Method and apparatus for isolation support in network slicing
An example method may include receiving slice isolation policy for a network slice subnet (NSS) in a transport network (TN) domain, mapping the slice isolation policy to network resource isolation policy and traffic isolation policy, and mapping the network resource isolation policy and the traffic isolation policy to network resource allocation policy and data traffic forward policy, respectively. The network resource allocation policy and the data traffic forward policy may be applied in creation of the TN NSS.
1. A transport network isolation control function apparatus comprising:
a processor; and
a memory configured to cause the apparatus to perform the function of:
receiving slice isolation policy for a network slice subnet (NSS) in a transport network (TN) domain;
mapping the slice isolation policy to network resource isolation policy and traffic isolation policy;
mapping the network resource isolation policy and the traffic isolation policy to network resource allocation policy and data traffic forward policy, respectively, wherein the network resource allocation policy and the data traffic forward policy are applied to create the TN NSS;
checking if the slice isolation policy for the TN NSS has a contradiction with other network slices or NSSs when the slice isolation policy is shared by the TN NSS and the other network slices or NSSs; and
updating the TN NSS with a new resource allocation policy and a new data traffic forward policy to remove the contradiction;
the network resource isolation policy includes the following attributes no isolation, physical network function isolation, logical network function isolation, physical network link isolation, and virtual network link isolation,
wherein:
the traffic isolation policy comprises attributes including: no isolation, service type isolation, data type isolation, video type isolation, and security protection level isolation,
the network resource allocation policy comprises attributes including: standard/undifferentiated isolation, dedicated hardware for transport network resources, dedicated software for transport network resources, and logical isolated virtual transport network resources, and
the data traffic forward policy comprises attributes including: standard/undifferentiated isolation, internet protocol security (IPsec) related rules, access control/filter rules, Differentiated Services Code Point (DSCP) rules, and forward rules in flow table.