The document describes a 5G mobile platform with P4-enabled network slicing and multi-access edge computing (MEC). Key points:
- The platform utilizes SDN, NFV and cloud technologies to provide a flexible and scalable 5G core network (5GC) based on free5GC and orchestrated using Kubernetes and ONOS.
- Network functions of the 5GC such as AMF, SMF and UPF are deployed as cloud-native functions (CNFs) on Kubernetes. Operators are used to install and manage the CNFs.
- A P4 switch is used to reduce loading on MEC by decapsulating and encapsulating GTP packets, and redirecting DNS traffic
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław BorekPROIDEA
Przemysław Borek - Cisco Systems
Language: English
Service orchestration in provider network, Tail-f
Register to the next PLNOG edition today: krakow.plnog.pl
The next generation mobile network will be built on open source software. It will be highly scalable, elastic, and extremely robust in order to handle the exponential increase in traffic including video, the IoT, and increasingly smarter devices. OPNFV will be the reference platform for operators to enable rapid deployment of new services, automated provisioning, security and a DevOps workflow for upgrades and maintenance. Huawei CTO Yingtao Li will speak about the next generation mobile architecture built on OPNFV and how it meets the needs of operators as they roll out new, software based networks.
This is a workshop I held at KamailioWorld Conference 2017 about the installation and deployment and installation of IMS and VoLTE based on Kamailio and Open-Source.
Le SDN et NFV sont très à la mode en ce moment car en passant des appliance physiques aux équipement réseau massivement logiciel, celà devrait offrir une grande flexibilité et agilité aux entreprises (et telco en particulier). Néanmoins chainer des services réseau est un exercice encore très complexe et ce document vous explique ce qu'il est déjà possible de faire sur OpenStack en couplant par exemple : un load balancer (BigIP), un Firewall (BigIP), un réseau virtuel WAN (RiverBed) ou encore un routeur virtuel (Brocade).
PLNOG14: Service orchestration in provider network, Tail-f - Przemysław BorekPROIDEA
Przemysław Borek - Cisco Systems
Language: English
Service orchestration in provider network, Tail-f
Register to the next PLNOG edition today: krakow.plnog.pl
The next generation mobile network will be built on open source software. It will be highly scalable, elastic, and extremely robust in order to handle the exponential increase in traffic including video, the IoT, and increasingly smarter devices. OPNFV will be the reference platform for operators to enable rapid deployment of new services, automated provisioning, security and a DevOps workflow for upgrades and maintenance. Huawei CTO Yingtao Li will speak about the next generation mobile architecture built on OPNFV and how it meets the needs of operators as they roll out new, software based networks.
This is a workshop I held at KamailioWorld Conference 2017 about the installation and deployment and installation of IMS and VoLTE based on Kamailio and Open-Source.
Le SDN et NFV sont très à la mode en ce moment car en passant des appliance physiques aux équipement réseau massivement logiciel, celà devrait offrir une grande flexibilité et agilité aux entreprises (et telco en particulier). Néanmoins chainer des services réseau est un exercice encore très complexe et ce document vous explique ce qu'il est déjà possible de faire sur OpenStack en couplant par exemple : un load balancer (BigIP), un Firewall (BigIP), un réseau virtuel WAN (RiverBed) ou encore un routeur virtuel (Brocade).
OPNFV VIM integrates control and management components from upstream projects such as openstack, ONOS, ODL, etc. While huge success has been achieved in OPNFV for integration, automated build and deployment, the performance of VIM for controlling and managing virtual network has received little attention. This presentation is to address the VIM performance related to the network part of the infrastructure. Based on a Telco use case, we define performance metrics for SDN controller, northbound communication channels, and network provisioning. ONOSFW and OpenStack are two components for VIM. Test data is collected and analyzed for performance evaluation and suggestions for future improvements. China Unicom, ON.LAB and Huawei jointly define the use case and methodology, do analysis, and produce results.
Overview of OpenDaylight Container Orchestration Engine IntegrationMichelle Holley
Looking for a way to deploy a stable OpenStack Cloud Environment with Opendaylight at ease? This session is about learning to deploy a Cloud environment with OPNFV Fuel deployer. Fuel is a deployment tool which deploys a wide variety of distributions with third party plugins like OpenDayLight, while abstracting out complexities of the deployment. The intent of this session is to familiarize deployment of OpenStack with OpenDaylight.
