idnits 2.17.1 draft-bernardos-sfc-discovery-06.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the IETF Trust and authors Copyright Line does not match the current year -- The document date (March 22, 2021) is 1103 days in the past. Is this intentional? Checking references for intended status: Experimental ---------------------------------------------------------------------------- == Outdated reference: A later version (-10) exists of draft-bernardos-sfc-fog-ran-08 Summary: 0 errors (**), 0 flaws (~~), 2 warnings (==), 1 comment (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 SFC WG CJ. Bernardos 3 Internet-Draft UC3M 4 Intended status: Experimental A. Mourad 5 Expires: September 23, 2021 InterDigital 6 March 22, 2021 8 Service Function discovery in fog environments 9 draft-bernardos-sfc-discovery-06 11 Abstract 13 Service function chaining (SFC) allows the instantiation of an 14 ordered set of service functions and subsequent "steering" of traffic 15 through them. Service functions provide an specific treatment of 16 received packets, therefore they need to be known so they can be used 17 in a given service composition via SFC. This document discusses the 18 need for service function discovery mechanisms and propose some 19 solutions for sfc-aware nodes to discover available service functions 20 in fog environments. 22 Status of This Memo 24 This Internet-Draft is submitted in full conformance with the 25 provisions of BCP 78 and BCP 79. 27 Internet-Drafts are working documents of the Internet Engineering 28 Task Force (IETF). Note that other groups may also distribute 29 working documents as Internet-Drafts. The list of current Internet- 30 Drafts is at https://datatracker.ietf.org/drafts/current/. 32 Internet-Drafts are draft documents valid for a maximum of six months 33 and may be updated, replaced, or obsoleted by other documents at any 34 time. It is inappropriate to use Internet-Drafts as reference 35 material or to cite them other than as "work in progress." 37 This Internet-Draft will expire on September 23, 2021. 39 Copyright Notice 41 Copyright (c) 2021 IETF Trust and the persons identified as the 42 document authors. All rights reserved. 44 This document is subject to BCP 78 and the IETF Trust's Legal 45 Provisions Relating to IETF Documents 46 (https://trustee.ietf.org/license-info) in effect on the date of 47 publication of this document. Please review these documents 48 carefully, as they describe your rights and restrictions with respect 49 to this document. Code Components extracted from this document must 50 include Simplified BSD License text as described in Section 4.e of 51 the Trust Legal Provisions and are provided without warranty as 52 described in the Simplified BSD License. 54 Table of Contents 56 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 57 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 3 58 3. Problem statement . . . . . . . . . . . . . . . . . . . . . . 4 59 3.1. Discovery of SF in a multi-provider fog/edge environment 4 60 4. Network-based SF discovery . . . . . . . . . . . . . . . . . 6 61 4.1. ICMPv6-based SF discovery . . . . . . . . . . . . . . . . 8 62 4.2. DHCPv6-based SF discovery . . . . . . . . . . . . . . . . 8 63 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 8 64 6. Security Considerations . . . . . . . . . . . . . . . . . . . 8 65 7. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 8 66 8. Informative References . . . . . . . . . . . . . . . . . . . 8 67 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 9 69 1. Introduction 71 Virtualization of functions provides operators with tools to deploy 72 new services much faster, as compared to the traditional use of 73 monolithic and tightly integrated dedicated machinery. As a natural 74 next step, mobile network operators need to re-think how to evolve 75 their existing network infrastructures and how to deploy new ones to 76 address the challenges posed by the increasing customers' demands, as 77 well as by the huge competition among operators. All these changes 78 are triggering the need for a modification in the way operators and 79 infrastructure providers operate their networks, as they need to 80 significantly reduce the costs incurred in deploying a new service 81 and operating it. Some of the mechanisms