tables". There
is an algorithm to translate SMIv2 specifications to YANG specifications.</t>
        </dd>
        <dt>(3) CoAP request/response messages:</dt>
        <dd>
          <t>The CORECONF client sends request messages to and receives response messages
from the CORECONF server.</t>
        </dd>
        <dt>(4) Request, Indication, Response, Confirm:</dt>
        <dd>
          <t>Processes performed by the CORECONF clients and servers.</t>
        </dd>
        <dt>(5) Datastore:</dt>
        <dd>
          <t>A resource used to access configuration data, state data, RPCs, and actions. A CORECONF server may support a single unified datastore or multiple datastores as those defined by Network Management Datastore Architecture (NMDA) <xref target="RFC8342"/>.</t>
        </dd>
        <dt>(6) Event stream:</dt>
        <dd>
          <t>A resource used to get real-time notifications. A CORECONF server may support multiple Event streams serving different purposes such as normal monitoring, diagnostic, syslog, security monitoring.</t>
        </dd>
        <dt>(7) Security:</dt>
        <dd>
          <t>The server <bcp14>MUST</bcp14> prevent unauthorized users from reading or writing any CORECONF
resources. CORECONF relies on security protocols such as DTLS <xref target="RFC6347"/><xref target="RFC9147"/> or OSCORE <xref target="RFC8613"/> to secure CoAP communications.</t>
        </dd>
      </dl>
      <section anchor="major-differences">
        <name>Major differences between RESTCONF and CORECONF</name>
        <t>CORECONF is a RESTful protocol for small devices where saving bytes to
transport a message is very important. Contrary to RESTCONF, many design
decisions are motivated by the
saving of bytes. Consequently, CORECONF is not a RESTCONF over CoAP protocol,
but differs more significantly from RESTCONF.</t>
        <section anchor="major-differences-coap">
          <name>Differences due to CoAP and its efficient usage</name>
          <ul spacing="normal">
            <li>CORECONF uses CoAP/UDP as transport protocol and CBOR as payload format
<xref target="RFC9254"/>. RESTCONF uses HTTP/TCP as transport
protocol and JSON or XML as payload formats.</li>
            <li>CORECONF uses the methods FETCH and iPATCH to access data nodes.
RESTCONF uses instead the HTTP method PATCH and the HTTP method GET with the "fields" Query parameter.</li>
            <li>RESTCONF uses the HTTP methods HEAD, and OPTIONS, which are not supported by CoAP.</li>
            <li>CORECONF does not support "insert" query parameter (first, last, before, after)
and the "point" query parameter which are supported by RESTCONF.</li>
            <li>CORECONF does not support the "start-time" and "stop-time" query parameters
to retrieve past notifications.</li>
          </ul>
        </section>
        <section anchor="major-differences-cbor">
          <name>Differences due to the use of CBOR</name>
          <ul spacing="normal">
            <li>CORECONF encodes YANG identifier strings as numbers, where RESTCONF does not.</li>
            <li>CORECONF also differs in the handling of default values, only 'report-all' and 'trim' options are supported.</li>
          </ul>
        </section>
      </section>
      <section anchor="id-compression">
        <name>Compression of YANG identifiers</name>
        <t>In the YANG specification, items are identified with a name string. In order
to significantly reduce the size of identifiers used in CORECONF, numeric
 identifiers called YANG Schema Item iDentifier (YANG SID or simply SID) are used instead.</t>
        <section anchor="instance-identifier">
          <name>Instance-identifiers</name>
          <t>Instance-identifiers are used to uniquely identify data node instances within a datastore. This YANG built-in type is defined in <xref section="9.13" sectionFormat="of" target="RFC7950"/>. An instance-identifier is composed of the data node identifier (i.e., a SID) and, for data nodes within list(s), the keys used to index within these list(s).</t>
          <t>In CORECONF, instance-identifiers are carried in the payload of FETCH
and PATCH requests.
They are encoded in CBOR
based on the rules defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>.</t>
        </section>
      </section>
      <section anchor="media-type">
        <name>Media-Types</name>
        <t>CORECONF uses Media-Types based on the YANG to CBOR mapping specified
in <xref target="RFC9254"/>.</t>
        <t>The following new Media-Types based on CBOR sequences <xref target="RFC8742"/> are defined in this document:</t>
        <dl>
          <dt>application/yang-identifiers+cbor-seq:</dt>
          <dd>
            <t>This Media-Type represents a CBOR YANG document containing a list of instance-identifiers used to target specific data node instances within a datastore.</t>
          </dd>
          <dt/>
          <dd>
            <t>FORMAT: CBOR sequence of instance-identifiers</t>
          </dd>
          <dt/>
          <dd>
            <t>The message payload of Media-Type 'application/yang-identifiers+cbor-seq' is encoded using a CBOR sequence.
Each item of this CBOR sequence contains an instance-identifier encoded as defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>.</t>
          </dd>
          <dt>application/yang-instances+cbor-seq:</dt>
          <dd>
            <t>This Media-Type represents a CBOR YANG document containing a list of data node instances.
Each data node instance is identified by its associated instance-identifier.</t>
          </dd>
          <dt/>
          <dd>
            <t>FORMAT: CBOR sequence of CBOR maps of instance-identifier, instance-value</t>
          </dd>
          <dt/>
          <dd>
            <t>The message payload of Media-Type 'application/yang-instances+cbor-seq' is encoded using a CBOR sequence.
Each item within this CBOR sequence contains a CBOR map carrying an instance-identifier and associated instance-value.
Instance-identifiers are encoded using the rules defined in <xref section="6.13.1" sectionFormat="of" target="RFC9254"/>, instance-values are encoded using the rules
defined in <xref section="4" sectionFormat="of" target="RFC9254"/>.
The reference SID applying to the instance-value is provided by the
SID in the instance-identifier.</t>
          </dd>
          <dt/>
          <dd>
            <t>When present in an iPATCH request payload, this Media-Type carry a list of data node instances to be replaced, created, or deleted.
For each data node instance D, for which the instance-identifier is the same as a data node instance I, in the targeted datastore resource: the value of D replaces the value of I.  When the value of D is null, the data node instance I is removed.  When the targeted datastore resource does not contain a data node instance with the same instance-identifier as D, a new instance is created with the same instance-identifier and value as D (unless the value of D is null).</t>
          </dd>
        </dl>
        <t>The different Media-Type usages are summarized in the table below:</t>
        <table align="left">
          <name>Summary of Media-Type Usages</name>
          <thead>
            <tr>
              <th align="left">Method</th>
              <th align="left">Resource</th>
              <th align="left">Media-Type</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">FETCH request</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-identifiers+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">FETCH response</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">iPATCH request</td>
              <td align="left">datastore</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">GET response</td>
              <td align="left">event stream</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">POST request</td>
              <td align="left">rpc, action</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
            <tr>
              <td align="left">POST response</td>
              <td align="left">rpc, action</td>
              <td align="left">application/yang-instances+cbor-seq</td>
            </tr>
          </tbody>
        </table>
      </section>
      <section anchor="unified-datastore">
        <name>Unified datastore</name>
        <t>CORECONF supports a simple datastore model consisting of a single unified datastore. This datastore provides access to both configuration and operational data. Configuration updates performed on this datastore are reflected immediately or with a minimal delay as operational data.</t>
        <t>Alternatively, CORECONF servers <bcp14>MAY</bcp14> implement a more complex datastore model such as the Network Management Datastore Architecture (NMDA) as defined by <xref target="RFC8342"/>. Each datastore supported is implemented as a datastore resource.</t>
        <t>Characteristics of the unified datastore are summarized in the table below:</t>
        <table align="left">
          <name>Characteristics of the Unified Datastore</name>
          <thead>
            <tr>
              <th align="left">Name</th>
              <th align="left">Value</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">Name</td>
              <td align="left">unified</td>
            </tr>
            <tr>
              <td align="left">YANG modules</td>
              <td align="left">all modules</td>
            </tr>
            <tr>
              <td align="left">YANG nodes</td>
              <td align="left">all data nodes ("config true" and "config false")</td>
            </tr>
            <tr>
              <td align="left">Access</td>
              <td align="left">read-write</td>
            </tr>
            <tr>
              <td align="left">How applied</td>
              <td align="left">changes applied in place immediately or with a minimal delay</td>
            </tr>
            <tr>
              <td align="left">Protocols</td>
              <td align="left">CORECONF</td>
            </tr>
            <tr>
              <td align="left">Defined in</td>
              <td align="left">"ietf-coreconf"</td>
            </tr>
          </tbody>
        </table>
      </section>
    </section>
    <section anchor="coap-interface">
      <name>CoAP Interface</name>
      <t>This document specifies a Management Interface. CoAP endpoints that
implement the CORECONF management protocol, support
at least one discoverable management resource of resource type (rt): core.c.ds.
The path of the discoverable management resource is left to implementers to
select (see <xref target="discovery"/>).</t>
      <t>YANG data node instances are accessible by performing FETCH and iPATCH
operations on the datastore resource.</t>
      <t>CORECONF also supports event stream resources used to observe notification instances.
Event stream resources can be discovered using resource type (rt): core.c.ev.</t>
      <t>The description of the CORECONF management interface is shown in the table below:</t>
      <table align="left" anchor="tbl-resources">
        <name>Resources, example paths, and resource types (rt)</name>
        <thead>
          <tr>
            <th align="left">CoAP resource</th>
            <th align="left">Example path</th>
            <th align="left">rt</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">Datastore resource</td>
            <td align="left">/c</td>
            <td align="left">core.c.ds</td>
          </tr>
          <tr>
            <td align="left">Default event stream resource</td>
            <td align="left">/s</td>
            <td align="left">core.c.ev</td>
          </tr>
        </tbody>
      </table>
      <t>The path values in the table are example ones. On discovery, the server makes
the actual path values known for these resources.</t>
      <t>The methods used by CORECONF are:</t>
      <table align="left" anchor="tbl-methods">
        <name>CoAP Methods in CORECONF</name>
        <thead>
          <tr>
            <th align="left">Operation</th>
            <th align="left">Description</th>
          </tr>
        </thead>
        <tbody>
          <tr>
            <td align="left">FETCH</td>
            <td align="left">Retrieve specific data nodes within a datastore resource</td>
          </tr>
          <tr>
            <td align="left">iPATCH</td>
            <td align="left">Idempotently create, replace, and delete data node(s) within a datastore resource</td>
          </tr>
          <tr>
            <td align="left">POST</td>
            <td align="left">Invoke an RPC or action</td>
          </tr>
          <tr>
            <td align="left">GET</td>
            <td align="left">Retrieve the datastore resource or event stream resource</td>
          </tr>
          <tr>
            <td align="left">PUT</td>
            <td align="left">Create or replace a datastore resource</td>
          </tr>
          <tr>
            <td align="left">DELETE</td>
            <td align="left">Delete a datastore resource</td>
          </tr>
        </tbody>
      </table>
      <section anchor="data-retrieval">
        <name>Data Retrieval</name>
        <t>One or more data nodes can be retrieved by the client.
The operation is mapped to the FETCH method defined in <xref section="2" sectionFormat="of" target="RFC8132"/>.</t>
        <t>There are two additional query parameters for the FETCH method:</t>
        <table align="left" anchor="tbl-query-fetch">
          <thead>
            <tr>
              <th align="left">query parameters</th>
              <th align="left">Description</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">c</td>
              <td align="left">Control selection of configuration and non-configuration data nodes (GET and FETCH)</td>
            </tr>
            <tr>
              <td align="left">d</td>
              <td align="left">Control retrieval of default values.</td>
            </tr>
          </tbody>
        </table>
        <section anchor="content">
          <name>Using the 'c' query parameter</name>
          <t>The 'c' (content) option controls how descendant nodes of the
requested data nodes will be processed in the reply.</t>
          <t>The allowed values are:</t>
          <table align="left" anchor="tbl-c-values">
            <name>Values for the 'c' query parameter</name>
            <thead>
              <tr>
                <th align="left">Value</th>
                <th align="left">Description</th>
              </tr>
            </thead>
            <tbody>
              <tr>
                <td align="left">c</td>
                <td align="left">Return only configuration descendant data nodes</td>
              </tr>
              <tr>
                <td align="left">n</td>
                <td align="left">Return only non-configuration descendant data nodes</td>
              </tr>
              <tr>
                <td align="left">a</td>
                <td align="left">Return all descendant data nodes</td>
              </tr>
            </tbody>
          </table>
          <t>This option is only allowed for GET and FETCH methods on datastore and
data node resources.  A 4.02 (Bad Option) error is returned if used for other
methods or resource types.</t>
          <t>If this query parameter is not present, the default value is "a" (the quotes
are added for readability, but they are not part of the payload).</t>
        </section>
        <section anchor="dquery">
          <name>Using the 'd' query parameter</name>
          <t>The 'd' (with-defaults) option controls how the default values of the
descendant nodes of the requested data nodes will be processed.</t>
          <t>The allowed values are:</t>
          <table align="left" anchor="tbl-d-values">
            <name>Values for the 'd' query parameter</name>
            <thead>
              <tr>
                <th align="left">Value</th>
                <th align="left">Description</th>
              </tr>
            </thead>
            <tbody>
              <tr>
                <td align="left">a</td>
                <td align="left">All data nodes are reported. Defined as 'report-all' in <xref section="3.1" sectionFormat="of" target="RFC6243"/>.</td>
              </tr>
              <tr>
                <td align="left">t</td>
                <td align="left">Data nodes set to the YANG default are not reported. Defined as 'trim' in <xref section="3.2" sectionFormat="of" target="RFC6243"/>.</td>
              </tr>
            </tbody>
          </table>
          <t>If the target of a GET or FETCH method is a data node that represents a leaf
that has a default value, and the leaf has not been given a value by any
client yet, the server <bcp14>MUST</bcp14> return the default value of the leaf.</t>
          <t>If the target of a GET method is a data node that represents a
container or list that has child resources with default values,
and these have not been given a value yet,</t>
          <ul empty="true">
            <li>
              <t>The server <bcp14>MUST NOT</bcp14> return the child resource if <tt>d</tt>=<tt>t</tt>.</t>
            </li>
          </ul>
          <ul empty="true">
            <li>
              <t>The server <bcp14>MUST</bcp14> return the child resource if <tt>d</tt>=<tt>a</tt>.</t>
            </li>
          </ul>
          <t>If this query parameter is not present, the default value is "t" (the quotes are
added for readability, but they are not part of the payload).</t>
        </section>
        <section anchor="fetch">
          <name>FETCH</name>
          <t>The FETCH method is used to retrieve one or more instance-values.
The FETCH request payload contains the list of instance-identifiers of the data node instances requested.</t>
          <t>The return response payload contains a list of data node instance-values in the same order as requested.
A CBOR null is returned for each data node requested by the client, not supported by the server or not currently instantiated.</t>
          <t>For compactness, indexes of the list instance identifiers returned by the FETCH response <bcp14>SHOULD</bcp14> be elided, only the SID is provided.
This approach may also help reduce implementation complexity since the format of each entry within the CBOR sequence of the FETCH response is identical to the format of the corresponding GET response.</t>
          <artwork><![CDATA[
FORMAT:
  FETCH <datastore resource>
        (Content-Format: application/yang-identifiers+cbor-seq)
  CBOR sequence of instance-identifiers

