<?xml version="1.0" encoding="US-ASCII"?>
<rfc category="info" docName="draft-ietf-fann-problem-statement-01"
     ipr="trust200902" submissionType="IETF" version="3" xml:lang="en">
  <front>
    <title abbrev="FANN Problem Statement">Fast Network Notifications Problem
    Statement</title>

    <seriesInfo name="Internet-Draft"
                value="draft-ietf-fann-problem-statement-01"/>

    <author fullname="Jie Dong" initials="J." role="editor" surname="Dong">
      <organization>Huawei Technologies</organization>

      <address>
        <email>jie.dong@huawei.com</email>
      </address>
    </author>

    <author fullname="Mike McBride" initials="M." role="editor"
            surname="McBride">
      <organization>Futurewei</organization>

      <address>
        <email>mmcbride7@gmail.com</email>
      </address>
    </author>

    <author fullname="Francois Clad" initials="F." role="editor"
            surname="Clad">
      <organization>Cisco Systems</organization>

      <address>
        <email>fclad.ietf@gmail.com</email>
      </address>
    </author>

    <author fullname="Zhaohui Zhang" initials="Z." surname="Zhang">
      <organization>HPE</organization>

      <address>
        <email>zhaohui.zhang@hpe.com</email>
      </address>
    </author>

    <author fullname="Yongqing Zhu" initials="Y." surname="Zhu">
      <organization>China Telecom</organization>

      <address>
        <email>zhuyq8@chinatelecom.cn</email>
      </address>
    </author>

    <author fullname="Xiaohu Xu" initials="X." surname="Xu">
      <organization>China Mobile</organization>

      <address>
        <email>xuxiaohu_ietf@hotmail.com</email>
      </address>
    </author>

    <author fullname="Rui Zhuang" initials="R." surname="Zhuang">
      <organization>China Mobile</organization>

      <address>
        <email>zhuangruiyjy@chinamobile.com</email>
      </address>
    </author>

    <author fullname="Ran Pang" initials="R." surname="Pang">
      <organization>China Unicom</organization>

      <address>
        <email>pangran@chinaunicom.cn</email>
      </address>
    </author>

    <author fullname="Hao Lu" initials="H." surname="Lu">
      <organization>Tencent</organization>

      <address>
        <email>vickkylu@tencent.com</email>
      </address>
    </author>

    <author fullname="Yadong Liu" initials="Y." surname="Liu">
      <organization>Tencent</organization>

      <address>
        <email>zeepliu@tencent.com</email>
      </address>
    </author>

    <author fullname="Luis M. Contreras" initials="L. M." surname="Contreras">
      <organization>Telefonica</organization>

      <address>
        <email>luismiguel.contrerasmurillo@telefonica.com</email>
      </address>
    </author>

    <author fullname="Mehmet Durmus" initials="M." surname="Durmus">
      <organization>Turkcell</organization>

      <address>
        <email>mehmet.durmus@turkcell.com.tr</email>
      </address>
    </author>

    <author fullname="Reshad Rahman" initials="R." surname="Rahman">
      <organization>Equinix</organization>

      <address>
        <email>reshad@yahoo.com</email>
      </address>
    </author>

    <date day="26" month="October" year="2026"/>

    <area>Routing</area>

    <workgroup>fann</workgroup>

    <keyword>fast network notification</keyword>

    <abstract>
      <t>Many network applications, ranging from Artificial Intelligence (AI)
      /Machine Learning (ML) training/inference to cloud services, require
      networks with various combination of high bandwidth, low delay and low
      jitter and minimal packet loss in data transfer. This requires that the
      networks must rapidly adapt to the presence of faults, degradation and
      congestion. However, existing routing and traffic management mechanisms
      often face limitations in responsiveness, coverage, and operational
      complexity, particularly in large-scale and high-bandwidth network
      environments (e.g. data center (DC) and data center interconnect (DCI)).
      A good and timely understanding of network conditions can help to enable
      faster response to critical events, so as to enable the selection of
      paths with reduced latency and improve network utilization. This
      document describes the gap analysis and the need for fast network
      notification, and identifies the set of problems which a fast network
      notification solution needs to address.</t>
    </abstract>
  </front>

  <middle>
    <section anchor="intro" numbered="true" toc="default">
      <name>Introduction</name>

      <t>Many network applications, ranging from AI/ML training or inference
      to cloud services, require high bandwidth, low delay, low jitter and
      minimal packet loss in data transfer, which requires that the networks
      can be adaptive in the presence of faults, degradations, or congestion.
      To meet these requirements, networks employ mechanisms such as traffic
      engineering (TE), load balancing, flow control, and protection
      switching. However, existing solutions often face limitations in
      responsiveness, coverage, and operational complexity, particularly in
      high-speed and large-scale environments.</t>

