Standard

The present document addresses multi-layer administration use cases and technical approaches, an issue identified in the Security Problem Statement, ETSI GS NFV-SEC 001. Multi-layer administration seeks to provide methods, capabilities, procedures and assurances - of various strengths based on requirements and available technologies and techniques - that safeguard Virtual Machines or Containers running on a virtualisation host ("hosted applications") - from interference (of various types) by the host system or platform ("hosting service”).
 
The scope of the present document is generally the system comprising the hosting service, associated hardware (including TPM, GPU, etc.), software and configuration, and the hosted application. Some requirements and measures outside this context are also considered, but not necessarily in equal depth.

The present document specifies a data model for NFV descriptors, using the TOSCA Simple Profile in YAML, fulfilling the requirements specified in ETSI GS NFV-IFA 011 and ETSI GS NFV-IFA 014 for a Virtualised Network Function Descriptor (VNFD), a Network Service Descriptor (NSD) and a Physical Network Function Descriptor (PNFD). The present document also specifies requirements on the VNFM and NFVO specific to the handling of NFV descriptors based on the TOSCA Simple Profile in YAML specification.

The present document defines the protocol and data model for the following interfaces used over the Ve-Vnfm reference point, in the form of RESTful Application Programming Interfaces (APIs) specifications:

• VNF Lifecycle Management interface (as produced by the VNFM towards the EM/VNF).
• VNF Performance Management interface (as produced by the VNFM towards the EM).
• VNF Fault Management interface (as produced by the VNFM towards the EM).
• VNF Indicator interface (as produced by the EM/VNF towards the VNFM).
• VNF Configuration interface (as produced by the VNF towards the VNFM). Table 4.1-1 lists the versions of the APIs defined in the present document.

The present document specifies common aspects of RESTful protocols and data models for ETSI NFV management and orchestration (MANO) interfaces.

The present document defines the protocol and data model for the following interfaces used over the Or-Vnfm reference point, in the form of RESTful Application Programming Interface (APIs) specifications:

• VNF Lifecycle Management interface (as produced by the VNFM towards the NFVO).
• VNF Performance Management interface (as produced by the VNFM towards the NFVO).
• VNF Fault Management interface (as produced by the VNFM towards the NFVO).
• VNF Indicator interface (as produced by the VNFM towards the NFVO).
• VNF Lifecycle Operation Granting interface (as produced by the NFVO towards the VNFM).
• VNF Package Management interface (as produced by the NFVO towards the VNFM).
• Virtualised Resources Quota Available Notification interface (as produced by the NFVO towards the VNFM).

The present document specifies the YANG models for representing Network Functions Virtualisation (NFV) descriptors, fulfilling the requirements specified in ETSI GS NFV-IFA 011 and ETSI GS NFV-IFA 014 applicable to a Virtualised Network Function Descriptor (VNFD), a Physical Network Functions Descriptor (PNFD) and a Network Service Descriptor (NSD).

The present document specifies the structure and format of a VNF package file and its constituents, fulfilling the requirements specified in ETSI GS NFV-IFA 011 for a VNF package.
 
The present document also specifies the structure and format of a PNFD archive file and its constituents, fulfilling the requirements specified in ETSI GS NFV-IFA 014 for a PNFD archive.

The present document specifies a set of RESTful protocols and data models fulfilling the requirements specified in ETSI GS NFV-IFA 031 for the interfaces that enable the management of NFV-MANO functional entities.
It defines the protocol and data model for the interfaces used for the management of NFV-MANO functional entities, in the form of RESTful Application Programming Interface (APIs) specifications:

• NFV-MANO configuration and information management interface;
• NFV-MANO performance management interface;
• NFV-MANO fault management interface;
• NFV-MANO state management interface;
• NFV-MANO log management interface. The interfaces are produced by the NFV-MANO functional entity, which acts as API producer, and can be consumed by an authorized external entity, which acts as API consumer. For more information, clause 4.2 of ETSI GS NFV-IFA 031 defines the framework for the management of NFV-MANO.

The present document defines the protocol and data model for the following interfaces, in the form of RESTful Application Programming Interface (APIs) specifications:

• NSD Management interface (as produced by the NFVO towards the OSS/BSS)
• NS Lifecycle Management interface (as produced by the NFVO towards the OSS/BSS)
• NS Performance Management interface (as produced by the NFVO towards the OSS/BSS)
• NS Fault Management interface (as produced by the NFVO towards the OSS/BSS)
• VNF Package Management interface (as produced by the NFVO towards the OSS/BSS)

The present document specifies the structure and format of a VNF package file and its constituents, fulfilling the requirements specified in ETSI GS NFV-IFA 011 for a VNF package.
 
The present document also specifies the structure and format of a PNFD archive file and its constituents, fulfilling the requirements specified in ETSI GS NFV-IFA 014 for a PNFD archive.

The present document is a guide to developers of NFV related documents and applications in means to address the security aspects and regulatory concerns as they impact the security of deployed networks that conform with these documents and applications. The present document contains detailed descriptions of security concerns, attacks, as well as an overview of regulatory concerns and how they can be treated in system design to give the highest level of assurance that the resultant system is secure and complies with current regulation and best practice. The present document is intended for use by developers of NFV documents and the guidance is given in a manner that assists non-experts in security and regulation to prepare such documents.
 
In addition to the guidance and explanatory text the present document contains, in annex A, a pro forma template for use in ETSI ISG NFV documents to capture the security concerns and mitigations that apply.