  2.05 Content (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of SID, instance-value
]]></artwork>
          <section anchor="fetch-example">
            <name>FETCH examples</name>
            <t>This example uses the current-datetime leaf from module ietf-system <xref target="RFC7317"/>
and the interface list from module ietf-interfaces <xref target="RFC8343"/>.
In this example the value of current-datetime (SID 1723) and the interface
list (SID 1533) instance identified with name="eth0" are queried.</t>
            <artwork><![CDATA[
REQ: FETCH </c>
     (Content-Format: application/yang-identifiers+cbor-seq)
1723,            / current-datetime (SID 1723) /
[1533, "eth0"]   / interface (SID 1533) with name = "eth0" /

RES: 2.05 Content
     (Content-Format: application/yang-instances+cbor-seq)

{
  1723 : "2014-10-26T12:16:31Z" / current-datetime (SID 1723) /
},
{
  1533 : {
     4 : "eth0",              / name (SID 1537) /
     1 : "Ethernet adaptor",  / description (SID 1534) /
     5 : 1880,                / type (SID 1538), identity /
                              / ethernetCsmacd (SID 1880) /
     2 : true,                / enabled (SID 1535) /
    11 : 3             / oper-status (SID 1544), value is testing /
  }
}

]]></artwork>
          </section>
        </section>
      </section>
      <section anchor="data-editing">
        <name>Data Editing</name>
        <t>CORECONF allows datastore contents to be created, modified and deleted using
CoAP methods.</t>
        <section anchor="DataOrdering">
          <name>Data Ordering</name>
          <t>A CORECONF server <bcp14>MUST</bcp14> preserve the relative order of all user-ordered list
and leaf-list entries that are received in a single edit request.
As per <xref target="RFC9254"/>, these YANG data node types are encoded as CBOR
arrays, so messages will preserve their order.</t>
        </section>
        <section anchor="post-operation">
          <name>POST</name>
          <t>The CoAP POST operation is used in CORECONF for the
invocation of "ACTION" and "RPC" resources.
Refer to <xref target="rpc"/> for details on "ACTION" and "RPC" resources.</t>
        </section>
        <section anchor="ipatch-operation">
          <name>iPATCH</name>
          <t>One or multiple data node instances are replaced with the idempotent
CoAP iPATCH method <xref target="RFC8132"/>.</t>
          <t>There are no query parameters for the iPATCH method.</t>
          <t>The processing of the iPATCH command is specified by Media-Type application/yang-instances+cbor-seq.
In summary, if the CBOR patch payload contains a data node instance that is not present
in the target, this instance is added. If the target contains the specified instance,
the content of this instance is replaced with the value of the payload.
A null value indicates the removal of an existing data node instance.</t>
          <artwork><![CDATA[
FORMAT:
  iPATCH <datastore resource>
         (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value

  2.04 Changed
]]></artwork>
          <section anchor="ipatch-example">
            <name>iPATCH example</name>
            <t>In this example, a CORECONF client requests the following operations:</t>
            <ul spacing="normal">
              <li>Set "/ietf-system:system/ntp/enabled" (SID 1755) to true.</li>
              <li>Remove the server "tac.nrc.ca" from the "/ietf-system:system/ntp/server" (SID 1756) list.</li>
              <li>Add/set the server "NTP Pool server 2" to the list "/ietf-system:system/ntp/server" (SID 1756).</li>
            </ul>
            <artwork><![CDATA[
REQ: iPATCH </c>
     (Content-Format: application/yang-instances+cbor-seq)
{
  1755 : true                   / enabled (SID 1755) /
},
{
  [1756, "tac.nrc.ca"] : null   / server (SID 1756) /
},
{
  1756 : {                      / server (SID 1756) /
    3 : "tic.nrc.ca",           / name (SID 1759) /
    4 : true,                   / prefer (SID 1760) /
    5 : {                       / udp (SID 1761) /
      1 : "132.246.11.231"      / address (SID 1762) /
    }
  }
}

RES: 2.04 Changed
]]></artwork>
            <t>A data node resource is deleted using an iPATCH with a null value, as seen in this example.</t>
          </section>
        </section>
      </section>
      <section anchor="datastore-access">
        <name>Full datastore access</name>
        <t>The methods GET, PUT, POST, and DELETE can be used to request, replace, create,
and delete a whole datastore respectively.</t>
        <artwork><![CDATA[
FORMAT:
  GET <datastore resource>

  2.05 Content (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  PUT <datastore resource>
      (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value

  2.04 Changed
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  POST <datastore resource>
       (Content-Format: application/yang-data+cbor; id=sid)
  CBOR map of SID, instance-value

  2.01 Created
]]></artwork>
        <artwork><![CDATA[
FORMAT:
  DELETE <datastore resource>

  2.02 Deleted
]]></artwork>
        <t>The content of the CBOR map represents the complete datastore of the server
at the GET indication of after a successful processing of a PUT or POST request.</t>
        <section anchor="datastore-example">
          <name>Full datastore examples</name>
          <t>The example uses the interface list from module ietf-interfaces <xref target="RFC8343"/> and
the clock container from module ietf-system <xref target="RFC7317"/>.
We assume that the datastore contains two modules ietf-system (SID 1700) and
ietf-interfaces (SID 1500); they contain the 'interface' list (SID 1533) with
one instance and the 'clock' container (SID 1721). After invocation of GET, a
CBOR map with data nodes from these two modules is returned:</t>
          <artwork><![CDATA[
REQ:  GET </c>

