RTG Working Group                                           K. Majumdar
Internet Draft                                                CommScope
Intended status: Informational                              U. Chunduri
Expires: October 14, 2022                                         Intel
                                                              L. Dunbar
                                                              Futurewei
                                                         April 14, 2022



           Extension of Transport Aware Mobility in Data Network
              draft-mcd-rtgwg-extension-tn-aware-mobility-04

Abstract

   The existing Transport Network Aware Mobility for 5G [TN-AWARE-
   MOBILITY] draft specifies a framework for mapping the 5G mobile
   systems Slice and Service Types (SSTs) to corresponding underlying
   network paths in IP and Layer 2 Transport networks.The focus of that
   work is limited to the mobility domain and transport network
   characteristics till the UPF and doesn't go beyond the UPF to the
   Data Network.

   To maintain E2E transport network characteristics the framework
   needs to be extended beyond UPF. This document describes a framework
   for extending the mobility aware transport network characteristics
   from the UPF through the Data Network.

Status of this Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six
   months and may be updated, replaced, or obsoleted by other documents
   at any time.  It is inappropriate to use Internet-Drafts as
   reference material or to cite them other than as "work in progress."




xxx, et al.            Expires October 14, 2022                [Page 1]


Internet-Draft      Extension of TN Aware Mobility           April 2022


   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html

   This Internet-Draft will expire on April 23, 2021.

Copyright Notice

   Copyright (c) 2022 IETF Trust and the persons identified as the
   document authors. All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document. Please review these documents
   carefully, as they describe your rights and restrictions with
   respect to this document. Code Components extracted from this
   document must include Simplified BSD License text as described in
   Section 4.e of the Trust Legal Provisions and are provided without
   warranty as described in the Simplified BSD License.

Table of Contents


   1. Introduction...................................................3
   2. Conventions used in this document..............................4
   3. Framework for Extension of Transport Network Aware Mobility....4
   4. Mobility Packet Transition to the Data Network.................5
   5. Transport Network Characteristics Mapping to SR-TE Paths.......7
      5.1. Extend TN Aware Mobility for BGP SR-TE Policy.............9
      5.2. Extend TN Aware Mobility for SR-PCE Controller...........13
      5.3. Extend TN Aware Mobility for RestConf/gRPC based SR-TE
      Controller....................................................16
      5.4. Extend BGP FlowSpec for TN Aware Mobility................18
   6. Mapping of TN Characteristics on SD-WAN Edge Node.............21
      6.1. SD-WAN Hybrid Use Case with SR-TE Integration............23
   7. IANA Considerations...........................................25
   8. Security Considerations.......................................25
   9. Contributors..................................................25
   10. References...................................................25
      10.1. Normative References....................................25


Majumdar, et al.       Expires October15, 2022                 [Page 2]


Internet-Draft      Extension of TN Aware Mobility           April 2022


      10.2. Informative References..................................26
   11. Acknowledgments..............................................26
   Authors' Addresses...............................................28


1. Introduction

   The [TN-AWARE-MOBILITY] draft defines the transport path
   characteristics in backhaul, midhaul, and fronthaul segments between
   the radio side network functions and user plane functions (UPF). It
   describes how various transport network underlay routing mechanisms
   apply to the framework laid out including RSVP-TE, SR, and also a
   data plane agnostic integrated routing and TE mechanism - Preferred
   Path Routing (PPR) to map the network slice properties into the
   IP/L2 transport network.

   The current [TN-AWARE-MOBILITY] draft doesn't extend the transport
   network characteristics from the UPF through the Data Network. If
   the user service termination happens in the data network, the
   Transport Path Network characteristics through the Data Network
   would be lost.

   This proposed Extension of Transport Aware Mobility in Data Network
   extends the mobility aware transport network characteristics from
   the UPF through the Data Network.

   The UPF can be placed on the edge of the network where it can
   perform entry or exit point to the Data Network. It can connect to a
   Provider Edge node as well and bring all the mobile connections in a
   distributed way to the Data Network.

   The UPF can as well connect to the SD-WAN edge node or L3 aggregator
   device and would try to bring all the 5G mobility connections for
   small, medium, and large enterprises. This would be a scenario for
   Enterprise 5G.

   The current draft proposes mechanisms on how mobility aware
   transport network characteristics to be mapped into SR-TE paths or
   Un-secure, Secure, Secure SR-TE paths based in the Data Network on
   different use cases scenarios.




Majumdar, et al.       Expires October15, 2022                 [Page 3]


Internet-Draft      Extension of TN Aware Mobility           April 2022


2. Conventions used in this document

   BSID       - Binding SID

   DC         - Data Center

   DN         - Data Network (5G)

   EMBB       - enhanced Mobile Broadband (5G)

   gNB        - 5G NodeB

   GTP-U      - GPRS Tunneling Protocol - Userplane (3GPP)

   MIOT       - Massive IOT (5G)

   PECP       - Path Computation Element (PCE) Communication Protocol

   SD-WAN     - Software-Defined Wide Area Network

   SID        - Segment Identifier

   SLA        - Service Layer Agreement

   SST        - Slice and Service Types (5G)

   SR         - Segment Routing

   SR-PCE     - SR Path Computation Element

   UE         - User Equipment

   UPF        - User Plane Function (5G)

   URLLC      - Ultra reliable and low latency communications (5G)


3. Framework for Extension of Transport Network Aware Mobility

  Architecture wise, the proposed Extension of Transport Aware
  Mobility in the Data Network solution focuses on the following areas:


Majumdar, et al.       Expires October15, 2022                 [Page 4]


Internet-Draft      Extension of TN Aware Mobility           April 2022


  a) The Mobility packet transition in and out from the UPF to the C-PE
     Node maintaining the Transport Path Characteristics.

  b) On a PE node, based on the transport characteristics, use
     different methods of fetching SR-TE path segments from the SR-TE
     Controller and map the SR-TE segments with the mobility aware
     transport packets.

  c) On an SD-WAN CE Node, based on the transport characteristics,
     mapping of mobility aware transport packets to the secure and un-
     secure tunnel path.

