1、 ETSI GS NFV-REL 003 V1.1.2 (2016-07) Network Functions Virtualisation (NFV); Reliability; Report on Models and Features for End-to-End Reliability Disclaimer The present document has been produced and approved by the Network Functions Virtualisation (NFV) ETSI Industry Specification Group (ISG) and
2、 represents the views of those members who participated in this ISG. It does not necessarily represent the views of the entire ETSI membership. GROUP SPECIFICATION ETSI ETSI GS NFV-REL 003 V1.1.2 (2016-07)2 Reference RGS/NFV-REL003ed112 Keywords availability, NFV, reliability, resiliency ETSI 650 Ro
3、ute des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.ets
4、i.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference
5、 in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change o
6、f status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.
7、aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modified without the written authorization of
8、ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2016. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade M
9、arks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI GS NFV-REL 003 V1.1.2 (2016-07)3 Contents Intellectual Property Rights 5g3Foreword . 5g3Modal verbs terminology
10、5g31 Scope 6g32 References 6g32.1 Normative references . 6g32.2 Informative references 6g33 Definitions and abbreviations . 8g33.1 Definitions 8g33.2 Abbreviations . 9g34 Overview 10g34.1 End-to-End network service chain . 10g34.2 Reliability model of an end-to-end service . 11g34.3 Structure of the
11、 present document 11g35 Generic reliability and availability modelling and estimation 12g35.1 Introduction 12g35.2 Reliability models and estimations . 12g35.2.1 Basic equations . 12g35.2.2 Modelling of composed systems . 13g35.3 Software reliability models and estimation 14g35.3.1 Introduction. 14g
12、35.3.2 Diversity, an approach for fault tolerance . 16g35.3.3 Software reliability evaluation and measurement . 18g36 Reliability/availability methods . 21g36.1 Overview 21g36.1.1 NFV architecture models 21g36.1.2 Network service elements . 24g36.1.3 Characteristics of the networks adopting NFV conc
13、epts in terms of reliability and availability 24g36.2 Network function 27g36.2.1 Introduction. 27g36.2.2 NFVI and NFV-MANO support for VNF reliability and availability 29g36.2.2.1 Mechanisms overview by fault management cycle phase . 29g36.2.2.1.0 General 29g36.2.2.1.1 Affinity aware resource placem
14、ent 29g36.2.2.1.2 State protection 30g36.2.2.1.3 Failure detection 31g36.2.2.1.4 Localization . 31g36.2.2.1.5 Isolation . 32g36.2.2.1.6 Remediation . 32g36.2.2.1.7 Recovery 33g36.2.2.2 Non-redundant/on-demand redundant VNFC configurations . 33g36.2.2.3 Active-Standby VNFC redundancy configurations .
15、 35g36.2.2.4 Active-Active VNFC redundancy configurations . 40g36.2.3 VNF protection schemes . 43g36.2.3.1 Introduction . 43g36.2.3.2 Active-Standby method . 43g36.2.3.3 Active-Active method . 50g36.2.3.4 Load balancing method . 53g36.3 Reliability methods for virtual links . 59g36.3.1 Introduction.
