Restrict mobile to mobile communication dynamically in 5G user plane function
In one aspect, a method includes generating, using a User Plane Function (UPF) of a core element of a network, a query to retrieve information associated with one or more Data Network Names (DNNs) configured in at least one other UPF in the network; transmitting the query to a Network Repository Function (NRF); receiving a response from the NRF, the response including IP address subnets of the at least one other UPF associated with the one or more DNNs; dynamically generating an Access Control List (ACL) to block mobile-to-mobile communication between User Equipment (UEs) in the network, using the IP address subnets received as part of the response, wherein each of the UEs is assigned an IP address from among the IP address subnets; and blocking M2M communication using the ACL dynamically generated.
1 . A method comprising:
generating, using a User Plane Function (UPF) of a core element of a network, a query to retrieve information associated with one or more Data Network Names (DNNs) configured in at least one other UPF in the network;
transmitting the query to a Network Repository Function (NRF);
receiving a response from the NRF, the response including IP address subnets of the at least one other UPF associated with the one or more DNNs;
dynamically generating an Access Control List (ACL) to block mobile-to-mobile communication between User Equipment (UEs) in the network, using the IP address subnets received as part of the response, wherein each of the UEs is assigned an IP address from among the IP address subnets; and
blocking M2M communication using the ACL dynamically generated.
2 . The method of claim 1 , further comprising:
configuring the one or more DNNs on the UPF when the UPF is not registered with the NRF.
3 . The method of claim 1 , further comprising:
adding the one or more DNNs to the UPF after registering the UPF with the NRF.
4 . The method of claim 3 , further comprising:
updating the NRF with information associated with the one or more DNNs.
5 . The method of claim 1 , further comprising:
subscribing to the NRF to receive notifications of at least one modification to UPFs associated with the one or more DNNs; and
receiving a notification from the NRF, the notification being one of a registration notification of a new UPF associated with the one or more DNNs or a deregistration notification of an existing UPF associated with the one or more DNNs.
6 . The method of claim 5 , wherein the ACL is generated based on the response and the notification.
7 . The method of claim 5 , wherein the UPF subscribes to the NRF to receive the notifications using NFStatusSubscribe service to receive the registration notification and the deregistration notification.
8 . A network component configured to implement User Plane Function (UPF) of a 5G network, comprising:
one or more memories having computer-readable instructions stored therein; and
one or more processors configured to execute the computer-readable instructions to:
generate a query to retrieve information associated with one or more Data Network Names (DNNs) configured in at least one other UPF in the 5G network;
transmit the query to a Network Repository Function (NRF);
receive a response from the NRF, the response including IP address subnets of the at least one other UPF associated with the one or more DNNs;
dynamically generate an Access Control List (ACL) to block mobile-to-mobile communication between User Equipment (UEs) in the 5G network, using the IP address subnets received as part of the response, wherein each of the UEs is assigned an IP address from among the IP address subnets; and
block M2M communication using the ACL dynamically generated.
9 . The network component of claim 8 , wherein the one or more processors are further configured to execute the computer-readable instructions to:
configure the one or more DNNs on the UPF when the UPF is not registered with the NRF.
10 . The network component of claim 8 , wherein the one or more processors are further configured to execute the computer-readable instructions to:
add the one or more DNNs to the UPF after registering the UPF with the NRF.
11 . The network component of claim 8 , wherein the one or more processors are further configured to execute the computer-readable instructions to:
update the NRF with information associated with the one or more DNNs.
12 . The network component of claim 11 , wherein the one or more processors are further configured to execute the computer-readable instructions to:
subscribe to the NRF to receive notifications of at least one modification to UPFs associated with the one or more DNNs; and
receive a notification from the NRF, the notification being one of a registration notification of a new UPF associated with the one or more DNNs or a deregistration notification of an existing UPF associated with the one or more DNNs.
13 . The network component of claim 12 , wherein the ACL is generated based on the response and the notification.
14 . The network component of claim 12 , wherein the UPF subscribes to the NRF to receive the notifications using NFStatusSubscribe service to receive the registration notification and the deregistration notification.
15 . One or more non-transitory computer-readable media comprising computer-readable instructions, which when executed by one or more processors of a network component configured to implement User Plane Function (UPF) of a 5G network, cause the network component to:
generate a query to retrieve information associated with one or more Data Network Names (DNNs) configured in at least one other UPF in the 5G network;
transmit the query to a Network Repository Function (NRF);
receive a response from the NRF, the response including IP address subnets of the at least one other UPF associated with the one or more DNNs;
dynamically generate an Access Control List (ACL) to block mobile-to-mobile communication between User Equipment (UEs) in the 5G network, using the IP address subnets received as part of the response, wherein each of the UEs is assigned an IP address from among the IP address subnets; and
block M2M communication using the ACL dynamically generated.
16 . The one or more non-transitory computer-readable media of claim 15 , wherein the execution of the computer-readable instructions further cause the network component to:
configure the one or more DNNs on the UPF when the UPF is not registered with the NRF.
17 . The one or more non-transitory computer-readable media of claim 15 , wherein the execution of the computer-readable instructions further cause the network component to:
add the one or more DNNs to the UPF after registering the UPF with the NRF.
18 . The one or more non-transitory computer-readable media of claim 15 , wherein the execution of the computer-readable instructions further cause the network component to:
subscribe to the NRF to receive notifications of at least one modification to UPFs associated with the one or more DNNs; and
receive a notification from the NRF, the notification being one of a registration notification of a new UPF associated with the one or more DNNs or a deregistration notification of an existing UPF associated with the one or more DNNs.
19 . The one or more non-transitory computer-readable media of claim 18 , wherein the ACL is generated based on the response and the notification.
20 . The one or more non-transitory computer-readable media of claim 18 , wherein the UPF subscribes to the NRF to receive the notifications using NFStatusSubscribe service to receive the registration notification and the deregistration notification.