Selective importing of UE addresses to VRF in 5G networks
Importing of a UE address into a VRF of perimeter equipment is facilitate by receiving a VPN update from the perimeter equipment including a route target of the perimeter equipment and a gNodeB address. In addition, session information is obtained by intercepting traffic between the UE address and a UPF. The session information including the UE address and address of a gNodeB to which the UE is connected. By matching the gNodeB addresses from the VPN update and the session information, the route target of the perimeter equipment to which the UE is connected may be determined. The UE address may then be imported exclusively into the VRF of the perimeter equipment.
1. A method comprising:
receiving, by a computing device, session information including a component address, a user equipment address, and a virtual routing function (VRF) identifier, the component address being an address of a first component of a radio packet network connected by a cellular wireless network to a user device having the user equipment address;
receiving, by the computing device, a virtual private network (VPN) update including the component address and a route target for the component address;
matching, by the computing device, the route target to the VRF identifier using the component address; and
importing, by the computing device, the user equipment address into the VRF identified by the VRF identifier in response to matching the route target to the VRF identifier.
2. The method of claim 1 , further comprising refraining from importing, by the computing device, the user equipment address into any VRF other than the VRF identified by the VRF identifier.
3. The method of claim 1 , further comprising providing a plurality of perimeter equipment components each coupled to one or more components of a plurality of cellular data network components, the first component being one of the plurality of cellular data network components;
wherein importing the user equipment address into the VRF identified by the VRF identifier in response to matching the route target to the VRF identifier comprises importing the UE address with respect to one or more perimeter equipment components connected to the first component.
4. The method of claim 3 , wherein the one or more perimeter equipment components are translation modules programmed to translate packets between a packet radio protocol and internet protocol.
5. The method of claim 4 , wherein the packet radio protocol is general packet radio service (GPRS) tunneling protocol (GTP) packet.
6. The method of claim 5 , wherein the internet protocol is segment routing over internet protocol v6 (SRv6).
7. The method of claim 3 , wherein receiving the VPN update includes receiving the VPN update from the one or more perimeter equipment components.
8. The method of claim 7 , wherein receiving the session information comprises receiving session information intercepted by a packet forwarding control protocol (PFCP) module.
9. The method of claim 8 , wherein receiving the session information comprises receiving the session information from a border gateway protocol (BGP) module.
10. The method of claim 1 , wherein the first component is a gNodeB of a 5G cellular data network.
11. A system comprising:
one or more computing devices each including one or more processing devices and one or more memory devices coupled to the one or more processing devices, the one or more computing devices being programmed to perform a method including:
receiving session information including a component address, a user equipment address, and a virtual routing function (VRF) identifier, the component address being an address of a first component of a radio packet network connected by a cellular wireless network to a user device having the user equipment address;
receiving a virtual private network (VPN) update including the component address and a route target for the component address;
matching the route target to the VRF identifier using the component address; and
importing the user equipment address into the VRF identified by the VRF identifier in response to matching the route target to the VRF identifier.
12. The system of claim 11 , wherein the one or more computing devices are further programmed to perform the method by refraining from importing the user equipment address into any VRF other than the VRF identified by the VRF identifier.
13. The system of claim 11 , further comprising providing a plurality of perimeter equipment components each coupled to one or more components of a plurality of cellular data network components, the first component being one of the plurality of cellular data network components;
wherein the one or more computing devices are further programmed to perform the method by importing the user equipment address into the VRF identified by the VRF identifier in response to matching the route target to the VRF identifier comprises importing the UE address with respect to one or more perimeter equipment components connected to the first component.
14. The system of claim 13 , wherein the one or more perimeter equipment components are translation modules programmed to translate packets between a packet radio protocol and internet protocol.
15. The system of claim 14 , wherein the packet radio protocol is general packet radio service (GPRS) tunneling protocol (GTP) packet.
16. The system of claim 15 , wherein the internet protocol is segment routing over internet protocol v6 (SRv6).
17. The system of claim 13 , wherein receiving the VPN update includes receiving the VPN update from the one or more perimeter equipment components.
18. The system of claim 17 , wherein receiving the session information comprises receiving session information intercepted by a packet forwarding control protocol (PFCP) module.
19. The system of claim 18 , wherein receiving the session information comprises receiving the session information from a border gateway protocol (BGP) module.
20. The system of claim 11 , wherein the first component is a gNodeB of a 5G cellular data network.