External Data Flows

The following are external data flows:

Table 5-2 External Data Flows

Data Flow	Protocol	Description
DF1: Configuration	SSH	The installer or administrator accesses the orchestration system, which is hosted on the Bastion Server. The install or administrator must use ssh keys to access the bastion to a special orchestration account (not root); no password access is allowed.
DF2: Logs, Measurements, Traces	HTTP/HTTPS	The administrator or operator interacts with the common services using web interfaces.
DF3: 5G Signaling	HTTP2 (w/TLS)	All signalling interaction between NFs at a site and NFs at an external site is sent via TLS protected HTTP2.
DF4: Alerts	SNMP (Trap)	All alerting is performed using SNMP traps.

The complete list of network flows including service types and ports are available in Port Flow Appendix.