Transparent network function discovery and addressing
Embodiments described herein provide methods and apparatus for configuring a service based architecture for discovery of a Network Function, NF. A method in a Network Function Discovery Orchestration includes configuring, in a domain name system, DNS, a first DNS entry associating a first domain name of the NF with at least one NF Internet Protocol, IP, address of the NF, and a second DNS entry associating the first domain name with at least one edge security node IP address of an edge security node in the first PLMN, wherein, the first DNS entry is for use in resolving requests for the NF which originate from within the first PLMN, and the second DNS entry is for use in resolving requests for the NF which originate from outside the first PLMN. Further methods and apparatus in a Network Repository Function, a Domain Name System and an edge security node are also provided.
1. A method, in a Network Function Discovery Orchestration, NFDO, node, for configuring a Service Based Architecture, SBA, of a first Public Land Mobile Network, PLMN, for discovery of a Network Function, NF, the method comprising:
transmitting an indication of a first domain name to be used by the NF;
initiating registration of the NF in a Network Repository Function, NRF such that the NF is associated with the first domain name in the NRF;
determining at least one NF Internet Protocol, IP, address;
determining at least one edge security node IP address;
configuring, in a domain name system, DNS, a first DNS entry associating the first domain name of the NF with the at least one NF Internet Protocol, IP, address of the NF, and a second DNS entry associating the first domain name with the at least one edge security node IP address of an edge security node in the first PLMN; and
the first DNS entry being used for resolving requests for the NF which originate from within the first PLMN, and the second DNS entry being used for resolving requests for the NF which originate from outside the first PLMN.
2. The method as claimed in claim 1 , wherein the initiating registration of the NF in the NRF comprises registering the NF in the NRF alongside the first domain name.
3. The method as claimed in claim 1 , further comprising:
transmitting an indication of a second domain name associated with the NRF, and wherein the initiating registration of the NF in the NRF comprises:
transmitting a registration request to the NF to instruct the NF to register the first domain name with the NRF.
4. The method as claimed in claim 1 , wherein the step of determining at least one NF IP address associated with the NF comprises:
transmitting a first address request to the NF for the NF IP address, and
receiving the at least one NF IP address from the NF.
5. The method as claimed in claim 1 , wherein the step of determining at least one Security Edge Protection Proxy, SEPP, Internet Protocol, IP, address associated with an SEPP node comprises:
transmitting a second address request to the SEPP node for the SEPP IP address; and
receiving the at least one SEPP IP address from the SEPP.
6. A Network Function Discovery Orchestration, NFDO, node, for configuring a Service Based Architecture, SBA, of a first Public Land Mobile Network, PLMN, for discovery of a Network Function, NF, the NFDO node comprising processing circuitry configured to:
transmit an indication of a first domain name to be used by the NF;
initiate registration of the NF in a Network Repository Function, NRF such that the NF is associated with the first domain name in the NRF;
determine at least one NF Internet Protocol, IP, address;
determine at least one edge security node IP address;
configure, in a domain name system, DNS, a first DNS entry associating the first domain name of the NF with at least one NF IP address of the NF, and a second DNS entry associating the first domain name with the at least one edge security node IP address of an edge security node in the first PLMN; and
the first DNS entry being configured to be used for resolving requests for the NF which originate from within the first PLMN, and the second DNS entry being configured to be used for resolving requests for the NF which originate from outside the first PLMN.