Description
The Network Data Analytics Function (NWDAF) is a standardized analytics and machine learning-enabled function within the 5G Core network architecture, introduced in 3GPP Release 15. It serves as a centralized or distributed analytics engine that collects, correlates, and analyzes data from various network functions, applications, and external sources to generate insights, predictions, and recommendations. The NWDAF's primary role is to provide data-driven intelligence to other 5G Core control plane and management plane functions, enabling automated network optimization, proactive service assurance, and enhanced user experience. Architecturally, it is defined as a service-based architecture (SBA) function that exposes northbound analytics services via standardized APIs, allowing consumers like the Policy Control Function (PCF), Network Slice Selection Function (NSSF), and Operations, Administration and Management (OAM) systems to request analytics.
NWDAF operates through a structured data pipeline involving data collection, analytics processing, and result dissemination. It collects data from multiple sources categorized as network data (e.g., from AMF, SMF, UPF regarding session metrics, mobility patterns, QoS), application data (e.g., from Application Functions (AF) about service requirements), and management data (e.g., from OAM about performance and faults). This data can be ingested via push or pull mechanisms using standardized interfaces like Nnwdaf_EventsSubscription. Internally, the NWDAF employs analytics models—which can be rule-based, statistical, or machine learning models—to process the data. These models perform tasks such as anomaly detection, trend analysis, prediction of network load or user mobility, and identification of slice performance issues. The analytics results, which include historical reports, real-time insights, or future predictions, are then provided to consumer functions to influence decisions, such as adjusting QoS policies, triggering network slice reconfiguration, or optimizing handover parameters.
Key components of the NWDAF include the Analytics Logical Function (which hosts the analytics models), the Data Collection Coordination Function (which manages data acquisition from sources), and the Analytics Exposure Function (which handles API exposure and subscription management). The NWDAF supports both on-demand analytics queries and subscription-based continuous analytics reporting. For example, a PCF may subscribe to NWDAF for analytics on expected network congestion in a certain area to pre-emptively adjust policy rules, or an OAM system may request predictions on slice resource utilization for capacity planning. The NWDAF also facilitates model training and lifecycle management, potentially leveraging federated learning across multiple NWDAF instances. Its integration with the 5G Core is pervasive, impacting nearly all aspects of network operation from mobility management and session management to network slicing and edge computing, making it a cornerstone of 5G's autonomous network vision.
Purpose & Motivation
The NWDAF was created to address the growing complexity and dynamic nature of 5G networks, which support diverse services with vastly different requirements—from enhanced mobile broadband to massive IoT and ultra-reliable low-latency communications. Traditional network management relied on reactive, manual interventions based on static thresholds, which were inadequate for 5G's scale, agility, and service diversity. The NWDAF introduces a native, standardized analytics capability within the 5G Core to enable data-driven, proactive, and automated network operations. It solves the problem of siloed data across network functions by providing a centralized analytics hub that correlates information to derive holistic insights, thereby improving network efficiency, resource utilization, and service quality.
Historically, network analytics were performed by external OAM systems or proprietary solutions that lacked tight integration with the core network control plane. This resulted in delayed responses, limited real-time capabilities, and inability to directly influence network behavior. With the advent of network slicing, edge computing, and service-based architecture in 5G, the need for intelligent, closed-loop automation became critical. Release 15 of 3GPP laid the foundation for NWDAF as part of the 5G system's native intelligence, motivated by operators' demands for reduced operational costs, improved customer experience, and support for new vertical services. The NWDAF enables predictive maintenance, dynamic resource allocation, and personalized service delivery by leveraging machine learning and big data techniques within the telecom domain.
