QPIM 49th IETF San Diego Policy WG QoS Policy Information Model draft-ietf-policy-qos-info-model-02 Yoram Snir Yoram Ramberg John Strassner Ron Cohen

San-Diego IETF2 Agenda n Overview n Changes from last version n Examples n Discussion

San-Diego IETF3 Overview n 4th version of QPIM n Extends PCIM u IntServ & DiffServ Policy modeling u General Policy Use n DiffServ model can be translated to PIB and MIB n IntServ model can be enforced using COPS for RSVP n LDAP mapping to be updated

San-Diego IETF4 Changes made n Separate between QoS and General PCIM extensions n Complete Diffserv modeling including PHB modeling n Remove ‘LDAP’ism and storage dependent modeling n Various improvements and changes due to feedback

San-Diego IETF5 General PCIM extensions n Prefix General Use Classes with gps, attributes with gp u Variables and Values u Simple and Compound Conditions u Policy Containers inc. Decision Strategy u Meters and Traffic Profiles

San-Diego IETF6 *PCIM +QPIM General QPIM CLASSES

San-Diego IETF7 General PCIM extensions n General Associations and Aggregation to allow: u Building Simple conditions from Variables and Values u Creation of Compound reusable Conditions u Building sub-rules u Reuse of policy groups u Flexible repository reuse u Bind Traffic Profiles to Meters

San-Diego IETF8 Diffserv PHB modeling n Model PHBs using policy rules n Example: MyDomainPHB group { If (EF) do EF-action If (AF11) do AF11-action If (AF12) do AF12-action If (AF13) do AF13-action If (default) do BE-action }

San-Diego IETF9 Diffserv PHB modeling n Add PHB action n Add Queue Class EF-Action DropAlg Tail MaxThrsh 3Pckts AF11-Action DropAlg Red MaxThrsh 20Pckts MinThrsh 4Pckts AF12-Action DropAlg Red MaxThrsh 16Pckts MinThrsh 2Pckts EF-Queue Priority 1 MaxBW 25% AF1x-Queue MinBW 512Kb/s

San-Diego IETF10 Diffserv PHB modeling n Alternative representation using hierarchy MyDomainPHB group { If (EF) do EF-action If (AF1x) do AF1x-action If (AF11) do AF11-action If (AF12) do AF12-action If (AF13) do AF13-action If (default) do BE-action }

San-Diego IETF11 Diffserv PHB modeling n Hierarchical AF PHB modeling AF1x-Action DropAlg Red AF11-Action MaxThrsh 20Pckts MinThrsh 4Pckts AF12-Action MaxThrsh 16Pckts MinThrsh 2Pckts AF1x-Queue MinBW 512Kb/s

San-Diego IETF12 Storage independence n Object references are modeled as Association and Aggregations u PolicyVariableInPolicySimpleCondition u PolicyValueInPolicySimpleCondition u PolicyConditionInCompoundCondition u PolicyRuleInPolicyRule u PolicyGroupInPolicyRule u PolicyValueConstraintsInVariable u PolicyElementInPolicyRepository

San-Diego IETF13 Storage independence n Association and Aggregation Cont. u PolicyMeterInAction u PolicyTrfcProfileInMeter u PolicyQueueInPHBAction u PolicyConformNextAction u PolicyExcessNextAction u PolicyViolateNextAction

San-Diego IETF14 Other additions/Changes n Add Compound Conditions - Reusable (sub) conditions. Values: XX-Servers: { , boo.x.com, } Simple Conditions: XX-ServerTraffic: {src-ip match XX-servers} Compound Conditions: XXServerApplicationTraffic: {XX-ServerTraffic AND XX-ServerAppPorts}

San-Diego IETF15 Other additions/Changes CompoundCondition conditionListType: CNF/DNF ConditionInCompoundCondition Group #=1 Negated=False PolicyCondition ConditionInCompoundCondition Group #=1 Negated=False n Compound Conditions Cont.

San-Diego IETF16 Other additions/Changes n PCIM: “Role: A role is a type of attribute that is used to select one or more policies for a set of entities and/or components from among a much larger set of available policies.” n “The selection process for a role combination chooses policies associated with the combination itself, policies associated with each of its sub- combinations, and policies associated with each of the individual roles in the role-combination.”

San-Diego IETF17 Other additions/Changes n Add Role attribute defined in PCIM for a Policy Rule to gpsPolicyGroup ServerFarmRules Role = [server-farm-edge], [server-farm-backup] { If (xxx) do aaa If (yyy) do bbb }

San-Diego IETF18 Other additions/Changes n Associate Traffic Profile to Meter (not directly to action) ProvisioningAction EdgeAF: Mark: AF11 ExcessAction: Mark AF12 ViolateAction: Mark AF13 TrafficProfile FRCir Rate: 64kb/sec Bc: 2000bytes Be: 3000bytes Meter LocalMeter: Interval: 50msec

San-Diego IETF19 Examples n Map Policy Rules to Network Configuration GroupA: Role = [ParisEdge] { If (UDP) MinBW 30% If (TFTP) MinBW 10% If (NFS) MinBW 30% If (TCP) MinBW 60% If (HTTP) MinBW 40% If (FTP) MinBW 20%, MaxBW 60% }

San-Diego IETF20 Examples n Map Policy Rules to Network Configuration: DiffServ MIB representation: Udp Classifier Tcp Classifier Q 20% Q Q 30% Q 60% Schd Q 10% DataPath Ifndex ParisEdge Udp TFTP Classifier Udp NFS ClassifierQ 30% Tcp FTP Classifier Tcp HTTP Classifier Default Classifier Q Q 40% Q Schd

San-Diego IETF21 Discussion n Issues on WG agenda u QPIM’s Conditions vs. CIM’s Filters u Mapping to Diffserv MIB n WG missing pieces u Modeling of QoS capabilities u Binding Roles to entities n Status n Questions?

San-Diego IETF22 Condition Modeling Goals n Extend PCIM u Extend PolicyCondition u Use PolicyConditionInPolicyRule aggregation n Modeling of Variable and Values u Reusable Values u Specify Value constraints to Variables u Add new Variables and Values without changing the structure of conditions - Add semantics without changing syntax n Flexible reuse of Conditions

San-Diego IETF23 Mapping to Diffserv MIB n Diffserv Modeling u PHB Actions model PHBs u PR Actions model Diffserv-Edge actions n Policy Definition oriented u Three level meters - easier AF policing u Shaping in PRAction, MaxBW in PHBAction although implemented by same mechanism in Diffserv-MIB u Separate Traffic Profile from Meter. Allow reusability of traffic templates u Hierarchical rules instead of forwarding path binding

San-Diego IETF24 Discussion n Issues on WG agenda u QPIM’s Conditions vs. CIM’s Filters u Mapping to Diffserv MIB n WG missing pieces u Modeling of QoS capabilities u Binding Roles to entities n Status n Questions?

San-Diego IETF25 qosPolicyPRAction MeterInActionTrfcProfInMeter ConformNextAction ExcessNextAction ViolateNextAction

San-Diego IETF26 qosPolicyPHBAction QueuInPHBAction

San-Diego IETF27 qosPolicyRSVPAction

San-Diego IETF28 Rule Processing Order n Rule 1 n Rule 1.2 n Rule 1.1 n Rule 4 n Rule 3