RFC 9983
OSPFv2 Anycast Property Advertisement
OSPFv2 Anycast Property Advertisement π
RFC 9983, by Ran Chen and Detao Zhao (ZTE Corporation), Peter Psenak and Ketan Talaulikar (Cisco Systems), and Changwang Lin (New H3C Technologies). It's a Standards Track document from the IETF, dated May 2026, and it's in the ISSN 2070-1721 series. The header doesn't list anything it obsoletes or updates. π
Abstract β¨
Okay so, an IP prefix can be set up as anycast, which means the same value can get advertised by a bunch of routers at once. π¦ Other routers need to be able to tell that an advertisement is for an anycast prefix. This doc adds a new flag to the OSPFv2 Extended Prefix TLV Flags so the anycast property can be advertised, and it also comes with a companion YANG module for managing it. π
Status of This Memo πΈ
This is an Internet Standards Track document.
It's a product of the Internet Engineering Task Force (IETF), it reflects the consensus of the IETF community, it got public review, and the Internet Engineering Steering Group (IESG) approved it for publication. If you want more on Internet Standards, check out Section 2 of RFC 7841.
For the current status, any errata, and how to send feedback, head to https://www.rfc-editor.org/info/rfc9983. π§
Copyright Notice π
Copyright (c) 2026 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is covered by BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) as they stand on the publication date. Please read them closely, because they spell out your rights and restrictions for this document. Code Components pulled out of this document must include the Revised BSD License text described in Section 4.e of the Trust Legal Provisions, and they come with no warranty, as the Revised BSD License describes. π
Table of Contents π
1. Introduction
1.1. Requirements Language
2. OSPFv2 Anycast Property Advertisement
3. BGP-LS Advertisement
4. YANG Data Model
4.1. Tree for the YANG Data Model
4.2. YANG Data Model for OSPFv2 Anycast Property Advertisement
5. IANA Considerations
5.1. OSPFv2 Extended Prefix TLV Flags Registry
5.2. OSPFv2 Anycast Flag YANG Module Registration
6. Security Considerations
6.1. Protocol Security Considerations
6.2. YANG Security Considerations
7. References
7.1. Normative References
7.2. Informative References
Acknowledgements
Contributors
Authors' Addresses
1. Introduction π«
Same deal as the abstract: an IP prefix can be configured as anycast, so the same value can be advertised by several routers, and other routers want to know the advertisement is for an anycast prefix. π¦
[RFC7684] defines OSPFv2 Opaque Link State Advertisements (LSAs). They're built out of Type-Length-Value (TLV) tuples, and those tuples can attach extra attributes to prefixes or links. The OSPFv2 Extended Prefix TLV, which lives inside the OSPFv2 Extended Prefix Opaque LSA, is what carries extra attributes for a prefix. β¨
Anycast extensions already exist for IS-IS [RFC9352] and OSPFv3 [RFC9513]. Those docs are about Segment Routing over IPv6, but the anycast property applies to any IP prefix advertisement, so this doc adds a flag for OSPFv2. It goes in the Flags field of the OSPFv2 Extended Prefix TLV Flags (Section 2.1 of [RFC7684]). This doc also specifies a companion YANG module for managing the feature. π
1.1. Requirements Language π₯
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. π
2. OSPFv2 Anycast Property Advertisement π¦
An IP prefix can be configured as anycast, and other routers need to know the advertisement is for an anycast prefix. πΈ
For the flags in this doc, "set" means the bit is 1, and "clear" means the bit is 0. π
A new flag gets added to the "OSPFv2 Extended Prefix TLV Flags" IANA registry (see [RFC7684]) for the anycast property:
Value: 0x10
Description: Anycast Flag (AC-Flag)
The only thing the AC-Flag means is that the prefix is meant to be advertised by multiple nodes. π§
