Applying IP Flow Information Export (IPFIX) to Network Measurement and Management
slides-edu-ipfix-00

The IPFIX protocol was originally developed for the export of IP traffic flow information from routers for network accounting, monitoring, and security applications. Its simple data representation and extensible information model, however, make it well-suited to other application areas within the IETF. Recent cross-area work has considered applying IPFIX to application-level logging, application monitoring, and active performance measurement. Given these trends, it seems useful to educate the wider community on what IPFIX is, and what it is not. The tutorial gives an overview of the architecture, design, and technical details of the protocol, including the data representation and the Information Element registry, illustrating how it is applied to its original goal of flow export from forwarding devices. It explores application areas to which it may be applied beyond this goal, by presenting examples of both existing applications and those under development, with a focus on past and present work within the IETF. Design considerations which limit the applicability of IPFIX will be discussed, as well; one goal of the tutorial is to help the community understand for which potential applications of the protocol make the most sense.  Attendees will learn about the history of the protocol, its present and future applicability to work in multiple areas of the IETF, and enough technical detail to give them a basis for further reading.