RES: 2.05 Content
     (Content-Format: application/yang-data+cbor; id=sid)
{
  1721 : {                      / Clock (SID 1721) /
    2: "2016-10-26T12:16:31Z",  / current-datetime (SID 1723) /
    1: "2014-10-05T09:00:00Z"   / boot-datetime (SID 1722) /
  },
  1533 : [
    {                           / interface (SID 1533) /
       4 : "eth0",              / name (SID 1537) /
       1 : "Ethernet adaptor",  / description (SID 1534) /
       5 : 1880,                / type (SID 1538), identity: /
                                / ethernetCsmacd (SID 1880) /
       2 : true,                / enabled (SID 1535) /
      11 : 3             / oper-status (SID 1544), value is testing /
    }
  ]
}
]]></artwork>
        </section>
      </section>
      <section anchor="event-stream">
        <name>Event stream</name>
        <t>Event notification is an essential function for the management of servers.
CORECONF allows notifications specified in YANG <xref target="RFC5277"/> to be reported to a list
of clients. The path for the default event stream can be discovered as
described in <xref target="coap-interface"/>. The server <bcp14>MAY</bcp14> support additional event
stream resources to address different notification needs.</t>
        <t>Reception of notification instances is enabled with the CoAP Observe
<xref target="RFC7641"/> function. Clients subscribe to the notifications by sending a
GET request with an "Observe" option to the stream resource.</t>
        <t>Each response payload carries one or multiple notifications. The number of
notifications reported, and the conditions used to remove notifications
from the reported list are left to implementers.
When multiple notifications are reported, they <bcp14>MUST</bcp14> be ordered starting from
the newest notification at index zero. Note that this could lead to
notifications being sent multiple times, which increases the probability for
the client to receive them, but it might potentially lead to messages that
exceed the MTU of a single CoAP packet. If such cases could arise, implementers
should make sure appropriate fragmentation is available - for example the one
described in <xref target="block"/>.</t>
        <t>The format of notifications is a CBOR sequence, where each item in
the sequence is a single notification as described in <xref section="4.2.1" sectionFormat="of" target="RFC9254"/>.
(Accordingly, a notification without any content is an empty CBOR
sequence, i.e., zero bytes.)</t>
        <artwork><![CDATA[
FORMAT:
  GET <stream-resource> Observe(0)

  2.05 Content (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value
]]></artwork>
        <t>The sequence of data node instances may contain identical items which have
been generated at different times.</t>
        <t>An example implementation is:</t>
        <ul empty="true">
          <li>
            <t>Every time an event is generated, the generated notification instance is
appended to the chosen stream(s). After an aggregation period, which may be
limited by the maximum number of notifications supported,
the content of the instance is sent to all clients observing the modified stream.</t>
          </li>
        </ul>
        <section anchor="filtering-notifications">
          <name>Filtering Notifications</name>
          <t>If only a subset of all possible notifications is of interest, a FETCH
operation can be performed with a request payload of type
application/yang-identifiers+cbor-seq that indicates which subset.</t>
          <artwork><![CDATA[
FORMAT:
  FETCH <stream-resource> Observe(0)
        (Content-Format: application/yang-identifiers+cbor-seq)
  CBOR sequence of instance-identifiers

  2.05 Content (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value
]]></artwork>
          <t>When filtering is not supported by a CORECONF server, the request
payload can be ignored: all event notifications are then reported
independently of the presence and content of the request payload.</t>
        </section>
        <section anchor="event-stream-example">
          <name>Notify Examples</name>
          <t>Let suppose the server generates the example-port-fault event as defined below.</t>
          <sourcecode type="yang"><![CDATA[
module example-port {
  yang-version 1.1;
  namespace "https://example.com/ns/example-port";
  prefix "port";

  notification example-port-fault {   // SID 60010
    description
      "Event generated if a hardware fault is detected";
    leaf port-name {                  // SID 60011
      type string;
    }
    leaf port-fault {                 // SID 60012
      type string;
    }
  }
}
]]></sourcecode>
          <t>In this example the default event stream resource path /s is an example
location discovered with a request similar to <xref target="discovery-ex-es"/>. By executing a
GET with Observe 0 on the default event stream resource the client receives the
following response:</t>
          <artwork><![CDATA[
REQ:  GET </s> Observe(0)

RES:  2.05 Content
      (Content-Format: application/yang-instances+cbor-seq)
      Observe(12)

{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "0/4/21",       / port-name (SID 60011) /
    2 : "Open pin 2"    / port-fault (SID 60012) /
  }
},
{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "1/4/21",       / port-name (SID 60011) /
    2 : "Open pin 5"    / port-fault (SID 60012) /
  }
}

]]></artwork>
          <t>In the example, the request returns a success response with the contents
of the last two generated events. Consecutively the server will regularly
notify the client when a new event is generated.</t>
          <t>A client that wants to filter notifications can use a FETCH payload:</t>
          <artwork><![CDATA[
REQ:  FETCH </s> Observe(0)
      (Content-Format: application/yang-identifiers+cbor-seq)

60010, 60020 /CBOR sequence with two notification identifiers/

RES:  2.05 Content
      (Content-Format: application/yang-instances+cbor-seq)
      Observe(12)

{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "0/4/21",       / port-name (SID 60011) /
    2 : "Open pin 2"    / port-fault (SID 60012) /
  }
},
{
  60010 : {             / example-port-fault (SID 60010) /
    1 : "1/4/21",       / port-name (SID 60011) /
    2 : "Open pin 5"    / port-fault (SID 60012) /
  }
}

]]></artwork>
          <t>Note that the notifications in this example are identical to the
unfiltered example as they are all using identifier SID 60010 and this
is included in the filter.</t>
        </section>
      </section>
      <section anchor="rpc">
        <name>RPC statements</name>
        <t>The YANG "action" and "RPC" statements specify the execution of a Remote
Procedure Call (RPC) in the server.  It is invoked using a POST method to
an "Action" or "RPC" resource instance.</t>
        <t>The request payload contains the values assigned to the input container when specified.
The response payload contains the values of the output container when specified.
Both the input and output containers are encoded in CBOR using the rules defined in
<xref section="4.2.1" sectionFormat="of" target="RFC9254"/>.</t>
        <t>The returned success response code is 2.05 Content.</t>
        <artwork><![CDATA[
FORMAT:
  POST <datastore resource>
         (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value

  2.04 (Content-Format: application/yang-instances+cbor-seq)
  CBOR sequence of CBOR maps of instance-identifier, instance-value
]]></artwork>
        <section anchor="rpc-example">
          <name>RPC Example</name>
          <t>This example is based on <xref section="3.6.1" sectionFormat="of" target="RFC8040"/>, abbreviated and
annotated with SIDs as follows:</t>
          <sourcecode type="yang"><![CDATA[
module example-ops {
  yang-version 1.1;
  namespace "https://example.com/ns/example-ops";
  prefix "ops";

  rpc reboot {                          // SID 61000
    description "Reboot operation.";
    input {                             // SID 61009
      leaf delay {                      // SID 61001
        type uint32;
        units "seconds";
        default 0;
        description
          "Number of seconds to wait before initiating the
           reboot operation.";
      }
    }
  }
}
]]></sourcecode>
          <t>This example invokes the 'reboot' RPC  (SID 61000),
of the server instance with name equal to "myserver".</t>
          <artwork><![CDATA[
REQ:  POST </c>
      (Content-Format: application/yang-instances+cbor-seq)

{ 61000:
  {
    1 : 77
  }
}
RES:  2.04 Changed
      (Content-Format: application/yang-instances+cbor-seq)

{ 61000:
  null
}
]]></artwork>
          <!--
We now believe this is the correct empty return for an RPC without output.
    Note that we always have to send a yang-instances (or at least a
    yang-identifiers) for the input side to find the right RPC.
 -->

</section>
        <section anchor="action-example">
          <name>Action Example</name>
          <t>The example is based on the YANG action "reset" as defined in <xref section="7.15.3" sectionFormat="of" target="RFC7950"/>
and annotated below with SIDs.</t>
          <sourcecode type="yang"><![CDATA[
module example-server-farm {
  yang-version 1.1;
  namespace "urn:example:server-farm";
  prefix "sfarm";

  import ietf-yang-types {
    prefix "yang";
  }

  list server {                        // SID 60000
    key name;
    leaf name {                        // SID 60001
      type string;
    }
    action reset {                     // SID 60002
      input {                          // SID 60008
        leaf reset-at {                // SID 60003
          type yang:date-and-time;
          mandatory true;
        }
      }
      output {                         // SID 60009
        leaf reset-finished-at {       // SID 60004
          type yang:date-and-time;
          mandatory true;
        }
      }
    }
  }
}
]]></sourcecode>
          <t>This example invokes the 'reset' action  (SID 60002),
of the server instance with name equal to "myserver".</t>
          <artwork><![CDATA[
REQ:  POST </c>
      (Content-Format: application/yang-instances+cbor-seq)

{ [60002, "myserver"]:
  {
    0 : { / SID 60002 XXX does this need to be input? /
      1 : "2016-02-08T14:10:08Z09:00" / reset-at (SID 60003) /
    }
  }
}
RES:  2.04 Changed
         (Content-Format: application/yang-instances+cbor-seq)