  Figure 1 captured under Section 4 provides the representation of a
  network on how UE could be connected to the UPF and C-PE nodes in the
  Data Network. The C-PE node represents a combined CE and PE node. In
  some cases, UPF would be connected to the pure PE or CE node.



4. Mobility Packet Transition to the Data Network

     As the Transport Aware Mobility packets transition in and out from
     the UPF to the PE or C-PE (in SDWAN case) node, the Mobility
     Transport Characteristics need to be maintained in the Data
     Network. The current solution proposes a generic approach to how
     the mobility packet transition can happen in the Data Network
     maintaining the same transport characteristics.

     There are two scenarios could happen here:

     A) The UPF is not co-located with the C-PE in the same device.
     Based on the local policy the proposed new header format for the
     TN Aware Mobility Packets transitioning from the UPF to the C-PE
     device and vice-versa is proposed below:

       . From the UPF to the C-PE Node:
     Inner IP Hdr (UE Packet) + Transport Hdr (Carrying UDP Src Port) +
     Outer IP (C-PE Node Address)

       . From the C-PE to the UPF Node:
     Outer IP (UPF Node Address) + Transport Hdr (Carrying UDP Src
     Port) + Inner IP Hdr (UE Packet)

     B)            The UPF is co-located with the C-PE in the same device. Based on
       the local policy the original UDP Source Port information can be
       passed to the local C-PE node and no new header is needed here.


Majumdar, et al.       Expires October15, 2022                 [Page 5]


Internet-Draft      Extension of TN Aware Mobility           April 2022



     The current draft proposes to create a new encapsulation header in
     scenario A. At the UPF node, the TN aware mobility UE packet
     carrying the original UDP header Source Port information along
     with the Inner IP packet to get encapsulated with the outer IP
     header of the outgoing C-PE node IP address.

     In below Figure 1, both scenarios are captured. Scenario A
     captures the UPF is physically separated from the C-PE node over
     an IP network. Scenario B captures the edge networking deployment.
     In that case, the virtual UPF could be co-located with the
     physical C-PE node in the same device.

     Scenario A:

                 +-----------+       +-----+       +-----+
                 |           |       |     |       |     |
      UE---------| gNB-CU(UP)|-------| UPF |-------| C-PE|------DN
                 |           |       |     |       |     |
                 +-----------+       +-----+       +-- --+

                      |--- N3 OR N9 ---||---- N6 ----|

       |-------- Mobile Network -------||------ IP Network ------|

     Scenario B:

          +-----------+      +------+
           |           |      |      |
      UE---| gNB-CU(UP)|------| UPF +|--------DN-------
           |           |      | C-PE |
           +-----------+      +------+

                   |- N3 OR N9 -||----N6 -------------|

      |------ Mobile Network ----||-- IP Network-------|

                  Figure 1: Mobile and IP Data Network for UE



     The Figure 2 captures the TN Aware Mobility packet format under
     the scenario A.






Majumdar, et al.       Expires October15, 2022                 [Page 6]


Internet-Draft      Extension of TN Aware Mobility           April 2022


      1. UE Packet format in the Mobile Network to the UPF:

       +---------+----------+-------+------------+----------+
       | UE Data | Inner IP | GTP-U | UDP Header | Outer IP |
       +---------+----------+-------+------------+----------+



       2. UE Packet format in the IP Network to the Ingress C-PE Node:

       +---------+----------+------------------+------------+
       | UE Data | Inner IP | Transport Header | C-PE Header|
       +---------+----------+------------------+------------+

            Figure 2: UE Packet Transition from Mobile to IP Network

   The source port in the original UDP header indicates the TN Aware
   Mobility SST type.



5. Transport Network Characteristics Mapping to SR-TE Paths

     With the 5G Mobile Networking, the UPF would be terminating the
     mobile connection from the UE. In some Edge Networking scenarios,
     the virtual UPF would be co-located with the C-PE or it would be
     connected to the C-PE node over IP Network.

     The 5G UE traffic coming to the UPF might be carrying Transport
     Network Characteristics. In that scenario, there would be a need
     to maintain the Transport Path Characteristic through the core of
     the network so that end to end SLA can be maintained for the UE
     traffic.

     In scenarios, where ingress PE acting as SR-TE node, the mapping
     of Transport Network Aware Mobility {5G UDP Src Port Range} to
     {BGP SR-TE Policy, BSID} to be done at the ingress PE. Once this
     mapping is done, the mobility Transport Path Characteristics can
     be maintained in the data network.

     On a PE node, based on the transport characteristics, the current
     solution proposes different methods of applying SR-TE path
     segments:

     Scenario 1: In this scenario, the assumption is that the Ingress
     PE node is connected to the BGP SR-TE Controller through the BGP
     SR-TE Policy SAFI Session. This solution defines a mechanism to


Majumdar, et al.       Expires October15, 2022                 [Page 7]


Internet-Draft      Extension of TN Aware Mobility           April 2022


     map the BGP SR-TE Underlay Path Segments based on the Mobility
     Transport Characteristics.