When a prefix is configured as anycast, the AC-Flag MUST be set. If it isn't, the flag MUST be clear. π₯
The AC-Flag and the N-flag (Section 2.1 of [RFC7684]) MUST NOT both be set. If a router receives an advertisement with both the N-flag and the AC-Flag set, that MUST be considered a configuration anomaly, and the N-flag MUST be ignored. On top of that, spotting one of these conflicting advertisements SHOULD be logged as an operational error, subject to rate-limiting. π
The AC-Flag MUST be preserved when the OSPFv2 Extended Prefix Opaque LSA gets re-advertised into other areas. π«Ά
The same prefix can be advertised by several routers. If at least one of them sets the AC-Flag in its advertisement, the prefix counts as anycast. β¨
A prefix that a single node advertises without an AC-Flag is treated as a node-specific prefix. π
Anycast prefixes SHOULD be consistently managed throughout the network. An AC-Flag that's set wins when it comes to identifying the anycast property, so stale configurations should be strictly monitored. π
3. BGP-LS Advertisement π
[RFC9085] defines the Prefix Attribute Flags TLV for Border Gateway Protocol - Link State (BGP-LS), which carries prefix attribute flag information. The Flags field of that TLV is read according to OSPFv2 [RFC7684]. So the Flags field of the BGP-LS Prefix Attribute Flags TLV also carries the anycast property this doc introduces. π¦
4. YANG Data Model π
YANG [RFC7950] is a data definition language. It defines the contents of a conceptual data store so networked devices can be managed through the Network Configuration Protocol (NETCONF) [RFC6241] or RESTCONF [RFC8040]. π§
This section defines a YANG data model for managing the OSPFv2 Anycast Property as this doc defines it. It augments the OSPF YANG data model [RFC9129] and the YANG Data Model for Routing Management [RFC8349]. πΈ
4.1. Tree for the YANG Data Model π³
This doc uses the graphical representation of data models from [RFC8340]. Here's the tree diagram for the module:
module: ietf-ospf-anycast-flag
augment /rt:routing/rt:control-plane-protocols
/rt:control-plane-protocol/ospf:ospf/ospf:areas/ospf:area
/ospf:interfaces/ospf:interface:
+--rw anycast-flag? boolean
4.2. YANG Data Model for OSPFv2 Anycast Property Advertisement π
The "ietf-ospf-anycast-flag" module in this doc imports typedefs from [RFC8349] and [RFC9129]. π
<CODE BEGINS> file "ietf-ospf-anycast-flag@2026-05-19.yang"
module ietf-ospf-anycast-flag {
yang-version 1.1;
namespace "urn:ietf:params:xml:ns:yang:ietf-ospf-anycast-flag";
prefix ospf-anycast-flag;
import ietf-routing {
prefix rt;
reference
"RFC 8349: A YANG Data Model for Routing
Management (NMDA Version)";
}
import ietf-ospf {
prefix ospf;
reference
"RFC 9129: YANG Data Model for the OSPF Protocol";
}
organization
"IETF LSR - Link State Routing Working Group";
contact
"WG Web: <https://datatracker.ietf.org/wg/lsr/>
WG List: <mailto:lsr@ietf.org>
Author: Ran Chen
<mailto:chen.ran@zte.com.cn>
Author: Detao Zhao
<mailto:zhao.detao@zte.com.cn>
Author: Peter Psenak
<mailto:ppsenak@cisco.com>
Author: Ketan Talaulikar
<mailto:ketant.ietf@gmail.com>
Author: Changwang Lin
<mailto:linchangwang.04414@h3c.com>";
description
"This YANG module adds the support of managing an OSPFv2
prefix as anycast.
The key words 'MUST', 'MUST NOT', 'REQUIRED', 'SHALL', 'SHALL
NOT', 'SHOULD', 'SHOULD NOT', 'RECOMMENDED', 'NOT RECOMMENDED',
'MAY', and 'OPTIONAL' in this document are to be interpreted as
described in BCP 14 (RFC 2119) (RFC 8174) when, and only when,
they appear in all capitals, as shown here.
Copyright (c) 2026 IETF Trust and the persons identified as
authors of the code. All rights reserved.
Redistribution and use in source and binary forms, with or
without modification, is permitted pursuant to, and subject to
the license terms contained in, the Revised BSD License set
forth in Section 4.c of the IETF Trust's Legal Provisions
Relating to IETF Documents
(https://trustee.ietf.org/license-info).