16、 59g36.3.2 Failure of physical links across NFVI nodes 59g37 Reliability estimation models . 60g3ETSI ETSI GS NFV-REL 003 V1.1.2 (2016-07)4 7.1 Basic redundancy methods and reliability/availability estimation . 60g37.1.1 Sub network (or a chain of NFs) . 60g37.1.2 Reliability/availability of a sub n
17、etwork . 61g37.1.3 Sub network with redundancy configurations. 61g37.1.4 Reliability/availability of end-to-end paths . 64g37.2 Lifecycle operation . 65g37.2.1 Introduction. 65g37.2.2 Network service without redundancy . 65g37.2.3 Network service with redundancy 67g37.2.4 Reliability and availabilit
18、y owing to the protection schemes . 68g37.2.5 Reliability and availability during load fluctuation 71g38 Reliability issues during NFV software upgrade and improvement mechanisms 73g38.1 Service availability recommendations for software upgrade in NFV . 73g38.2 Implementation of NFV software upgrade
19、 and service availability . 74g38.2.1 VNF software upgrade 74g38.2.1.1 Software upgrade of traditional network functions . 74g38.2.1.2 VNF software upgrade in an NFV environment . 76g38.2.1.3 Software upgrade method using migration avoidance 78g38.2.2 NFVI software upgrade 80g38.3 Summary for softwa
20、re upgrade in NFV . 82g39 E2E operation and management of service availability and reliability 82g39.1 Service flows in a network service . 82g39.2 Metadata of service availability and reliability for NFV descriptors . 84g39.2.1 Introduction. 84g39.2.2 Metadata of service availability and reliabilit
21、y . 84g39.2.3 Service availability level in NFV descriptors . 85g39.3 End-to-end operation and management of service availability and reliability . 87g310 Recommendations/Guidelines 88g311 Security Considerations 89g3Annex A (informative): Reliability/availability methods in some ETSI NFV PoCs . 90g
22、3A.1 Introduction 90g3A.2 PoC#12 Demonstration of multi-location, scalable, stateful Virtual Network Function . 90g3A.3 PoC#35 Availability management with stateful fault tolerance . 91g3Annex B (informative): Service quality metrics 94g3Annex C (informative): Accountability-oriented end-to-end mode
23、lling 95g3C.1 Steady state operation outage downtime 95g3C.2 Lifecycle operation . 95g3C.3 Disaster operation objectives 95g3Annex D (informative): Automated diversity 97g3D.1 Randomization approaches . 97g3D.2 Integrated approach for diversity . 98g3Annex E (informative): Software reliability model
24、s . 100g3E.1 Exponential times between failures modes 100g3E.2 Non-homogeneous Poisson processes 101g3Annex F (informative): Authors Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on
25、 the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or ma
26、y be, or may become, essential to the present document. Foreword This Group Specification (GS) has been produced by ETSI Industry Specification Group (ISG) Network Functions Virtualisation (NFV). Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “ne
27、ed not“, “will“, “will not“, “can“ and “cannot“ are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI GS NFV-REL 003 V1.1.2
28、 (2016-07)6 1 Scope The present document describes the models and methods for end-to-end reliability in NFV environments and software upgrade from a resilience perspective. The scope of the present document covers the following items: Study reliability estimation models for NFV including modelling a
29、rchitecture. Study NFV reliability and availability methods. Develop reliability estimation models for these methods, including dynamic operational aspects such as impact of load and life-cycle operations. Study reliability issues during NFV software upgrade and develop upgrade mechanisms for improv
30、ing resilience. Develop guidelines to realise the differentiation of resiliency for different services. 2 References 2.1 Normative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the
31、cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. Referenced documents which are not found to be publicly available in the expected location might be found at http:/docbox.etsi.org/Reference. NOTE: While any hyperlin
32、ks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are necessary for the application of the present document. Not applicable. 2.2 Informative references References are either specific (identified by dat
33、e of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. NOTE: While any hyperlinks included in this clause were v
34、alid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area. i.1 ETSI GS NFV 002: “Network Functions Virtualisation