{ [60002, "myserver"]:
  {
    0 : { / SID 60002 XXX does this need to be output? /
      2 : "2016-02-08T14:10:08Z" / reset-finished-at (SID 60004)/
    }
  }
}
]]></artwork>
        </section>
      </section>
    </section>
    <section anchor="block">
      <name>Use of Block-wise Transfers</name>
      <t>The CoAP protocol provides reliability by acknowledging the UDP datagrams.
However, when large pieces of data need to be transported, datagrams get
fragmented, thus creating constraints on the resources in the client, server
and intermediate routers. The block option <xref target="RFC7959"/> allows the transport
of the total payload in individual blocks of which the
size can be adapted to the underlying transport sizes such as: (UDP datagram
size ~64KiB, IPv6 MTU of 1280, IEEE 802.15.4 payload of 60-80 bytes). Each
block is individually acknowledged to guarantee reliability.</t>
      <t>Notice that the Block mechanism splits the data at fixed positions,
such that individual data fields may become fragmented. Therefore, assembly
of multiple blocks may be required to process complete data fields.</t>
      <t>Beware of race conditions. In case blocks are filled one at a time, care should
be taken that the whole and consistent data representation is sent in multiple blocks sequentially
without interruption. On the server, values might change, lists might get re-ordered,
extended or reduced. When these actions happen during the serialization of
the contents of the resource, the transported results do not correspond with
a state having occurred in the server; or worse the returned values are inconsistent.
For example: array length does not correspond with the actual number of items.
It may be advisable to use Indefinite-length CBOR arrays and maps,
which are foreseen for data streaming purposes.
(Note that the outer structure of yang-identifiers and yang-instances
is a CBOR sequence, which already behaves similar to an
indefinite-length encoded array.)</t>
    </section>
    <section anchor="discovery">
      <name>Application Discovery</name>
      <t>Two application discovery mechanisms are supported by CORECONF, the YANG library
data model as defined by <xref target="I-D.ietf-core-yang-library"/> and
the CORE resource discovery <xref target="RFC6690"/>.
Implementers may choose to implement one or the other or both.</t>
      <section anchor="yang-library">
        <name>YANG library</name>
        <t>The YANG library data model <xref target="I-D.ietf-core-yang-library"/> provides a high-level description of the resources available. The YANG library contains the
list of modules, features, and deviations supported by the CORECONF server.
From this information, CORECONF clients can infer the list of data nodes supported
and the interaction model to be used to access them. This module also contains
the list of datastores implemented.</t>
        <t>As described in <xref target="RFC6690"/>, the location of the YANG library can be found by
sending a GET request to
"/.well-known/core" including a resource type (RT) parameter with the value
"core.c.yl". Upon success, the return payload will contain the root resource
of the YANG library module.</t>
        <t>The following example assumes that the SID of the YANG library is 2351 (<tt>kv</tt> after
encoding as specified in <xref target="id-compression"/>) and that the server uses /c as
datastore resource path.</t>
        <artwork><![CDATA[
REQ: GET </.well-known/core?rt=core.c.yl>

RES: 2.05 Content (Content-Format: application/link-format)
</c/kv>;rt="core.c.yl"
]]></artwork>
      </section>
      <section anchor="resource-discovery">
        <name>Resource Discovery</name>
        <t>As some CoAP interfaces and services might not support the YANG library
interface and still be interested to discover resources that are available,
implementations <bcp14>MAY</bcp14> choose to support discovery of all available
resources using "/.well-known/core" as defined by <xref target="RFC6690"/>.</t>
        <section anchor="datastore-resource-discovery">
          <name>Datastore Resource Discovery</name>
          <t>The presence and location of (path to) each datastore implemented by the CORECONF server
can be discovered by sending a GET request to "/.well-known/core" including a
resource type (RT) parameter with the value "core.c.ds".</t>
          <t>Upon success, the return payload contains the list of datastore resources.</t>
          <t>Each datastore returned is further qualified using the "ds" Link-Format attribute.
This attribute is set to the SID assigned to the datastore identity.
When a unified datastore is implemented, the ds attribute is set to 1029 as
specified in <xref target="ietf-coreconf-sid"/>.
For other examples of datastores, see the Network Management Datastore Architecture (NMDA) <xref target="RFC7950"/>.</t>
          <sourcecode type="abnf"><![CDATA[
link-extension    = ( "ds" "=" sid )
                    ; SID assigned to the datastore identity
sid               = 1*DIGIT
]]></sourcecode>
          <t>The following example assumes that the server uses /c as datastore resource
path.</t>
          <figure anchor="discovery-ex-ds">
            <artwork align="left"><![CDATA[
REQ: GET </.well-known/core?rt=core.c.ds>

RES: 2.05 Content (Content-Format: application/link-format)
</c>; rt="core.c.ds";ds=1029
]]></artwork>
          </figure>
        </section>
        <section anchor="data-node-resource-discovery">
          <name>Data node Resource Discovery</name>
          <t>If implemented, the presence and location of (path to) each data node
implemented by the CORECONF server are discovered by sending a GET request to
"/.well-known/core" including a resource type (RT) parameter with the value
"core.c.dn".</t>
          <t>Upon success, the return payload contains the SID assigned to each data node
and their location.</t>
          <t>The example below shows the discovery of the presence and location of
data nodes. Data nodes '/ietf-system:system-state/clock/boot-datetime' (SID 1722)
and '/ietf-system:system-state/clock/current-datetime' (SID 1723) are returned.
The example assumes that the server uses /c as datastore resource path.</t>
          <artwork><![CDATA[
REQ: GET </.well-known/core?rt=core.c.dn>

RES: 2.05 Content (Content-Format: application/link-format)
</c/a6>;rt="core.c.dn",
</c/a7>;rt="core.c.dn"
]]></artwork>
          <t>Without additional filtering, the list of data nodes may become prohibitively
long. If this is the case implementations <bcp14>SHOULD</bcp14> support a way to obtain all
links using multiple GET requests (for example through some form of
pagination).</t>
        </section>
        <section anchor="event-stream-resource-discovery">
          <name>Event stream Resource Discovery</name>
          <t>The presence and location of (path to) each event stream implemented by the CORECONF server are
discovered by sending a GET request to "/.well-known/core" including a resource type (RT)
parameter with the value "core.c.es".</t>
          <t>Upon success, the return payload contains the list of event stream resources.</t>
          <t>The following example assumes that the server uses /s as the default event stream
resource.</t>
          <figure anchor="discovery-ex-es">
            <artwork align="left"><![CDATA[
REQ: GET </.well-known/core?rt=core.c.es>

RES: 2.05 Content (Content-Format: application/link-format)
</s>;rt="core.c.es"
]]></artwork>
          </figure>
        </section>
      </section>
    </section>
    <section anchor="error-handling">
      <name>Error Handling</name>
      <t>In case a request is received which cannot be processed properly, the CORECONF server <bcp14>MUST</bcp14> return an error response. This error response <bcp14>MUST</bcp14> contain a CoAP 4.xx or 5.xx response code.</t>
      <t>Errors returned by a CORECONF server can be broken into two categories, those associated with the CoAP protocol itself and those generated during the validation of the YANG data model constraints as described in <xref section="8" sectionFormat="of" target="RFC7950"/>.</t>
      <t>The following list of common CoAP errors should be implemented by CORECONF servers. This list is not exhaustive, other errors defined by CoAP and associated RFCs may be applicable.</t>
      <ul spacing="normal">
        <li>Error 4.01 (Unauthorized) is returned by the CORECONF server when the CORECONF client is not authorized to perform the requested action on the targeted resource (i.e., data node, datastore, rpc, action or event stream).</li>
        <li>Error 4.02 (Bad Option) is returned by the CORECONF server when one or more CoAP options are unknown or malformed.</li>
        <li>Error 4.04 (Not Found) is returned by the CORECONF server when the CORECONF client is requesting a non-instantiated resource (i.e., data node, datastore, rpc, action or event stream).</li>
        <li>Error 4.05 (Method Not Allowed) is returned by the CORECONF server when the CORECONF client is requesting a method not supported on the targeted resource. (e.g., GET on an rpc, PUT or POST on a data node with "config" set to false).</li>
        <li>Error 4.08 (Request Entity Incomplete) is returned by the CORECONF server if one or multiple blocks of a block transfer request is missing, see <xref target="RFC7959"/> for more details.</li>
        <li>Error 4.13 (Request Entity Too Large) may be returned by the CORECONF server during a block transfer request, see <xref target="RFC7959"/> for more details.</li>
        <li>Error 4.15 (Unsupported Content-Format) is returned by the CORECONF server when the Content-Format used in the request does not match those specified in <xref target="media-type"/>.</li>
      </ul>
      <t>The CORECONF server <bcp14>MUST</bcp14> also enforce the different constraints associated with the YANG data models implemented. These constraints are described in <xref section="8" sectionFormat="of" target="RFC7950"/>. These errors are reported using the CoAP error code 4.00 (Bad Request) and may have the following error container as payload. The YANG definition and associated .sid file are available in <xref target="ietf-coreconf-yang"/> and <xref target="ietf-coreconf-sid"/>. The error container is encoded using the encoding rules of a YANG data template as defined in <xref section="5" sectionFormat="of" target="RFC9254"/>.</t>
      <artwork><![CDATA[
+--rw error!
   +--rw error-tag             identityref
   +--rw error-app-tag?        identityref
   +--rw error-data-node?      instance-identifier
   +--rw error-message?        string
]]></artwork>
      <t>The following 'error-tag' and 'error-app-tag' are defined by the ietf-coreconf YANG module, these tags are implemented as YANG identity and can be extended as needed.</t>
      <ul spacing="normal">
        <li>
          <t>error-tag 'operation-failed' is returned by the CORECONF server when the operation request cannot be processed successfully.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'malformed-message' is returned by the CORECONF server when the payload received from the CORECONF client does not contain a well-formed CBOR content as defined in <xref target="RFC8949"/> or does not comply with the CBOR structure defined within this document.</li>
            <li>error-app-tag 'data-not-unique' is returned by the CORECONF server when the validation of the 'unique' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'too-many-elements' is returned by the CORECONF server when the validation of the 'max-elements' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'too-few-elements' is returned by the CORECONF server when the validation of the 'min-elements' constraint of a list or leaf-list fails.</li>
            <li>error-app-tag 'must-violation' is returned by the CORECONF server when the restrictions imposed by a 'must' statement are violated.</li>
            <li>error-app-tag 'duplicate' is returned by the CORECONF server when a client tries to create a duplicate list or leaf-list entry.</li>
          </ul>
        </li>
        <li>
          <t>error-tag 'invalid-value' is returned by the CORECONF server when the CORECONF client tries to update or create a leaf with a value encoded using an invalid CBOR datatype or if the 'range', 'length', 'pattern' or 'require-instance' constrain is not fulfilled.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'invalid-datatype' is returned by the CORECONF server when CBOR encoding does not follow the rules set by the YANG Build-In type or when the value is incompatible with it (e.g., a value greater than 127 for an int8, undefined enumeration).</li>
            <li>error-app-tag 'not-in-range' is returned by the CORECONF server when the validation of the 'range' property fails.</li>
            <li>error-app-tag 'invalid-length' is returned by the CORECONF server when the validation of the 'length' property fails.</li>
            <li>error-app-tag 'pattern-test-failed' is returned by the CORECONF server when the validation of the 'pattern' property fails.</li>
          </ul>
        </li>
        <li>
          <t>error-tag 'missing-element' is returned by the CORECONF server when the operation requested by a CORECONF client fails to comply with the 'mandatory' constraint defined. The 'mandatory' constraint is enforced for leafs and choices, unless the node or any of its ancestors have a 'when' condition or 'if-feature' expression that evaluates to 'false'.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'missing-key' is returned by the CORECONF server to further qualify a missing-element error. This error is returned when the CORECONF client tries to create or list instance, without all the 'key' specified or when the CORECONF client tries to delete a leaf listed as a 'key'.</li>
            <li>error-app-tag 'missing-input-parameter' is returned by the CORECONF server when the input parameters of an RPC or action are incomplete.</li>
          </ul>
        </li>
        <li>error-tag 'unknown-element' is returned by the CORECONF server when the CORECONF client tries to access a data node of a YANG module not supported, of a data node associated with an 'if-feature' expression evaluated to 'false' or to a 'when' condition evaluated to 'false'.</li>
        <li>error-tag 'bad-element' is returned by the CORECONF server when the CORECONF client tries to create data nodes for more than one case in a choice.</li>
        <li>
          <t>error-tag 'data-missing' is returned by the CORECONF server when a data node required to accept the request is not present.  </t>
          <ul spacing="normal">
            <li>error-app-tag 'instance-required' is returned by the CORECONF server when a leaf of type 'instance-identifier' or 'leafref' marked with require-instance set to 'true' refers to an instance that does not exist.</li>
            <li>error-app-tag 'missing-choice' is returned by the CORECONF server when no nodes exist in a mandatory choice.</li>
          </ul>
        </li>
        <li>error-tag 'error' is returned by the CORECONF server when an unspecified error has occurred.</li>
      </ul>
      <t>For example, the CORECONF server might return the following error.</t>
      <artwork><![CDATA[
RES:  4.00 Bad Request
     (Content-Format: application/yang-data+cbor; id=sid)
{
  1024 : {
    4 : 1011,        / error-tag (SID 1028) /
                     /   = invalid-value (SID 1011) /
    1 : 1018,        / error-app-tag (SID 1025) /
                     /   = not-in-range (SID 1018) /
    2 : 1740,        / error-data-node (SID 1026) /
                     /   = timezone-utc-offset (SID 1740) /
    3 : "maximum value exceeded" / error-message (SID 1027) /
  }
}
]]></artwork>
      <!-- Note that we do not
use application/yang-instances+cbor-seq here, as we don't have an instance.
-->