      <t>Many network devices are capable of detecting link congestion,
      microbursts, queue buildup and other localized impairments at
      fine-grained time scales, ranging from microseconds to sub-millisecond,
      depending on hardware capabilities and deployment requirements. These
      detection capabilities substantially outpace the time required for such
      information to be disseminated to other relevant nodes for their
      actions, creating a gap between what the detecting node can observe and
      when recipients can react. Fast network notification identifies the need
      for complementary mechanisms that enable low-latency notification of
      network conditions, allowing actions taken in the data plane to more
      closely align with the capabilities of contemporary forwarding hardware.
      The information delivered by fast network notification may also be used
      for actions taken in the control plane or management plane.</t>

      <t>This document summarizes the limitations of existing mechanisms that
      prevent them being used for fast notification of critical network
      events, including link or node failure and congestion. It also
      identifies the need for fast network notification which is critical for
      enabling fast reaction. In the context of this document, fast does not
      imply a single, rigid numerical time threshold. Instead, it
      characterizes a class of mechanisms to minimize the notification
      delivery time so that the latency of the notification is in the order of
      sub-milliseconds or milliseconds, depending on the operational objective
      and the range of the network domain, and can be substantially shorter
      than the Round-Trip-Time (RTT) of the network traffic involved. The
      scope of this work is limited to fast notification of network
      conditions. Improvements such as reduced packet loss or faster
      mitigation are possible results of the actions consuming such
      notifications, but are not themselves goals or requirements of the
      notification mechanism.</t>

      <t><xref target="I-D.geng-fantel-fantel-gap-analysis"/> provides a gap
      analysis of existing solutions and where they are deficient in
      supporting high demand services. This document describes the set of
      problems which a network notification solution needs to address. The
      problems described in this document apply across a range of network
      scenarios and topologies. However, the mechanisms used to provide
      notifications, and the feasibility of meeting specific timeliness
      requirements, may differ depending on topology and deployment context,
      and the worst cases in network scenarios and topologies need to be
      considered. Further discussions of the requirements for a Fast Network
      Notification system can be found in <xref
      target="I-D.geng-fantel-fantel-requirements"/>. This document does not
      assume one-size-fits-all.</t>

      <t>For example, data center fabric environments are typically
      characterized by microsecond level propagation delay budgets, incast and
      microburst congestion patterns and a single administrative trust domain.
      DCI and WAN environments typically involve millisecond level delay
      characteristics bounded by the round trip time of the path, more
      sustained congestion patterns and may span multiple trust boundaries.
      The problems described in this document apply to both types of
      environments but the feasibility and design of specific solutions may
      need to account for these differing characteristics.</t>

      <t>The IETF has previously explored path-coupled signaling and
      in-network feedback mechanisms in related contexts. The Next Steps in
      Signaling (NSIS) framework <xref target="RFC4080"/> defined a general
      architecture for path-coupled signaling along the data path, and the
      challenges identified there, including state management, scalability,
      and security, remain relevant to the fast network notification problem
      space. <xref target="RFC6077"/> provides a survey of open research
      issues on Internet congestion control; Section 3.1 in particular
      identifies fundamental tensions between signaling speed, scalability,
      and correctness that apply to any in-network notification mechanism. The
      present document builds on awareness of this prior work while addressing
      the distinct requirements imposed by today's high-bandwidth,
      latency-sensitive network environments.</t>
    </section>

    <section anchor="glossary" numbered="true" toc="default">
      <name>Glossary</name>

      <t>BFD: Bidirectional Forwarding Detection <xref target="RFC5880"/></t>

      <t>ECN: Explicit Congestion Notification <xref target="RFC3168"/></t>

      <t>FANN: Fast Network Notification, which is introduced by this
      document.</t>

      <t>FRR: Fast Re-Route <xref target="RFC4090"/> <xref
      target="RFC5714"/></t>

      <t>IOAM: In-situ Operations, Administration, and Maintenance <xref
      target="RFC9197"/></t>
    </section>

    <section anchor="why" numbered="true" toc="default">
      <name>Why Fast Network Notification is Needed</name>

      <t>Current network mechanisms were not designed for the responsiveness
      and scale required by today's dynamic environments. Techniques such as
      load balancing, protection switching, and flow control rely on feedback
      loops that are often too slow, too coarse, or too resource-intensive.
      This results in performance bottlenecks, delayed recovery, and
      inefficiencies in large-scale AI, cloud, and WAN deployments. A fast
      network notification mechanism could help to address these gaps by
      providing real-time, fine-grained, lightweight actionable alerts that
      complement existing tools and enable faster, more accurate traffic
      manipulation decisions.</t>

      <t>In particular, the detection and propagation of network events (e.g.,
      link or node failure, congestion or state change) must occur within a
      timeframe short enough to meaningfully influence traffic engineering and
      load-balancing decisions before congestion or micro-loops occur or
      develop. In backbone or data center networks, this typically implies a
      target of notification delivery in the order of milliseconds, with some
      environments requiring sub-millisecond performance. The precise
      requirement is driven by:</t>

      <ul>
        <li>The speed at which traffic shifts can induce overload.</li>

        <li>The granularity of TE tuning (fine-grained vs.
        coarse-grained).</li>

        <li>The propagation diameter of the network notification.</li>

        <li>The responsiveness of the forwarding-plane and control-plane
        components.</li>

