1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285
|
<pre>Internet Engineering Task Force (IETF) K. Leung, Ed.
Request for Comments: 7337 Cisco
Category: Informational Y. Lee, Ed.
ISSN: 2070-1721 Comcast
August 2014
<span class="h1">Content Distribution Network Interconnection (CDNI) Requirements</span>
Abstract
Content delivery is frequently provided by specifically architected
and provisioned Content Delivery Networks (CDNs). As a result of
significant growth in content delivered over IP networks, existing
CDN providers are scaling up their infrastructure. Many Network
Service Providers (NSPs) and Enterprise Service Providers (ESPs) are
also deploying their own CDNs. To deliver contents from the Content
Service Provider (CSP) to end users, the contents may traverse across
multiple CDNs. This creates a need for interconnecting (previously)
standalone CDNs so that they can collectively act as a single
delivery platform from the CSP to the end users.
The goal of the present document is to outline the requirements for
the solution and interfaces to be specified by the CDNI working
group.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see <a href="./rfc5741#section-2">Section 2 of RFC 5741</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="http://www.rfc-editor.org/info/rfc7337">http://www.rfc-editor.org/info/rfc7337</a>.
<span class="grey">Leung & Lee Informational [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
Copyright Notice
Copyright (c) 2014 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="http://trustee.ietf.org/license-info">http://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
<a href="#section-1">1</a>. Introduction ....................................................<a href="#page-2">2</a>
<a href="#section-1.1">1.1</a>. Terminology ................................................<a href="#page-3">3</a>
<a href="#section-2">2</a>. CDNI Model and CDNI Interfaces ..................................<a href="#page-4">4</a>
<a href="#section-3">3</a>. Generic CDNI Requirements .......................................<a href="#page-6">6</a>
<a href="#section-4">4</a>. CDNI Control Interface Requirements .............................<a href="#page-7">7</a>
<a href="#section-5">5</a>. CDNI Request Routing Redirection Interface Requirements ........<a href="#page-10">10</a>
6. CDNI Footprint & Capabilities Advertisement Interface
Requirements ...................................................<a href="#page-12">12</a>
<a href="#section-7">7</a>. CDNI Metadata Interface Requirements ...........................<a href="#page-14">14</a>
<a href="#section-8">8</a>. CDNI Logging Interface Requirements ............................<a href="#page-18">18</a>
<a href="#section-9">9</a>. CDNI Security Requirements .....................................<a href="#page-20">20</a>
<a href="#section-10">10</a>. Security Considerations .......................................<a href="#page-21">21</a>
<a href="#section-11">11</a>. Contributors ..................................................<a href="#page-21">21</a>
<a href="#section-12">12</a>. Acknowledgements ..............................................<a href="#page-21">21</a>
<a href="#section-13">13</a>. References ....................................................<a href="#page-22">22</a>
<a href="#section-13.1">13.1</a>. Normative References .....................................<a href="#page-22">22</a>
<a href="#section-13.2">13.2</a>. Informative References ...................................<a href="#page-22">22</a>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
The volume of video and multimedia content delivered over the
Internet is rapidly increasing and expected to continue doing so in
the future. In the face of this growth, Content Delivery Networks
(CDNs) provide numerous benefits: reduced delivery cost for cacheable
content, improved quality of experience for end users, and increased
robustness of delivery. For these reasons, CDNs are frequently used
for large-scale content delivery. As a result of the significant
growth in content delivered over IP networks, existing CDN providers
are scaling up their infrastructure and many NSPs and ESPs are
deploying their own CDNs. Subject to the policy of the Content
Service Provider (CSP), it is generally desirable that a given item
<span class="grey">Leung & Lee Informational [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
of content can be delivered to an end user regardless of that end
user's location or attachment network. This creates a need for
interconnecting (previously) standalone CDNs so they can interoperate
and collectively behave as a single delivery infrastructure. The
Content Distribution Network Interconnection (CDNI) working group has
been chartered to develop an interoperable and scalable solution for
such CDN interconnections.
The CDNI Problem Statement [<a href="./rfc6707" title=""Content Distribution Network Interconnection (CDNI) Problem Statement"">RFC6707</a>] outlines the problem area that
the CDNI working group is chartered to address. The Use Cases for
CDNI document [<a href="./rfc6770" title=""Use Cases for Content Delivery Network Interconnection"">RFC6770</a>] discusses the use cases for CDN
Interconnection. The Framework for CDN Interconnection [<a href="./rfc7336" title=""Framework for Content Distribution Network Interconnection (CDNI)"">RFC7336</a>]
discusses the technology framework for the CDNI solution and
interfaces.
The goal of the present document is to document the requirements for
the CDNI solution and interfaces. In order to meet the time lines
defined in the working group charter, the present document
categorizes the CDNI requirements as "High Priority", "Medium
Priority", and "Low Priority".
<span class="h3"><a class="selflink" id="section-1.1" href="#section-1.1">1.1</a>. Terminology</span>
This document uses the terminology defined in [<a href="./rfc6707" title=""Content Distribution Network Interconnection (CDNI) Problem Statement"">RFC6707</a>]. In
addition, the key words "High Priority", "Medium Priority", and "Low
Priority" in this document are to be interpreted as follows:
o "High Priority": When a requirement is tagged as "{HIGH}", it is
considered by the working group as an essential function for CDNI
and necessary to a deployable solution. This requirement has to
be met even if it causes a delay in the delivery by the working
group of a deployable solution.
o "Medium Priority": When a requirement is tagged as "{MED}", it is
considered by the working group as an important function for CDNI.
