QPIM

49th IETF San Diego

Policy WG

QoS Policy Information Model

draft-ietf-policy-qos-info-model-02

Yoram Snir

Yoram Ramberg

John Strassner

Ron Cohen

San-Diego IETF 2

Agenda Overview Changes from last version Examples Discussion

San-Diego IETF 3

Overview 4th version of QPIM Extends PCIM

IntServ & DiffServ Policy modeling General Policy Use

DiffServ model can be translated to PIB and MIB

IntServ model can be enforced using COPS for RSVP

LDAP mapping to be updated

San-Diego IETF 4

Changes made Separate between QoS and

General PCIM extensions Complete Diffserv modeling

including PHB modeling Remove ‘LDAP’ism and storage

dependent modeling Various improvements and

changes due to feedback

San-Diego IETF 5

General PCIM extensions Prefix General Use Classes with

gps, attributes with gp

Variables and Values Simple and Compound Conditions Policy Containers inc. Decision Strategy Meters and Traffic Profiles

San-Diego IETF 6

Q o S P o licyD o m a in + P o licyG ro up

*P o licyG ro up

*T im e P e riod *V e nd or + S im p le + C om p ou nd

*P o licyC o n d it ion

*V e nd or P R A c tion P H B A c tion

S ig n a lC n trl In s ta ll

R S V P A c tion

*P o licyA c tion

P R T rfcP ro f R S V P T rfcP ro f

+ P o licyT rfcP ro f

+ P o licyV a ria b le

+ IP v4 A d d re ss+ + IP v6 A d d re ss + M A C A d d re ss + S tring + B itS tring + D N + A ttrib u te + In te g er

+ P o licyV a lue

+ P o licyM e te r

P o licyQ u e ue

*P o licy

*PCIM

+QPIM General

QPIM CLASSES

San-Diego IETF 7

General PCIM extensions General Associations and

Aggregation to allow: Building Simple conditions from Variables

and Values Creation of Compound reusable

Conditions Building sub-rules Reuse of policy groups Flexible repository reuse Bind Traffic Profiles to Meters

San-Diego IETF 8

Diffserv PHB modeling Model PHBs using policy rules Example:

MyDomainPHB group { If (EF) do EF-action If (AF11) do AF11-action If (AF12) do AF12-action If (AF13) do AF13-action If (default) do BE-action }

San-Diego IETF 9

Diffserv PHB modeling Add PHB action Add Queue Class

EF-Action DropAlg Tail MaxThrsh 3Pckts

AF11-Action DropAlg Red MaxThrsh 20Pckts MinThrsh 4PcktsAF12-Action DropAlg Red MaxThrsh 16Pckts MinThrsh 2Pckts

EF-Queue Priority 1 MaxBW 25%

AF1x-Queue MinBW 512Kb/s

San-Diego IETF 10

Diffserv PHB modeling Alternative representation using

hierarchy

MyDomainPHB group { If (EF) do EF-action If (AF1x) do AF1x-action If (AF11) do AF11-action If (AF12) do AF12-action If (AF13) do AF13-action If (default) do BE-action }

San-Diego IETF 11

Diffserv PHB modeling Hierarchical AF PHB modeling

AF1x-Action DropAlg Red

AF11-Action MaxThrsh 20Pckts MinThrsh 4PcktsAF12-Action MaxThrsh 16Pckts MinThrsh 2Pckts

AF1x-Queue MinBW 512Kb/s

San-Diego IETF 12

Storage independence Object references are modeled as

Association and Aggregations

PolicyVariableInPolicySimpleCondition PolicyValueInPolicySimpleCondition PolicyConditionInCompoundCondition PolicyRuleInPolicyRule PolicyGroupInPolicyRule PolicyValueConstraintsInVariable PolicyElementInPolicyRepository

San-Diego IETF 13

Storage independence Association and Aggregation Cont.

PolicyMeterInAction PolicyTrfcProfileInMeter PolicyQueueInPHBAction PolicyConformNextAction PolicyExcessNextAction PolicyViolateNextAction

San-Diego IETF 14

Other additions/Changes Add Compound Conditions - Reusable

(sub) conditions.

Values:

XX-Servers: {1.2.33.2, boo.x.com, 3.3.34}

Simple Conditions:

XX-ServerTraffic: {src-ip match XX-servers}

Compound Conditions:

XXServerApplicationTraffic:

{XX-ServerTraffic AND XX-ServerAppPorts}

San-Diego IETF 15

Other additions/Changes

CompoundCondition

conditionListType: CNF/DNF

ConditionInCompoundCondition

Group #=1 Negated=False

PolicyConditionPolicyCondition

ConditionInCompoundCondition

Group #=1 Negated=False

Compound Conditions Cont.

San-Diego IETF 16

Other additions/Changes PCIM: “Role: A role is a type of attribute that

is used to select one or more policies for a set of entities and/or components from among a much larger set of available policies.”

“The selection process for a role combination chooses policies associated with the combination itself, policies associated with each of its sub-combinations, and policies associated with each of the individual roles in the role-combination.”