        <li>The number of network nodes which generate the notification, and
        the number of nodes which need to receive the information.</li>

        <li>The volume of information that needs to be reported, and the rate
        of change of the information.</li>
      </ul>

      <t>Therefore, this document focuses on notification mechanisms capable
      of operating within these milliseconds/sub-millisecond ranges, rather
      than mechanisms whose latency spans tens or hundreds of milliseconds,
      which are insufficient for preventing transient overload under rapid
      traffic transitions.</t>

      <section anchor="example" numbered="true" toc="default">
        <name>Example: AI Training Cluster with Fiber Link Failure</name>

        <t>Consider a large-scale AI training job distributed across multiple
        data centers. These clusters exchange terabits of data per second
        between Graphics Processing Unit (GPU) nodes, requiring ultra-low
        latency and high throughput to maintain synchronization.</t>

        <figure anchor="fig-topology">
          <name>Distributed AI Training Clusters with Fiber Link
          Failure</name>

          <artwork type="ascii-art"><![CDATA[
 +-------------------------+       +------------------------+
 |   Data Center A (GPUs)  |       |   Data Center B (GPUs) |
 +----------+--------------+       +----------+-------------+
            |                                 |
      ------|---------------------------------|-------
     |      |     +---+                       |       |
     |      |     | R |-----------------\     |       |
     |      |    /+---+\                 \    |       |
     |      |   /       \                 \   |       |
     |    +-+-+/         +---+   Failure   \+-+-+     |
     |    | R +----------+ R +-----X--------+ R |     |
     |    +---+\         +---+             /+---+     |
     |          \       /                 /           |
     |           \+---+/                 /            |
     |            | R |-----------------/             |
     |            +---+                               |
     |             DC Inter-connect Network           |
      ------------------------------------------------
]]></artwork>
        </figure>

        <t>As depicted in <xref target="fig-topology"/>, a single fiber link
        failure event can disrupt the entire training run, leading to:</t>

        <ul>
          <li>Delays in job completion (hours to days for large models)</li>

          <li>Massive energy and compute cost waste due to
          resynchronization</li>

          <li>Degraded convergence accuracy if synchronization windows are
          missed</li>
        </ul>

        <section anchor="limitations" numbered="true" toc="default">
          <name>Limitations of Existing Mechanisms</name>

          <t>Today's mechanisms provide partial solutions but are not fast or
          precise enough for these scenarios:</t>

          <ul>
            <li>BFD <xref target="RFC5880"/>: Provides fast fault detection in
            the bidirectional path between two forwarding engines. BFD can be
            one of the detection mechanisms for link or path failures, while
            it is not used to notify the failure to nodes other than the BFD
            endpoints in the network. BFD is preconfigured with periodic
            message exchange, while fast network notifications need to be
            event-driven.</li>

            <li>FRR <xref target="RFC4090"/> <xref target="RFC5714"/> / Route
            convergence: Without fast notification, the failure detection can
            take tens of milliseconds, followed by either local repair (FRR)
            or route convergence. The former lacks visibility of the global
            network situation and thus may cause congestion on the backup
            paths, while the latter may breach strict synchronization
            requirements of the AI/ML applications.</li>
          </ul>

          <t>In practice, this means that by the time a fiber link failure is
          detected and recovery mechanisms are invoked using existing
          mechanisms, critical GPU synchronization barriers may already have
          been missed, forcing rollbacks or restarts of the training
          process.</t>
        </section>

        <section anchor="how-helps" numbered="true" toc="default">
          <name>How Fast Network Notifications Help</name>

          <t>Fast network notification mechanisms could improve the response
          to fiber link failures and congestion in distributed AI/ML
          clusters:</t>

          <ul>
            <li>Real-Time Alerts: Nodes adjacent to the failure or congestion
            could react in the order of sub-millisecond or milliseconds to
            send lightweight notifications to nodes whose forwarding paths
            might be affected.</li>

            <li>Action-Oriented Response: Upon receiving the notification,
            routing and load balancing mechanisms could very quickly shift
            traffic to backup paths or alternative DC interconnects.</li>

            <li>Granularity: Notifications could carry more detailed
            information than "link failure/congestion," e.g., indicating
            specific link utilization, queue buildup or microburst congestion,
            allowing differentiated responses to different traffic flows.</li>

            <li>Complementary: The fast network notification mechanisms are
            complementary to OAM mechanisms and the control plane or
            management plane information collection mechanisms, such as BFD,
            IGP and Telemetry; they would bridge the time gap between event
            onset and slower control plane or telemetry-driven responses, and
            enable network-wide optimization.</li>
          </ul>

          <t>By deploying fast network notifications, large AI/ML workloads
          can maintain synchronization across data centers even during
          transient failures or congestion, protecting job completion time and
          resource utilization.</t>

          <t>Existing Approach:</t>

          <ul>
            <li>BFD detects failure after tens of ms</li>

            <li>FRR may cause congestion on backup paths</li>

            <li>Reroute/convergence delays impact GPU sync</li>

            <li>Result: Training stalls, compute resources wasted, job
            completion delayed</li>
          </ul>