35、(NFV); Architectural Framework“. i.2 ETSI GS NFV-REL 001: “Network Functions Virtualisation (NFV); Resiliency Requirements“. i.3 http:/ i.4 http:/ i.5 ETSI GS NFV-MAN 001: “Network Functions Virtualisation (NFV); Management and Orchestration“. i.6 ETSI GS NFV-SWA 001: “Network Functions Virtualisati
36、on (NFV); Virtual Network Functions Architecture“. ETSI ETSI GS NFV-REL 003 V1.1.2 (2016-07)7 i.7 SA Forum SAI-AIS-AMF-B.04.01: “Service Availability Forum Application Interface Specification“. i.8 ETSI GS NFV-REL 002: “Network Functions Virtualisation (NFV); Reliability; Report on Scalable Architec
37、tures for Reliability Management“. i.9 ETSI GS NFV-REL 004: “Network Functions Virtualisation (NFV); Assurance; Report on Active Monitoring and Failure Detection“. i.10 ETSI GS NFV-INF 010: “Network Functions Virtualisation (NFV); Service Quality Metrics“. i.11 ETSI GS NFV-INF 001: “Network Function
38、s Virtualisation (NFV); Infrastructure Overview“. i.12 IEEE 802.1ax: “IEEE standard for local and metropolitan area networks - Link aggregation“. i.13 IEEE 802.1aq: “Shortest Path Bridging“. i.14 ETSI GS NFV-REL 005: Network Functions Virtualisation (NFV); Assurance; Quality Accountability Framework
39、. i.15 QuestForum: “TL 9000 Measurements Handbook“, release 5.0, July 2012. NOTE: Available at http:/www.tl9000.org/handbooks/measurements_handbook.html. i.16 QuEST Forum: “Quality Measurement of Automated Lifecycle Management Actions,“ 1.0, August 18th, 2015. NOTE: Available at http:/www.tl9000.org
40、/resources/documents/QuEST_Forum_ALMA_Quality_Measurement_150819.pdf. i.17 B. Baudry and M. Monperrus: “The multiple facets of software diversity: recent developments in year 2000 and beyond“, 2014. . i.18 L.H. Crow: “Reliability analysis for complex repairable systems“, in “Reliability and biometry
41、 - statistical analysis of lifelength“ (F. Prochan and R.J. Serfling, Eds.), SIAM Philadelphia, 1974, pp. 379-410. i.19 Y. Deswarte, K. Kanoun and J.-C. Laprie: “Diversity against accidental and deliberate faults“, Conf. on Computer Security, Dependability, and Assurance: From Needs to Solutions, Wa
42、shington, DC, USA, July 1998. i.20 J.T. Duane: “Learning curve approach to reliability monitoring“, IEEE Transactions on Aerospace, AS-2, 2, 1964, pp. 563-566. i.21 A.L. Goel and K. Okumoto: “Time dependent error detection rate model for software reliability and other performance measures“, IEEE Tra
43、nsactions on Reliability, R-28, 1, 1979, pp. 206-211. i.22 Z. Jelinski Z. and P.B. Moranda: “Statistical computer performance evaluation“, in “Software reliability research“ (W. Freiberger, Ed.), Academic Press, 1972, pp. 465-497. i.23 J.E. Just and M. Cornwell: “Review and analysis of synthetic div
44、ersity for breaking monocultures“, ACM Workshop on Rapid Malcode, New York, NY, USA, 2004, pp. 23-32. i.24 J.C. Knight: “Diversity“, Lecture Notes in Computer Science 6875, 2011. i.25 P. Larsen, A. Homescu, S. Brunthaler and M. Franz: “Sok: automated software diversity“, IEEE Symposium on Security a
45、nd Privacy, San Jose, CA, USA, May 2014, pp. 276-291. i.26 B. Littlewood, P. Popov and L. Strigini: “Modeling software design diversity: a review“, ACM Computing Surveys (CSUR), 33(2), 2001, pp. 177-208. i.27 P.B. Moranda: “Event altered rate models for general reliability analysis“, IEEE Transactio
46、ns on Reliability, R-28, 5, 1979, pp. 376-381. ETSI ETSI GS NFV-REL 003 V1.1.2 (2016-07)8 i.28 J.D. Musa and K. Okumoto: “A logarithmic Poisson execution time model for software reliability measurement“, 7th Int. Conf. on Software Engineering, Orlando, FL, USA, March 1984, pp. 230-238. i.29 I. Schae
47、fer et al.: “Software diversity: state of the art and perspectives“, International Journal on Software Tools for Technology Transfer, 14, 2012, pp. 477-495. i.30 S. Yamada, M. Ohba and S. Osaki: “S-shaped reliability growth modelling for software error detection“, IEEE Transactions on Reliability, R
48、-35, 5, 1983, pp. 475-478. i.31 ETSI GS NFV-INF 003: “Network Functions Virtualisation (NFV); Infrastructure; Compute Domain“. i.32 ETSI GS NFV 003: “Network Functions Virtualisation (NFV); Terminology for main concepts in NFV“. i.33 IEEE Reliability Society: “Recommended Practice on Software Reliab
49、ility“, IEEE Std 1633, 2008. i.34 NFV PoC#35 final report. 3 Definitions and abbreviations 3.1 Definitions For the purposes of the present document, the terms and definitions given in ETSI GS NFV 003 i.32, ETSI GS NFV-REL 001 i.2 and the following apply: fault detection: process of identifying an undesirable condition (fault