that are being considered 82 and already adopted by operators include: sharing of network 83 infrastructure to reduce costs, virtualization of core servers 84 running in data centers as a way of supporting their load-aware 85 elastic dimensioning, and dynamic energy policies to reduce the 86 monthly electricity bill. However, this has proved to be tough to 87 put in practice, and not enough. Indeed, it is not easy to deploy 88 new mechanisms in a running operational network due to the high 89 dependency on proprietary (and sometime obscure) protocols and 90 interfaces, which are complex to manage and often require configuring 91 multiple devices in a decentralized way. 93 Service Functions are widely deployed and essential in many networks. 94 These Service Functions provide a range of features such as security, 95 WAN acceleration, and server load balancing. Service Functions may 96 be instantiated at different points in the network infrastructure 97 such as data center, the WAN, the RAN, and even on mobile nodes. 99 Service functions (SFs), also referred to as VNFs, or just functions, 100 are hosted on compute, storage and networking resources. The hosting 101 environment of a function is called Service Function Provider or 102 NFVI-PoP (using ETSI NFV terminology). 104 With the arrival of virtualization, the deployment model for service 105 function is evolving to one where the traffic is steered through the 106 functions wherever they are deployed (functions do not need to be 107 deployed in the traffic path anymore). For a given service, the 108 abstracted view of the required service functions and the order in 109 which they are to be applied is called a Service Function Chain 110 (SFC). An SFC is instantiated through selection of specific service 111 function instances on specific network nodes to form a service graph: 112 this is called a Service Function Path (SFP). The service functions 113 may be applied at any layer within the network protocol stack 114 (network layer, transport layer, application layer, etc.). 116 A mobile terminal can benefit from using service function chaining at 117 the edge/fog to enhance existing applications or to enable new ones. 118 In order to do so, discovery of available service functions is 119 required. This document focuses on this aspect. 121 2. Terminology 123 The following terms used in this document are defined by the IETF in 124 [RFC7665] and [I-D.ietf-bess-nsh-bgp-control-plane]: 126 Service Function (SF): a function that is responsible for specific 127 treatment of received packets (e.g., firewall, load balancer). 129 Service Function Chain (SFC): for a given service, the abstracted 130 view of the required service functions and the order in which they 131 are to be applied. This is somehow equivalent to the Network 132 Function Forwarding Graph (NF-FG) at ETSI. 134 Service Function Forwarder (SFF): A service function forwarder is 135 responsible for forwarding traffic to one or more connected 136 service functions according to information carried in the SFC 137 encapsulation, as well as handling traffic coming back from the 138 SF. 140 SFI: SF instance. 142 Service Function Path (SFP): the selection of specific service 143 function instances on specific network nodes to form a service 144 graph through which an SFC is instantiated. 146 A Service Function Type (SFT) that is the category of Service 147 Function that is provided (such as "firewall"). 149 3. Problem statement 151 [RFC7665] describes an architecture for the specification, creation, 152 and ongoing maintenance of Service Function Chains (SFCs) in a 153 network. It includes architectural concepts, principles, and 154 components used in the construction of composite services through 155 deployment of SFCs. In this architecture, a key element is the 156 service function (SF), which is a function that is responsible for 157 specific treatment of received packets (e.g., a firewall). 