          <t>Fast Notifications Approach:</t>

          <ul>
            <li>Device hardware detects failure at the level of
            sub-millisecond</li>

            <li>Fast network notification alerts upstream nodes of failure or
            congestion in real time</li>

            <li>Regional or global TE steers traffic quickly to alternate
            link/path without causing new congestion</li>

            <li>Result: Training continues with minimal disruption</li>
          </ul>
        </section>
      </section>

      <section anchor="problems-existing" numbered="true" toc="default">
        <name>Problems with Existing Mechanisms</name>

        <t>Current network traffic manipulation mechanisms such as TE, load
        balancing, flow control, and protection, have deficiencies in
        providing the low-latency, high-granularity responsiveness needed in
        modern, dynamic networks, at least in part due to the lack of dynamic
        network state information. This results in suboptimal performance, low
        reliability and delayed recovery. Fast network notification is a set
        of solutions to address this by enabling real-time, lightweight
        notifications that enhance the responsiveness for traffic engineering,
        congestion mitigation, and failure protection. There is a demonstrable
        need for a standardized framework to define these fast network
        notification mechanisms, requirements and integration strategies.</t>

        <t>There follows a summary of the limitations of existing
        mechanisms:</t>

        <ul>
          <li>Slow Dissemination: Existing control protocols (e.g., routing
          protocol, etc.) may be used for dissemination of dynamic network
          state information, while they usually rely on control plane based
          hop-by-hop distribution, which causes delay when the recipient is
          multiple hops away. With modern high-throughput environments (AI/ML
          clusters, multi-DC WANs), this delay is often prohibitive. Explicit
          Congestion Notification (ECN) <xref target="RFC3168"/> needs
          congestion signals to be sent back to the sender, which introduces
          Round-Trip-Time (RTT) delay and can be slow if the source node is
          far away, and it relies on the source node to take action in the
          transport layer. What is needed is a lightweight signaling method
          that can provide real-time alerts (e.g., at the sub-milliseconds
          level or in the order of a few milliseconds) on failures,
          congestion, or threshold breaches, enabling prompt actions (e.g., in
          the range of one millisecond to tens of milliseconds) in the network
          layer.</li>

          <li>Coarse-Grained Signals: Classic ECN <xref target="RFC3168"/>
          uses a 2-bit field in packet header to convey the ECN capability and
          congestion indication, which inherently limits the information it
          can report to the receiving nodes. What would be useful is a set of
          notifications that are not just "on-off" state reports, but can also
          convey more information like congestion level/utilization
          information, latency spikes, queue buildup or flow characteristics,
          so that they can trigger precise responses like rerouting, rate
          adjustment, or protection switching for specific flows.</li>

          <li>Limited Visibility on Network Conditions: Current
          load-balancing, flow-control, and FRR techniques are limited by
          their lack of visibility over downstream or cross-domain network
          conditions, reducing their effectiveness and leading to suboptimal
          decisions. For example, the Point of Local Repair (PLR) executing
          FRR makes its decision based on its local view of the topology and
          network status. It may switch traffic to a backup path and cause
          cascading congestion on that path, as it lacks visibility into the
          state of the entire backup path. Similarly, traditional
          load-balancing is based on local link utilization information, which
          may cause some paths to become overloaded while others remain
          underutilized. This local view of network status prevents precise
          and optimized decisions and adjustments. It would be helpful to send
          fast network notifications to upstream nodes so that they can
          perform actions based on a wider view of network conditions.</li>

          <li>Overhead and Scalability Challenges: The distribution of
          high-volume network operational status information or frequent
          signaling introduces bandwidth and processing overhead. At scale,
          this becomes a bottleneck rather than a solution. IOAM <xref
          target="RFC9197"/> and similar tools provide detailed telemetry
          information, but the collection and feedback loops are
          controller-centric. They cannot be used to deliver lightweight,
          rapid alerts for immediate action on specific network nodes.
          Carrying dynamic network state information in control protocols
          (e.g., routing protocols) also increases the overhead and churn of
          the control plane, which may have a negative impact on the core
          functionality of the protocol. It would be useful to have solutions
          designed to avoid the overhead and churn introduced by telemetry
          flooding or route distribution, so they can adapt to large-scale
          networks and dynamic traffic patterns (e.g., AI workloads, cloud WAN
          bursts).</li>
        </ul>
      </section>
    </section>

    <section anchor="ps" numbered="true" toc="default">
      <name>Fast Network Notifications Problem Statement</name>

      <t>A set of problems which need to be considered for fast network
      notifications are described in the following subsections.</t>

      <section anchor="info" numbered="true" toc="default">
        <name>Information of Fast Network Notifications</name>

        <t>The information carried in the fast network notifications, by the
        originating node, can be one or multiple of the following:</t>

        <ul>
          <li>Event Type: This can be used to indicate the type of events
          (e.g., failure, congestion, performance degradation, etc.).</li>