</section>
    <section anchor="security-considerations">
      <name>Security Considerations</name>
      <t>For secure network management, it is important to restrict access to configuration variables
only to authorized parties. CORECONF re-uses the security mechanisms already available to CoAP,
this includes DTLS <xref target="RFC6347"/><xref target="RFC9147"/> and OSCORE <xref target="RFC8613"/> for protected access to
resources, as well as suitable authentication and authorization mechanisms, for
example those defined in ACE OAuth <xref target="RFC9200"/>.</t>
      <t>All the security considerations of <xref target="RFC7252"/>, <xref target="RFC7959"/>, <xref target="RFC8132"/> and
<xref target="RFC7641"/> apply to this document as well. The use of NoSec (<xref section="9" sectionFormat="of" target="RFC7252"/>), when OSCORE
is not used, is <bcp14>NOT RECOMMENDED</bcp14>.</t>
      <t>In addition, mechanisms for authentication and authorization may need to be
selected if not provided with the CoAP security mode.</t>
      <t>As <xref target="RFC9254"/> and <xref target="RFC4648"/> are used for payload and SID
encoding, the security considerations of those documents also need to be
well-understood.</t>
    </section>
    <section anchor="iana-considerations">
      <name>IANA Considerations</name>
      <section anchor="resource-type-rt-link-target-attribute-values-registry">
        <name>Resource Type (rt=) Link Target Attribute Values Registry</name>
        <t>This document adds the following resource type to the "Resource Type (rt=) Link Target Attribute Values", within the "Constrained RESTful Environments (CoRE) Parameters" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Value</th>
              <th align="left">Description</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">core.c.ds</td>
              <td align="left">YANG datastore</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.dn</td>
              <td align="left">YANG data node</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.yl</td>
              <td align="left">YANG module library</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">core.c.es</td>
              <td align="left">YANG event stream</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="coap-content-formats-registry">
        <name>CoAP Content-Formats Registry</name>
        <t>This document adds the following Content-Format to the "CoAP Content-Formats", within the "Constrained RESTful Environments (CoRE) Parameters" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Media Type</th>
              <th align="left">Content Coding</th>
              <th align="left">ID</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">application/yang-identifiers+cbor-seq</td>
              <td align="left"> </td>
              <td align="left">TBD2</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">application/yang-instances+cbor-seq</td>
              <td align="left"> </td>
              <td align="left">TBD3</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>// RFC Ed.: replace TBD1, TBD2 and TBD3 with assigned IDs and remove this note.
// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="media-types-registry">
        <name>Media Types Registry</name>
        <t>This document adds the following media types to the "Media Types" registry.</t>
        <table align="left">
          <thead>
            <tr>
              <th align="left">Name</th>
              <th align="left">Template</th>
              <th align="left">Reference</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td align="left">yang-identifiers+cbor-seq</td>
              <td align="left">application/yang-identifiers+cbor-seq</td>
              <td align="left">RFC XXXX</td>
            </tr>
            <tr>
              <td align="left">yang-instances+cbor-seq</td>
              <td align="left">application/yang-instances+cbor-seq</td>
              <td align="left">RFC XXXX</td>
            </tr>
          </tbody>
        </table>
        <t>Each of these media types share the following information:</t>
        <ul spacing="normal">
          <li>Subtype name: &lt;as listed in table&gt;</li>
          <li>Required parameters: N/A</li>
          <li>Optional parameters: N/A</li>
          <li>Encoding considerations: binary</li>
          <li>Security considerations: See the Security Considerations section of RFC XXXX</li>
          <li>Interoperability considerations: N/A</li>
          <li>Published specification: RFC XXXX</li>
          <li>Applications that use this media type: CORECONF</li>
          <li>Fragment identifier considerations: N/A</li>
          <li>Additional information:</li>
        </ul>
        <artwork><![CDATA[
*  Deprecated alias names for this type: N/A