About the presenter: Pramod Raghavendra Jayathirth is a software developer in OpenStack and OpenDayLight, working for OTC, SSG at Intel. His Area of Interest is in Cloud Networking and Applications. He has prior experience in Databases and his current focus is on developing features of Cloud Networking Platform. He holds Masters Degree from San Jose State University.
Cisco® Application Centric Infrastructure (ACI) is an innovative architecture that radically simplifies, optimizes, and accelerates the entire application deployment lifecycle. Cloud, mobility, and big data applications are causing a shift in the data center model. Cisco ACI redefines the power of IT, enabling IT to be more responsive to changing business and application needs, enhancing agility, and adding business value. Cisco ACI delivers a transformational operating model for next-generation data center and cloud applications. This Cisco ACI hands lab will step you through from the ACI Fabric concepts to deployment. • Cisco ACI Overview • ACI Fabric Discovery • ACI Building Basic Network Constructs • ACI Building Policy Filters and Contracts • : Deploying a 3-Tier Application Network Profile • ACI Integrating with VMware • Deploying a Service Graph with Application Network Profile • Exploring Monitoring and Troubleshooting
Radisys, along with Orange and Strategy Analytics presented this webinar entitled: Radisys Makes ONAP Real for High Performance Services. The presenter team, Sue Rudd of SA, Al Balasco and Adnan Saleem of Radisys and Morgan Richomme of Orange covered topics such as: NFV and ONAP, Media Server 'readiness', Tier 1 challenges and finish up with some real-world use cases. For more on ONAP and how Radisys can get you ready, please contact us at: sales@radisys.com
Cloudify: Open vCPE Design Concepts and Multi-Cloud OrchestrationCloudify Community
See how open vCPE can be achieved in the real world and in action, while integrating other VNFs into the service chain, while easily instantiating and managing on any cloud, leveraging open orchestration design concepts. More and more vendors are looking to not only easily onboard their VNFs to the cloud, but also build a stack that is versatile and not locked into one cloud provider or vendor. Join this webinar and learn how Datavision and Cloudify are helping deliver this end-to-end solution across the globe
OpenStack Gluon is a model-driven, extensible framework that enables telecom network operators to provide customers with NFV networking services on-demand by generating APIs from a YAML file which models the NFV Networking Service. We’ll give an overview of Gluon and share a demonstration that will show how Gluon enables quick development and accelerates deployment of new networking service APIs (a.k.a. Protons). We’ll also provide an overview of the OPNFV NetReady project, whose goal is to investigate how the current OpenStack networking architecture needs to be evolved in order to ensure that NFV-related use cases can be flexibly and efficiently supported.
Tail-f Webinar OpenFlow Switch Management Using NETCONF and YANGTail-f Systems
This Webinar is on the OF-CONFIG specification and how it applies to large scale OpenFlow switch management.
If you are interested in the management of OpenFlow switches and want to find out more about available specifications and tools to build and deploy such solutions, this webinar provides a useful overview.
Webinar Agenda:
-Step-by-step walkthrough of the OpenFlow Management and Configuration Protocol
-Demonstration of how to use of the YANG language to define the structure and semantics of OpenFlow switch configurations
-The role of NETCONF in implementing OF-CONFIG
Advantages of this approach to network device manufacturers and network operations teams needing to quickly develop and deploy state-of-the-art management solutions
-Short overview of Tail-f Systems’ applicable products and tools
http://www.tail-f.com
"OIF Interop – the Key to Unlocking the Benefits of SDN" at OptiNet China 2017Deborah Porchivina
T-API interop demo recap and review of OIF’s current projects presented to more than 500 attendees at OptiNet China in Beijing by Li Junjie, Board Member of Optical Internetworking Forum (OIF), Director, Optical Communications Research Center, Beijing Research Institute, China Telecom
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Albert Hoitingh
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
More Related Content
Similar to 2pm-Wilson-Wang-5G-Mobile-Platform-with-P4-Enabled-Network-Slicing-and-MEC.pdf
OPNFV VIM integrates control and management components from upstream projects such as openstack, ONOS, ODL, etc. While huge success has been achieved in OPNFV for integration, automated build and deployment, the performance of VIM for controlling and managing virtual network has received little attention. This presentation is to address the VIM performance related to the network part of the infrastructure. Based on a Telco use case, we define performance metrics for SDN controller, northbound communication channels, and network provisioning. ONOSFW and OpenStack are two components for VIM. Test data is collected and analyzed for performance evaluation and suggestions for future improvements. China Unicom, ON.LAB and Huawei jointly define the use case and methodology, do analysis, and produce results.
