Add policy-forwarding action next-hop-group

[dplore]

Change Scope

• This adds a policy-forwarding action to set the next-hop-group
• In this use case, a next-hop-group is a statically defined with one or more next-hops
• If a packet matches the policy-forwarding rule, then the system resolves the next-hops using the referenced next-hop group.

Tree view

        +--rw policy-forwarding
        |  +--rw policies
        |  |  +--rw policy* [policy-id]
        |  |     +--rw rules
        |  |        +--rw rule* [sequence-id]
         |  |           +--rw action
         |  |           |  +--rw config
         |  |           |  |  +--rw discard?                           boolean
         |  |           |  |  +--rw decapsulate-gre?                   boolean
         |  |           |  |  +--rw decap-network-instance?            -> /network-instances/network-instance/config/name
         |  |           |  |  +--rw decap-fallback-network-instance?   -> /network-instances/network-instance/config/name
         |  |           |  |  +--rw post-decap-network-instance?       -> /network-instances/network-instance/config/name
         |  |           |  |  +--rw network-instance?                  -> /network-instances/network-instance/config/name
         |  |           |  |  +--rw path-selection-group?              -> ../../../../../../../path-selection-groups/path-selection-group/config/group-id
         |  |           |  |  +--rw next-hop?                          oc-inet:ip-address
+        |  |           |  |  +--rw next-hop-group?                    -> ../../../../../../../../static/next-hop-groups/next-hop-group/config/name
         |  |           |  |  +--rw decapsulate-mpls-in-udp?           boolean
         |  |           |  |  +--rw decapsulate-gue?                   boolean
         |  |           |  +--ro state
         |  |           |  |  +--ro discard?                           boolean
         |  |           |  |  +--ro decapsulate-gre?                   boolean
         |  |           |  |  +--ro decap-network-instance?            -> /network-instances/network-instance/config/name
         |  |           |  |  +--ro decap-fallback-network-instance?   -> /network-instances/network-instance/config/name
         |  |           |  |  +--ro post-decap-network-instance?       -> /network-instances/network-instance/config/name
         |  |           |  |  +--ro network-instance?                  -> /network-instances/network-instance/config/name
         |  |           |  |  +--ro path-selection-group?              -> ../../../../../../../path-selection-groups/path-selection-group/config/group-id
         |  |           |  |  +--ro next-hop?                          oc-inet:ip-address
+        |  |           |  |  +--ro next-hop-group?                    -> ../../../../../../../../static/next-hop-groups/next-hop-group/config/name
         |  |           |  |  +--ro decapsulate-mpls-in-udp?           boolean
         |  |           |  |  +--ro decapsulate-gue?                   boolean

Platform Implementations

• Arista EOS traffic-policies support setting next-hop-group

traffic-policies
  traffic-policy samplePolicy
    match v6-dscp3 ipv6
      dscp 3
      !
      actions
        redirect next-hop group MY_NHG
    !

• Cisco IOS XR support ACL based forwarding including setting an IP next-hop. We are working with Cisco to extend this for next-hop-group and add OpenConfig policy-forwarding to a next-hop-group.
  Current syntax

Router(config)# ipv4 access-list TEST
Router(config-ipv4-acl)# 10 permit tcp any any

/* Configure an ACE to match on the dont-fragment flag (indicates a non-fragmented packet)
 and forward the packet to the default (pre-configured) next hop  */
Router(config-ipv4-acl)# 20 permit tcp any any fragment-type dont-fragment nexthop1 ipv4 192.0.2.1 

• JunOS supports filter based forwarding and configuring next-hop-groups. We are working with Juniper to extend this for next-hop-group and add OpenConfig policy-forwarding to a next-hop-group.

• Nokia SR Linux supports configuration of next-hop-group. We are working with Nokia to extend this for next-hop-group and add OpenConfig policy-forwarding to a next-hop-group.

[OpenConfigBot]

No major YANG version changes in commit de63d24

[dplore]

Setting last call for July 29, 2025

[ElodinLaarz]

Reviewed at the OC Operators Meeting on July 22nd; moving to last-call on August 5th (2 weeks).