IP Flow Information Export (IPFIX) Mediation: Framework
RFC 6183
| Document | Type |
RFC - Informational
(April 2011; Errata)
Updates RFC 5470
|
|
|---|---|---|---|
| Last updated | 2015-10-14 | ||
| Stream | IETF | ||
| Formats | plain text pdf html bibtex | ||
| Reviews | |||
| Stream | WG state | (None) | |
| Document shepherd | No shepherd assigned | ||
| IESG | IESG state | RFC 6183 (Informational) | |
| Consensus Boilerplate | Unknown | ||
| Telechat date | |||
| Responsible AD | Dan Romascanu | ||
| Send notices to | (None) | ||
Internet Engineering Task Force (IETF) A. Kobayashi
Request for Comments: 6183 NTT
Updates: 5470 B. Claise
Category: Informational Cisco Systems, Inc.
ISSN: 2070-1721 G. Muenz
TU Muenchen
K. Ishibashi
NTT
April 2011
IP Flow Information Export (IPFIX) Mediation: Framework
Abstract
This document describes a framework for IP Flow Information Export
(IPFIX) Mediation. This framework extends the IPFIX reference model
specified in RFC 5470 by defining the IPFIX Mediator components.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see Section 2 of RFC 5741.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
http://www.rfc-editor.org/info/rfc6183.
Copyright Notice
Copyright (c) 2011 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
Kobayashi, et al. Informational [Page 1]
RFC 6183 IPFIX Mediation: Framework April 2011
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction ....................................................3
2. Terminology and Definitions .....................................3
3. IPFIX/PSAMP Documents Overview ..................................6
3.1. IPFIX Documents Overview ...................................6
3.2. PSAMP Documents Overview ...................................6
4. IPFIX Mediation Reference Model .................................7
5. IPFIX Mediation Functional Blocks ..............................12
5.1. Collecting Process ........................................12
5.2. Exporting Process .........................................13
5.3. Intermediate Process ......................................13
5.3.1. Data Record Expiration .............................14
5.3.2. Specific Intermediate Processes ....................14
6. Component Combination ..........................................20
6.1. Data-Based Collector Selection ............................20
6.2. Flow Selection and Aggregation ............................21
6.3. IPFIX File Writer/Reader ..................................22
7. Encoding for IPFIX Message Header ..............................22
8. Information Model ..............................................24
9. Security Considerations ........................................24
9.1. Avoiding Security Level Downgrade .........................25
9.2. Avoiding Security Level Upgrade ...........................25
9.3. Approximating End-to-End Assertions for IPFIX Mediators ...26
9.4. Multiple Tenancy ..........................................26
10. References ....................................................27
10.1. Normative References .....................................27
10.2. Informative References ...................................27
11. Acknowledgements ..............................................29
Kobayashi, et al. Informational [Page 2]
RFC 6183 IPFIX Mediation: Framework April 2011
1. Introduction
The IP Flow Information Export (IPFIX) architectural components in
[RFC5470] consist of IPFIX Devices and IPFIX Collectors communicating
using the IPFIX protocol. Due to the sustained growth of IP traffic
in heterogeneous network environments, this Exporter-Collector
architecture may lead to scalability problems. In addition, it does
Show full document text