Overview of OpenDaylight Container Orchestration Engine IntegrationMichelle Holley
Looking for a way to deploy a stable OpenStack Cloud Environment with Opendaylight at ease? This session is about learning to deploy a Cloud environment with OPNFV Fuel deployer. Fuel is a deployment tool which deploys a wide variety of distributions with third party plugins like OpenDayLight, while abstracting out complexities of the deployment. The intent of this session is to familiarize deployment of OpenStack with OpenDaylight.
About the presenter: Pramod Raghavendra Jayathirth is a software developer in OpenStack and OpenDayLight, working for OTC, SSG at Intel. His Area of Interest is in Cloud Networking and Applications. He has prior experience in Databases and his current focus is on developing features of Cloud Networking Platform. He holds Masters Degree from San Jose State University.
Cisco® Application Centric Infrastructure (ACI) is an innovative architecture that radically simplifies, optimizes, and accelerates the entire application deployment lifecycle. Cloud, mobility, and big data applications are causing a shift in the data center model. Cisco ACI redefines the power of IT, enabling IT to be more responsive to changing business and application needs, enhancing agility, and adding business value. Cisco ACI delivers a transformational operating model for next-generation data center and cloud applications. This Cisco ACI hands lab will step you through from the ACI Fabric concepts to deployment. • Cisco ACI Overview • ACI Fabric Discovery • ACI Building Basic Network Constructs • ACI Building Policy Filters and Contracts • : Deploying a 3-Tier Application Network Profile • ACI Integrating with VMware • Deploying a Service Graph with Application Network Profile • Exploring Monitoring and Troubleshooting
Radisys, along with Orange and Strategy Analytics presented this webinar entitled: Radisys Makes ONAP Real for High Performance Services. The presenter team, Sue Rudd of SA, Al Balasco and Adnan Saleem of Radisys and Morgan Richomme of Orange covered topics such as: NFV and ONAP, Media Server 'readiness', Tier 1 challenges and finish up with some real-world use cases. For more on ONAP and how Radisys can get you ready, please contact us at: sales@radisys.com
Cloudify: Open vCPE Design Concepts and Multi-Cloud OrchestrationCloudify Community
See how open vCPE can be achieved in the real world and in action, while integrating other VNFs into the service chain, while easily instantiating and managing on any cloud, leveraging open orchestration design concepts. More and more vendors are looking to not only easily onboard their VNFs to the cloud, but also build a stack that is versatile and not locked into one cloud provider or vendor. Join this webinar and learn how Datavision and Cloudify are helping deliver this end-to-end solution across the globe
OpenStack Gluon is a model-driven, extensible framework that enables telecom network operators to provide customers with NFV networking services on-demand by generating APIs from a YAML file which models the NFV Networking Service. We’ll give an overview of Gluon and share a demonstration that will show how Gluon enables quick development and accelerates deployment of new networking service APIs (a.k.a. Protons). We’ll also provide an overview of the OPNFV NetReady project, whose goal is to investigate how the current OpenStack networking architecture needs to be evolved in order to ensure that NFV-related use cases can be flexibly and efficiently supported.
Tail-f Webinar OpenFlow Switch Management Using NETCONF and YANGTail-f Systems
This Webinar is on the OF-CONFIG specification and how it applies to large scale OpenFlow switch management.
If you are interested in the management of OpenFlow switches and want to find out more about available specifications and tools to build and deploy such solutions, this webinar provides a useful overview.
Webinar Agenda:
-Step-by-step walkthrough of the OpenFlow Management and Configuration Protocol
-Demonstration of how to use of the YANG language to define the structure and semantics of OpenFlow switch configurations
-The role of NETCONF in implementing OF-CONFIG
Advantages of this approach to network device manufacturers and network operations teams needing to quickly develop and deploy state-of-the-art management solutions
-Short overview of Tail-f Systems’ applicable products and tools
http://www.tail-f.com
"OIF Interop – the Key to Unlocking the Benefits of SDN" at OptiNet China 2017Deborah Porchivina
T-API interop demo recap and review of OIF’s current projects presented to more than 500 attendees at OptiNet China in Beijing by Li Junjie, Board Member of Optical Internetworking Forum (OIF), Director, Optical Communications Research Center, Beijing Research Institute, China Telecom
Similar to 2pm-Wilson-Wang-5G-Mobile-Platform-with-P4-Enabled-Network-Slicing-and-MEC.pdf (20)
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Albert Hoitingh
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
UiPath Test Automation using UiPath Test Suite series, part 5DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
A tale of scale & speed: How the US Navy is enabling software delivery from l...sonjaschweigert1
Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved:
- Reduction in onboarding time from 5 weeks to 1 day
- Improved developer experience and productivity through actionable findings and reduction of false positives
- Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO)
Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production.