*  Magic number(s): N/A

*  File extension(s): N/A

*  Macintosh file type code(s): N/A
]]></artwork>
        <ul spacing="normal">
          <li>Person &amp; email address to contact for further information: iesg&amp;ietf.org</li>
          <li>Intended usage: COMMON</li>
          <li>Restrictions on usage: N/A</li>
          <li>Author: Michel Veillette</li>
          <li>Change Controller: IETF</li>
          <li>Provisional registration?  No</li>
        </ul>
        <t>// RFC Ed.: replace RFC XXXX with this RFC number and remove this note.</t>
      </section>
      <section anchor="yang-namespace-and-module-name-registration">
        <name>YANG Namespace and Module Name Registration</name>
        <t>This document registers the following XML namespace URN in the "IETF XML
Registry", following the format defined in <xref target="RFC3688"/>:</t>
        <t>URI: please assign urn:ietf:params:xml:ns:yang:ietf-coreconf</t>
        <t>Registrant Contact: The IESG.</t>
        <t>XML: N/A, the requested URI is an XML namespace.</t>
        <t>Reference:    RFC XXXX</t>
        <t>IANA is requested to register the following YANG module in the "YANG Module Names" registry <xref target="RFC6020"/>:</t>
        <t>Name: ietf-coreconf</t>
        <t>Namespace: urn:ietf:params:xml:ns:yang:ietf-coreconf</t>
        <t>Prefix: coreconf</t>
        <t>Reference: RFC XXXX</t>
        <t>// RFC Ed.: please replace XXXX with RFC number and remove this note</t>
      </section>
    </section>
  </middle>
  <back>
    <references>
      <name>References</name>
      <references>
        <name>Normative References</name>
        <reference anchor="RFC3688">
          <front>
            <title>The IETF XML Registry</title>
            <author fullname="M. Mealling" initials="M." surname="Mealling"/>
            <date month="January" year="2004"/>
            <abstract>
              <t>This document describes an IANA maintained registry for IETF standards which use Extensible Markup Language (XML) related items such as Namespaces, Document Type Declarations (DTDs), Schemas, and Resource Description Framework (RDF) Schemas.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="81"/>
          <seriesInfo name="RFC" value="3688"/>
          <seriesInfo name="DOI" value="10.17487/RFC3688"/>
        </reference>
        <reference anchor="RFC6020">
          <front>
            <title>YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)</title>
            <author fullname="M. Bjorklund" initials="M." role="editor" surname="Bjorklund"/>
            <date month="October" year="2010"/>
            <abstract>
              <t>YANG is a data modeling language used to model configuration and state data manipulated by the Network Configuration Protocol (NETCONF), NETCONF remote procedure calls, and NETCONF notifications. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6020"/>
          <seriesInfo name="DOI" value="10.17487/RFC6020"/>
        </reference>
        <reference anchor="RFC4648">
          <front>
            <title>The Base16, Base32, and Base64 Data Encodings</title>
            <author fullname="S. Josefsson" initials="S." surname="Josefsson"/>
            <date month="October" year="2006"/>
            <abstract>
              <t>This document describes the commonly used base 64, base 32, and base 16 encoding schemes. It also discusses the use of line-feeds in encoded data, use of padding in encoded data, use of non-alphabet characters in encoded data, use of different encoding alphabets, and canonical encodings. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="4648"/>
          <seriesInfo name="DOI" value="10.17487/RFC4648"/>
        </reference>
        <reference anchor="RFC5277">
          <front>
            <title>NETCONF Event Notifications</title>
            <author fullname="S. Chisholm" initials="S." surname="Chisholm"/>
            <author fullname="H. Trevino" initials="H." surname="Trevino"/>
            <date month="July" year="2008"/>
            <abstract>
              <t>This document defines mechanisms that provide an asynchronous message notification delivery service for the Network Configuration protocol (NETCONF). This is an optional capability built on top of the base NETCONF definition. This document defines the capabilities and operations necessary to support this service. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5277"/>
          <seriesInfo name="DOI" value="10.17487/RFC5277"/>
        </reference>
        <reference anchor="RFC6241">
          <front>
            <title>Network Configuration Protocol (NETCONF)</title>
            <author fullname="R. Enns" initials="R." role="editor" surname="Enns"/>
            <author fullname="M. Bjorklund" initials="M." role="editor" surname="Bjorklund"/>
            <author fullname="J. Schoenwaelder" initials="J." role="editor" surname="Schoenwaelder"/>
            <author fullname="A. Bierman" initials="A." role="editor" surname="Bierman"/>
            <date month="June" year="2011"/>
            <abstract>
              <t>The Network Configuration Protocol (NETCONF) defined in this document provides mechanisms to install, manipulate, and delete the configuration of network devices. It uses an Extensible Markup Language (XML)-based data encoding for the configuration data as well as the protocol messages. The NETCONF protocol operations are realized as remote procedure calls (RPCs). This document obsoletes RFC 4741. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6241"/>
          <seriesInfo name="DOI" value="10.17487/RFC6241"/>
        </reference>
        <reference anchor="RFC6243">
          <front>
            <title>With-defaults Capability for NETCONF</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="B. Lengyel" initials="B." surname="Lengyel"/>
            <date month="June" year="2011"/>
            <abstract>
              <t>The Network Configuration Protocol (NETCONF) defines ways to read and edit configuration data from a NETCONF server. In some cases, part of this data may not be set by the NETCONF client, but rather a default value known to the server is used instead. In many situations the NETCONF client has a priori knowledge about default data, so the NETCONF server does not need to save it in a NETCONF configuration datastore or send it to the client in a retrieval operation reply. In other situations the NETCONF client will need this data from the server. Not all server implementations treat this default data the same way. This document defines a capability-based extension to the NETCONF protocol that allows the NETCONF client to identify how defaults are processed by the server, and also defines new mechanisms for client control of server processing of default data. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6243"/>
          <seriesInfo name="DOI" value="10.17487/RFC6243"/>
        </reference>
        <reference anchor="RFC8949">
          <front>
            <title>Concise Binary Object Representation (CBOR)</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="P. Hoffman" initials="P." surname="Hoffman"/>
            <date month="December" year="2020"/>
            <abstract>
              <t>The Concise Binary Object Representation (CBOR) is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. These design goals make it different from earlier binary serializations such as ASN.1 and MessagePack.</t>
              <t>This document obsoletes RFC 7049, providing editorial improvements, new details, and errata fixes while keeping full compatibility with the interchange format of RFC 7049. It does not create a new version of the format.</t>
            </abstract>
          </front>
          <seriesInfo name="STD" value="94"/>
          <seriesInfo name="RFC" value="8949"/>
          <seriesInfo name="DOI" value="10.17487/RFC8949"/>
        </reference>
        <reference anchor="RFC8610">
          <front>
            <title>Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures</title>
            <author fullname="H. Birkholz" initials="H." surname="Birkholz"/>
            <author fullname="C. Vigano" initials="C." surname="Vigano"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="June" year="2019"/>
            <abstract>
              <t>This document proposes a notational convention to express Concise Binary Object Representation (CBOR) data structures (RFC 7049). Its main goal is to provide an easy and unambiguous way to express structures for protocol messages and data formats that use CBOR or JSON.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8610"/>
          <seriesInfo name="DOI" value="10.17487/RFC8610"/>
        </reference>
        <reference anchor="RFC8742">
          <front>
            <title>Concise Binary Object Representation (CBOR) Sequences</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="February" year="2020"/>
            <abstract>
              <t>This document describes the Concise Binary Object Representation (CBOR) Sequence format and associated media type "application/cbor-seq". A CBOR Sequence consists of any number of encoded CBOR data items, simply concatenated in sequence.</t>
              <t>Structured syntax suffixes for media types allow other media types to build on them and make it explicit that they are built on an existing media type as their foundation. This specification defines and registers "+cbor-seq" as a structured syntax suffix for CBOR Sequences.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8742"/>
          <seriesInfo name="DOI" value="10.17487/RFC8742"/>
        </reference>
        <reference anchor="RFC7252">
          <front>
            <title>The Constrained Application Protocol (CoAP)</title>
            <author fullname="Z. Shelby" initials="Z." surname="Shelby"/>
            <author fullname="K. Hartke" initials="K." surname="Hartke"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <date month="June" year="2014"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a specialized web transfer protocol for use with constrained nodes and constrained (e.g., low-power, lossy) networks. The nodes often have 8-bit microcontrollers with small amounts of ROM and RAM, while constrained networks such as IPv6 over Low-Power Wireless Personal Area Networks (6LoWPANs) often have high packet error rates and a typical throughput of 10s of kbit/s. The protocol is designed for machine- to-machine (M2M) applications such as smart energy and building automation.</t>
              <t>CoAP provides a request/response interaction model between application endpoints, supports built-in discovery of services and resources, and includes key concepts of the Web such as URIs and Internet media types. CoAP is designed to easily interface with HTTP for integration with the Web while meeting specialized requirements such as multicast support, very low overhead, and simplicity for constrained environments.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7252"/>
          <seriesInfo name="DOI" value="10.17487/RFC7252"/>
        </reference>
        <reference anchor="RFC7950">
          <front>
            <title>The YANG 1.1 Data Modeling Language</title>
            <author fullname="M. Bjorklund" initials="M." role="editor" surname="Bjorklund"/>
            <date month="August" year="2016"/>
            <abstract>
              <t>YANG is a data modeling language used to model configuration data, state data, Remote Procedure Calls, and notifications for network management protocols. This document describes the syntax and semantics of version 1.1 of the YANG language. YANG version 1.1 is a maintenance release of the YANG language, addressing ambiguities and defects in the original specification. There are a small number of backward incompatibilities from YANG version 1. This document also specifies the YANG mappings to the Network Configuration Protocol (NETCONF).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7950"/>
          <seriesInfo name="DOI" value="10.17487/RFC7950"/>
        </reference>
        <reference anchor="RFC7959">
          <front>
            <title>Block-Wise Transfers in the Constrained Application Protocol (CoAP)</title>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="Z. Shelby" initials="Z." role="editor" surname="Shelby"/>
            <date month="August" year="2016"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a RESTful transfer protocol for constrained nodes and networks. Basic CoAP messages work well for small payloads from sensors and actuators; however, applications will need to transfer larger payloads occasionally -- for instance, for firmware updates. In contrast to HTTP, where TCP does the grunt work of segmenting and resequencing, CoAP is based on datagram transports such as UDP or Datagram Transport Layer Security (DTLS). These transports only offer fragmentation, which is even more problematic in constrained nodes and networks, limiting the maximum size of resource representations that can practically be transferred.</t>
              <t>Instead of relying on IP fragmentation, this specification extends basic CoAP with a pair of "Block" options for transferring multiple blocks of information from a resource representation in multiple request-response pairs. In many important cases, the Block options enable a server to be truly stateless: the server can handle each block transfer separately, with no need for a connection setup or other server-side memory of previous block transfers. Essentially, the Block options provide a minimal way to transfer larger representations in a block-wise fashion.</t>
              <t>A CoAP implementation that does not support these options generally is limited in the size of the representations that can be exchanged, so there is an expectation that the Block options will be widely used in CoAP implementations. Therefore, this specification updates RFC 7252.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7959"/>
          <seriesInfo name="DOI" value="10.17487/RFC7959"/>
        </reference>
        <reference anchor="RFC7641">
          <front>
            <title>Observing Resources in the Constrained Application Protocol (CoAP)</title>
            <author fullname="K. Hartke" initials="K." surname="Hartke"/>
            <date month="September" year="2015"/>
            <abstract>
              <t>The Constrained Application Protocol (CoAP) is a RESTful application protocol for constrained nodes and networks. The state of a resource on a CoAP server can change over time. This document specifies a simple protocol extension for CoAP that enables CoAP clients to "observe" resources, i.e., to retrieve a representation of a resource and keep this representation updated by the server over a period of time. The protocol follows a best-effort approach for sending new representations to clients and provides eventual consistency between the state observed by each client and the actual resource state at the server.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7641"/>
          <seriesInfo name="DOI" value="10.17487/RFC7641"/>
        </reference>
        <reference anchor="RFC8132">
          <front>
            <title>PATCH and FETCH Methods for the Constrained Application Protocol (CoAP)</title>
            <author fullname="P. van der Stok" initials="P." surname="van der Stok"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="A. Sehgal" initials="A." surname="Sehgal"/>
            <date month="April" year="2017"/>
            <abstract>
              <t>The methods defined in RFC 7252 for the Constrained Application Protocol (CoAP) only allow access to a complete resource, not to parts of a resource. In case of resources with larger or complex data, or in situations where resource continuity is required, replacing or requesting the whole resource is undesirable. Several applications using CoAP need to access parts of the resources.</t>
              <t>This specification defines the new CoAP methods, FETCH, PATCH, and iPATCH, which are used to access and update parts of a resource.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8132"/>
          <seriesInfo name="DOI" value="10.17487/RFC8132"/>
        </reference>
        <reference anchor="RFC8040">
          <front>
            <title>RESTCONF Protocol</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <author fullname="K. Watsen" initials="K." surname="Watsen"/>
            <date month="January" year="2017"/>
            <abstract>
              <t>This document describes an HTTP-based protocol that provides a programmatic interface for accessing data defined in YANG, using the datastore concepts defined in the Network Configuration Protocol (NETCONF).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8040"/>
          <seriesInfo name="DOI" value="10.17487/RFC8040"/>
        </reference>
        <reference anchor="RFC9254">
          <front>
            <title>Encoding of Data Modeled with YANG in the Concise Binary Object Representation (CBOR)</title>
            <author fullname="M. Veillette" initials="M." role="editor" surname="Veillette"/>
            <author fullname="I. Petrov" initials="I." role="editor" surname="Petrov"/>
            <author fullname="A. Pelov" initials="A." surname="Pelov"/>
            <author fullname="C. Bormann" initials="C." surname="Bormann"/>
            <author fullname="M. Richardson" initials="M." surname="Richardson"/>
            <date month="July" year="2022"/>
            <abstract>
              <t>YANG (RFC 7950) is a data modeling language used to model configuration data, state data, parameters and results of Remote Procedure Call (RPC) operations or actions, and notifications.</t>
              <t>This document defines encoding rules for YANG in the Concise Binary Object Representation (CBOR) (RFC 8949).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9254"/>
          <seriesInfo name="DOI" value="10.17487/RFC9254"/>
        </reference>
        <reference anchor="I-D.ietf-core-sid">
          <front>
            <title>YANG Schema Item iDentifier (YANG SID)</title>
            <author fullname="Michel Veillette" initials="M." surname="Veillette">
              <organization>Trilliant Networks Inc.</organization>
            </author>
            <author fullname="Alexander Pelov" initials="A." surname="Pelov">
              <organization>Acklio</organization>
            </author>
            <author fullname="Ivaylo Petrov" initials="I." surname="Petrov">
              <organization>Google Switzerland GmbH</organization>
            </author>
            <author fullname="Carsten Bormann" initials="C." surname="Bormann">
              <organization>Universität Bremen TZI</organization>
            </author>
            <author fullname="Michael Richardson" initials="M." surname="Richardson">
              <organization>Sandelman Software Works</organization>
            </author>
            <date day="29" month="August" year="2023"/>
            <abstract>
              <t>   YANG Schema Item iDentifiers (YANG SID) are globally unique 63-bit
   unsigned integers used to identify YANG items, as a more compact
   method to identify YANG items that can be used for efficiency and in
   constrained environments (RFC 7228).  This document defines the
   semantics, the registration, and assignment processes of YANG SIDs
   for IETF managed YANG modules.  To enable the implementation of these
   processes, this document also defines a file format used to persist
   and publish assigned YANG SIDs.