       . This mechanism would require a new BGP Sub-TLV as part of the
          existing SR Policy SAFI NLRI to download SR-TE Policies
          corresponds to the mobility Transport Path characteristics.
          If the TN aware mobility packet UDP Source Port value falls
          within the UDP Src Port range value of this Sub-TLV, then the
          pre-downloaded SR-TE Policy MUST be applied on the mobility
          traffic to map to the correct network slice in the Data
          Network. Once the Policy is fetched it would be cached by the
          PE node for operating in line with the subsequent mobility TN
          aware packets.

     Scenario 2: In this scenario, the assumption is that the Ingress
     PE node is connected to the SR-PCE (Path Compute Element)
     Controller through the PCEP Session. This draft defines a
     mechanism to map the SR-TE Underlay Segments based on the Mobility
     Transport Path Characteristics.

       . Currently, this mechanism does not require new encoding in
          the PCEP based communication, though it needs local
          Configuration in the PE node to request the SR-TE Paths from
          the PCEP based Controller based on on-demand TN aware
          mobility traffic metric types.

     Scenario 3: In this scenario, the assumption is that the Ingress
     PE node is connected to the SR-TE Controller over Restconf/
     Netconf or gRPC session. The existing mechanism would be used to
     download the SR-TE Underlay Path Segments to the PE node based on
     the Mobility Transport Path Characteristics.

       . The Yang Data Model or Protobuf definition is required to
          define a new Sub-TLV like Scenario 1. The SR-TE Controller
          would pre-download the SR-TE Policies with the new Sub-TLV in
          the Ingress PE using the existing session. Once the specific
          SR-TE Policy is fetched, it would be cached by the Ingress PE
          to apply for the mobility TN aware traffic in-line to
          maintain the network characteristics in the Data Network.

     Scenario 4: In this scenario, the assumption is that the Ingress
     PE node is connected to the BGP SR FlowSpec Controller through the
     BGP FlowSpec Session. This draft defines a mechanism to map the


Majumdar, et al.       Expires October15, 2022                 [Page 8]


Internet-Draft      Extension of TN Aware Mobility           April 2022


     FlowSpec redirect to indirection-id community-based SR Traffic
     rules to the Mobility Transport Path Characteristics.

       . Currently, this mechanism does not require any new encoding
          in the BGP SR FlowSpec path redirect draft [FLOWSPEC-PATH-
          REDIRECT], though it needs local Configuration in the Ingress
          PE node that is acting as BGP FlowSpec Client to map the
          Mobility traffic based on the SR FlowSpec traffic re-
          direction rules.


5.1. Extend TN Aware Mobility for BGP SR-TE Policy

  1) To integrate Transport Network Aware Mobility with BGP SR-TE
     Policy at the Ingress PE UPF, the Class-map needs to be defined to
     classify the incoming mobility traffic with different Transport
     Path Characteristic.

  2) The Ingress PE UPF is assumed to have a BGP SR-TE Policy SAFI
     connection with the BGP SR-TE Controller. The Mobility traffic
     destination would resolve in the BGP Peer Next Hop for which SR-TE
     Policy to be applied to maintain the same network characteristics
     beyond the mobility domain.

  3) A new 5G Metadata Sub-TLV has been defined for existing SR-Policy
     SAFI with the UDP Source Port Range to identify the SR-TE path
     based on the Transport Path characteristics.

  4) The BGP SR-TE Controller would be programmed with {5G UDP Src Port
     Range}. That would create internal mapping Table for {5G UDP Src
     Port Range} < -- > {BGP SR-TE Policy, BSID}.

  5) The BGP SR-TE Controller would download the SR-TE Policy in the
     Ingress PE through the existing BGP SR-Policy SAFI session, and
     that the BGP update would include an additional 5G Metadata Sub-
     TLV. The UDP Src Port range in the 5G Metadata Sub-TLV MUST fall
     within the UDP Source Port range for the SSTs defined by the [TN-
     AWARE-MOBILITY] draft. If the UDP Src Port range falls outside the
     range defined by the [TN-AWARE-MOBILITY] draft, then the SR-TE
     Policy SHOULD be ignored by the Ingress PE.

  6) The SR-TE Policy-based traffic steering would be applied in the
     Ingress PE and it would maintain the local mapping for the reverse
     Mobility traffic to the UE.




Majumdar, et al.       Expires October15, 2022                 [Page 9]


Internet-Draft      Extension of TN Aware Mobility           April 2022


   The following class-map definition needs to be applied in the
   headend PE for the incoming Transport Network aware mobility traffic
   path:

   Class-map type traffic match MIOT

        Match UDP Src Port Range Xx - Xy

   Class-map type traffic match URLLC

        Match UDP Src Port Range Yx - Yy

   Class-map type traffic match EMBB

        Match UDP Src Port Range Zx - Zy

   The class-map would help to identify the incoming mobility traffic
   characteristics. Based on these characteristics the headend PE would
   be able to map the Transport Network aware mobility traffic to the
   appropriate BGP SR-TE Policy path over the Data Network to reach the
   UE's destination.