We will cover:
- How to remove silos in DevSecOps
- How to build efficient development pipeline roles and component templates
- How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence)
- How to streamline operations with automated policy checks on container images
Removing Uninteresting Bytes in Software FuzzingAftab Hussain
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...SOFTTECHHUB
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...Neo4j
Leonard Jayamohan, Partner & Generative AI Lead, Deloitte
This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
The Art of the Pitch: WordPress Relationships and SalesLaura Byrne
Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes?
All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.
Communications Mining Series - Zero to Hero - Session 1DianaGray10
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Unlocking Productivity: Leveraging the Potential of Copilot in Microsoft 365, a presentation by Christoforos Vlachos, Senior Solutions Manager – Modern Workplace, Uni Systems
1. 5G Mobile Platform with P4-enabled
Network Slicing and MEC
Wilson Wang
National Chiao Tung University
2. About Me
• Wilson Wang
• NCTU PhD candidate
• ITRI engineer
• Cat person
• ONOS deployment brigade member
X
3. Outline
• What We Have Done
• 5G Mobile Platform with free5GC
• Reduce Loading in MEC with P4 Switch
• P4-enabled Network Slicing
4. ONS 2016
• Build an SDN-IP site in NCTU
• Connect with KREONET and AmLight
• Live DEMO
5. CORD Build 2017
• Integrate OAI-as-a-Service into M-CORD
• Presentation and live DEMO
6. ONF Connect 2018
• OAI M-CORD Platform with P4-enabled
Network Slicing
• Live DEMO
7. ONF Connect 2019
• 5G Mobile Platform with P4-enabled Network Slicing and MEC
• Compliant with ETSI MANO
• NCTU free5GC
• Loading Reduction in MEC with P4 Switch
• P4-enabled network slicing
Slice 1
Slice 2
8. Introduction and Motivation for Our 5G Mobile Platform
• 5G need Virtualized Network Functions (VNFs)
• Flexible and efficient network
• Cloud-Native VNFs (CNF)
• VNFs based on Cloud-Native containerization technology
• Lower overhead and higher performance
• ETSI proposes NFV Management and Orchestration (NFV-MANO) architecture
• Many existing NFV-MANO projects
• Complex service development
• Insufficient support of CNF orchestration
• High resource usage, e.g. CPU, memory, disk …
• Need a 5G Lightweight NFV-MANO platform
9. So We Want to
• Propose a 5G Lightweight NFV-MANO Mobile Platform
• Utilize SDN, NFV, Cloud to provide 5GC flexibility and scalability
• All open sources
• Kubernetes, ONOS, free5GC …
• NFV functionality
• Scalable free5GC CNFs
• Cloud functionality
• Agile orchestration
• SDN functionality
• Flexible underlay network
11. ETSI NFV-MANO Functional Blocks
• NFVO: NFV Orchestrator
• Management of the instantiation of VNFMs where applicable
• Network Services (NSs) lifecycle management
• VNFM: VNF Manager
• Manage lifecycle of VNF instances
• Creates, maintains and terminates VNF instances
• VIM: Virtualized Infrastructure Manager
• E.g. OpenStack, Kubernetes, ONOS
• VNF: Virtualized Network Function
• free5GC
• NFVI: NFV Infrastructure
• Provide the infrastructure resources
• EM: Element Management
• OSS/BSS: Operation/Business System Support
12. What is free5GC
• The free5GC is an open-source project code for 5G generation
mobile core network created by NCTU
• Based on the Rel-13 EPC and migrates into Rel-15 5GC
• Focus enhance Mobile Broadband (eMBB) feature
• Ultra-Reliable Low Latency Connection (URLLC) and Massive Internet
of Things (MIoT) are not supported yet
13. free5GC CNFs
• CNFs
• AMF: Access Management Function
• SMF: Session Management Function
• HSS: Home Subscriber Server
• PCRF: Policy and Charging Rules Function
• UPF: User Plane Function
• All CNFs are containerization and running on K8s cluster
14. Design Concept of 5G Lightweight NFV-MANO
Mobile Platform
• Each NF of free5GC is a CNF (Base on SBA)
• May install/update a group of designated free5GC
CNFs (Using Helm)
Ø Create Custom Resource Definition for free5GC CNFs
Ø Introduce a free5GC Operator (free5GC-Op) as VNFM
for free5GC CNFs CR
Ø Employ OLM Operator (OLM-Op) as NFVO to manage
VNFMs (e.g. free5GC-Op)
Ø Create Custom Resource Definition for C-Op
• Treat Custom Operator (C-op) as CR
allowing dynamic C-Op installation/update
15. Operator Lifecycle Manager (OLM)
• Open source project hosted by Red Hat
• Create Custom Resource Definition for Custom Operators (C-Ops)
• Treat Custom Operator (C-Op) as CR in K8s
• Employ two operators to manage C-Op CR:
1. OLM Operator (OLM-Op):
• Watch C-Op CR update request on K8s API Server
• Perform C-Op installation/modification
2. Catalog Operator (optional)
• Cache of C-Op custom resource
16. Design Concept of 5G Lightweight NFV-MANO
Mobile Platform (Cont.)
