PFCP explained

Packet Forwarding Control Protocol (PFCP) is a 3GPP protocol used on the Sx/N4 interface between the control plane and the user plane function, specified in TS 29.244.[1] It is one of the main protocols introduced in the 5G Next Generation Mobile Core Network (aka 5GC[2]), but also used in the 4G/LTE EPC to implement the Control and User Plane Separation (CUPS).[3] PFCP and the associated interfaces seek to formalize the interactions between different types of functional elements used in the Mobile Core Networks as deployed by most operators providing 4G, as well as 5G, services to mobile subscribers. These two types of components are:

  1. The Control Plane (CP) functional elements, handling mostly signaling procedures (e.g. network attachment procedures, management of User-data Plane paths and even delivery of some light-weight services as SMS)
  2. The User-data Plane (UP) functional elements, handling mostly packet forwarding, based on rules set by the CP elements (e.g. packet forwarding for IPv4, IPv6 - or possibly even Ethernet with future 5G deployments - between the various supported wireless RANs and the PDN representing the Internet or an enterprise network).

PFCP's scope is similar to that of OpenFlow, however it was engineered to serve the particular use-case of Mobile Core Networks.

PFCP is also used on the interface between the control plane and user plane functions of a disaggregated BNG, as defined by the BroadBand Forum in TR-459.

Overview

Albeit similar to GTP in concepts and implementation, PFCP is complementary to it. It provides the control means for a signaling component of the Control-Plane to manage packet processing and forwarding performed by a User-Plane component. Typical EPC or 5G Packet Gateways are split by the protocol in two functional parts, allowing for a more natural evolution and scalability.The PFCP protocol is used on the following 3GPP mobile core interfaces:

Note: Sxa and Sxb can be combined, in case a merged SGW/PGW is implemented.

Functionality

The Control-Plane functional element (e.g. PGW-C, SMF) controls the packet processing and forwarding in the User-Plane functional elements (e.g. PGW-U, UPF), by establishing, modifying or deleting PFCP Sessions.

User plane packets shall be forwarded between the CP and UP functions by encapsulating the user plane packets using GTP-U encapsulation (see 3GPP TS 29.281 [3]). For forwarding data from the UP function to the CP function, the CP function shall provision Packet Detection Rules (PDR) per PFCP session context, with the Packet Detection Information (PDI) identifying the user plane traffic to forward to the CP function and with a Forwarding Action Rule (FAR) set with the Destination Interface "CP function side" and set to perform GTP-U encapsulation and to forward the packets to a GTP-u F-TEID uniquely assigned in the CP function per PFCP session and PDR. The CP function shall then identify the PDN connection and the bearer to which the forwarded data belongs by the Fully Qualified TEID (F-TEID) in the header of the encapsulating GTP-U packet. For forwarding data from the CP function to the UP function, the CP function shall provision one or more PDR(s) per PFCP session context, with the PDI set with the Source Interface "CP function side" and identifying the GTP-u F-TEID uniquely assigned in the UP function per PDR, and with a FAR set to perform GTP-U decapsulation and to forward the packets to the intended destination. URRs and QERs may also be configured.

Per session multiple PDRs, FARs, QoS Enforcement Rules (QER), Usage Reporting Rules (URR) and/or Buffering Action Rules (BAR) are sent.

Here are the main concepts used, organized in their logical association model:

Messages

8
910111213141516171819202122232425262728293031
Bytes 0..3Version (1)(spare 0s)FOMPSMessage TypeMessage Length (in bytes, not including the first 4)
Bytes 4..11if (S flag set) then SEID; else these bytes are missing
Bytes 8..11
Bytes 4..7 or 12..15Sequence Numberif (MP flag set) then Message Priority; else (spare 0s)(spare 0s)
Bytes 8..(MsgLen+4) or 16..(MsgLen+4)Zero or more Information Elements
8
910111213141516171819202122232425262728293031
Bytes 0..3TypeIE Length (in bytes, not including the first 4)
Bytes 4..IELen+4if (Type >= 32768) then Enterprise-ID; else this is part of the PayloadPayload (cont.) ...
Payload cont. ...
IEs are defined either as having a proprietary encoding, or as grouped. Grouped IEs are simply a list of other IEs, encoded one after the other like in the PFCP Message Payload.