          <li>Location of Event: This can be used to indicate the location
          where the event occurred in the network (e.g., the identifier of the
          link, the node, or the queue, etc.).</li>

          <li>Fine-grained Network Status information: This can include
          quantifiable network metrics like link utilization, queue length,
          level of congestion, link or node delay, jitter, packet loss,
          etc.</li>

          <li>Path Identification information: This can be used to indicate
          the path which is affected by the event.</li>

          <li>Flow/service Identification information: This can include the
          5-tuple of a flow or the identification of a service which is
          affected by the event.</li>
        </ul>

        <t>Failure events (e.g., link or node down) are typically one-time
        occurrences that require a single propagation and, where applicable,
        notification of resolution. Congestion and degradation, in contrast,
        are continuous states that may require repeated, threshold-based
        reporting as conditions evolve (e.g., using rising and falling
        watermarks). This document considers both categories to be in scope
        for fast network notification, while noting that they may have
        different reporting and scalability characteristics.</t>

        <t>Other information related to the network status change and that
        needs to be actioned in a timely manner may also be carried in the
        fast network notifications. For a specific network scenario, some of
        the information is mandatory, while other information may be optional.
        There is a need to work on the information model of fast network
        notifications to better understand what needs to be carried in the
        notifications.</t>
      </section>

      <section anchor="recipients" numbered="true" toc="default">
        <name>Recipients of Fast Network Notifications</name>

        <t>The primary purpose of fast network notification is to enable
        recipient nodes to take prompt actions. Information delivered by fast
        network notification can be used by recipient nodes to trigger actions
        in the data plane, and may also be used for actions in the control
        plane or management plane. The specific mechanisms for realizing such
        actions are out of the scope of this document. <xref
        target="tab-recipients"/> provides some illustrative examples of
        potential recipients of fast network notifications and describes how
        they may benefit from the information received.</t>

        <table anchor="tab-recipients">
          <name>Recipient Types</name>

          <thead>
            <tr>
              <th>Recipient Type</th>

              <th>Role</th>

              <th>Example Benefit</th>
            </tr>
          </thead>

          <tbody>
            <tr>
              <td>Adjacent Routers / Switches</td>

              <td>Data-plane neighbors that forward packets</td>

              <td>Enable local repair (e.g., FRR, ECMP adjustments)</td>
            </tr>

            <tr>
              <td>Non-Adjacent Routers / Switches</td>

              <td>Remote upstream forwarding elements</td>

              <td>Accelerated awareness of failure/congestion on specific
              nodes</td>
            </tr>

            <tr>
              <td>Ingress Routers / Switches</td>

              <td>Traffic entry points of a network domain</td>

              <td>Re-map affected flows before forwarding into failed
              regions</td>
            </tr>

            <tr>
              <td>Sending Nodes</td>

              <td>Origin of traffic flows</td>

              <td>Adapt sending rate, select alternate uplinks</td>
            </tr>

            <tr>
              <td>Network Controller</td>

              <td>Global optimization of TE or LB paths</td>

              <td>Accelerated awareness of failure/congestion for global
              TE/LB</td>
            </tr>
          </tbody>
        </table>

        <t>Table 1 has three columns. The first column lists the type of
        recipients. The second column shows the example of the role that the
        node is responsible for within the network that could benefit from
        fast network notifications. The third column indicates examples of how
        fast notification could benefit the node in fulfilling its role. It
        should be noted that for different network scenarios, different
        recipient types may be involved. For a specific scenario, the
        recipients of fast network notifications may be determined by the
        reporting node via configuration or signaling mechanisms. In some
        cases, the recipients may subscribe to specific types of notifications
        based on their roles or interests. A subscription-based approach
        allows each recipient to receive only the information relevant to its
        function, thus potentially reducing unnecessary overhead.</t>
      </section>

      <section anchor="delivery" numbered="true" toc="default">
        <name>Delivery of Fast Network Notifications</name>

        <t>Depending on the position and number of the recipient nodes, fast
        network notifications may be sent via one of the following delivery
        modes:</t>

        <ul>
          <li>Unicast directly to the recipient node</li>

          <li>Multicast to a group of recipient nodes</li>

          <li>Hop-by-hop to a series of recipient nodes along a specified
          path</li>

          <li>Flooding in a specified range of the network</li>
        </ul>

        <t>The mechanisms to support the above delivery modes need to ensure
        the notification is sent to the recipient nodes in a timely manner.
        Preferably they could be based on existing messaging and transport
        mechanisms, or a new protocol may be introduced if the existing
        mechanisms cannot meet the requirements. It should be noted that for
        different network scenarios, different delivery modes may be used.</t>
      </section>

      <section anchor="actions" numbered="true" toc="default">
        <name>Actions in Response to Fast Network Notifications</name>

        <t>Once a fast network notification is received, the recipient needs
        to take appropriate actions to help mitigating the event reported in
        the fast network notification. The action can be based on the
        information carried in the fast network notification, or it can be
        based on both the information in the notification and the information
        obtained by the recipient in other ways. The action to be performed by
        the recipient may be explicitly indicated in the notification, or it
        may be implicitly determined by the type of information carried in the
        notification. How the actions are performed will be described in other
        documents produced by the working groups that develop the associated
        protocols. The possible actions in response to the notification can
        be, but are not limited to, one or multiple of the following:</t>