159 So far, how the SFs are discovered and composed has been out of the 160 scope of discussions in IETF. There is however a need to define 161 mechanisms that allow SF discovery in fog environments 162 [I-D.bernardos-sfc-fog-ran]. Note that the mechanisms described in 163 this document address fog environments. There are other mechanisms 164 described, like [I-D.ietf-bess-nsh-bgp-control-plane], that cover 165 generic SF discovery in more traditional environments. Some of the 166 solutions described in the present document might be of applicable to 167 other scenarios as well. 169 3.1. Discovery of SF in a multi-provider fog/edge environment 171 The need to provide networking, computing, and storage capabilities 172 closer to the users has recently emerged, due to the demands from 5G 173 applications of very low latency, leading to what is known today as 174 the concept of intelligent edge. ETSI has been the first to address 175 this need recently by developing the framework of mobile edge 176 computing (MEC). Such an intelligent edge could not be envisaged 177 without virtualization. Beyond applications, it raises a clear 178 opportunity for networking functions to execute at the edge 179 benefiting from inherent low latencies. Being in close proximity to 180 the access, the edge becomes an attractive place for hosting 181 different functions, saving bandwidth in their respective domains and 182 offering local breakout options where required. Whilst it is 183 appreciated the particular challenge for the intelligent edge concept 184 in dealing with mobile users, the edge virtualization substrate has 185 been largely assumed to be fixed or stationary. Although little 186 developed, the intelligent edge concept is being extended further to 187 scenarios where for example the edge computing substrate is on the 188 move, e.g., on-board a car or a train, or that it is distributed 189 further down the edge, even integrating resources from different 190 stakeholders, into what is known as the fog. 192 Service composition is a powerful tool which can provide significant 193 benefits when applied in a softwarized network environment. While it 194 is being explored in the core part of networks to compose services 195 using DPIs (Deep Packet Inspections), firewalls, parental control, 196 video accelerators, etc., its applicability to the RAN (Radio Access 197 Network), and in particular to the edge and the fog, has not been 198 explored yet. 200 Running functions (standalone functions or service function chains) 201 at the edge of the network has clear advantages. For example, it 202 enables offloading functions from the end-user terminal so that it 203 can become more efficient in terms of cost and energy consumption. 205 A mobile terminal can benefit from using service function chaining at 206 the edge/fog to enhance existing applications or to enable new ones. 207 Some examples of such applications are: privacy enhancement by local 208 anchoring, opportunistic local breakout, assisted encryption, video 209 transcoding, personal firewalling, etc. The mobile terminal might 210 look for function hosting opportunities at the edge for various 211 reasons such as: 213 o to increase battery life in critical situations by offloading 214 energy demanding operations (e.g., video transcoding, augmented 215 reality) to the edge/cloud; 217 o to reduce communications latency (e.g., by using local breakout at 218 the edge for selected applications demanding low latency); 220 o to enable new functions (e.g., privacy improvements, personal 221 firewalling) which demand additional intelligence/resources at the 222 network; 224 o to benefit from context information available at the edge (e.g., 225 enrich networking decisions by executing functions at the edge 226 using RAN information); 228 Several key challenges need to be addressed to enable controlled 229 service function chaining for a mobile terminal, and one of them is 230 the discovery of the functions available for use at the Fog/Edge/ 231 Cloud. 233 4. Network-based SF discovery 235 In this section we describe several mechanisms for a mobile SFC-aware 236 node to discover what SFs are available in the network. Different 237 alternatives (protocol containers) are considered to enable the 238 mobile node to obtain the following information per SF available: 240 o Service Function Type, identifying the category of SF provided. 242 o SFC-aware: Yes/No. Indicates if the SF is SFC-aware. 244 o Route Distinguisher (RD): IP address indicating the location of 245 the SF(I). 247 o Pricing/costs details. 