Description
The Network Data Analytics Function (NWDAF) is a standardized analytics and machine learning-enabled function within the 5G Core network architecture, introduced in 3GPP Release 15. It serves as a centralized or distributed analytics engine that collects, correlates, and analyzes data from various network functions, applications, and external sources to generate insights, predictions, and recommendations. The NWDAF's primary role is to provide data-driven intelligence to other 5G Core control plane and management plane functions, enabling automated network optimization, proactive service assurance, and enhanced user experience. Architecturally, it is defined as a service-based architecture (SBA) function that exposes northbound analytics services via standardized APIs, allowing consumers like the Policy Control Function (PCF), Network Slice Selection Function (NSSF), and Operations, Administration and Management (OAM) systems to request analytics.
NWDAF operates through a structured data pipeline involving data collection, analytics processing, and result dissemination. It collects data from multiple sources categorized as network data (e.g., from AMF, SMF, UPF regarding session metrics, mobility patterns, QoS), application data (e.g., from Application Functions (AF) about service requirements), and management data (e.g., from OAM about performance and faults). This data can be ingested via push or pull mechanisms using standardized interfaces like Nnwdaf_EventsSubscription. Internally, the NWDAF employs analytics models—which can be rule-based, statistical, or machine learning models—to process the data. These models perform tasks such as anomaly detection, trend analysis, prediction of network load or user mobility, and identification of slice performance issues. The analytics results, which include historical reports, real-time insights, or future predictions, are then provided to consumer functions to influence decisions, such as adjusting QoS policies, triggering network slice reconfiguration, or optimizing handover parameters.
Key components of the NWDAF include the Analytics Logical Function (which hosts the analytics models), the Data Collection Coordination Function (which manages data acquisition from sources), and the Analytics Exposure Function (which handles API exposure and subscription management). The NWDAF supports both on-demand analytics queries and subscription-based continuous analytics reporting. For example, a PCF may subscribe to NWDAF for analytics on expected network congestion in a certain area to pre-emptively adjust policy rules, or an OAM system may request predictions on slice resource utilization for capacity planning. The NWDAF also facilitates model training and lifecycle management, potentially leveraging federated learning across multiple NWDAF instances. Its integration with the 5G Core is pervasive, impacting nearly all aspects of network operation from mobility management and session management to network slicing and edge computing, making it a cornerstone of 5G's autonomous network vision.
Purpose & Motivation
The NWDAF was created to address the growing complexity and dynamic nature of 5G networks, which support diverse services with vastly different requirements—from enhanced mobile broadband to massive IoT and ultra-reliable low-latency communications. Traditional network management relied on reactive, manual interventions based on static thresholds, which were inadequate for 5G's scale, agility, and service diversity. The NWDAF introduces a native, standardized analytics capability within the 5G Core to enable data-driven, proactive, and automated network operations. It solves the problem of siloed data across network functions by providing a centralized analytics hub that correlates information to derive holistic insights, thereby improving network efficiency, resource utilization, and service quality.
Historically, network analytics were performed by external OAM systems or proprietary solutions that lacked tight integration with the core network control plane. This resulted in delayed responses, limited real-time capabilities, and inability to directly influence network behavior. With the advent of network slicing, edge computing, and service-based architecture in 5G, the need for intelligent, closed-loop automation became critical. Release 15 of 3GPP laid the foundation for NWDAF as part of the 5G system's native intelligence, motivated by operators' demands for reduced operational costs, improved customer experience, and support for new vertical services. The NWDAF enables predictive maintenance, dynamic resource allocation, and personalized service delivery by leveraging machine learning and big data techniques within the telecom domain.