This requirement has to be met, unless it is established that
attempting to meet this requirement would cause a delay in the
delivery by the working group of a deployable solution.
o "Low Priority": When a requirement is tagged as "{LOW}", it is
considered by the working group as a useful function for CDNI.
The working group will attempt to meet this requirement as long as
it does not prevent meeting the "High Priority" and "Medium
Priority" requirements and does not cause a delay in the delivery
by the working group of a deployable solution.
<span class="grey">Leung & Lee Informational [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. CDNI Model and CDNI Interfaces</span>
The "CDNI Expanded Model and CDNI Interfaces" figure and brief
descriptions of the CDNI interfaces in [<a href="./rfc7336" title=""Framework for Content Distribution Network Interconnection (CDNI)"">RFC7336</a>] are replicated below
for convenience. That document contains the definitive reference
model and descriptions for the CDNI interfaces.
o CDNI Control interface (CI): Operations to bootstrap and
parameterize the other CDNI interfaces, as well as operations to
pre-position, revalidate, and purge both metadata and content.
The latter subset of operations is sometimes collectively called
the "Trigger interface."
o CDNI Request Routing interface: Operations to determine what CDN
(and optionally what Surrogate within a CDN) is to serve an end
user's requests. This interface is actually a logical bundling of
two separate but related interfaces:
* CDNI Footprint & Capabilities Advertisement interface (FCI):
Asynchronous operations (as defined in [<a href="./rfc7336" title=""Framework for Content Distribution Network Interconnection (CDNI)"">RFC7336</a>]) to exchange
routing information (e.g., the network footprint and
capabilities served by a given CDN) that enables CDN selection
for subsequent user requests; and
* CDNI Request Routing Redirection interface (RI): Synchronous
operations (as defined in [<a href="./rfc7336" title=""Framework for Content Distribution Network Interconnection (CDNI)"">RFC7336</a>]) to select a delivery CDN
(Surrogate) for a given user request.
o CDNI Metadata interface (MI): Operations to communicate metadata
that governs how the content is delivered by interconnected CDNs.
Examples of CDNI Metadata include geo-blocking directives,
availability windows, access control mechanisms, and purge
directives. It may include a combination of:
* Asynchronous operations to exchange metadata that govern
subsequent user requests for content; and
* Synchronous operations that govern behavior for a given user
request for content.
o CDNI Logging interface (LI): Operations that allow interconnected
CDNs to exchange relevant activity logs. It may include a
combination of:
* Real-time exchanges, suitable for runtime traffic monitoring;
and
* Offline exchanges, suitable for analytics and billing.
<span class="grey">Leung & Lee Informational [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
--------
/ \
| CSP |
\ /
--------
*
*
* /\
* / \
---------------------- |CDNI| ----------------------
/ Upstream CDN \ | | / Downstream CDN \
| +-------------+ | | CI | | +-------------+ |
|******* Control |<======|====|=======>| Control *******|
|* +------*----*-+ | | | | +-*----*------+ *|
|* * * | | | | * * *|
|* +------*------+ | | LI | | +------*------+ *|
|* ***** Logging |<======|====|=======>| Logging ***** *|
|* * +-*-----------+ | | | | +-----------*-+ * *|
|* * * * | | | | * * * *|
.....*...+-*---------*-+ | | RI | | +-*---------*-+...*.*...
. |* * | |<======|====|=======>| | * *| .
. |* * | Req-Routing | | |FCI | | | Req-Routing | * *| .
. |* * *** |<======|====|=======>| |** * *| .
. |* * * +-------------+.| | | | +-------------+ * * *| .
. |* * * . | | | * * *| .
. |* * * +-------------+ |. | MI | | +-------------+ * * *| .
. |* * * | Distribution|<==.===|====|=======>| Distribution| * * *| .
. |* * * | | | . \ / | | | * * *| .
. |* * * |+---------+ | | . \/ | | +---------+| * * *| .
. |* * ***| +---------+| | ...Request......+---------+ |*** * *| .
. |* *****+-|Surrogate|***********************|Surrogate|-+***** *| .
. |******* +---------+| | Acquisition | |+----------+ *******| .
. | +-------------+ | | +-------*-----+ | .
. \ / \ * / .
. ---------------------- ---------*------------ .
. * .
. * Delivery .
. * .
. +--*---+ .
...............Request............................| User |..Request..
| Agent|
+------+
<==> interfaces inside the scope of CDNI
**** and .... interfaces outside the scope of CDNI
Figure 1: CDNI Expanded Model and CDNI Interfaces
<span class="grey">Leung & Lee Informational [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. Generic CDNI Requirements</span>
This section identifies generic requirements independent of the
individual CDNI interfaces. Some of those are expected to affect
multiple or all interfaces. Management is an important aspect of CDN
operation. The fault and performance management is covered in CDNI
Logging interface requirements. The other types of management are
specific to the CDN provider and not needed for interoperability
between CDN providers.
GEN-1 {MED} Wherever possible, the CDNI interfaces should reuse or
leverage existing IETF protocols.
GEN-2 {HIGH} The CDNI solution shall not require a change, or an
upgrade, to the User Agent to benefit from content delivery
through interconnected CDNs.
GEN-3 {HIGH} The CDNI solution shall not require a change, or an
upgrade, to the Content Service Provider delivering content
through a single CDN, to benefit from content delivery
through interconnected CDNs.
GEN-4 {HIGH} The CDNI solution shall not depend on intra-CDN
information to be exposed to other CDNs for effective and
efficient delivery of the content. Examples of intra-CDN
information include Surrogate topology, Surrogate status,
cached content, etc.
GEN-5 {HIGH} The CDNI solution shall support CDN interconnection
when delivery to the User Agent is based on HTTP [<a href="./rfc7230" title=""Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing"">RFC7230</a>].