• Use ONOS as SDN controller to manage underlying SDN
network
• Two approaches to interact with ONOS (through ONOS
northbound REST API)
1. Modify OLM-Op to interact with ONOS Controller
directly
2. Introduce ONOS-Op to interact with ONOS Controller
(On behalf of OLM-Op)
• Need not to modify OLM-Op!
Ø Introduce a ONOS Operator (ONOS-Op) as VNFM
• Create CRD for ONOS REST API
• Treat ONOS REST API as CR
• Implement a ONOS-Op as VNFM for ONOS REST API
17. Architecture of 5G Mobile Platform
• NFVO: OLM-Op
• Watch CR update requests of C-Op on Kube-apiserver
• Install / update C-Op
• VNFMs: C-Ops
• free5GC Operator (free5GC-Op)
• Watch CR update requests of free5GC on Kube-apiserver
• Install / update free5GC CNFs
• ONOS Operator (ONOS-Op)
• Watch CR update requests of ONOS REST API
on Kube-apiserver
• Call ONOS northbound REST API
18. Design of free5GC Operator (free5GC-Op)
• Responsible for installing/updeting free5GC CNF by using Helm
• Three components:
• Helm Chart of free5GC CNFs (template file)
• Template for K8s resources definitions of free5GC CNFs
• watches.yml (file)
• CR name: free5GC
• Helm Chart path
• helm-operator (free5GC-Op core)
• Get CR name specified in watches.yml
• Watch CR update requests of free5GC on kube-apiserver
• On receiving request, transform config of request content into Helm Config
• Send Helm Chart and Config to Tiller Server
19. Design of ONOS Operator (ONOS-Op)
• Responsible for interacting with ONOS Controller
• Two components:
• Spec of ONOS REST API
• ONOS-Op core:
• Watch CR update requests of ONOS REST API on kube-apiserver
• On receiving request, transform ONOS REST API CR content into REST API format
• Call ONOS REST API
20. free5GC CNFs Installation / Modification
1. free5GC-Op watches free5GC CR update request on Kube-apiserver
2. User requests Kube-apiserver to create/update free5GC CR
3. Kube-apiserver forwards request to free5GC-Op
4. free5GC-Op transforms config of request content into Helm Config
5. free5GC-Op sends Helm Chart and Config to Tiller server (TS)
6. TS combines Helm Chart and Config, sends data to Kube-apiserver
7. Kube-apiserver deploys free5GC CNFs
21. Interact with ONOS
1. ONOS-Op watches ONOS REST API CR update request on Kube-apiserver
2. User requests Kube-apiserver to create/update ONOS REST API CR
3. Kube-apiserver forwards request to ONOS-Op
4. On receiving request, ONOS-Op transform request content into ONOS REST API format
5. ONOS-Op call ONOS northbound REST API
22. Data Network: Multus + Calico + SR-IOV
• Multi-interface of free5GC CNFs
• eth0 of CNFs: for 5G Core Network functions interaction
• eth1 of AMF and UPF: for connect to eNodeB
Why Multus + Calico + SR-IOV?