Furthermore, NWDAF addresses limitations of previous approaches by providing a standardized framework for analytics that ensures interoperability across vendors and network functions. It allows network operators to deploy advanced analytics without relying on fragmented, vendor-specific solutions. By embedding analytics directly into the network architecture, NWDAF facilitates real-time decision-making, such as instantly adapting to traffic spikes or mitigating congestion before it impacts users. Its creation was also driven by the vision of self-organizing networks (SON) evolving towards fully autonomous networks, where NWDAF acts as the 'brain' that analyzes data and triggers actions through policy control and management systems. This transforms 5G from a connectivity platform into an intelligent, adaptive infrastructure capable of meeting the stringent and varied demands of future digital society.
Classification
Detected Changes Across Releases
from 3GPP Change RequestsSpecific changes extracted from the „Change history“ tables of 3GPP specifications (174 CRs across 6 releases). Complements the general historical overview above with the evidence-based evolution of this function.
- Use of NWDAF analytics for decision of MICO mode parameters TS 23.501CR0837
- NEF service for NWDAF analytics TS 23.501CR0964
- CR for TS 23.501 Clarifications NWDAF Discovery and Selection TS 23.501CR0987
- CR for TS 23.501 Clarifications NWDAF Discovery and Selection TS 23.501CR1258
- Input for PCC decision from NWDAF TS 23.503CR0246
- Services invoked by NWDAF TS 29.503CR0241
+ 16 more changes
- Network Slice restriction based on NWDAF analytics TS 23.501CR2567
- NWDAF discovery and selection TS 23.501CR2575
- NWDAF Discovery TS 23.501CR2577
- Extensions of NWDAF services TS 23.501CR2584
- NWDAF discovery and selection based on provided ML models TS 23.501CR2585
- UP path selection enhancement based on analytics info provided by NWDAF TS 23.501CR2586
+ 53 more changes
- Discovery and Selection of the NWDAF Supporting Federated Learning in 5GC TS 23.501CR3772
- NWDAF discovery principle enhancements for enhanced model sharing TS 23.501CR3783
- Discovery and selection of NWDAF with FL support - Resolve EN TS 23.501CR4070
- Update NEF to support NWDAF-assisted application detection TS 23.501CR4105
- Extension of NWDAF registration information to reflect new accuracy checking capability TS 23.501CR3764
- Add NWDAF services and Reference point between two NWDAFs for roaming case TS 23.501CR4428
+ 60 more changes
- VFL support during the discovery of NWDAF, NEF, and AF instances TS 23.501CR5630
- NWDAF model provision for AI positioning TS 23.501CR5635
- NWDAF discovery and selection parameters TS 23.501CR5978
- Support of Feature ID and VFL interoperability indicator for NWDAF, untrusted AF, and trusted Afs TS 29.510CR1145
- Support for TAI-level weights in the NWDAF NF Profile TS 29.510CR1201
- Update of NWDAF discovery TS 29.510CR1248
+ 16 more changes
Explore further
Broader topics and technologies where NWDAF plays a role.
Defining Specifications
3GPP specifications that define or reference NWDAF, with the latest known release. Sourced from the 3GPP document catalog — see methodology.