        <ul>
          <li>Switches all traffic from a path to other available paths</li>

          <li>Steers specific traffic flows to alternate links or paths</li>

          <li>Modifies the load balancing ratio among a group of paths</li>

          <li>Adjusts the sending rate of specific traffic flows</li>

          <li>Sends the notification further to other recipients</li>
        </ul>

        <t>Whether the actions need to be explicitly indicated in the
        notification, and if so, which ones, requires further consideration.
        It is noted that in some of the cases described in <xref
        target="recipients"/>, multiple recipients may receive the same
        notification, and some actions may be taken by multiple recipients.
        The sender of the fast network notification needs to take this into
        consideration if some coordination in the actions is needed. A related
        problem exists on the recipient side: the actions taken independently
        by multiple recipients of the same or correlated notifications may
        interact. For example, when multiple recipients independently select
        the same alternate path or resource, their combined actions can create
        new congestion on that alternate path. The mechanism for action
        coordination, whether sender-side or recipient-side, is for further
        study and is out of the scope of this document.</t>
      </section>

      <section anchor="scaling" numbered="true" toc="default">
        <name>Scaling Concerns</name>

        <t>The challenges of a fast notification system are exacerbated by the
        size of the network (number of nodes and links to report issues), the
        volume of information that needs to be reported, the number of nodes
        that need to receive the information, and the rate of change of the
        information.</t>

        <ul>
          <li>Network size is directly related to the amount of information
          that may need to be reported because each node or link in the
          network may generate the information described in <xref
          target="info"/>. The system that is built needs to be able to handle
          the total data set that could be generated in the network.</li>

          <li>The volume of information that is generated is directly related
          to the type of information gathered (see <xref target="info"/>), the
          size of the network (as previously mentioned), and the number of
          issues that need to be reported. It should be assumed in the design
          stage that if anything can go wrong, it will. Thus the system must
          be able to cope with issues reported by a high percentage of the
          network's nodes and links.</li>

          <li>As noted in <xref target="recipients"/>, notifications may need
          to be delivered to a number of points in the network. This has a
          direct impact on the load placed on the network by reporting the
          information, and combined with the two previous points, this can
          introduce loading stress on the parts of the network responsible for
          forwarding and processing notifications.</li>

          <li>Correlated Origination: A single root cause event (e.g., a fiber
          cut affecting multiple links that share the same conduit) may be
          independently detected and reported by multiple nodes at the same
          time (e.g., the nodes at both ends of each affected link), producing
          a burst of notifications concentrated at the moment the network is
          already under stress. This is a distinct scaling concern from the
          steady state volume described above and may warrant mechanisms such
          as reporter election or notification correlation to avoid
          compounding the disruption the notifications are meant to help
          mitigate.</li>

          <li>Finally, it is important to understand where in the notification
          system responsibility lies for handling the effects of rapid changes
          in the issues that need to be reported. For example, in the case of
          a link that is "flapping" (going down and up again in a quick cycle)
          it is crucial to design whether the reports are "damped" at the
          reporting node, are filtered at some transit node, or are required
          to reach the receivers. In the case that some node that is not the
          receiver is required to reduce the notification reports, it is
          important to clearly specify how this is done and how it is
          controlled. For example, a device could be configured to only report
          a degradation once, but to delay reporting an improvement for a
          number of seconds to verify that it is stable. Suppression and
          aggregation mechanisms (e.g., damping, reporter election) should
          also be considered to prevent correlated notifications from
          compounding the conditions they report.</li>
        </ul>
      </section>
    </section>

    <section anchor="operational" numbered="true" toc="default">
      <name>Operational Considerations</name>

      <t>Fast network notifications introduce additional traffic to the
      network. During network events such as failures or congestion, the
      notification system itself must not exacerbate the situation; instead,
      it should actively assist in mitigating the impact. Mechanisms such as
      rate limiting and traffic prioritization for fast network notifications
      should be considered. Depending on the operational requirements, fast
      network notifications should be configurable to be triggered for
      specific event types, so that the notification behavior aligns with
      network operation policies.</t>

      <t>Operators deploying fast network notification mechanisms should also
      consider the following:</t>

      <ul>
        <li>Manageability: The notification system should be manageable using
        standard network management interfaces. This includes the ability to
        enable or disable notifications per interface or per event type, to
        set thresholds for triggering notifications, and to monitor the
        notification system itself for faults or overload.</li>

        <li>Interoperability: In multi-vendor environments, fast network
        notifications must interoperate across equipment from different
        vendors. Standardized encodings and delivery mechanisms are important
        to ensure consistent behavior.</li>

        <li>Coexistence: Fast network notification mechanisms should coexist
        with and complement existing OAM, telemetry, and control plane
        mechanisms rather than replace them. Operators should be able to
        deploy fast network notifications incrementally, without requiring
        simultaneous upgrades across the entire network.</li>