All revisions of IETF and IANA published modules can
be found at the YANG Parameters registry group
(https://www.iana.org/assignments/yang-parameters);
This version of this YANG module is part of RFC 9983;
see the RFC itself for full legal notices.";
revision 2026-05-19 {
description
"Initial version";
reference
"RFC 9983: OSPFv2 Anycast Property Advertisement";
}
identity ac-flag {
base ospf:ospfv2-extended-prefix-flag;
description
"Indicates that the prefix is configured as anycast.";
}
augment "/rt:routing/rt:control-plane-protocols/"
+ "rt:control-plane-protocol/ospf:ospf/"
+ "ospf:areas/ospf:area/ospf:interfaces/ospf:interface" {
when "derived-from(/rt:routing/rt:control-plane-protocols/"
+ "rt:control-plane-protocol/rt:type, 'ospf:ospfv2')" {
description
"This augments the OSPFv2 interface.";
}
description
"This augments OSPFv2 interface with anycast
property advertisement.";
leaf anycast-flag {
type boolean;
must "not(../anycast-flag = 'true' and "
+ "/rt:routing/rt:control-plane-protocols/"
+ "rt:control-plane-protocol/ospf:ospf/"
+ "ospf:areas/ospf:area/ospf:interfaces/"
+ "ospf:interface/ospf:node-flag = 'true')" {
error-message "The anycast-flag and the node-flag MUST "
+ "NOT both be set to 1 (true).";
description
"Ensures architectural consistency by preventing a prefix
from being marked as both anycast and node-specific.";
}
default "false";
description
"Indicates that the prefix is an anycast address,
if set to 1 (true).";
}
}
}
<CODE ENDS>
5. IANA Considerations π§Ύ
IANA has allocated and/or registered the following values in their respective registries. π
5.1. OSPFv2 Extended Prefix TLV Flags Registry π¦
IANA has allocated the following value in the "OSPFv2 Extended Prefix TLV Flags" registry:
0x10: AC-Flag (Anycast Flag)
5.2. OSPFv2 Anycast Flag YANG Module Registration β¨
okay so IANA registered a URI in the "ns" registry inside the "IETF XML Registry" registry group (see [RFC3688]) π:
ID: yang:ietf-ospf-anycast-flag
URI: urn:ietf:params:xml:ns:yang:ietf-ospf-anycast-flag
Registrant Contact: The IESG
XML: N/A; the requested URI is an XML namespace
and they also registered the YANG module in the "YANG Module Names" registry ([RFC6020]) inside the "YANG Parameters" registry group π:
Name: ietf-ospf-anycast-flag
Maintained by IANA? N
Namespace: urn:ietf:params:xml:ns:yang:ietf-ospf-anycast-flag
Prefix: ospf-anycast-flag
Reference: RFC 9983
6. Security Considerations ππ
bestie, this section is seriously important, so read it carefully π«Ά
6.1. Protocol Security Considerations
the procedures and protocol extensions in this document do not affect the OSPFv2 security model π if you want the OSPFv2 security discussion, check the "Security Considerations" section of [RFC7684].
the newly introduced AC-Flag MUST be either set or clear π¦ and it creates operational dependencies that affect whether the advertised prefix makes semantic sense. reading the AC-Flag correctly depends on two things: router implementations that support the flag, and an operator who has configured the anycast route accurately. so receivers MUST consider the possibility of misconfiguration or inconsistent implementation when they rely on the AC-Flag for forwarding or security decisions. not me trusting it blindly π
6.2. YANG Security Considerations
this section is modeled after the template described in Section 3.7 of [RFC9907] πΈ
the "ietf-ospf-anycast-flag" YANG module is a data model meant to be accessed through YANG-based management protocols, like Network Configuration Protocol (NETCONF) [RFC6241] and RESTCONF [RFC8040] π§ these management protocols (1) have to use a secure transport layer (for example SSH [RFC4252], TLS [RFC8446], and QUIC [RFC9000]) and (2) have to use mutual authentication. no shortcuts, periodt π₯
the Network Configuration Access Control Model (NACM) [RFC8341] lets you restrict particular NETCONF or RESTCONF users to a preconfigured subset of the available protocol operations and content. very useful, very iconic β¨
there is a writable, creatable, and deletable data node in this module (config true, which is the default) π it can be sensitive or vulnerable in some network environments. write operations (for example edit-config) and delete operations on this data node without proper protection or authentication can have a negative effect on network operations. the subtree and data node with the particular sensitivities and vulnerabilities are:
/ospf:ospf/ospf:areas/ospf:area/ospf:interfaces/ospf:interface/
ospf-anycast-flag:anycast-flag
as specified in Section 2, the AC-Flag and the N-flag MUST NOT both be set to 1 π this rule is enforced by a "must" constraint in the YANG module to prevent configuration anomalies, and the handling of those anomalies is defined in Section 2. if this data node gets modified without proper protection, it could stop the IPv4 prefix from being interpreted as anycast or node-specific. yikes π
the readable data node in this module may also be considered sensitive or vulnerable in some network environments, so it's important to control read access to it (for example through get, get-config, or notification) π the subtree and data node with the particular sensitivities and vulnerabilities are:
/ospf:ospf/ospf:areas/ospf:area/ospf:interfaces/ospf:interface/
ospf-anycast-flag:anycast-flag
unauthorized access to this subtree can disclose specific anycast property information for OSPF prefixes on a device. that's a private diary situation π€«
there are no particularly sensitive RPC or action operations π
7. References π
7.1. Normative References
- [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, <https://www.rfc-editor.org/info/rfc2119>.
- [RFC3688] Mealling, M., "The IETF XML Registry", BCP 81, RFC 3688, DOI 10.17487/RFC3688, January 2004, <https://www.rfc-editor.org/info/rfc3688>.
- [RFC6020] Bjorklund, M., Ed., "YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)", RFC 6020, DOI 10.17487/RFC6020, October 2010, <https://www.rfc-editor.org/info/rfc6020>.