| Specification | Title | Release |
|---|---|---|
| TS 23.435 vk00 | Network Slice Capability Enablement (NSCE) Architecture | Rel-20 |
| TS 23.436 vk11 | Application Data Analytics Enablement | Rel-20 |
| TS 23.482 vk20 | AIML Enablement (AIMLE) Service Architecture | Rel-20 |
| TS 23.501 vk20 | 5G System Architecture Stage 2 | Rel-20 |
| TS 23.503 vk20 | 5G System Policy and Charging Control Framework | Rel-20 |
| TS 23.700 vk10 | AI/ML Application Layer Support Phase 2 | Rel-20 |
| TR 23.758 vh00 | Study on Edge Application Architecture | Rel-17 |
| TS 23.791 vg20 | NWDAF Data Collection & Analytics Framework | Rel-16 |
| TS 26.531 vj00 | Data Collection & Reporting Architecture for 5G | Rel-19 |
| TS 26.532 vj10 | Data Collection and Reporting API Specification | Rel-19 |
| TS 26.804 vk00 | 5G Media Streaming Architecture Extensions | Rel-20 |
| TR 26.812 vi10 | Technical Report | Rel-18 |
| TR 26.941 vj01 | 5G Media Slicing Extensions | Rel-19 |
| TS 26.942 vk00 | Sustainable Media Metrics and Architectural Impacts for 5G | Rel-20 |
| TS 28.201 vj20 | 5G Network Slice Performance Analytics Charging | Rel-19 |
| TS 28.535 vj00 | Closed Control Loop Assurance Management | Rel-19 |
| TS 28.536 vj20 | Management services for communication service assurance | Rel-19 |
| TS 28.879 vj10 | OAM for Service Management Exposure Study | Rel-19 |
| TS 29.503 vk00 | UDM Service Based Interface Stage 3 | Rel-20 |
| TS 29.507 vk00 | Access and Mobility Policy Control Service Stage 3 | Rel-20 |
| TS 29.508 vk00 | Session Management Event Exposure Service | Rel-20 |
| TS 29.510 vk00 | NRF Services and Protocol Specifications | Rel-20 |
| TS 29.512 vk00 | Session Management Policy Control Service | Rel-20 |
| TS 29.513 vk00 | Policy and Charging Control in 5G System | Rel-20 |
| TS 29.514 vk00 | 3GPP TS 29514 vk00: Policy Authorization Service | Rel-20 |
| TS 29.517 vk00 | AF Event Exposure Service Stage 3 | Rel-20 |
| TS 29.518 vk00 | 3GPP TS 29518 vk00: Namf Service Based Interface | Rel-20 |
| TS 29.520 vk00 | 5G Network Data Analytics Function Services | Rel-20 |
| TS 29.521 vk00 | BSF Binding Support Management Service | Rel-20 |
| TS 29.523 vk00 | Policy Control Event Exposure Service | Rel-20 |
| TS 29.530 vk00 | AF AI/ML Services Stage 3 Protocol | Rel-20 |
| TS 29.536 vk00 | 3GPP TS 29536 vk00: Nnsacf Service Based Interface | Rel-20 |
| TS 29.543 vk01 | Data Transfer Policy Control Services | Rel-20 |
| TS 29.551 vk00 | 3GPP TS 29551 vk00: PFD Management Service Specification | Rel-20 |
| TS 29.552 vk00 | Network Data Analytics Procedures and Data Collection | Rel-20 |
| TS 29.554 vk00 | BDT Policy Control Service (Npcf_BDTPolicyControl) | Rel-20 |
| TS 29.562 vk00 | 5G Service-Based Architecture for Nhss Services | Rel-20 |
| TS 29.564 vk00 | UPF Service Based Interface (Nupf) Stage 3 | Rel-20 |
| TS 29.574 vk00 | Ndccf Service Based Interface (DCCF) | Rel-20 |
| TS 29.575 vk00 | 5G System; ADRF Service Based Interface; Stage 3 | Rel-20 |
| TS 29.576 vk00 | 3GPP Specification for MFAF Service Based Interface | Rel-20 |
| TS 29.591 vk00 | Nnef Southbound SBI Stage 3 Protocol | Rel-20 |
| TS 29.889 vj10 | Study on UPF data collection for AI/ML | Rel-19 |
| TS 29.890 vg00 | CT3 5G System Technical Report | Rel-16 |
| TS 32.240 vk00 | Charging Architecture and Principles in 3GPP | Rel-20 |
| TR 32.847 vi00 | Technical Report | Rel-18 |
| TS 33.127 vj70 | Lawful Interception Architecture and Functions | Rel-19 |
| TS 33.794 vj10 | Study on Zero Trust Security Enablers for 5G | Rel-19 |
| TR 33.866 vh00 | Security aspects of Network Automation enablers for 5GS | Rel-17 |
| TR 33.867 vh10 | User Consent for 3GPP Services | Rel-17 |