   The below figure tries to capture the overall topology, and how to
   map the mobility traffic in the Ingress PE having BGP SR-Policy SAFI
   connection with the BGP SR-TE Controller:
























Majumdar, et al.       Expires October15, 2022                [Page 10]


Internet-Draft      Extension of TN Aware Mobility           April 2022


                         +-----------+   +----+{5G UDP Src Port Range}
                         | BGP SR-TE |-->| Map|       <-->
                         | Controller|   | DB |{BGP SR-TE Policy, BSID}
                         +-----------+   +----+
                           /
                          /
                         /
                        /
                       /                                    +--------+
                      / BGP SR-TE Policy with               |IOT Data|
                     /  5G Metadata Sub-TLV                 +--------+
                    /                                           /Public
                   /                                      MIoT / Cloud
                  /                                    +------+
             +------+  Policy1: UDP Src Port Xx-Xy    /
             |      A1-------------------------------+
             |      |  Policy2: UDP Src Port Yx-Yy    URLLC
     UE------| UPF  A2-----------------------------------------
             | +PE1 |  Policy3: UDP Src Port Zx-Zy
             |      A3------------------------------+
             |      |                                \
             +------+                                 +-------+
     {UDP Src Port Num# <--> SR Policy N}                 eMBB \
                                                                \
                                                              +--------+
                                                              | Content|
                                                              +--------+
                                                               Private DC
                  ---------->
       +------+----------+-------+-----+----------+
       | Data | Inner IP | GTP-U | UDP | Outer IP |
       +------+----------+-------+-----+----------+

                                      ---------->
                     +------+----------+-------------+
                     | Data | Inner IP |   SR Header |
                     +------+----------+-------------+

       Figure 3: TN Aware Mobility Traffic Mapping to BGP SR-TE Policy Path



Note that, in the above figure SR Header is shown as an illustrative
purpose and the actual outgoing packet format is based on the BGP SR-TE
mechanism (SR-MPLS or SRv6) on the Ingress PE. That could be SR-MPLS or
SRv6 Header. Though if the BSID is not present with the BGP SR-TE
Policy, the local Ingress PE would map the incoming traffic to the best
effort policy map path in the underlay.



Majumdar, et al.       Expires October15, 2022                [Page 11]


Internet-Draft      Extension of TN Aware Mobility           April 2022


  To support the Transport Network Mobility Traffic Mapping to BGP SR-
  TE Policy Path in the headend PE, a new 5G Metadata Sub-TLV needs to
  be supported. The proposed BGP SR Policy Encoding from the BGP SR-TE
  Policy Controller to the headend PE node is defined below:

   SR Policy SAFI NLRI: <Distinguisher, Policy-Color, Endpoint>
      Attributes:
         Tunnel Encap Attr (23)
           Tunnel Type: SR Policy
             Existing Policy Sub-TLV
             5G Metadata Sub-TLV


   The draft [BGP-SR-TE-POLICY] defines BGP SR-TE Policy encodings.
   There is no change in the existing encoding that is being used from
   the BGP SR-TE Controller to the headend PE node. The current
   solution proposes the new 5G Metadata Sub-TLV for BGP SR-TE
   Controller to download the SR Policies to the headend PE and to
   apply the SR-TE Policy-driven path for the Transport Network aware
   mobility traffic.

   The incoming TN aware mobility traffic with UDP Src port and BGP NH
   to the traffic destination would be used as a key to find the BGP
   SR-TE Policy. If the BGP Next Hop of the traffic matches with the SR
   Policy SAFI NLRI Endpoint, and UDP Src Port value falls within the
   UDP Src Port range defined by the 5G Metadata Sub-TLV, the SR Policy
   would be applied to the mobility traffic to maintain the traffic
   characteristics in the data network. The BGP SR-TE Controller would
   be pre-provisioned with the 5G UDP SRC Port Range based on the [TN-
   AWARE-MOBILITY] draft, and their corresponding BGP SR-TE Policy.


    The 5G Metadata sub-TLV is optional and it MUST NOT appear more than
   once in the SR-TE Policy.



   The format of the new SR-TE 5G Metadata Sub-TLV is captured below:










Majumdar, et al.       Expires October15, 2022                [Page 12]


Internet-Draft      Extension of TN Aware Mobility           April 2022


   0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      Type     |    Sub-Type   |     Length    |     Flags     |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    UDP Src Port Start Value   |    UDP Src Port End Value     |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
                          5G Metadata Sub-TLV


    where:

    o  Type: To be defined by IANA.

   o  Sub-Type: This field has one of the following values:

         0: Reserved.
         1: UDP Source Port Range.
         2 - 255: Reserved for future use.

   o  Length: 6 octets.

   o  Flags: 1 octet of flags.  None are defined at this stage.  Flags
      SHOULD be set to zero on transmission and MUST be ignored on
      receipt.

  o  UDP Src Port Start Value: 2 octets value to define the staring of
     the value of the UDP Src Port range.

  o  UDP Src Port End Value: 2 octets value to define the end value of
     the UDP Src Port range.


5.2. Extend TN Aware Mobility for SR-PCE Controller

  1) To integrate Transport Network Aware Mobility with SR-TE ODN based
     PCE Controller at the Ingress PE UPF, the Class-map needs to be
     defined to classify the incoming mobility traffic with different
     Transport Path Characteristic.

  2) The Ingress PE UPF is assumed to have PCEP based communication
     with the SR-PCE Controller.




Majumdar, et al.       Expires October15, 2022                [Page 13]


Internet-Draft      Extension of TN Aware Mobility           April 2022


  3) The Ingress PE would define the Policy-map to map the Transport
     Path characteristics into SR-TE Color.

  4) The Segment Routing TE Configuration for different Metric types
     will associate the SR-TE Colors with their corresponding TE metric
     type.

  5) The existing SR-TE ODN based PCEP messages with TE metric type and
     value MUST be used to associate the SR-TE Path corresponding to
     the 5G UDP Src Port.