249 o Migration capabilities of the SF: whether a given function can be 250 moved to another provider (potentially including information about 251 compatible providers topologically close). 253 o Mobility of the device hosting the SF, with e.g. the following 254 sub-options: 256 Level: no, low, high; or a corresponding scale (e.g., 1 to 10). 258 Current geographical area (e.g., GPS coordinates, post code). 260 Target moving area (e.g., GPS coordinates, post code). 262 o Power source of the device hosting the SF, with e.g. the following 263 sub-options: 265 Battery: Yes/No. If Yes, the following sub-options could be 266 defined: 268 Capacity of the battery (e.g., mmWh). 270 Charge status (e.g., %). 272 Lifetime (e.g., minutes). 274 Figure 1 shows the generic mechanism for SF discovery, with network 275 support. In this scenario, SFs (which might belong to different 276 administrative domains) are previously registered at the network, 277 which can then reply to requests sent from mobile nodes that have 278 just attached to the network. A request might optionally include the 279 SFs of interest for the terminal, instead of a request for all known 280 SFs. 282 The network might also send periodic advertisements in addition to 283 responses to solicited requests. These responses/advertisements 284 include the information about known SFs (or only about the ones 285 queried by the terminal), which can then be used by the terminal to 286 decide whether to use (some of) them in a certain SFC. How the 287 mobile terminal then configures this SFC is not covered in this 288 document. 290 ___________ 291 _( )_ 292 _( SF1 SF2 )_ 293 ------------ ----------- _( SF3 )_ 294 | terminal | | network |-(_ SF4 SF5 _) 295 ------------ ----------- (_ SF6 SF7 _) 296 | | (_ SF8 _) 297 XXX (1. attachment) | (___________) 298 | | 299 +---2. Request (optional)------>| 300 | | 301 |<--------3. Response/Advert.---| 302 | (SF1,SF2...,SF8) | 303 | | 305 Figure 1: SF (network) discovery 307 In addition to the discovery of SFs at the infrastructure, mobile 308 terminals can also host SF(I)s, and therefore they also need to be 309 discovered. A similar approach can be followed, as showin in 310 Figure 2. 312 ------------ 313 | SF3 | 314 ------------ | terminal | ------------ 315 | SF1 SF2 | ------------ | SF4 SF5 | 316 | terminal | | | terminal | 317 ------------ | ------------ 318 | | | 319 +--1. Request->+-------------->| 320 | (SF1,SF2) | | 321 |<----------------2. Response--+ 322 | (SF4,SF5) | 323 |<-2. Response-+ | 324 | (SF3) | | 325 | | | 327 Figure 2: SF (mobiles) discovery 329 SFs might belong to different administrative domains. This might 330 require the use of additional security and authentication mechanisms. 331 Policies can be used (both in single and multi-domain scenarios) to 332 adapt/limit the type and number of SFs that are advertised, depending 333 on the relationship of the requester and the advertiser. 335 Next sections describe different protocol alternatives for this SF 336 discovery in fog environments. 338 4.1. ICMPv6-based SF discovery 340 TBD. 342 4.2. DHCPv6-based SF discovery 344 TBD. 346 5. IANA Considerations 348 N/A. 350 6. Security Considerations 352 TBD. 354 7. Acknowledgments 356 The work in this draft will be further developed and explored under 357 the framework of the H2020 5G-DIVE project (Grant 859881). 359 8. Informative References 361 [I-D.bernardos-sfc-fog-ran] 362 Bernardos, C., Rahman, A., and A. Mourad, "Service 363 Function Chaining Use Cases in Fog RAN", draft-bernardos- 364 sfc-fog-ran-08 (work in progress), September 2020. 366 [I-D.ietf-bess-nsh-bgp-control-plane] 367 Farrel, A., Drake, J., Rosen, E., Uttaro, J., and L. 368 Jalil, "BGP Control Plane for the Network Service Header 369 in Service Function Chaining", draft-ietf-bess-nsh-bgp- 370 control-plane-18 (work in progress), August 2020. 372 [RFC7665] Halpern, J., Ed. and C. Pignataro, Ed., "Service Function 373 Chaining (SFC) Architecture", RFC 7665, 374 DOI 10.17487/RFC7665, October 2015, 375 . 377 Authors' Addresses 379 Carlos J. Bernardos 380 Universidad Carlos III de Madrid 381 Av. Universidad, 30 382 Leganes, Madrid 28911 383 Spain 385 Phone: +34 91624 6236 386 Email: cjbc@it.uc3m.es 387 URI: http://www.it.uc3m.es/cjbc/ 389 Alain Mourad 390 InterDigital Europe 392 Email: Alain.Mourad@InterDigital.com 393 URI: http://www.InterDigital.com/