(Note that while delivery and acquisition "data plane"
protocols are out of the CDNI solution scope, the CDNI
solution "control plane" protocols are expected to
participate in enabling, selecting or facilitating operations
of such acquisition and delivery protocols. Hence, it is
useful to state requirements on the CDNI solution in terms of
specifying which acquisition and delivery protocols are to be
supported).
GEN-6 {HIGH} The CDNI solution shall support acquisition across
CDNs based on HTTP [<a href="./rfc7230" title=""Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing"">RFC7230</a>]. (The note above applies to
this requirement, too.)
GEN-7 {LOW} The CDNI solution may support delivery to the User
Agent based on protocols other than HTTP.
GEN-8 {LOW} The CDNI solution may support acquisition across CDNs
based on protocols other than HTTP.
<span class="grey">Leung & Lee Informational [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
GEN-9 {MED} The CDNI solution should support cascaded CDN
redirection (CDN1 redirects to CDN2 that redirects to CDN3)
to an arbitrary number of levels beyond the first level.
GEN-10 {MED} The CDNI solution should support an arbitrary topology
of interconnected CDNs (i.e., the topology of interconnected
CDNs cannot be restricted to a tree, ring, star, etc.).
GEN-11 {HIGH} The CDNI solution shall prevent looping of any CDNI
information exchange.
GEN-12 {HIGH} When making use of third-party reference, the CDNI
solution shall consider the potential issues associated with
the use of various format of third-party references (e.g.,
NAT or IPv4/IPv6 translation potentially breaking third-party
references based on an IP addresses such as URI containing
IPv4 or IPv6 address literals, split DNS situations
potentially breaking third-party references based on DNS
FQDNs) and wherever possible avoid, minimize or mitigate the
associated risks based on the specifics of the environments
where the reference is used (e.g., likely or unlikely
presence of NAT in the path). In particular, this applies to
situations where the CDNI solution needs to construct and
convey uniform resource identifiers for directing/redirecting
a content request, as well as to situations where the CDNI
solution needs to pass on a third-party reference (e.g.,
identify the IP address of a User Agent) in order to allow
another entity to make a more informed decision (e.g., make a
more informed request routing decision by attempting to
derive location information from the third-party reference).
GEN-13 {HIGH} The CDNI solution shall support HTTP Adaptive
Streaming content.
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. CDNI Control Interface Requirements</span>
The primary purpose of the CDNI Control interface (CI) is to initiate
the interconnection across CDNs, bootstrap the other CDNI interfaces
and trigger actions into the Downstream CDN by the Upstream CDN (such
as delete object from caches or trigger pre-positioned content
acquisition). The working group attempts to align requirements with
the appropriate interface; however, solutions to these requirements
may apply to a different interface or another interface in addition
to the interface with which it is associated.
CI-1 {HIGH} The CDNI Control interface shall allow the Upstream CDN
to request that the Downstream CDN, including cascaded
Downstream CDNs, delete an object or set of objects and/or its
<span class="grey">Leung & Lee Informational [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
CDNI Metadata from the CDN Surrogates and any storage. Only
the object(s) and CDNI Metadata that pertain to the requesting
Upstream CDN are allowed to be purged.
CI-2 {MED} The CDNI Control interface should allow for multiple
content items identified by a Content Collection ID to be
purged using a single Content Purge action.
CI-3 {MED} The CDNI Control interface should allow the Upstream CDN
to request that the Downstream CDN, including cascaded
Downstream CDNs, mark an object or set of objects and/or its
CDNI Metadata as "stale" and revalidate them before they are
delivered again.
CI-4 {HIGH} The CDNI Control interface shall allow the Downstream
CDN to report on the completion of these actions (by itself,
and including cascaded Downstream CDNs), in a manner
appropriate for the action (e.g., synchronously or
asynchronously). The confirmation receipt should include a
success or failure indication. The failure indication and the
reason are included if the Downstream CDN cannot delete the
content in its storage.
CI-5 {MED} The CDNI Control interface should support initiation and
control by the Upstream CDN of pre-positioned CDNI Metadata
acquisition by the Downstream CDN.
CI-6 {MED} The CDNI Control interface should support initiation and
control by the Upstream CDN of pre-positioned content
acquisition by the Downstream CDN.
CI-7 {LOW} The CDNI Control interface may allow a CDN to establish,
update and terminate a CDN interconnection with another CDN
whereby one CDN can act as a Downstream CDN for the other CDN
(that acts as an Upstream CDN).
CI-8 {LOW} The CDNI Control interface may allow control of the CDNI
interfaces between any two CDNs independently for each
direction (e.g., for the direction where CDN1 is the Upstream
CDN and CDN2 is the Downstream CDN, and for the direction
where CDN2 is the Upstream CDN and CDN1 is the Downstream
CDN).
<span class="grey">Leung & Lee Informational [Page 8]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-9" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
CI-9 {LOW} The CDNI Control interface may allow bootstrapping of
the CDNI Request Routing interface. For example, this can
potentially include:
* negotiation of the request routing method (e.g., DNS versus
HTTP, if more than one method is specified).
* discovery of the CDNI Request Routing interface endpoints.
* information necessary to establish secure communication
between the CDNI Request Routing interface endpoints.
CI-10 {LOW} The CDNI Control interface may allow bootstrapping of
the CDNI Metadata interface. This information could, for
example, include:
* discovery of the CDNI Metadata interface endpoints
* information necessary to establish secure communication
between the CDNI Metadata interface endpoints.