  6) In this case, the mapping between {5G UDP Src Port} and {SR-TE
     Policy} would be maintained by the Ingress PE.

  7) Once the TN aware mobility traffic destination resolves into a
     destination of BGP Peer Next Hop, the SR-TE ODN based traffic
     steering MUST be applied based on the UDP Src Port value of the
     incoming traffic.



   The class-map definition to identify the incoming mobility traffic
   characteristics is already defined in Section 5.1. The same class-
   map definition applicable here as well.

   The policy-map definition to associate SR-TE color with Transport
   Path characteristics is defined below:

   Policy-map type Transport-Network-Aware-Mobility

       Class type traffic MIOT

           Set color <MIOT-10>

       Class type traffic URLLC

           Set color <URLLC-20>

       Class type traffic EMBB

           Set color <EMBB-30>



   The Segment Routing TE Configuration mechanism can associate the SR-
   TE Colors with their corresponding metric type. That exists today,
   and there is no change there. It is captured here to show how TN


Majumdar, et al.       Expires October15, 2022                [Page 14]


Internet-Draft      Extension of TN Aware Mobility           April 2022


   aware mobility network characteristics get mapped to different TE
   metrics through this mechanism.



   Segment-routing traffic-eng

     On-demand color <MIOT-10> dynamic

        Metric

          Type <MIOT>

     On-demand color <URLLC-20> dynamic

        Metric

          Type <URLLC>

     On-demand color <EMBB-30> dynamic

        Metric

          Type <EMBB>

   As a result, mobility Transport Network aware of different traffic
   characteristics like MIOT, URLLC, or EMBB get to assigned
   corresponding "te" metric types. To fetch the corresponding SR-TE
   dynamic path from the SR-PCE Controller based on the newly defined
   "te" metric types <MIOT>, <URLLC> or <EMBB> needs to be extended in
   the PCEP RFC [RFC5440].

   The below figure tries to capture the overall topology, and how to
   map the mobility traffic in the headend PE having PCEP connection
   with the SR-PCE Controller:














Majumdar, et al.       Expires October15, 2022                [Page 15]


Internet-Draft      Extension of TN Aware Mobility           April 2022


                         +-----------+
                         | SR-PCE    |
                         | Controller|
                         +-----------+
                            /
                           /
           PCReq Message  /
         with Metric Type/
                        /                                   +--------+
                       /                                    |IOT Data|
                      /  PCRep Message                      +--------+
                     /   with Segment List                     /Public
                    /                                    MIOT / Cloud
                   /                                  +----- +
             +------+  Policy1: UDP Src Port Xx-Xy   /
             |      A1------------------------------+
             |      |  Policy2: UDP Src Port Yx-Yy    URLLC
     UE------| UPF  A2--------------------------------------------
             | +PE1 |  Policy3: UDP Src Port Zx-Zy
             |      A3-------------------------------+
             |      |                                 \
             +------+                                  +-----+
     {UDP Src Port Num# <--> SR Policy N}                EMBB \
                                                               \
                                                            +--------+
                                                            | Content|
                                                            +--------+
                                                             Private DC

            Figure 4: TN Aware Mobility Traffic Mapping to SR-TE Path



5.3. Extend TN Aware Mobility for RestConf/gRPC based SR-TE Controller

  1) To integrate Transport Network Aware Mobility with SR-TE Policy at
     the Ingress PE UPF, the Class-map needs to be defined to classify
     the incoming mobility traffic with different Transport Path
     Characteristic.

  2) The Ingress PE UPF is assumed to have Restconf or gRPC connection
     with the SR-TE Controller. The Mobility traffic destination would
     resolve in the BGP Peer Next Hop for which SR-TE Policy to be
     applied to maintain the same network characteristics beyond the
     mobility domain.





Majumdar, et al.       Expires October15, 2022                [Page 16]


Internet-Draft      Extension of TN Aware Mobility           April 2022


  3) A new 5G Metadata Yang data model and Protobuf to be defined for
     SR-Policy SAFI with UDP Source Port Range to identify the SR-TE
     path based on the Transport Path characteristics.

  4) The SR-TE Controller would be programmed with {5G UDP Src Port
     Range}. That would create internal mapping Table for {5G UDP Src
     Port Range} < -- > {BGP SR-TE Policy, BSID}.

  5) As the Headend PE sends the 5G metadata Yang data model or
     Protobuf, the Controller will find a matching SR-TE Policy based
     on the UDP Source Port.

  6) The SR-TE Controller would download the SR-TE Policy in the
     Ingress PE through the existing Restconf or gRPC session, and that
     BGP update would include an additional 5G Metadata Sub-TLV. The
     UDP Src Port range in the 5G Metadata Sub-TLV MUST fall within the
     UDP Source Port range for the SSTs defined by the [TN-AWARE-
     MOBILITY] draft. If the UDP Src Port range falls outside the range
     defined by the [TN-AWARE-MOBILITY] draft, then the SR-TE Policy
     SHOULD be ignored by the Ingress PE.

  7) The SR-TE Policy-based traffic steering would be applied in the
     Ingress PE UPF and it would maintain the local mapping for the
     reverse Mobility traffic to the UE.



   The class-map definition to identify the incoming mobility traffic
   characteristics is already defined in Section 5.1. The same class-
   map definition works here as well.