San-Diego IETF 17

Other additions/Changes Add Role attribute defined in PCIM for a

Policy Rule to gpsPolicyGroup

ServerFarmRules

Role = [server-farm-edge], [server-farm-backup]

{

If (xxx) do aaa

If (yyy) do bbb

}

San-Diego IETF 18

Other additions/Changes Associate Traffic Profile to Meter (not

directly to action)

ProvisioningAction EdgeAF:

Mark: AF11

ExcessAction: Mark AF12

ViolateAction: Mark AF13

TrafficProfile FRCir

Rate: 64kb/sec

Bc: 2000bytes

Be: 3000bytes

Meter LocalMeter:

Interval: 50msec

San-Diego IETF 19

Examples Map Policy Rules to Network Configuration

GroupA: Role = [ParisEdge] {

If (UDP) MinBW 30%

If (TFTP) MinBW 10%

If (NFS) MinBW 30%

If (TCP) MinBW 60%

If (HTTP) MinBW 40%

If (FTP) MinBW 20%, MaxBW 60%

}

San-Diego IETF 20

Examples Map Policy Rules to Network Configuration:

DiffServ MIB representation:

Udp Classifier

Tcp Classifier

Q 20%

Q

Q 30%

Q 60%

Schd

Schd

Q 10%

DataPath

Ifndex ParisEdge

Udp TFTP Classifier

Udp NFS Classifier Q 30%

Tcp FTP Classifier

Tcp HTTP Classifier

Default Classifier

Q

Q 40%

Q

Schd

San-Diego IETF 21

Discussion Issues on WG agenda

QPIM’s Conditions vs. CIM’s Filters Mapping to Diffserv MIB

WG missing pieces Modeling of QoS capabilities Binding Roles to entities

Status Questions?

San-Diego IETF 22

Condition Modeling Goals Extend PCIM

Extend PolicyCondition Use PolicyConditionInPolicyRule aggregation

Modeling of Variable and Values Reusable Values Specify Value constraints to Variables Add new Variables and Values without

changing the structure of conditions - Add semantics without changing syntax

Flexible reuse of Conditions

San-Diego IETF 23

Mapping to Diffserv MIB Diffserv Modeling

PHB Actions model PHBs PR Actions model Diffserv-Edge actions

Policy Definition oriented Three level meters - easier AF policing Shaping in PRAction, MaxBW in PHBAction

although implemented by same mechanism in Diffserv-MIB

Separate Traffic Profile from Meter. Allow reusability of traffic templates

Hierarchical rules instead of forwarding path binding

San-Diego IETF 24

Discussion Issues on WG agenda

QPIM’s Conditions vs. CIM’s Filters Mapping to Diffserv MIB

WG missing pieces Modeling of QoS capabilities Binding Roles to entities

Status Questions?

San-Diego IETF 25

qosPolicyPRAction

q p D ire c tion

q p M arkV a lue T ype

q p M a rkV a lue

q p E xce ssA c tion

q p E xcessM arkV a lue

q p V io la te A c tion

q p V io la teM a rkV a lue

q o sP o lic yP R A c tion

g p M ete rS co pe

g p M ete rT im e In te rva l

g p sP o lic yM e te r

q p P R R a te

q p P R N o rm a lB u rst

q p P R E xce ssR a te

q o sP o licyP R T rfcP ro f

MeterInAction TrfcProfInMeter

ConformNextAction

ExcessNextAction

ViolateNextAction

San-Diego IETF 26

qosPolicyPHBAction

q p P H B D ire c tion

q p D rop A log

q p D rop T h resh o ld V a lue T ype

q p D rop M inT h resh o ldV a lue

q p D rop M axT h resh o ldV a lue

q p R an d om D ro p InvW eig h t

q p R an d o m D rop P rob M ax

q p P acke tS ize

q o sP o licyP H B A c tion

q p F o rw a rd in g P rio rity

q p B an d w id th V a lu eT ype

q p M inB a n dw id th

q p M a xB a n dw id th

q p M a xD e lay

q p M axJ itte r

q p F a irQ u e ue

q o sP o lic yQ u e ue

QueuInPHBAction

San-Diego IETF 27

qosPolicyRSVPAction

q p F orw a rd in gM o de

q p S e n d E rro r

q p R ep la ceD scp

q p R e p la ce P re e m p tio n P rio rity

q p R ep la ceD e fe nd in g P rio rty

q o sP o lic yR S V P S ig n a lC trlA c tion

q p S e tD scp V a lue

q p S e tP re e m p tio nP rio rity

q p S e tD e fe nd in g P rio rity

q o sP o lic yR S V P In s ta llA c tion

q p R S V P D ire c tion

q p R S V P S tyle

q p R S V P M essa ge T ype

q p R S V P S e rvice T ype

q o sP o lic yR S V P A c tion

q p T oke nR a te

q p P e a kR a te

q p B ucke tS ize

q p R e svR a te

q p R e svS la ck

q p S ess ion N um

q o sP o licyR S V P T rfcP ro f

g p M ete rS co pe

g p M ete rT im e In te rva l

g p sP o lic yM e te r

San-Diego IETF 28

Rule Processing Order Rule 1 Rule 1.2 Rule 1.1 Rule 4 Rule 3

R u le1P rio rity 19

R u le 1 .1P rio rity 3

R u le 1 .2P rio rity 33

P o licyG ro u p1P rio rity 5

R u le 4P rio rity 2

R u le 3P rio rity 4

D o m a in