• Multus: Enabling attach multiple network interfaces to PODs
• Calico: Good performance for deliver native Linux networking dataplane
• No packets encapsulation, direct packets natively by BGP routing mechanism
• Minimize overall CPU usage and occupancy by Calico’s control plane and policy engine
• SR-IOV: Lowers latency and boosts throughput to satisfy CNF data plane needs
• Hardware based virtualization technology that improve performance and scalability
24. Reduce Loading in MEC with P4 Switch
• Propose a P4-based MEC network
• Network feature
• Provide better packet I/O with P4 switch
• Reduce MEC loading from packet encapsulation and decapsulation
• Redirect DNS
25. Stateful GTP packet tracking
• Decapsulate GTP-U header before sending it MEC
• Encapsulate packet with GTP-U header before sending it to UE
• Tracking mapping between UE IP and downlink TEID
P4 Switch
Core
network
Internet
UE eNodeB EPC
MEC
Payload
TCP/UDP
IP
GTP-U(TEID=XXX)
UDP
IP
Ethernet
GTP-U(TEID=YYY)
UDP
IP
Ethernet
26. Reduce Loading in MEC with P4 Switch
• Two approaches
• Packet-in downlink GTP-U packets
• Packet-in SCTP packets
27. Packet-in downlink GTP-U packets
27
P4 Switch
Core
network
Internet
UE eNodeB EPC
MEC
Payload
TCP/UDP
IP
GTP-U
UDP
IP
Ethernet
Switch
Controller
UE Addr. DL TEID
192.168.3.2 777
UE session state
Match Action
192.168.3.2 NoAction
UE encapsulation
Match Action
192.168.3.2 set_gtp_header(777)
UE session state
Match Action
UE encapsulation
Match Action
28. Packet-in downlink GTP-U packets
P4 Switch
Core
network
Internet
UE eNodeB EPC
MEC
Initial Context Setup
Request
S1-AP
SCTP
IP
Ethernet
Switch Controller
MME-UE-
ID
SGW Addr. ENB Addr. DNS Addr. UE Addr. DL
TEID
UL
TEID
112233 10.0.9.2 8.8.8.8 192.168.3.2 1
Initial Context Setup
Response
S1-AP
SCTP
IP
Ethernet
MME-UE-
ID
SGW Addr. ENB Addr. DNS Addr. UE Addr. DL
TEID
UL
TEID
112233 10.0.9.2 10.0.9.100 8.8.8.8 192.168.3.2 777 1
29. DNS traffic redirection
1. UE send DNS requests to ask for a specific service on the
internet
2. Switch redirect the DNS query to MEC
• Target service can be provided by MEC
• Response the request by MEC address
• Target service cannot be provided by MEC
• Response the request by real service address
3. UE send normal traffic to service
31. Design Concept for Bandwidth Slice Management
• Bandwidth slice
• Contain disjoint traffic flows identified from user-defined field
• Reach isolation of bandwidth resources by priority forwarding
• Aggregated traffic flow in a slice will share the bandwidth
resource
32. Policy of Bandwidth Management
• Slice Traffic (aggregated traffic flows)
• Guarantee minimum bandwidth
• Best effort delivery without any guarantee
• Limit maximum bandwidth
• Unspecified Traffic
• Best effort delivery without any guarantee
33. Packet Classification
• P4 Meter with Two Rate Three Color Marker classification
• minimum bandwidth: Committed Information Rate (CIR)
• maximum bandwidth: Peak Information Rate (PIR)
• Color result
• Green: Guarantee traffic
• Yellow: Best Effort traffic
• Red: Abandon traffic
34. Priority Forwarding
• Guarantee traffic
• Request bandwidth cannot exceed link available bandwidth
• Best Effort traffic
• Contain unspecified packets
• Deliver by residual bandwidth
• Maximize bandwidth utilization
• Abandon traffic
35. Priority Forwarding - Two-Level Priority Queue
• For example:
• Single Queue: Best effort packet interference
• Two-Level Priority Queue
36. Implementation of BW-Slicing.p4
• Extension from ONOS Basic pipeline
• Provides fundamental data-plane functionalities of the switch
Basic.p4 pipeline BW-Slicing.p4 pipeline
mec-spgw.p4 pipeline
37. ONF Connect 2019
• 5G Mobile Platform with P4-enabled Network Slicing and MEC
• Compliant with ETSI MANO
• NCTU free5GC
• Loading Reduction in MEC with P4 Switch
• P4-enabled network slicing
Slice 1
Slice 2