        <li>Observability: The notification system should provide operators
        with visibility into its own operation, including notification
        generation rates, delivery success, and any suppression or damping
        that is applied.</li>

        <li>Partial deployment: In networks where the fast network
        notification mechanism is supported by a portion of network nodes, the
        nodes originating the fast network notification need to know the
        recipients which are capable of processing the notifications. The
        impact of partial deployment to the effectiveness of the notification
        and the consistency in the corresponding actions needs to be
        evaluated.</li>

        <li>Interaction: The fast network notifications may be used together
        with end-to-end notifications mechanisms in the network. The
        interaction between these mechanisms need to be considered to evaluate
        the benefits and potential risks.</li>

        <li>Reliability: Solutions need to consider notification delivery
        reliability (e.g., at-most-once vs. at-least-once semantics) and the
        desired behavior when a notification itself is lost during the failure
        or congestion event it reports.</li>

        <li>Transport: Fast network notifications are messages generated by
        the originating node, rather than information carried within data
        packets. Depending on the recipients (see <xref target="delivery"/>),
        notifications may or may not follow the data forwarding path.
        Solutions need to consider the trade-off between sending notifications
        over the data forwarding network (faster but subject to the same
        failure or congestion being reported) and over a separate out-of-band
        network (more robust but requiring additional infrastructure).
        Transport considerations, including prioritization of notifications,
        are further discussed in <xref
        target="I-D.song-fann-framework"/>.</li>
      </ul>
    </section>

    <section anchor="iana" numbered="true" toc="default">
      <name>IANA Considerations</name>

      <t>This document has no IANA actions.</t>
    </section>

    <section anchor="security" numbered="true" toc="default">
      <name>Security Considerations</name>

      <t>Fast network notifications, if not properly authenticated and
      rate-limited, could be exploited as a vector for Denial-of-Service (DoS)
      attacks. An attacker able to inject or flood spurious notifications may
      trigger unnecessary re-convergence, path changes or repeated state
      updates, overwhelming both recipient nodes and higher-level
      applications. An attacker may cause the sender of fast network
      notifications to be overwhelmed by making some network state flap, so
      that the node is busy sending notifications. Fast network notifications
      may reveal sensitive information about the network; in some scenarios
      such information may be made visible to external entities, either by
      inspecting the notifications, or by registering as a consumer of the
      notifications. Implementations must therefore ensure integrity
      protection, origin authentication, and appropriate rate controls on
      sending and receiving fast network notification messages. In different
      scenarios, the trade-offs between notification latency and the strength
      of security measures need to be considered.</t>

      <t>This document does not specify security mechanisms, but highlights
      that any solution must consider trust boundaries around notification
      subscriptions, authorization of notification sources and protection of
      potentially sensitive operational data. These aspects are expected to be
      addressed by solution proposals based on deployment requirements and
      threat models.</t>
    </section>
  </middle>

  <back>
    <references>
      <name>Normative References</name>

      <reference anchor="RFC2119">
        <front>
          <title>Key words for use in RFCs to Indicate Requirement
          Levels</title>

          <author fullname="S. Bradner" initials="S." surname="Bradner"/>

          <date month="March" year="1997"/>
        </front>

        <seriesInfo name="BCP" value="14"/>

        <seriesInfo name="RFC" value="2119"/>

        <seriesInfo name="DOI" value="10.17487/RFC2119"/>
      </reference>

      <reference anchor="RFC8174">
        <front>
          <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key
          Words</title>

          <author fullname="B. Leiba" initials="B." surname="Leiba"/>

          <date month="May" year="2017"/>
        </front>

        <seriesInfo name="BCP" value="14"/>

        <seriesInfo name="RFC" value="8174"/>

        <seriesInfo name="DOI" value="10.17487/RFC8174"/>
      </reference>
    </references>

    <references>
      <name>Informative References</name>

      <reference anchor="I-D.geng-fantel-fantel-gap-analysis">
        <front>
          <title>Gap Analysis of Fast Notification for Traffic Engineering and
          Load Balancing</title>

          <author initials="X." surname="Geng"/>

          <author initials="J." surname="Dong"/>

          <author initials="W." surname="Cheng"/>

          <author initials="D." surname="Li"/>

          <author initials="Y." surname="Zhu"/>

          <author initials="H." surname="Zhengxin"/>

          <date day="26" month="February" year="2026"/>
        </front>

        <seriesInfo name="Internet-Draft"
                    value="draft-geng-fantel-fantel-gap-analysis-02"/>
      </reference>

      <reference anchor="I-D.geng-fantel-fantel-requirements">
        <front>
          <title>Requirements of Fast Notification for Traffic Engineering and
          Load Balancing</title>

          <author initials="X." surname="Geng"/>

          <author initials="J." surname="Dong"/>

          <author initials="Y." surname="Zhu"/>

          <author initials="D." surname="Li"/>

          <author initials="W." surname="Cheng"/>

          <author initials="C." surname="Liu"/>

          <date day="26" month="February" year="2026"/>
        </front>

        <seriesInfo name="Internet-Draft"
                    value="draft-geng-fantel-fantel-requirements-03"/>
      </reference>