CI-11 {LOW} The CDNI Control interface may allow bootstrapping of
the Content Acquisition interface. This could, for example,
include exchange and negotiation of the Content Acquisition
methods to be used across the CDNs (e.g., HTTP, HTTPS, FTP,
ATIS C2 [<a href="#ref-ATIS-0800042">ATIS-0800042</a>]).
CI-12 {LOW} The CDNI Control interface may allow bootstrapping of
the CDNI Logging interface. This information could, for
example, include:
* discovery of the CDNI Logging interface endpoints.
* information necessary to establish secure communication
between the CDNI Logging interface endpoints.
* negotiation/definition of the log file format and set of
fields to be exported through the logging protocol, with
some granularity (e.g., on a per-content-type basis).
* negotiation/definition of parameters related to transaction
logs export (e.g., export protocol, file compression,
export frequency, directory).
<span class="grey">Leung & Lee Informational [Page 9]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-10" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. CDNI Request Routing Redirection Interface Requirements</span>
The main function of the CDNI Request Routing Redirection interface
(RI) is to allow the Request Routing systems in interconnected CDNs
to communicate to facilitate redirection of the request across CDNs.
RI-1 {HIGH} The CDNI Request Routing Redirection interface shall
support efficient request routing for small objects. This
may, for example, call for a mode of operation (e.g., DNS-
based request routing) where freshness and accuracy of CDN/
Surrogate selection can be traded off against reduced request
routing load (e.g., Via lighter-weight queries and caching of
request routing decisions).
RI-2 {HIGH} The CDNI Request Routing Redirection interface shall
support efficient request routing for large objects. This
may, for example, call for a mode of operation (e.g., HTTP-
based request routing) where freshness and accuracy of CDN/
Surrogate selection justifies a per-request decision and a
per-request CDNI Request-Routing protocol call.
RI-3 {HIGH} The CDNI Request Routing Redirection interface shall
support recursive CDNI request routing.
RI-4 {HIGH} The CDNI Request Routing Redirection interface shall
support iterative CDNI request routing.
RI-5 {MED} In case of detection of a request redirection loop, the
CDNI Request Routing Redirection interface's loop prevention
mechanism should allow redirection of the request on an
alternate CDN path (as opposed to the request not being
redirected at all).
RI-6 {MED} The CDNI Request Routing Redirection interface should
support a mechanism allowing enforcement of a limit on the
number of successive CDN redirections for a given request.
RI-7 {LOW} The CDNI Request Routing Redirection interface may
support a mechanism allowing an Upstream CDN to avoid
redirecting a request to a Downstream CDN if that is likely to
result in the total redirection time exceeding some limit.
<span class="grey">Leung & Lee Informational [Page 10]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-11" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
RI-8 {HIGH} The CDNI Request Routing Redirection interface shall
allow the Upstream CDN to include, in the query to the
Downstream CDN, the necessary information to allow the
Downstream CDN to process the redirection query. This could,
for example, include:
* information from which the geographic region pertaining to
the IP address of the User Agent that originated the
request can be inferred (e.g., User Agent FQDN in case of
HTTP-based request routing, DNS Proxy FQDN in case of DNS-
based request routing).
* requested resource information (e.g., Resource URI in case
of HTTP-based request routing, Resource hostname in case of
DNS-based request routing).
* additional available request information (e.g., request
headers in case of HTTP-based request routing).
RI-9 {LOW} The CDNI Request Routing Redirection interface may also
allow the Upstream CDN to convey information pointing to CDNI
Metadata applicable (individually or through inheritance) to
the requested content. For illustration, the CDNI Metadata
pointed to could potentially include metadata that is
applicable to any content, metadata that is applicable to a
content collection (to which the requested content belongs)
and/or metadata that is applicable individually to the
requested content.
RI-10 {HIGH} The CDNI Request Routing Redirection interface shall
allow the Downstream CDN to include the following information
in the response to the Upstream CDN:
* status code, in particular indicating acceptance or
rejection of request (e.g., because the Downstream CDN is
unwilling or unable to serve the request). In case of
rejection, an error code is also to be provided, which
allows the Upstream CDN to react appropriately (e.g.,
select another Downstream CDN, or serve the request
itself).
* redirection information (e.g., Resource URI in case of
HTTP-based request routing, equivalent of a DNS record in
case of DNS-based request routing).
RI-11 {HIGH} The CDNI Request Routing Redirection interface shall
allow for per-chunk request routing of HTTP Adaptive Streaming
content.
<span class="grey">Leung & Lee Informational [Page 11]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-12" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
RI-12 {LOW} The CDNI Request Routing Redirection interface may allow
the Upstream CDN to use the information conveyed by the
Downstream CDN during the Recursive Request Routing process to
rewrite an HTTP Adaptive Streaming manifest file.
RI-13 {LOW} The CDNI Request Routing interface may allow the
Upstream CDN to re-compute the message digest or digital
signature over the invariant portion of the chunk URIs
embedded in the HTTP Adaptive Streaming manifest file.
RI-14 {MED} The CDNI Request Routing Redirection interface should
correlate the HTTP Adaptive Stream manifest file to the
related chunks referenced in the manifest file.
RI-15 {MED} The CDNI Request Routing Redirection interface should
allow for an efficient method of transferring request routing
information for multiple chunks from the Downstream CDN to the
Upstream CDN as part of the recursive request routing process.
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. CDNI Footprint & Capabilities Advertisement Interface Requirements</span>
The main function of the CDNI Footprint & Capabilities Advertisement
interface (FCI) is to allow the Downstream CDN to advertise the
information regarding its footprint and capabilities to the Upstream
CDN.
