NMRG Kim, Seokhyun Internet-Draft Samsung Electronics Intended status: Standards Track Jang, Hyeonjoon Expires: March 15, 2021 KAIST October 2020 Software-Defined Networking based Policy Driven Network Slicing System draft-kim-nmrg-pdns-02 Abstract With the advent of Software-Defined Networking(SDN), the network environment has changed greatly to focus on users, and network virtualization technology has made great progress. However, networks that are getting bigger and more advanced have become more and more complex and difficult to use SDN. In such an environment, a network system that users can easily access and use is required. In this document we propose a more advanced policy-based network virtualization system that allows users to select policies and provide networks accordingly, rather than a system that simply virtualizes a network and shares it with each user. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on March 15, 2021. Kim & Jang Expires March 15, 2021 [Page 1] Internet-Draft Policy Driven Network Slicing October 2020 Copyright Notice Copyright (c) 2020 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . .. . . . . . 2 2. SDN-based Network Virtualization. . . . . . . . . . . . . . . . 3 3. Policy-Driven Network Slicing using SDN. . . . . . . . . . . . . 3 4. IANA Considerations . . . . . . .. . . . . . . . . . . . . . . 4 5. Security Considerations . . . . . . . . . . . . . . . . . . . 4 6. References . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 6.1. Normative References . . . . . . . . . . . . . . . . . . . . . 4 6.2. Informative References . . . . . .. . . . . . . . . . . . . . 4 7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . 4 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. Introduction Recently, the scale of the network is growing rapidly as more and more various kinds of devices are being connected. Software-Defined Networking(SDN) and network virtualization technology using SDN are being studied as a technology for flexible and efficient management of such networks, but the larger the networks, the network management with SDN becomes more and more complex, which increases the burden on the user. In this document, we propose a policy-based network virtualizati- on system that delivers user packets according to a policy prepared in advance by the network administrator for ease of use by users. Kim & Jang Expires March 15, 2021 [Page 2] Internet-Draft Policy Driven Network Slicing October 2020 2. SDN-based Network Virtualization Nowadays SDN has led the change from the existing producer-centered networks to the user-centered networks[1]. After the advent of SDN-based network virtualization technology such as Flowvisor[2], the gap between the virtual network topology and the real network topology is reduced[3] ,and the network users' conveniene were promoted by integrating the APIs of the network controllers[4]. However, as the network grows network management using SDN becomes more and more complex to respond to changes in various situations(e.g., loop prevention, ...), which is no exception to virtualized networks. As a result, users of the SDN network need a lot of time and effort compared to the existing producer-centered networks. +----------------+ | SDN Controller | +----------------+ Λ | +--OpenvSwitch-----------------|---V--------------+ Packets | +----------------+ +--------------------+ | Out -----------> | Policy Checker |---->| Look up flow | ----------> Packets in | +----------------+ +--------------------+ | | | Λ Λ | | | V | | V | | +----------------+ +-----------+ +----------+ | | | Packet | | Policy | | Marker | | | | Classfier | | Marker | | Remover | | | +----------------+ | Generator | +----------+ | | | +-----------+ | | | Λ | | V | | | +----------------------------------+ | | | Policy Matcher | | | +-------|----------------Λ---------+ | +---------|----------------|----------------------+ V | +-----------------------------------+ | Policy-Tenant Matching Database | +-----------------------------------+ Figure 1: Policy Driven Network Slicing System Architecture 3. Policy-Driven Network Slicing using SDN Policy-Driven Network Slicing(PDNS) is designed to maximize the conveni- ence of network users, which is and advantage of the existing producer centered network, while ensuring the flexibility of the network using SDN. A network administrator who provides a virtual network presents various policies (ex. security level, topology, network function) that users can use. Network users choose their own policy and use the network. The administrator downloads and stores this user-specific policy for each OVS, and delivers the user-specific packet to the algorithm appropriate to the policy. Kim & Jang Expires March 15, 2021 [Page 3] Internet-Draft Policy Driven Network Slicing October 2020 [Figure 1] shows a PDNS system where each switch in the network is classified by matching the user's policy. For this classification, the network adds a policy marker to the user's packet. When each switch receives a packet, if the Policy Checker checks whether there is a Policy Marker, it delivers the packet according to the corresponding policy. If not, packet classifier analyzes which packet is, and policy matcher compares it with user's DB to determine which policy, add policy maker to packet, and deliver packet according to policy. If there is a rule, the transmitted packet is transmitted according to the rule, if not, it is transmitted to the controller and assigned the rule. The controller refers to the policy marker of the received packet, and if the packet is delivered from the network to the end user or another network last in the relevant policy, it removes the policy marker and delivers the packet. 4. IANA Considerations There are no IANA considerations related to this document. 5. Security Considerations There are no security considerations related to this document. 6. References 6.1. Normative References [1] McKeown, Nick, et al. "OpenFlow: enabling innovation in campus networks." ACM SIGCOMM Computer Communication Review 38.2 (2008): 69-74. [2] Sherwood, Rob, et al. "Flowvisor: A network virtualization layer." OpenFlow Switch Consortium, Tech. Rep 1 (2009): 13 [3] Corin, Roberto Doriguzzi, et al. "Vertigo: Network virtualizat ion and beyond." Software Defined Networking (EWSDN), 2012 European Workshop on. IEEE, 2012 [4] Drutskoy, Dmitry, Eric Keller, and Jennifer Rexford. "Scalable network virtualization in software-defined networks" IEEE Internet Computing 17.2 (2013): 20-27. 6.2. Informative References 7. Acknowledgements This work was supported by Institute for Information & communications Technology Promotion(IITP) grant funded by the Korea government(MSIT) (No.2015-0-00557, Resilient/Fault-Tolerant Autonomic Networking Based on Physicality, Relationship and Service Semantic of IoT Devices) Kim & Jang Expires March 15, 2021 [Page 4] Internet-Draft Policy Driven Network Slicing October 2020 Authors' Addresses Seokhyun Kim Samsung Electronics, Suwon, South Korea Phone: +82 (0)42 350 5473 Email: sh.kim@netsys.kaist.ac.kr Hyeonjoon Jang Electrical Engineering Department, Korea Advanced Institute of Science and Technology(KAIST) Daejeon, South Korea Phone: +82 (0)42 350 5473 Email: thefelix@kaist.ac.kr Kim & Jang Expires March 15, 2021 [Page 5]