Re: [Idr] FW: New Version Notification for draft-peng-idr-apn-bgp-flowspec-00.txt

["Pengshuping (Peng Shuping)" <[e-mail]>]

Hi Chongfeng,

Thank you for this suggestion.

There are a few use cases we targeted in this draft. Their requirements are also mentioned below.

1)     To perform policy enforcement at nodes based on APN ID.

At a policy enforcement node, the APN ID carried in the incoming data packets is used to match against the APN ID carried in the BGP FS Component, if it is a successful match, the corresponding policy at this node will be enforced, e.g. traffic steering into a specific tunnel. – This use case explains why we need to define this new component type for APN.

2)     To create an APN ID based on the APN FS rules at the APN domain edge when there are also co-existing FS rules. The different parts of the APN ID might be created by different FS rules. -- This explains why we needs to define the ordering of the multiple coexisting FS rules to organize them in an effective order. We categorize the rules into Groups, and then within each Group, we further categorize the rules into Sub-Groups. We have also defined the usage principles for the rules within a Sub-Group, between Sub-Groups, and between Groups.

3)     To obtain the APN ID from the incoming data packets or from the FS and encapsulate it in the outer tunnel header such as IPv6 extension header – This explains why we need to define the Traffic Filtering Actions. There are four ways to obtain the APN ID.

Best Regards,
Shuping


From: Chongfeng Xie <[e-mail]>
Sent: Wednesday, March 13, 2024 2:42 PM
To: idr <[e-mail]>; Pengshuping (Peng Shuping) <[e-mail]>
Subject: Re: [Idr] FW: New Version Notification for draft-peng-idr-apn-bgp-flowspec-00.txt

Hi Shuping,

Would you show a general use case of dissemination of BGP Flow Specification Rules for APN?  Personally I think this will conducive to understanding the new approach and promoting it in the future.

Best regards

Chongfeng


From: Pengshuping \(Peng Shuping\)<mailto:pengshuping=[e-mail]>
Date: 2024-03-05 15:06
To: [e-mail]<mailto:[e-mail]>
Subject: [Idr] FW: New Version Notification for draft-peng-idr-apn-bgp-flowspec-00.txt

Hi all,



We have published this draft on the dissemination of BGP Flow Specification Rules for APN (https://datatracker.ietf.org/doc/html/draft-peng-idr-apn-bgp-flowspec), to enable the traffic filtering in an APN domain as well as the traffic control and actions at the policy enforcement points in this domain.



The technical points of this draft include:

1. A new BGP Flow Spec Component Type is specified with the match field APN ID to support the traffic filtering using APN.
2. A Grouping Identifier Opaque Extend Community [RFC4360] (Sub-Type = TBD2) carrying both Group ID (2 octets) and Sub-group ID (2 octets) is defined, aiming to provide an efficient grouping mechanism for the multiple co-existing Flow Specification rules to be matched in a desired order as well as the actions being applied to a particular traffic flow. The encoding format, usage principles and usage example (APN) are provided.
3. Traffic filtering actions (incl. Traffic Marking, Inherit, Stitch) are specified to enable the creation of the APN ID in the outer tunnel encapsulation when matched to the corresponding Flow Spec rules.

Your review and comments are appreciated. Thank you!



Best Regards,

Shuping







-----Original Message-----
From: [e-mail]<mailto:[e-mail]> <[e-mail]<mailto:[e-mail]>>
Sent: Monday, March 4, 2024 7:16 PM
To: Huiyue Zhang <[e-mail]<mailto:[e-mail]>>; Ran Pang <[e-mail]<mailto:[e-mail]>>; Pengshuping (Peng Shuping) <[e-mail]<mailto:[e-mail]>>; Yong Cui <[e-mail]<mailto:[e-mail]>>; Lizhenbin <[e-mail]<mailto:[e-mail]>>
Subject: New Version Notification for draft-peng-idr-apn-bgp-flowspec-00.txt



A new version of Internet-Draft draft-peng-idr-apn-bgp-flowspec-00.txt has been successfully submitted by Shuping Peng and posted to the IETF repository.



Name:     draft-peng-idr-apn-bgp-flowspec

Revision: 00

Title:    Dissemination of BGP Flow Specification Rules for APN

Date:     2024-03-04

Group:    Individual Submission

Pages:    19

URL:      https://www.ietf.org/archive/id/draft-peng-idr-apn-bgp-flowspec-00.txt

Status:   https://datatracker.ietf.org/doc/draft-peng-idr-apn-bgp-flowspec/

HTMLized: https://datatracker.ietf.org/doc/html/draft-peng-idr-apn-bgp-flowspec





Abstract:



   A BGP Flow Specification is an n-tuple consisting of several matching

   criteria that can be applied to IP traffic.  Application-aware

   Networking (APN) is a framework, where APN data packets convey APN

   attribute including APN ID and/or APN Parameters.  The dynamic Flow

   Spec mechanism for APN is designed for the new applications of

   traffic filtering in an APN domain as well as the traffic control and

   actions at the policy enforcement points in this domain.  These

   applications require coordination among the ASes within a service

   provider.



   This document specifies a new BGP Flow Spec Component Type in order

   to support APN traffic filtering.  The match field is the APN ID.  It

   also specifies traffic filtering actions to enable the creation of

   the APN ID in the outer tunnel encapsulation when matched to the

   corresponding Flow Spec rules.







The IETF Secretariat