FCI-1 {HIGH} The CDNI Footprint & Capabilities Advertisement
interface shall allow the Downstream CDN to communicate to the
Upstream CDN coarse information about the Downstream CDN
ability and/or willingness to handle requests from the
Upstream CDN. For example, this could potentially include a
binary signal ("Downstream CDN ready/not-ready to take
additional requests from Upstream CDN") to be used in case of
excessive load or failure condition in the Downstream CDN.
FCI-2 {MED} The CDNI Footprint & Capabilities Advertisement
interface should allow the Downstream CDN to communicate to
the Upstream CDN aggregate information to facilitate CDN
selection during request routing, such as Downstream CDN
capabilities, resources and affinities (i.e., preferences or
cost). This information could, for example, include:
* supported content types and delivery protocols
* footprint (e.g., Layer 3 coverage).
* a set of metrics/attributes (e.g., streaming bandwidth,
storage resources, distribution and delivery priority).
<span class="grey">Leung & Lee Informational [Page 12]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-13" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
* a set of affinities (e.g., preferences, indication of
distribution/delivery fees).
* information to facilitate request redirection (e.g.,
Reachability information of Downstream CDN Request Routing
system).
[Note: Some of this information -- such as supported content
types and delivery protocols -- may also potentially be taken
into account by the Distribution system in the Upstream CDN
for pre-positioning of content and/or metadata in the
Downstream CDN in case of pre-positioned content acquisition
and/or pre-positioned CDNI Metadata acquisition.]
FCI-3 {MED} In the case of cascaded redirection, the CDNI Footprint
& Capabilities Advertisement interface should allow the
Downstream CDN to also include in the information communicated
to the Upstream CDN, information on the capabilities,
resources and affinities of CDNs to which the Downstream CDN
may (in turn) redirect requests received by the Upstream CDN.
In that case, the CDNI Request Routing interface shall prevent
looping of such information exchange.
FCI-4 {LOW} The CDNI Footprint & Capabilities Advertisement
interface may allow the Downstream CDN to communicate to the
Upstream CDN aggregate information on CDNI administrative
limits and policy. This information can be taken into account
by the Upstream CDN Request Routing system in its CDN
Selection decisions. This information could, for example,
include:
* maximum number of requests redirected by the Upstream CDN
to be served simultaneously by the Downstream CDN.
* maximum aggregate volume of content (e.g., in Terabytes) to
be delivered by the Downstream CDN over a time period.
FCI-5 {MED} The CDNI Footprint & Capabilities Advertisement
interface should support advertisement of the following types
of capabilities:
* delivery protocol (e.g., HTTP versus Real Time Messaging
Protocol [<a href="#ref-RTMP" title=""Adobe's Real Time Messaging Protocol"">RTMP</a>]).
* acquisition protocol (for acquiring content from an
Upstream CDN).
<span class="grey">Leung & Lee Informational [Page 13]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-14" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
* redirection mode (e.g., DNS Redirection versus HTTP
Redirection).
* capabilities related to CDNI Logging (e.g., supported
logging mechanisms).
* capabilities related to CDNI Metadata (e.g., authorization
algorithms or support for proprietary vendor metadata).
FCI-6 {LOW} The CDNI Control interface may allow exchange and
negotiation of delivery authorization mechanisms to be
supported across the CDNs (e.g., URI-signature-based
validation).
FCI-7 {HIGH} The CDNI Footprint & Capabilities Advertisement
interface shall support extensible fields used to convey the
CDN capabilities and methods to indicate the footprint in the
advertisement from the Downstream CDN to the Upstream CDN.
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. CDNI Metadata Interface Requirements</span>
The primary function of the CDNI Metadata interface (MI) is to allow
the Distribution system in interconnected CDNs to communicate to
ensure Content Distribution Metadata with inter-CDN scope can be
exchanged across CDNs. We observe that while the CDNI Metadata
Distribution protocol is currently discussed as a single "protocol",
further analysis will determine whether the corresponding
requirements are to be realized over a single interface and protocol,
or over multiple interfaces and protocols. For example, a subset of
the CDNI Metadata might be conveyed in-band along with the actual
content acquisition across CDNs (e.g. content MD5 in HTTP header)
while another subset might require an out-of-band interface and
protocol (e.g., geo-blocking information).
MI-1 {HIGH} The CDNI Metadata interface shall allow the Upstream
CDN to provide the Downstream CDN with content distribution
metadata of inter-CDN scope.
MI-2 {HIGH} The CDNI Metadata interface shall support exchange of
CDNI Metadata for both the dynamic content acquisition model
and the pre-positioning content acquisition model.
MI-3 {HIGH} The CDNI Metadata interface shall support a mode where
no, or a subset of, the CDNI Metadata is initially
communicated to the Downstream CDN along with information
about how/where to acquire the rest of the CDNI Metadata
(i.e., Dynamic CDNI Metadata acquisition).
<span class="grey">Leung & Lee Informational [Page 14]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-15" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
MI-4 {MED} The CDNI Metadata interface should support a mode where
all the relevant CDNI Metadata is initially communicated to
the Downstream CDN (i.e., pre-positioned CDNI Metadata
acquisition).
MI-5 {HIGH} Whether in the pre-positioned content acquisition model
or in the dynamic content acquisition model, the CDNI Metadata
interface shall provide the necessary information to allow the
Downstream CDN to acquire the content from an upstream source
(e.g., acquisition protocol and Uniform Resource Identifier in
Upstream CDN -- or rules to construct this URI).
MI-6 {HIGH} The CDNI Metadata shall allow signaling of one or more
upstream sources, where each upstream source can be in the
Upstream CDN, in another CDN, the CSP origin server or any
arbitrary source designated by the Upstream CDN. Note that
some upstream sources (e.g., the content origin server) may or
may not be willing to serve the content to the Downstream CDN;
if this policy is known to the Upstream CDN, then it may omit
those sources when exchanging CDNI Metadata.