      <reference anchor="I-D.song-fann-framework">
        <front>
          <title>A Framework for Fast Network Notifications</title>

          <author initials="H." surname="Song"/>

          <author initials="J." surname="Dong"/>

          <author initials="W." surname="Cheng"/>

          <author initials="Y." surname="Zhu"/>

          <author initials="R." surname="Pang"/>

          <author initials="L. M." surname="Contreras"/>

          <author initials="L." surname="Guo"/>

          <date day="6" month="July" year="2026"/>
        </front>

        <seriesInfo name="Internet-Draft" value="draft-song-fann-framework-01"/>
      </reference>

      <reference anchor="RFC3168">
        <front>
          <title>The Addition of Explicit Congestion Notification (ECN) to
          IP</title>

          <author initials="K." surname="Ramakrishnan"/>

          <author initials="S." surname="Floyd"/>

          <author initials="D." surname="Black"/>

          <date month="September" year="2001"/>
        </front>

        <seriesInfo name="RFC" value="3168"/>

        <seriesInfo name="DOI" value="10.17487/RFC3168"/>
      </reference>

      <reference anchor="RFC4080">
        <front>
          <title>Next Steps in Signaling (NSIS): Framework</title>

          <author initials="R." surname="Hancock"/>

          <author initials="G." surname="Karagiannis"/>

          <author initials="J." surname="Loughney"/>

          <author initials="S." surname="Van den Bosch"/>

          <date month="June" year="2005"/>
        </front>

        <seriesInfo name="RFC" value="4080"/>

        <seriesInfo name="DOI" value="10.17487/RFC4080"/>
      </reference>

      <reference anchor="RFC4090">
        <front>
          <title>Fast Reroute Extensions to RSVP-TE for LSP Tunnels</title>

          <author initials="P." role="editor" surname="Pan"/>

          <author initials="G." role="editor" surname="Swallow"/>

          <author initials="A." role="editor" surname="Atlas"/>

          <date month="May" year="2005"/>
        </front>

        <seriesInfo name="RFC" value="4090"/>

        <seriesInfo name="DOI" value="10.17487/RFC4090"/>
      </reference>

      <reference anchor="RFC5714">
        <front>
          <title>IP Fast Reroute Framework</title>

          <author initials="M." surname="Shand"/>

          <author initials="S." surname="Bryant"/>

          <date month="January" year="2010"/>
        </front>

        <seriesInfo name="RFC" value="5714"/>

        <seriesInfo name="DOI" value="10.17487/RFC5714"/>
      </reference>

      <reference anchor="RFC5880">
        <front>
          <title>Bidirectional Forwarding Detection (BFD)</title>

          <author initials="D." surname="Katz"/>

          <author initials="D." surname="Ward"/>

          <date month="June" year="2010"/>
        </front>

        <seriesInfo name="RFC" value="5880"/>

        <seriesInfo name="DOI" value="10.17487/RFC5880"/>
      </reference>

      <reference anchor="RFC6077">
        <front>
          <title>Open Research Issues in Internet Congestion Control</title>

          <author initials="D." role="editor" surname="Papadimitriou"/>

          <author initials="M." surname="Welzl"/>

          <author initials="M." surname="Scharf"/>

          <author initials="B." surname="Briscoe"/>

          <date month="February" year="2011"/>
        </front>

        <seriesInfo name="RFC" value="6077"/>

        <seriesInfo name="DOI" value="10.17487/RFC6077"/>
      </reference>

      <reference anchor="RFC9197">
        <front>
          <title>Data Fields for In Situ Operations, Administration, and
          Maintenance (IOAM)</title>

          <author initials="F." role="editor" surname="Brockners"/>

          <author initials="S." role="editor" surname="Bhandari"/>

          <author initials="T." role="editor" surname="Mizrahi"/>

          <date month="May" year="2022"/>
        </front>

        <seriesInfo name="RFC" value="9197"/>

        <seriesInfo name="DOI" value="10.17487/RFC9197"/>
      </reference>
    </references>

    <section anchor="acknowledgments" numbered="false" toc="default">
      <name>Acknowledgments</name>

      <t>The authors would like to thank Alia Atlas, David Black, Jeffrey
      Haas, Tony Li, Carlos J. Bernardos, Fan Zhang, Adrian Farrel, Joel
      Halpern, Vishnu Pavan Beeram, and Dan for their valuable comments and
      discussion.</t>
    </section>

    <section anchor="contributors" numbered="false" toc="default">
      <name>Contributors</name>

      <t>The following people contributed substantially to the content of this
      document.</t>

      <t>Zafar Ali, Cisco. Email: zali@cisco.com</t>

      <t>Tianran Zhou, Huawei. Email: zhoutianran@huawei.com</t>

      <t>Xuesong Geng, Huawei. Email: gengxuesong@huawei.com</t>
    </section>
  </back>
</rfc>