IE Types 0..32767 are 3GPP specific and do not have an Enterprise-ID set. IE Types 32768..65535 can be used by custom implementation and the Enterprise-ID must be set to the IANA SMI Network Management Private Enterprise Codes[4] of the issuing party.

Messages

Message Type! rowspan="2"
MessageInterface ApplicabilityDirectionPurpose
RequestResponseSxaSxbSxcN4RequestResponse
0(Reserved)
(1..49)Node Related Messages
12HeartbeatXXXXCP ↔ UPCan be optionally used between communication peers which have an established association, to check if the other node is alive. A Recovery-Timestamp is used to detect if the other peer has been restarted.
34PFD Management-XXXCP → UPUP → CPOptional feature, to provision PFDs per Application identifier, outside of the regular PFCP sessions.
56Association SetupXXXXCP ↔ UPSetup and update an association between CP and UP functional elements. Includes list of optional features, to inform the other elements about capabilities; other configuration elements are passed as well.No session related messages should be exchanged before this procedure.

While the Association-Release is only triggered by the CP, the UP can request it as part of the Association-Update-Request.

78Association UpdateXXXXCP ↔ UP
910Association ReleaseXXXXCP → UPUP → CP
-11Version Not SupportedXXXXCP ↔ UPError response to all requests which do not cover the implemented versions (currently only version 1 defined).
1213Node ReportXXXXUP → CPCP → UPSent by the UP function to report information which is not part of a session, but potentially general (e.g. user-plane path failure).
1415Session Set DeletionXX-CP → UPUP → CPSent by the CP function to indicate a partial failure, requesting deletion of all sessions affected.
(50..99)Session Related Messages
5051Session EstablishmentXXXXCP → UPUP → CPUsed by the CP to set up, modify and remove sessions consisting of sets of rules for processing and forwarding UP traffic. These are the main functional message of the PFCP application domain.The UP may include Usage Report information in the answer, such that an additional Session-Report message would be avoided.
5253Session ModificationXXXX
5455Session DeletionXXXX
5657Session ReportXXXXUP → CPCP → UPReport from UP Usage Report information based on the packet processing and forwarding procedures: downlink data (notification of new packets queued), usage report (volume, time, etc based information, for charging purposes), errors and/or inactivity indications.
(100..255)Other Messages

Transport

Very similar to GTP-C, PFCP uses UDP. Port 8805 is reserved.[5]

For reliability, a similar re-transmission strategy as for GTP-C is employed, lost messages being sent N1-times at T1-intervals. Transactions are identified by the 3-byte long Sequence Number, the IP address and port of the communication peer.

The protocol includes an own Heart-beat Request/Response model, which allows monitoring the availability of communication peers and detecting restarts (by use of a Recovery-Timestamp Information Element).

For User-Plane packet exchanges between the Control and User Plane functional elements, GTP-U for the Sx-u interface, or alternatively a simpler UDP or Ethernet encapsulation for the N4-u interface (to be confirmed, as standards are still incomplete).

See also

Notes

  1. http://www.3gpp.org/DynaReport/29244.htm 3GPP TS 29.244 LTE; Interface between the Control plane Plane and the User Plane of EPC Nodes
  2. Web site: The 5G Core Network (5GC) – Part 1 – Network Entities. 25 April 2018 .
  3. Web site: Control and User Plane Separation of EPC nodes (CUPS). Kevin. Flynn. www.3gpp.org.
  4. https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers
  5. Web site: Service Name and Transport Protocol Port Number Registry. www.iana.org.