MI-7 {HIGH} The CDNI Metadata interface (possibly in conjunction
with the CDNI Control interface) shall allow the Upstream CDN
to request addition and modification of CDNI Metadata into the
Downstream CDN.
MI-8 {HIGH} The CDNI Metadata interface (possibly in conjunction
with the CDNI Control interface) shall allow removal of
obsolete CDNI Metadata from the Downstream CDN (this could,
for example, be achieved via an explicit removal request from
the Upstream CDN or via expiration of a Time-To-Live (TTL)
associated with the CDNI Metadata).
MI-9 {HIGH} The CDNI Metadata interface shall allow association of
CDNI Metadata at the granularity of individual object. This
is necessary to achieve fine-grain CDNI Metadata distribution
at the level of an individual object when necessary.
MI-10 {HIGH} The CDNI Metadata interface shall allow association of
CDNI Metadata at the granularity of an object set. This is
necessary to achieve scalable distribution of metadata when a
large number of objects share the same distribution policy.
MI-11 {HIGH} The CDNI Metadata interface shall support multiple
levels of inheritance with precedence to more specific
metadata. For example, the CDNI Metadata Distribution
protocol may support metadata that is applicable to any
content, metadata that is applicable to a content collection
<span class="grey">Leung & Lee Informational [Page 15]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-16" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
and metadata that is applicable to an individual content where
content level metadata overrides content collection metadata
that overrides metadata for any content.
MI-12 {HIGH} The CDNI Metadata interface shall ensure that
conflicting metadata with overlapping scope are prevented or
deterministically handled.
MI-13 {HIGH} The CDNI Metadata interface shall allow signaling of
content distribution control policies. For example, this
could potentially include:
* geo-blocking information (i.e., information defining
geographical areas where the content is to be made
available or blocked).
* availability windows (i.e., information defining time
windows during which the content is to be made available or
blocked; expiration time may also be included to remove
content).
* delegation whitelist/blacklist (i.e., information defining
through which Downstream CDNs the content may/may not be
delivered)
MI-14 {HIGH} The CDNI Metadata interface shall be able to exchange a
set of metadata elements with specified semantics (e.g., start
of time window, end of time window).
MI-15 {HIGH} The CDNI Metadata interface shall allow exchange of
opaque metadata element, whose semantic is not defined in CDNI
but established by private CDN agreement.
MI-16 {HIGH} The CDNI Metadata interface shall allow signaling of
authorization checks and validation that are to be performed
by the Surrogate before delivery. For example, this could
potentially include the need to validate information (e.g.,
Expiry time, Client IP address) required for access
authorization.
MI-17 {MED} The CDNI Metadata interface should allow signaling of
CDNI-relevant Surrogate cache behavior parameters. For
example, this could potentially include:
* control of whether the query string of HTTP URI is to be
ignored by Surrogate cache.
<span class="grey">Leung & Lee Informational [Page 16]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-17" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
* enforcement of caching directives by Downstream CDN that
are different than the ones signaled in the HTTP headers
(e.g., "Expires" field).
* rate-pacing by Downstream CDN for content delivery (e.g.,
Progressive Download).
MI-18 {HIGH} The CDNI Metadata interface shall provide indication of
related content (e.g., HTTP Adaptive Bit Rate chunks) by the
Content Collection ID (CCID) metadata. This could be used by
the Downstream CDN for operations on the group of content.
For example, this could potentially include:
* content acquisition for the entire set of files when one
piece of content is requested.
* local file management and storage bundles all the files for
the content.
* purging the entire set of files associated with the
content.
* logging of the delivery of the content for the session when
at least one file in the set was delivered.
MI-19 {MED} The CDNI Metadata interface should support an optional
mechanism allowing the Upstream CDN to indicate to the
Downstream CDN which CDNI Log fields are to be provided for
all content items, for specific sets of content items, or for
specific content items delivered using HTTP. A CDNI
implementation that does not support this optional CDNI
Metadata Distribution interface mechanism shall ignore this
log format indication and generate CDNI Logging format for
HTTP Adaptive Streaming using the default set of CDNI Logging
fields. (Note: This function may be part of the CDNI Metadata
interface or the CDNI Control interface.)
MI-20 {MED} The CDNI Metadata interface should allow the Upstream
CDN to signal to the Downstream CDN the Content Collection ID
value for all, for specific sets of, or for specific content
items delivered using HTTP. Whenever the Downstream CDN is
instructed by the Upstream CDN to report the Content
Collection ID field in the log records, the Downstream CDN is
to use the value provided through the CDNI Metadata interface
for the corresponding content. Note the Session ID field
along with Content Collection ID may be used for HTTP Adaptive
Streaming content.
<span class="grey">Leung & Lee Informational [Page 17]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-18" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
MI-21 {MED} The CDNI Metadata interface should allow the Upstream
CDN to signal to the Downstream CDN the Authorization Group ID
value for all the related HTTP Adaptive Streaming content
(i.e., manifest file and chunks). The authorization result of
a content (e.g., manifest file) is transferred over to related
content (e.g., chunks).
MI-22 {HIGH} The CDNI Metadata interface shall support extensible
format for CDNI Metadata delivery from the Upstream CDN to the
Downstream CDN.
<span class="h2"><a class="selflink" id="section-8" href="#section-8">8</a>. CDNI Logging Interface Requirements</span>
This section identifies the requirements related to the CDNI Logging
interface (LI). We observe that while the CDNI Logging interface is
currently discussed as a single "protocol", further analysis will
determine whether the corresponding requirements are to be realized
over a single interface and protocol or over multiple interfaces and
protocols.