Furthermore, NWDAF addresses limitations of previous approaches by providing a standardized framework for analytics that ensures interoperability across vendors and network functions. It allows network operators to deploy advanced analytics without relying on fragmented, vendor-specific solutions. By embedding analytics directly into the network architecture, NWDAF facilitates real-time decision-making, such as instantly adapting to traffic spikes or mitigating congestion before it impacts users. Its creation was also driven by the vision of self-organizing networks (SON) evolving towards fully autonomous networks, where NWDAF acts as the 'brain' that analyzes data and triggers actions through policy control and management systems. This transforms 5G from a connectivity platform into an intelligent, adaptive infrastructure capable of meeting the stringent and varied demands of future digital society.
Key Features
- Centralized collection and correlation of multi-source network data
- Support for predictive analytics using ML models
- Standardized service-based APIs for analytics exposure
- Subscription-based and on-demand analytics reporting
- Integration with 5G control plane for closed-loop automation
- Support for network slice-specific analytics and assurance
Evolution Across Releases
Introduced NWDAF as a new 5G Core network function with basic analytics capabilities. Defined initial architecture, data collection from core network functions (AMF, SMF), and analytics services for load level and service experience. Established foundational APIs for event subscription and notification.
Defining Specifications
| Specification | Title |
|---|---|
| TS 23.435 | 3GPP TS 23.435 |
| TS 23.436 | 3GPP TS 23.436 |
| TS 23.482 | 3GPP TS 23.482 |
| TS 23.501 | 3GPP TS 23.501 |
| TS 23.503 | 3GPP TS 23.503 |
| TS 23.700 | 3GPP TS 23.700 |
| TS 23.758 | 3GPP TS 23.758 |
| TS 23.791 | 3GPP TS 23.791 |
| TS 26.531 | 3GPP TS 26.531 |
| TS 26.532 | 3GPP TS 26.532 |
| TS 26.804 | 3GPP TS 26.804 |
| TS 26.812 | 3GPP TS 26.812 |
| TS 26.941 | 3GPP TS 26.941 |
| TS 26.942 | 3GPP TS 26.942 |
| TS 28.201 | 3GPP TS 28.201 |
| TS 28.535 | 3GPP TS 28.535 |
| TS 28.536 | 3GPP TS 28.536 |
| TS 28.879 | 3GPP TS 28.879 |
| TS 29.503 | 3GPP TS 29.503 |
| TS 29.507 | 3GPP TS 29.507 |
| TS 29.508 | 3GPP TS 29.508 |
| TS 29.510 | 3GPP TS 29.510 |
| TS 29.512 | 3GPP TS 29.512 |
| TS 29.513 | 3GPP TS 29.513 |
| TS 29.514 | 3GPP TS 29.514 |
| TS 29.517 | 3GPP TS 29.517 |
| TS 29.518 | 3GPP TS 29.518 |
| TS 29.520 | 3GPP TS 29.520 |
| TS 29.521 | 3GPP TS 29.521 |
| TS 29.523 | 3GPP TS 29.523 |
| TS 29.530 | 3GPP TS 29.530 |
| TS 29.536 | 3GPP TS 29.536 |
| TS 29.543 | 3GPP TS 29.543 |
| TS 29.551 | 3GPP TS 29.551 |
| TS 29.552 | 3GPP TS 29.552 |
| TS 29.554 | 3GPP TS 29.554 |
| TS 29.562 | 3GPP TS 29.562 |
| TS 29.564 | 3GPP TS 29.564 |
| TS 29.574 | 3GPP TS 29.574 |
| TS 29.575 | 3GPP TS 29.575 |
| TS 29.576 | 3GPP TS 29.576 |
| TS 29.591 | 3GPP TS 29.591 |
| TS 29.889 | 3GPP TS 29.889 |
| TS 29.890 | 3GPP TS 29.890 |
| TS 32.240 | 3GPP TR 32.240 |
| TS 32.847 | 3GPP TR 32.847 |
| TS 33.127 | 3GPP TR 33.127 |
| TS 33.794 | 3GPP TR 33.794 |
| TS 33.866 | 3GPP TR 33.866 |
| TS 33.867 | 3GPP TR 33.867 |