IP Flow Information Export (IPFIX) Mediation: Framework
RFC 6183
Document | Type |
RFC - Informational
(April 2011; Errata)
Updates RFC 5470
|
|
---|---|---|---|
Last updated | 2015-10-14 | ||
Stream | IETF | ||
Formats | plain text pdf html bibtex | ||
Reviews | |||
Stream | WG state | (None) | |
Document shepherd | No shepherd assigned | ||
IESG | IESG state | RFC 6183 (Informational) | |
Consensus Boilerplate | Unknown | ||
Telechat date | |||
Responsible AD | Dan Romascanu | ||
Send notices to | (None) |
Internet Engineering Task Force (IETF) A. Kobayashi Request for Comments: 6183 NTT Updates: 5470 B. Claise Category: Informational Cisco Systems, Inc. ISSN: 2070-1721 G. Muenz TU Muenchen K. Ishibashi NTT April 2011 IP Flow Information Export (IPFIX) Mediation: Framework Abstract This document describes a framework for IP Flow Information Export (IPFIX) Mediation. This framework extends the IPFIX reference model specified in RFC 5470 by defining the IPFIX Mediator components. Status of This Memo This document is not an Internet Standards Track specification; it is published for informational purposes. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6183. Copyright Notice Copyright (c) 2011 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must Kobayashi, et al. Informational [Page 1] RFC 6183 IPFIX Mediation: Framework April 2011 include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction ....................................................3 2. Terminology and Definitions .....................................3 3. IPFIX/PSAMP Documents Overview ..................................6 3.1. IPFIX Documents Overview ...................................6 3.2. PSAMP Documents Overview ...................................6 4. IPFIX Mediation Reference Model .................................7 5. IPFIX Mediation Functional Blocks ..............................12 5.1. Collecting Process ........................................12 5.2. Exporting Process .........................................13 5.3. Intermediate Process ......................................13 5.3.1. Data Record Expiration .............................14 5.3.2. Specific Intermediate Processes ....................14 6. Component Combination ..........................................20 6.1. Data-Based Collector Selection ............................20 6.2. Flow Selection and Aggregation ............................21 6.3. IPFIX File Writer/Reader ..................................22 7. Encoding for IPFIX Message Header ..............................22 8. Information Model ..............................................24 9. Security Considerations ........................................24 9.1. Avoiding Security Level Downgrade .........................25 9.2. Avoiding Security Level Upgrade ...........................25 9.3. Approximating End-to-End Assertions for IPFIX Mediators ...26 9.4. Multiple Tenancy ..........................................26 10. References ....................................................27 10.1. Normative References .....................................27 10.2. Informative References ...................................27 11. Acknowledgements ..............................................29 Kobayashi, et al. Informational [Page 2] RFC 6183 IPFIX Mediation: Framework April 2011 1. Introduction The IP Flow Information Export (IPFIX) architectural components in [RFC5470] consist of IPFIX Devices and IPFIX Collectors communicating using the IPFIX protocol. Due to the sustained growth of IP traffic in heterogeneous network environments, this Exporter-Collector architecture may lead to scalability problems. In addition, it doesShow full document text