LI-1 {HIGH} The CDNI Logging interface and architecture shall
ensure reliable transfer of CDNI logging information across
CDNs.
LI-2 {HIGH} The CDNI Logging interface shall provide logging of
deliveries and incomplete deliveries to User Agents performed
by the Downstream CDN as a result of request redirection by
the Upstream CDN.
LI-3 {MED} In the case of cascaded CDNs, the CDNI Logging interface
should allow the Downstream CDN to report to the Upstream CDN
logging for deliveries and incomplete deliveries performed by
the Downstream CDN itself as well as logging for deliveries
and incomplete deliveries performed by cascaded CDNs on behalf
of the Downstream CDN.
LI-4 {HIGH} The CDNI Logging interface shall support batch/offline
exchange of logging records.
LI-5 {MED} The CDNI Logging interface should also support an
additional mechanism taking into account the timing
constraints for some types of logging records (e.g., near-real
time for monitoring and analytics applications).
LI-6 {HIGH} The CDNI Logging interface shall define a log file
format and a set of fields to be exported for various CDNI
Logging events.
<span class="grey">Leung & Lee Informational [Page 18]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-19" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
LI-7 {HIGH} The CDNI Logging interface shall define a transport
mechanism to exchange CDNI Logging files.
LI-8 {MED} The CDNI Logging interface should allow a CDN to query
another CDN for relevant current logging records (e.g., for
on-demand access to real-time logging information).
LI-9 {LOW} The CDNI Logging interface may support aggregate/
summarized logs (e.g., total bytes delivered for a content
regardless of individual User Agents to which it was
delivered).
LI-10 {LOW} The CDNI Logging interface may support logging of
performance data for deliveries to User Agents performed by
the Downstream CDN as a result of request redirection by the
Upstream CDN. Performance data may include various traffic
statistics (the specific parameters are to be determined).
The CDNI Logging interface may support the Upstream CDN to
indicate the nature and contents of the performance data to be
reported by the Downstream CDN.
LI-11 {MED} The CDNI Logging interface should support logging of
consumed resources (e.g., storage, bandwidth) to the Upstream
CDN for deliveries where content is stored by the Downstream
CDN for delivery to User Agents. The information logged may
include the type of storage (e.g., Origin, Intermediate, Edge,
Cache) as well as the amount of storage (e.g., total GB, GB
used, per time period, per content domain) all of which may
impact the cost of the services.
LI-12 {MED} In the case of cascaded CDNs, the CDNI Logging interface
should support the Downstream CDN to report consumed resources
(e.g. storage, bandwidth) to the Upstream CDN where content
is stored by the Downstream CDN itself as well as logging for
storage resources when content storage is performed by
cascaded CDNs on behalf of the Downstream CDN.
LI-13 {HIGH} The CDNI Logging interface shall support logging of
deleted objects from the Downstream CDN to the Upstream CDN as
a result of explicit delete requests on via the CDNI Control
interface from the Upstream CDN.
LI-14 {HIGH} The CDNI Logging interface shall support the exchange
of extensible log file formats to support proprietary
information fields. These information fields shall be agreed
upon ahead of time between the corresponding CDNs.
<span class="grey">Leung & Lee Informational [Page 19]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-20" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
LI-15 {HIGH} The CDNI Logging interface shall allow a CDN to notify
another CDN about which CDNI Logging information is available
for transfer and/or no longer available (e.g., it exceeded
some logging retention period or some logging retention
volume).
LI-16 {MED} The CDNI Logging interface should support the ability
for the Downstream CDN to include the Content Collection ID
and Session ID fields in CDNI log entries generated for HTTP
Adaptive Streaming content.
LI-17 {MED} The CDNI Logging interface should provide privacy
protection by not disclosing information that can be used to
identify the user (e.g., method that anonymizes the IP address
carried in the logging field). The use of the privacy
protection mechanism is optional.
<span class="h2"><a class="selflink" id="section-9" href="#section-9">9</a>. CDNI Security Requirements</span>
This section identifies the requirements related to the CDNI
security. Some of these are expected to affect multiple or all
protocols.
SEC-1 {HIGH} All the CDNI interface shall support secure operation
over unsecured IP connectivity (e.g., the Internet). This
includes authentication, confidentiality, integrity protection
as well as protection against spoofing and replay.
SEC-2 {HIGH} The CDNI solution shall provide sufficient protection
against denial-of-service attacks. This includes protection
against spoofed delivery requests sent by User Agents directly
to a Downstream CDN attempting to appear as if they had been
redirected by a given Upstream CDN when they have not.
SEC-3 {MED} The CDNI solution should be able to ensure that for any
given request redirected to a Downstream CDN, the Downstream
CDN can determine the Upstream CDN that redirected the request
directly to the Downstream CDN (leading to that request being
served by that CDN, or being further redirected).
SEC-4 {MED} The CDNI solution should be able to ensure that for any
given transaction log generated by the Downstream CDN and
communicated to an Upstream CDN, the Upstream CDN can confirm
the transmitted log record corresponds to a request
redirection by the Upstream CDN.
<span class="grey">Leung & Lee Informational [Page 20]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-21" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
SEC-5 {LOW} The CDNI solution may provide a mechanism allowing an
Upstream CDN that has credentials to acquire content from the
CSP origin server (or another CDN), to allow establishment of
credentials authorizing the Downstream CDN to acquire the
content from the CSP origin server (or the other CDN) (e.g.,
in case the content cannot be acquired from the Upstream CDN).