   // The present version (–21) updates the ietf-system.sid example to
   // correctly provide SIDs for the RPCs in ietf-system.yang.

              </t>
            </abstract>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-core-sid-21"/>
        </reference>
        <reference anchor="I-D.ietf-core-yang-library">
          <front>
            <title>Constrained YANG Module Library</title>
            <author fullname="Michel Veillette" initials="M." surname="Veillette">
              <organization>Trilliant Networks Inc.</organization>
            </author>
            <author fullname="Ivaylo Petrov" initials="I." surname="Petrov">
              <organization>Acklio</organization>
            </author>
            <date day="11" month="January" year="2021"/>
            <abstract>
              <t>   This document describes a constrained version of the YANG library
   that provides information about the YANG modules, datastores, and
   datastore schemas used by a constrained network management server
   (e.g., a CORECONF server).

              </t>
            </abstract>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-ietf-core-yang-library-03"/>
        </reference>
        <reference anchor="RFC2119">
          <front>
            <title>Key words for use in RFCs to Indicate Requirement Levels</title>
            <author fullname="S. Bradner" initials="S." surname="Bradner"/>
            <date month="March" year="1997"/>
            <abstract>
              <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="2119"/>
          <seriesInfo name="DOI" value="10.17487/RFC2119"/>
        </reference>
        <reference anchor="RFC8174">
          <front>
            <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
            <author fullname="B. Leiba" initials="B." surname="Leiba"/>
            <date month="May" year="2017"/>
            <abstract>
              <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
            </abstract>
          </front>
          <seriesInfo name="BCP" value="14"/>
          <seriesInfo name="RFC" value="8174"/>
          <seriesInfo name="DOI" value="10.17487/RFC8174"/>
        </reference>
      </references>
      <references>
        <name>Informative References</name>
        <reference anchor="RFC6347">
          <front>
            <title>Datagram Transport Layer Security Version 1.2</title>
            <author fullname="E. Rescorla" initials="E." surname="Rescorla"/>
            <author fullname="N. Modadugu" initials="N." surname="Modadugu"/>
            <date month="January" year="2012"/>
            <abstract>
              <t>This document specifies version 1.2 of the Datagram Transport Layer Security (DTLS) protocol. The DTLS protocol provides communications privacy for datagram protocols. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery. The DTLS protocol is based on the Transport Layer Security (TLS) protocol and provides equivalent security guarantees. Datagram semantics of the underlying transport are preserved by the DTLS protocol. This document updates DTLS 1.0 to work with TLS version 1.2. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6347"/>
          <seriesInfo name="DOI" value="10.17487/RFC6347"/>
        </reference>
        <reference anchor="RFC6690">
          <front>
            <title>Constrained RESTful Environments (CoRE) Link Format</title>
            <author fullname="Z. Shelby" initials="Z." surname="Shelby"/>
            <date month="August" year="2012"/>
            <abstract>
              <t>This specification defines Web Linking using a link format for use by constrained web servers to describe hosted resources, their attributes, and other relationships between links. Based on the HTTP Link Header field defined in RFC 5988, the Constrained RESTful Environments (CoRE) Link Format is carried as a payload and is assigned an Internet media type. "RESTful" refers to the Representational State Transfer (REST) architecture. A well-known URI is defined as a default entry point for requesting the links hosted by a server. [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="6690"/>
          <seriesInfo name="DOI" value="10.17487/RFC6690"/>
        </reference>
        <reference anchor="RFC8343">
          <front>
            <title>A YANG Data Model for Interface Management</title>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <date month="March" year="2018"/>
            <abstract>
              <t>This document defines a YANG data model for the management of network interfaces. It is expected that interface-type-specific data models augment the generic interfaces data model defined in this document. The data model includes definitions for configuration and system state (status information and counters for the collection of statistics).</t>
              <t>The YANG data model in this document conforms to the Network Management Datastore Architecture (NMDA) defined in RFC 8342.</t>
              <t>This document obsoletes RFC 7223.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8343"/>
          <seriesInfo name="DOI" value="10.17487/RFC8343"/>
        </reference>
        <reference anchor="RFC7317">
          <front>
            <title>A YANG Data Model for System Management</title>
            <author fullname="A. Bierman" initials="A." surname="Bierman"/>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <date month="August" year="2014"/>
            <abstract>
              <t>This document defines a YANG data model for the configuration and identification of some common system properties within a device containing a Network Configuration Protocol (NETCONF) server. This document also includes data node definitions for system identification, time-of-day management, user management, DNS resolver configuration, and some protocol operations for system management.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7317"/>
          <seriesInfo name="DOI" value="10.17487/RFC7317"/>
        </reference>
        <reference anchor="RFC8342">
          <front>
            <title>Network Management Datastore Architecture (NMDA)</title>
            <author fullname="M. Bjorklund" initials="M." surname="Bjorklund"/>
            <author fullname="J. Schoenwaelder" initials="J." surname="Schoenwaelder"/>
            <author fullname="P. Shafer" initials="P." surname="Shafer"/>
            <author fullname="K. Watsen" initials="K." surname="Watsen"/>
            <author fullname="R. Wilton" initials="R." surname="Wilton"/>
            <date month="March" year="2018"/>
            <abstract>
              <t>Datastores are a fundamental concept binding the data models written in the YANG data modeling language to network management protocols such as the Network Configuration Protocol (NETCONF) and RESTCONF. This document defines an architectural framework for datastores based on the experience gained with the initial simpler model, addressing requirements that were not well supported in the initial model. This document updates RFC 7950.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8342"/>
          <seriesInfo name="DOI" value="10.17487/RFC8342"/>
        </reference>
        <reference anchor="RFC8613">
          <front>
            <title>Object Security for Constrained RESTful Environments (OSCORE)</title>
            <author fullname="G. Selander" initials="G." surname="Selander"/>
            <author fullname="J. Mattsson" initials="J." surname="Mattsson"/>
            <author fullname="F. Palombini" initials="F." surname="Palombini"/>
            <author fullname="L. Seitz" initials="L." surname="Seitz"/>
            <date month="July" year="2019"/>
            <abstract>
              <t>This document defines Object Security for Constrained RESTful Environments (OSCORE), a method for application-layer protection of the Constrained Application Protocol (CoAP), using CBOR Object Signing and Encryption (COSE). OSCORE provides end-to-end protection between endpoints communicating using CoAP or CoAP-mappable HTTP. OSCORE is designed for constrained nodes and networks supporting a range of proxy operations, including translation between different transport protocols.</t>
              <t>Although an optional functionality of CoAP, OSCORE alters CoAP options processing and IANA registration. Therefore, this document updates RFC 7252.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8613"/>
          <seriesInfo name="DOI" value="10.17487/RFC8613"/>
        </reference>
        <reference anchor="RFC9147">
          <front>
            <title>The Datagram Transport Layer Security (DTLS) Protocol Version 1.3</title>
            <author fullname="E. Rescorla" initials="E." surname="Rescorla"/>
            <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
            <author fullname="N. Modadugu" initials="N." surname="Modadugu"/>
            <date month="April" year="2022"/>
            <abstract>
              <t>This document specifies version 1.3 of the Datagram Transport Layer Security (DTLS) protocol. DTLS 1.3 allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.</t>
              <t>The DTLS 1.3 protocol is based on the Transport Layer Security (TLS) 1.3 protocol and provides equivalent security guarantees with the exception of order protection / non-replayability. Datagram semantics of the underlying transport are preserved by the DTLS protocol.</t>
              <t>This document obsoletes RFC 6347.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9147"/>
          <seriesInfo name="DOI" value="10.17487/RFC9147"/>
        </reference>
        <reference anchor="RFC9200">
          <front>
            <title>Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)</title>
            <author fullname="L. Seitz" initials="L." surname="Seitz"/>
            <author fullname="G. Selander" initials="G." surname="Selander"/>
            <author fullname="E. Wahlstroem" initials="E." surname="Wahlstroem"/>
            <author fullname="S. Erdtman" initials="S." surname="Erdtman"/>
            <author fullname="H. Tschofenig" initials="H." surname="Tschofenig"/>
            <date month="August" year="2022"/>
            <abstract>
              <t>This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE-OAuth. The framework is based on a set of building blocks including OAuth 2.0 and the Constrained Application Protocol (CoAP), thus transforming a well-known and widely used authorization solution into a form suitable for IoT devices. Existing specifications are used where possible, but extensions are added and profiles are defined to better serve the IoT use cases.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="9200"/>
          <seriesInfo name="DOI" value="10.17487/RFC9200"/>
        </reference>
      </references>
    </references>
    <?line 1385?>

<section anchor="ietf-coreconf-yang">
      <name>ietf-coreconf YANG module</name>
      <sourcecode markers="true" name="ietf-coreconf@2023-07-10.yang"><![CDATA[
module ietf-coreconf {
  yang-version 1.1;

  namespace "urn:ietf:params:xml:ns:yang:ietf-coreconf";
  prefix coreconf;

  import ietf-datastores {
    prefix ds;
  }

  import ietf-restconf {
    prefix rc;
    description
      "This import statement is required to access
       the yang-data extension defined in RFC 8040.";
    reference "RFC 8040: RESTCONF Protocol";
  }

  organization
    "IETF Core Working Group";

  contact
    "Michel Veillette
     <mailto:michel.veillette@trilliantinc.com>

     Alexander Pelov
     <mailto:alexander@ackl.io>

     Peter van der Stok
     <mailto:consultancy@vanderstok.org>

     Andy Bierman
     <mailto:andy@yumaworks.com>";

  description
    "This module contains the different definitions required
     by the CORECONF protocol.