   The below figure tries to capture the overall topology, and how to
   map the mobility traffic in the headend PE having BGP SR-Policy SAFI
   connection with the BGP SR-PCE Controller:















Majumdar, et al.       Expires October15, 2022                [Page 17]


Internet-Draft      Extension of TN Aware Mobility           April 2022


                            +-----------+   +----+{5G UDP Src Port Range}
                            | BGP SR-TE |-->| Map|       <-->
                            | Controller|   | DB |{BGP SR-TE Policy, BSID}
                            +-----------+   +----+
                              /
                             /
                            /
          Restconf or gRPC /
             Session      /                                    +--------+
                         / SR-Policy with                      |IOT Data|
                        /  5G Metadata Sub-TLV                 +--------+
                       /                                         /Public
                      /                                    MIOT / Cloud
                     /                                  +------+
             +-------+  Policy1: UDP Src Port Xx-Xy    /
             |       A1------------------------------ +
             |       |  Policy2: UDP Src Port Yx-Yy     URLLC
     UE------| UPF + A2-------------------------------------------
             | PE1   |  Policy3: UDP Src Port Zx-Zy
             |       A3------------------------------ -+
             |       |                                  \
             +-------+                                   +-----+
     {UDP Src Port Num# <--> SR Policy N}                  EMBB \
                                                                 \
                                                               +--------+
                                                               | Content|
                                                               +--------+
                                                                Private DC


             Figure 5: TN Aware Mobility Traffic Mapping to SR-TE Path



5.4. Extend BGP FlowSpec for TN Aware Mobility

  1) To integrate Transport Network Aware Mobility with SR-TE Policy at
     the Ingress PE UPF, the Class-map needs to be defined to classify
     the incoming mobility traffic with different Transport Path
     Characteristic.

  2) The Ingress PE UPF that is acting as BGP FlowSpec Client is
     assumed to have a BGP FlowSpec session with the FlowSpec
     Controller. The Mobility traffic destination would resolve in the
     BGP Peer Next Hop for which SR FlowSpec traffic re-direct policy
     to be applied to maintain the same network characteristics in the
     data network.



Majumdar, et al.       Expires October15, 2022                [Page 18]


Internet-Draft      Extension of TN Aware Mobility           April 2022


  3) The current proposal tries to integrate FlowSpec Redirect to
     Indirection ID [FLOWSPEC-PATH-REDIRECT] based traffic rules with
     the TN aware mobility traffic based on the UDP Source Port range
     at the FlowSpec Client Router/Ingress PE.

  4) Based on the BGP FlowSpec RFC 8955 the BGP FlowSpec NLRI can carry
     out the UDP Source Port range. The 5G SST specific UDP Source Port
     range values can be pushed over a BGP FlowSpec session between the
     FlowSpec Controller and the Ingress PE node.

  5) There are no additional changes required on the BGP FlowSpec side
     other than provisioning 5G SST specific UDP Source Port range at
     the FlowSpec Controller along with the corresponding FlowSpec
     Redirect to indirection-id.

  6) The BGP FlowSpec Controller would be programmed with {5G UDP Src
     Port Range} to map different SSTs defined in [TN-AWARE-MOBILITY]
     draft to map the corresponding FlowSpec Redirect to Indirection-
     id. That would create internal mapping Table for {5G UDP Src Port
     Range} < -- > {BGP FlowSpec Generalized Indirection-ID}.

  7) The BGP FlowSpec NLRI carrying 5G UDP Source Port Range along with
     the corresponding Redirect to indirection-id Extended Community
     can be pushed to the Ingress PE node.

  8) The Mobility traffic coming from the UPF to the Ingress PE in the
     Data Network carrying specific UDP Source Port from UE can be
     classified based on the local Policy and apply the BGP FlowSpec
     based re-direction rule based on the matching FlowSpec policy.



   The class-map definition to identify the incoming mobility traffic
   characteristics is already defined in Section 5.1. The same class-
   map definition works here as well.

   The below figure tries to capture the overall topology, and how to
   map the mobility traffic in the Ingress PE acting as FlowSpec Client
   having BGP FlowSpec SAFI connection with the BGP FlowSpec
   Controller:









Majumdar, et al.       Expires October15, 2022                [Page 19]


Internet-Draft      Extension of TN Aware Mobility           April 2022


                            +-----------+   +----+{5G UDP Src Port Range}
                            |  FlowSpec |-->| Map|       <-->
                            | Controller|   | DB |{Generalized Indirection-ID}
                            +-----------+   +----+
                              /
                             /
                            / BGP FlowSpec NLRI with 5G
              BGP FlowSpec /   UDP Source Port Range
                Session   /                                    +--------+
                         / BGP FlowSpec Redirect               |IOT Data|
                        / Indirection-ID Ext Comm              +--------+
                       /                                         /Public
                      /                                    MIOT / Cloud
                     /                                  +------+
             +-------+ Ind-ID1: UDP Src Port Xx-Xy     /
             |       A1-------------------------------+
             |       | Ind-ID2: UDP Src Port Yx-Yy            URLLC
     UE------| UPF + A2--------------------------------------------
             | PE1   | Ind-ID3: UDP Src Port Zx-Zy
             |       A3-------------------------------+
             |       |                                 \EMBB
             +-------+                                  +-----+
 {UDP Src Port Num# <--> FlowSpec Indirect-ID# ->Transport Hdr} \
                                                                \
                                                               +--------+
                                                               | Content|
                                                               +--------+
                                                                Private DC


                  ---------->
       +------+----------+-------+-----+----------+
       | Data | Inner IP | GTP-U | UDP | Outer IP |
       +------+----------+-------+-----+----------+

                                      ---------->
                     +------+----------+------------------+
                     | Data | Inner IP | Transport Header |
                     +------+----------+------------------+

           Figure 6: TN Aware Mobility Traffic Mapping to FS Redirect Path










Majumdar, et al.       Expires October15, 2022                [Page 20]


Internet-Draft      Extension of TN Aware Mobility           April 2022


6. Mapping of TN Characteristics on SD-WAN Edge Node

     On an SD-WAN CE Node, based on the mobility Transport Network
     characteristics, mapping of mobility aware transport packets to
     the secure and un-secure tunnel path needs to be achieved.