<span class="h2"><a class="selflink" id="section-10" href="#section-10">10</a>. Security Considerations</span>
This document discusses CDNI security requirements in <a href="#section-9">Section 9</a>.
<span class="h2"><a class="selflink" id="section-11" href="#section-11">11</a>. Contributors</span>
This document reflects contributions from the following individuals:
Francois Le Faucheur
Cisco Systems
EMail: flefauch@cisco.com
Mahesh Viveganandhan
Cisco Systems
EMail: mvittal@cisco.com
Grant Watson
Alcatel-Lucent (Velocix)
EMail: gwatson@velocix.com
<span class="h2"><a class="selflink" id="section-12" href="#section-12">12</a>. Acknowledgements</span>
This document leverages the earlier work of the IETF CDI working
group in particular, as documented in [<a href="#ref-REQ-ROUTE">REQ-ROUTE</a>], [<a href="#ref-DIST-REQS">DIST-REQS</a>], and
[<a href="#ref-AAA-REQS">AAA-REQS</a>].
The authors would like to thank Gilles Bertrand, Christophe Caillet,
Bruce Davie, Phil Eardley, Ben Niven-Jenkins, Agustin Schapira, Emile
Stephan, Eric Burger, Susan He, Kevin Ma, Daryl Malas, Iuniana
Oprescu, and Spencer Dawkins for their input. Serge Manning along
with Robert Streijl, Vishwa Prasad, Percy Tarapore, Mike Geller, and
Ramki Krishnan contributed to this document by addressing the
requirements of the ATIS Cloud Services Forum.
Ray Brandenburg, Matt Caufield, and Gilles Bertrand provided valuable
inputs for HTTP Adaptive Streaming, CDNI Metadata interface, and CDNI
Logging interface, respectively.
Stephen Farrell, Adrian Farrel, Benoit Claise, Sean Turner, Christer
Holmberg, and Carlos Pignataro provided review comments that helped
improve the document.
<span class="grey">Leung & Lee Informational [Page 21]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-22" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
<span class="h2"><a class="selflink" id="section-13" href="#section-13">13</a>. References</span>
<span class="h3"><a class="selflink" id="section-13.1" href="#section-13.1">13.1</a>. Normative References</span>
[<a id="ref-RFC6707">RFC6707</a>] Niven-Jenkins, B., Le Faucheur, F., and N. Bitar, "Content
Distribution Network Interconnection (CDNI) Problem
Statement", <a href="./rfc6707">RFC 6707</a>, September 2012.
[<a id="ref-RFC7336">RFC7336</a>] Peterson, L., Davie, B., and R. Brandenburg, Ed.,
"Framework for Content Distribution Network
Interconnection (CDNI)", <a href="./rfc7336">RFC 7336</a>, August 2014.
<span class="h3"><a class="selflink" id="section-13.2" href="#section-13.2">13.2</a>. Informative References</span>
[<a id="ref-AAA-REQS">AAA-REQS</a>]
Gilletti, D., Nair, R., Scharber, J., and J. Guha,
"Content Internetworking (CDI) Authentication,
Authorization, and Accounting Requirements", Work in
Progress, June 2001.
[<a id="ref-ATIS-0800042">ATIS-0800042</a>]
ATIS, "ATIS IPTV Content on Demand Service", ATIS-0800042
v002, September 2011, <<a href="https://www.atis.org/docstore/product.aspx?id=25670">https://www.atis.org/docstore/</a>
<a href="https://www.atis.org/docstore/product.aspx?id=25670">product.aspx?id=25670</a>>.
[<a id="ref-DIST-REQS">DIST-REQS</a>]
Amini, L., "Distribution Requirements for Content
Internetworking", Work in Progress, November 2001.
[<a id="ref-REQ-ROUTE">REQ-ROUTE</a>]
Cain, B., "Request Routing Requirements for Content
Internetworking", Work in Progress, November 2001.
[<a id="ref-RFC6770">RFC6770</a>] Bertrand, G., Stephan, E., Burbridge, T., Eardley, P., Ma,
K., and G. Watson, "Use Cases for Content Delivery Network
Interconnection", <a href="./rfc6770">RFC 6770</a>, November 2012.
[<a id="ref-RFC7230">RFC7230</a>] Fielding, R. and J. Reschke, "Hypertext Transfer Protocol
(HTTP/1.1): Message Syntax and Routing", <a href="./rfc7230">RFC 7230</a>, June
2014.
[<a id="ref-RTMP">RTMP</a>] Parmar, H., Ed. and M. Thornburgh, Ed., "Adobe's Real Time
Messaging Protocol", December 2012,
<<a href="http://www.adobe.com/content/dam/Adobe/en/devnet/rtmp/pdf/rtmp_specification_1.0.pdf">http://www.adobe.com/content/dam/Adobe/en/devnet/rtmp/</a>
<a href="http://www.adobe.com/content/dam/Adobe/en/devnet/rtmp/pdf/rtmp_specification_1.0.pdf">pdf/rtmp_specification_1.0.pdf</a>>.
<span class="grey">Leung & Lee Informational [Page 22]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-23" ></span>
<span class="grey"><a href="./rfc7337">RFC 7337</a> CDNI Requirements August 2014</span>
Authors' Addresses
Kent Leung (editor)
Cisco Systems
170 West Tasman Drive
San Jose, CA 95134
USA
Phone: +1 408 526 5030
EMail: kleung@cisco.com
Yiu Lee (editor)
Comcast
One Comcast Center
Philadelphia, PA 19103
USA
EMail: yiu_lee@cable.comcast.com
Leung & Lee Informational [Page 23]
</pre>
|