     Copyright (c) 2019 IETF Trust and the persons identified as
     authors of the code.  All rights reserved.

     Redistribution and use in source and binary forms, with or
     without modification, is permitted pursuant to, and subject to
     the license terms contained in, the Simplified BSD License set
     forth in Section 4.c of the IETF Trust's Legal Provisions
     Relating to IETF Documents
     (https://trustee.ietf.org/license-info).

     This version of this YANG module is part of RFC XXXX;
     see the RFC itself for full legal notices.";

  revision 2023-07-10 {
     description
      "Initial revision.";
    reference
      "[I-D.ietf-core-comi] CoAP Management Interface";
  }

  identity unified {
    base ds:datastore;
    description
      "Identifier of the unified configuration and operational
       state datastore.";
  }

  identity error-tag {
    description
      "Base identity for error-tag.";
  }

  identity operation-failed {
    base error-tag;
    description
      "Returned by the CORECONF server when the operation request
       can't be processed successfully.";
  }

  identity invalid-value {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to update or create a leaf with a value encoded using an
       invalid CBOR datatype or if the 'range', 'length',
       'pattern' or 'require-instance' constrain is not
       fulfilled.";
  }

  identity missing-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the operation requested
       by a CORECONF client fails to comply with the 'mandatory'
       constraint defined. The 'mandatory' constraint is
       enforced for leafs and choices, unless the node or any of
       its ancestors have a 'when' condition or 'if-feature'
       expression that evaluates to 'false'.";
  }

  identity unknown-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to access a data node of a YANG module not supported, of a
       data node associated with an 'if-feature' expression
       evaluated to 'false' or to a 'when' condition evaluated
       to 'false'.";
  }

  identity bad-element {
    base error-tag;
    description
      "Returned by the CORECONF server when the CORECONF client tries
       to create data nodes for more than one case in a choice.";
  }

  identity data-missing {
    base error-tag;
    description
      "Returned by the CORECONF server when a data node required to
       accept the request is not present.";
  }

  identity error {
    base error-tag;
    description
      "Returned by the CORECONF server when an unspecified error has
      occurred.";
  }

  identity error-app-tag {
    description
      "Base identity for error-app-tag.";
  }

  identity malformed-message {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the payload received
       from the CORECONF client don't contain a well-formed CBOR
       content as defined in [RFC8949] or don't
       comply with the CBOR structure defined within this
       document.";
  }

  identity data-not-unique {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'unique' constraint of a list or leaf-list fails.";
  }

  identity too-many-elements {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'max-elements' constraint of a list or leaf-list fails.";
  }

  identity too-few-elements {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'min-elements' constraint of a list or leaf-list fails.";
  }

  identity must-violation {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the restrictions
       imposed by a 'must' statement are violated.";
  }

  identity duplicate {
    base error-app-tag;
    description
      "Returned by the CORECONF server when a client tries to create
       a duplicate list or leaf-list entry.";
  }

  identity invalid-datatype {
    base error-app-tag;
    description
      "Returned by the CORECONF server when CBOR encoding is
       incorect or when the value encoded is incompatible with
       the YANG Built-In type. (e.g., value greater than 127
       for an int8, undefined enumeration).";
  }

  identity not-in-range {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'range' property fails.";
  }

  identity invalid-length {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'length' property fails.";
  }

  identity pattern-test-failed {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the validation of the
       'pattern' property fails.";
  }

  identity missing-key {
    base error-app-tag;
    description
      "Returned by the CORECONF server to further qualify a
       missing-element error. This error is returned when the
       CORECONF client tries to create or list instance, without all
       the 'key' specified or when the CORECONF client tries to
       delete a leaf listed as a 'key'.";
  }

  identity missing-input-parameter {
    base error-app-tag;
    description
      "Returned by the CORECONF server when the input parameters
       of a RPC or action are incomplete.";
  }

  identity instance-required {
    base error-app-tag;
    description
      "Returned by the CORECONF server when a leaf of type
       'instance-identifier' or 'leafref' marked with
       require-instance set to 'true' refers to an instance
       that does not exist.";
  }

  identity missing-choice {
    base error-app-tag;
    description
      "Returned by the CORECONF server when no nodes exist in a
       mandatory choice.";
  }

  rc:yang-data coreconf-error {
    container error {
      description
        "Optional payload of a 4.00 Bad Request CoAP error.";

      leaf error-tag {
        type identityref {
          base error-tag;
        }
        mandatory true;
        description
          "The enumerated error-tag.";
      }

      leaf error-app-tag {
        type identityref {
          base error-app-tag;
        }
        description
          "The application-specific error-tag.";
      }

      leaf error-data-node {
        type instance-identifier;
        description
          "When the error reported is caused by a specific data node,
           this leaf identifies the data node in error.";
      }

      leaf error-message {
        type string;
        description
          "A message describing the error.";
      }
    }
  }
}
]]></sourcecode>
    </section>
    <section anchor="ietf-coreconf-sid">
      <name>ietf-coreconf .sid file</name>
      <artwork><![CDATA[
{
  "ietf-sid-file:sid-file": {
    "module-name": "ietf-coreconf",
    "module-revision": "2023-07-10",
    "assignment-range": [
      {
        "entry-point": "1000",
        "size": "100"
      }
    ],
    "item": [
      {
        "namespace": "module",
        "identifier": "ietf-coreconf",
        "sid": "1000"
      },
      {
        "namespace": "identity",
        "identifier": "bad-element",
        "sid": "1001"
      },
      {
        "namespace": "identity",
        "identifier": "data-missing",
        "sid": "1002"
      },
      {
        "namespace": "identity",
        "identifier": "data-not-unique",
        "sid": "1003"
      },
      {
        "namespace": "identity",
        "identifier": "duplicate",
        "sid": "1004"
      },
      {
        "namespace": "identity",
        "identifier": "error",
        "sid": "1005"
      },
      {
        "namespace": "identity",
        "identifier": "error-app-tag",
        "sid": "1006"
      },
      {
        "namespace": "identity",
        "identifier": "error-tag",
        "sid": "1007"
      },
      {
        "namespace": "identity",
        "identifier": "instance-required",
        "sid": "1008"
      },
      {
        "namespace": "identity",
        "identifier": "invalid-datatype",
        "sid": "1009"
      },
      {
        "namespace": "identity",
        "identifier": "invalid-length",
        "sid": "1010"
      },
      {
        "namespace": "identity",
        "identifier": "invalid-value",
        "sid": "1011"
      },
      {
        "namespace": "identity",
        "identifier": "malformed-message",
        "sid": "1012"
      },
      {
        "namespace": "identity",
        "identifier": "missing-choice",
        "sid": "1013"
      },
      {
        "namespace": "identity",
        "identifier": "missing-element",
        "sid": "1014"
      },
      {
        "namespace": "identity",
        "identifier": "missing-input-parameter",
        "sid": "1015"
      },
      {
        "namespace": "identity",
        "identifier": "missing-key",
        "sid": "1016"
      },
      {
        "namespace": "identity",
        "identifier": "must-violation",
        "sid": "1017"
      },
      {
        "namespace": "identity",
        "identifier": "not-in-range",
        "sid": "1018"
      },
      {
        "namespace": "identity",
        "identifier": "operation-failed",
        "sid": "1019"
      },
      {
        "namespace": "identity",
        "identifier": "pattern-test-failed",
        "sid": "1020"
      },
      {
        "namespace": "identity",
        "identifier": "too-few-elements",
        "sid": "1021"
      },
      {
        "namespace": "identity",
        "identifier": "too-many-elements",
        "sid": "1022"
      },
      {
        "namespace": "identity",
        "identifier": "unified",
        "sid": "1029"
      },
      {
        "namespace": "identity",
        "identifier": "unknown-element",
        "sid": "1023"
      },
      {
        "namespace": "data",
        "identifier": "/ietf-coreconf:error",
        "sid": "1024"
      },
      {
        "namespace": "data",
        "identifier": "/ietf-coreconf:error/error-app-tag",
        "sid": "1025"
      },
      {
        "namespace": "data",
        "identifier": "/ietf-coreconf:error/error-data-node",
        "sid": "1026"
      },
      {
        "namespace": "data",
        "identifier": "/ietf-coreconf:error/error-message",
        "sid": "1027"
      },
      {
        "namespace": "data",
        "identifier": "/ietf-coreconf:error/error-tag",
        "sid": "1028"
      }
    ]
  }
}
]]></artwork>
    </section>
    <section numbered="false" anchor="acknowledgments">
      <name>Acknowledgments</name>
      <t>We are very grateful to <contact fullname="Bert Greevenbosch"/> who was one of the original authors
of the CORECONF specification.</t>
      <t><contact fullname="Mehmet Ersue"/> and <contact fullname="Bert Wijnen"/> explained the encoding aspects of PDUs transported
under SNMP.
<contact fullname="Koen Zandberg"/>'s implementation input motivated massively simplifying
(and fixing) the URI construction for GET/PUT/POST requests.</t>
      <t>The draft has further benefited from comments (alphabetical order) by
<contact fullname="Rodney Cummings"/>,
<contact fullname="Dee Denteneer"/>,
<contact fullname="Esko Dijk"/>,
<contact fullname="Klaus Hartke"/>,
<contact fullname="Michael van Hartskamp"/>,
<contact fullname="Tanguy Ropitault"/>,
<contact fullname="Jürgen Schönwälder"/>,
<contact fullname="Anuj Sehgal"/>,
<contact fullname="Zach Shelby"/>,
<contact fullname="Hannes Tschofenig"/>,
<contact fullname="Michael Verschoor"/>,
and
<contact fullname="Thomas Watteyne"/>.</t>
    </section>
    <section anchor="contributors" numbered="false" toc="include" removeInRFC="false">
      <name>Contributors</name>
      <contact initials="I. I." surname="Petrov" fullname="Ivaylo Petrov">
        <organization>Acklio</organization>
        <address>
          <postal>
            <street>1137A avenue des Champs Blancs</street>
            <city>Cesson-Sevigne</city>
            <code>35510</code>
            <country>France</country>
          </postal>
          <email>ivaylo@ackl.io</email>
        </address>
      </contact>
    </section>
  </back>
  <!-- ##markdown-source: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-->

</rfc>