     The [BGP-IPSEC-Discover] draft defines how SD-WAN Edge Node maps
     the overlay/client routes to the underlay secure tunnel routes.

     The current proposal specifies a generic approach on how SD-WAN
     Edge Node maps the Mobility Transport Network aware traffic to the
     Secure Tunnels, or Un-Secure TE Paths, or Secure SR-TE Tunnel
     Paths.

     The [SDWAN-BGP-USAGE] draft describes how BGP can be used as a
     Control Plane for the SD-WAN network and defines the use case for
     the Hybrid SD-WAN network.

     In the case of a hybrid SD-WAN use case, UPF can run part of the
     SD-WAN edge node or it could be connected to it over an IP
     network. This would be a use case scenario for Enterprise 5G.

     In that scenario, the Transport Path Characteristic for the 5G
     mobile traffic need to be mapped to Secure (IPSec Tunnel) or Un-
     secure path (could be MPLS based).

     The existing [TN-AWARE-MOBILITY] draft is extended to support new
     Transport Path Characteristics "Security" for the mobile traffic
     where security is important for certain mobile traffic.

     Based on the UDP Src Port characteristics coming from the mobile
     network, the SD-WAN edge node would be able to decide what traffic
     it needs to put in the secure tunnel vs. an un-secure tunnel where
     low latency more important than security.















Majumdar, et al.       Expires October15, 2022                [Page 21]


Internet-Draft      Extension of TN Aware Mobility           April 2022


     The below figure tries to capture the overall topology, and how to
     map the mobility traffic in the SD-WAN Edge Device for Enterprise
     5G cases:


                                 +----------+
                                 |  BGP RR  |
                            +----|Controller|----+
                           /     +----------+     \
                          /                        \           Internet
                         /                          \           /
                        /                            \         /
                       /                              \  URLLC/
                      /                                \     /
                     /                                  \   /
            +-------+  MPLS Path: URLLC Traffic   +------+ /
            |       A1---------------------------B1      |/
            |       |  Secure Path1: MIOT Traffic |      | MIOT +--------+
     UE-----| UPF + A2---------------------------B2 C-PE2|------|IOT Data|
            | C-PE1 |  Secure Path2: EMBB Traffic |      |      +--------+
            |       A3---------------------------B3      |\      Public
            |       |                             |      | \     Cloud
            +-------+                             +------+  \
     {UDP Src Port X <--> MPLS}                              \
     {UDP Src Port Y:Security <--> IPSec SA Identifier}  EMBB \
                                                               \ +-------+
                                                                \|Content|
                                                                 +-------+
                                                                    Public
                                                                    Cloud
                  ---------->
       +------+----------+-------+-----+----------+
       | Data | Inner IP | GTP-U | UDP | Outer IP |
       +------+----------+-------+-----+----------+

                                           ---------->
                         +------+----------+--------------+
                         | Data | Inner IP | IPSec Header |
                         +------+----------+--------------+


    Figure 7: Secure TN Aware Mobility Traffic Mapping in the SD-WAN Edge Device



   Here in this diagram, the traffic coming from the mobility side with
   Transport Network characteristics gets mapped to the underlay un-
   secure or secure traffic path.


Majumdar, et al.       Expires October15, 2022                [Page 22]


Internet-Draft      Extension of TN Aware Mobility           April 2022


   The SD-WAN Edge Node can map the URLLC traffic without any security
   characteristics to the underlay MPLS path, whereas MIOT, and EMBB
   traffic with security characteristics gets mapped to the underlay
   Secure IPSec Tunnel path. The mapping between SD-WAN overlay and
   underlay routes are described in the [BGP-IPSEC-Discovery] draft.

   This solution extends it for Transport Network aware mobility
   traffic. The SD-WAN Edge Node here identifies the incoming mobility
   traffic characteristics using the class-map definition, and that is
   already defined under Section 5.1. Based on the incoming traffic
   characteristics, the Edge Node will be able to map the mobility
   overlay traffic to the respective SD-WAN underlay tunnel.



6.1. SD-WAN Hybrid Use Case with SR-TE Integration

  1) In the case of SD-WAN hybrid use cases, UPF can run part of the
     SD-WAN edge node, or it could be connected to it over an IP
     network. This would be a use case scenario for Enterprise 5G.

  2) The SD-WAN edge node can act as an SR-TE Headend PE in some use
     case scenarios that are described in [SDWAN-BGP-USAGE] draft.

  3) In that case, the Headend PE could be connected with SR-TE Policy
     Controller over the BGP SR-Policy SAFI session, or SR-PCE
     Controller over the PCEP session, or SR-TE Controller over
     Netconf/ Restconf, or GRPC session, or even SR FlowSpec Controller
     over BGP FlowSpec session.

  4) The SD-WAN edge node can map the "Un-secure" mobility traffic to
     the SR-TE path the same way as described under PE acting as
     ingress SR-TE headend.

  5) Though the mapping for "Secure" mobility traffic to the SR-TE path
     would be slightly different than "Un-secure" mobility traffic.

  6) The mobility 5G UE client traffic with the Transport Path
     Characteristics "Security" would be encapsulated with Tunnel mode
     IPSec header between the two SD-WAN SAFI underlay endpoints
     (belong to the same BGP AS domain). This encapsulated secure
     traffic will become the new overlay for the SR-TE traffic.

  7) The rest of the mechanism for the secure mobility traffic with SR-
     TE traffic forwarding is the same as un-secure SR-TE based traffic
     forwarding.



Majumdar, et al.       Expires October15, 2022                [Page 23]


Internet-Draft      Extension of TN Aware Mobility           April 2022


     The below figure tries to capture the overall topology, and how to
     map the mobility traffic in the SD-WAN Edge Device for SD-WAN
     Hybrid Use Cases described above:

                    +-------------+
                    | BGP SR-Based|
                    | Controller  |
                    +-------------+
                         /
                        /
                       /         +----------+
     BGP SR-TE Policy with       |  BGP RR  |
     5G Metadata Sub-TLV    +----|Controller|----+
                     /     /     +----------+     \
                    /     /                        \           Internet
                   /     /                          \           /
                  /     /                            \         /
                 /     /                              \  URLLC/
                /     /                                \     /
               /     /                                  \   /
            +-------+  SR-Pol1: URLLC Traffic     +------+ /
            |       A1---------------------------B1      |/
            |       | SA1,SR-Pol2: MIOT Traffic   |      | MIOT +--------+
     UE-----| UPF + A2---------------------------B2 C-PE2|------|IOT Data|
            | C-PE1 | SA2,SR-Pol3: EMBB Traffic   |      |      +--------+
            |       A3---------------------------B3      |\      Public
            |       |                             |      | \     Cloud
            +-------+                             +------+  \
     {UDP Src Port Num X <--> SR Policy1}                    \
     {UDP Src Port: Security Y, Z <-->                   EMBB \
                    IPSec SA 1,2; SR-TE Policy 2,3}            \ +-------+
                                                                \|Content|
                                                                 +-------+
                                                                    Public
                                                                    Cloud
                  ---------->
       +------+----------+-------+-----+----------+
       | Data | Inner IP | GTP-U | UDP | Outer IP |
       +------+----------+-------+-----+----------+

                                     ---------->
         +------+----------+--------------+-----------+
         | Data | Inner IP | IPSec Header | SR Header |
         +------+----------+--------------+-----------+


   Figure 8: Secure TN Aware Mobility Traffic Mapping for Hybrid SD-WAN Use Case



Majumdar, et al.       Expires October15, 2022                [Page 24]


Internet-Draft      Extension of TN Aware Mobility           April 2022




   In Figure 8, the traffic coming from the mobility side with
   Transport Network characteristics gets mapped to the underlay un-
   secure or secure SR-TE path to maintain the traffic network
   characteristics in the Data Network.

   The SD-WAN Edge Node can map the URLLC traffic without any security
   characteristics to the underlay SR-TE path without any IPSec
   encapsulation. Whereas MIOT and EMBB traffic with the security
   characteristics can be mapped to the underlay Secure IPSec Tunnel
   path with the SR-TE encapsulation to the SD-WAN endpoints.

7. IANA Considerations

   The newly defined 5G Metadata Sub-TLV would need an IANA code point
   allocation for the Type field. A request for any IANA code point
   allocation would be submitted.

8. Security Considerations

    This document does not introduce any new security issues.


9. Contributors

   The following people have contributed to this document.

   Dhruv Dhody
   Huawei Technologies

   Email: dhruv.ietf@gmail.com


10. References


10.1. Normative References

   [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
             Requirement Levels", BCP 14, RFC 2119, March 1997.




Majumdar, et al.       Expires October15, 2022                [Page 25]


Internet-Draft      Extension of TN Aware Mobility           April 2022


10.2. Informative References

   [RFC5440] JP. Vasseur, Ed., JL. Le Roux, Ed., "Path Computation
   Element (PCE) Communication Protocol (PCEP)", March 2009



   [TN-AWARE-MOBILITY] U. Chunduri, et al, "Transport Network aware
   Mobility for 5G", draft-ietf-dmm-tn-aware-mobility-03, March 2022



   [BGP-SR-TE-POLICY] S. Previdi, et al, "Advertising Segment Routing
   Policies in BGP", draft-ietf-idr-segment-routing-te-policy-16, March
   2022



   [SDWAN-BGP-USAGE] L. Dunber, et al, "BGP Usage for SDWAN Overlay
   Networks", draft-ietf-bess-bgp-sdwan-usage-04, October 2021



   [BGP-IPSEC-Discover] L. Dunber, et al, "BGP UPDATE for SDWAN Edge
   Discovery", draft-ietf-idr-sdwan-edge-discovery-01, March 2022



   [RFC9012] K. Patel, et al, "The BGP Tunnel Encapsulation Attribute",
             April 2021.

11. Acknowledgments

   TBD.

   This document was prepared using 2-Word-v2.0.template.dot.











Majumdar, et al.       Expires October15, 2022                [Page 26]


Internet-Draft      Extension of TN Aware Mobility           April 2022


















































Majumdar, et al.       Expires October15, 2022                [Page 27]


Internet-Draft      Extension of TN Aware Mobility           April 2022


Authors' Addresses

   Kausik Majumdar
   CommScope

   Email: kausik.majumdar@commscope.com

   Uma Chunduri
   Intel Corporation

   Email: umac.ietf@gmail.com


   Linda Dunbar
   Futurewei

   Email: linda.dunbar@futurewei.com





























Majumdar, et al.       Expires October15, 2022                [Page 28]