- [RFC7684] Psenak, P., Gredler, H., Shakir, R., Henderickx, W., Tantsura, J., and A. Lindem, "OSPFv2 Prefix/Link Attribute Advertisement", RFC 7684, DOI 10.17487/RFC7684, November 2015, <https://www.rfc-editor.org/info/rfc7684>.
- [RFC7950] Bjorklund, M., Ed., "The YANG 1.1 Data Modeling Language", RFC 7950, DOI 10.17487/RFC7950, August 2016, <https://www.rfc-editor.org/info/rfc7950>.
- [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, <https://www.rfc-editor.org/info/rfc8174>.
- [RFC8341] Bierman, A. and M. Bjorklund, "Network Configuration Access Control Model", STD 91, RFC 8341, DOI 10.17487/RFC8341, March 2018, <https://www.rfc-editor.org/info/rfc8341>.
- [RFC8349] Lhotka, L., Lindem, A., and Y. Qu, "A YANG Data Model for Routing Management (NMDA Version)", RFC 8349, DOI 10.17487/RFC8349, March 2018, <https://www.rfc-editor.org/info/rfc8349>.
- [RFC9085] Previdi, S., Talaulikar, K., Ed., Filsfils, C., Gredler, H., and M. Chen, "Border Gateway Protocol - Link State (BGP-LS) Extensions for Segment Routing", RFC 9085, DOI 10.17487/RFC9085, August 2021, <https://www.rfc-editor.org/info/rfc9085>.
- [RFC9129] Yeung, D., Qu, Y., Zhang, Z., Chen, I., and A. Lindem, "YANG Data Model for the OSPF Protocol", RFC 9129, DOI 10.17487/RFC9129, October 2022, <https://www.rfc-editor.org/info/rfc9129>.
7.2. Informative References
- [RFC4252] Ylonen, T. and C. Lonvick, Ed., "The Secure Shell (SSH) Authentication Protocol", RFC 4252, DOI 10.17487/RFC4252, January 2006, <https://www.rfc-editor.org/info/rfc4252>.
- [RFC6241] Enns, R., Ed., Bjorklund, M., Ed., Schoenwaelder, J., Ed., and A. Bierman, Ed., "Network Configuration Protocol (NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011, <https://www.rfc-editor.org/info/rfc6241>.
- [RFC8040] Bierman, A., Bjorklund, M., and K. Watsen, "RESTCONF Protocol", RFC 8040, DOI 10.17487/RFC8040, January 2017, <https://www.rfc-editor.org/info/rfc8040>.
- [RFC8340] Bjorklund, M. and L. Berger, Ed., "YANG Tree Diagrams", BCP 215, RFC 8340, DOI 10.17487/RFC8340, March 2018, <https://www.rfc-editor.org/info/rfc8340>.
- [RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018, <https://www.rfc-editor.org/info/rfc8446>.
- [RFC9000] Iyengar, J., Ed. and M. Thomson, Ed., "QUIC: A UDP-Based Multiplexed and Secure Transport", RFC 9000, DOI 10.17487/RFC9000, May 2021, <https://www.rfc-editor.org/info/rfc9000>.
- [RFC9352] Psenak, P., Ed., Filsfils, C., Bashandy, A., Decraene, B., and Z. Hu, "IS-IS Extensions to Support Segment Routing over the IPv6 Data Plane", RFC 9352, DOI 10.17487/RFC9352, February 2023, <https://www.rfc-editor.org/info/rfc9352>.
- [RFC9513] Li, Z., Hu, Z., Talaulikar, K., Ed., and P. Psenak, "OSPFv3 Extensions for Segment Routing over IPv6 (SRv6)", RFC 9513, DOI 10.17487/RFC9513, December 2023, <https://www.rfc-editor.org/info/rfc9513>.
- [RFC9907] Bierman, A., Boucadair, M., Ed., and Q. Wu, "Guidelines for Authors and Reviewers of Documents Containing YANG Data Models", BCP 216, RFC 9907, DOI 10.17487/RFC9907, March 2026, <https://www.rfc-editor.org/info/rfc9907>.
Acknowledgements π«Ά
the authors would like to thank Acee Lindem for aligning the terminology with existing OSPF documents and for editorial improvements π
Contributors π
this document has the following contributor:
Yingzhen Qu Futurewei Technologies Email: yingzhen.ietf@gmail.com
Authors' Addresses π¦
Ran Chen ZTE Corporation Nanjing China Email: chen.ran@zte.com.cn
Detao Zhao ZTE Corporation Nanjing China Email: zhao.detao@zte.com.cn
Peter Psenak Cisco Systems Email: ppsenak@cisco.com
Ketan Talaulikar Cisco Systems Email: ketant.ietf@gmail.com
Changwang Lin New H3C Technologies Beijing China Email: linchangwang.04414@h3c.com
π¦ where this page comes from
- ietf: rfc9983 2026-05
- π girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms