A Network Service Descriptor (NSD) is a machine-readable document, typically formatted in TOSCA or YANG, that acts as the single source of truth for instantiating a composite network service. It explicitly defines the constituent Virtualized Network Functions (VNFs), the order in which they must be deployed, and the Virtual Links (VLs) that create the internal service topology. The NSD also specifies Connection Points (CPs) for external access and declares resource requirements for each component.
Glossary
Network Service Descriptor (NSD)

What is a Network Service Descriptor (NSD)?
A Network Service Descriptor (NSD) is a standardized deployment template that defines the topology, connectivity, and lifecycle management requirements for a complete end-to-end network service composed of multiple Virtualized Network Functions (VNFs).
During zero-touch provisioning, the NFV Orchestrator (NFVO) parses the NSD to automate the entire lifecycle of the service, from initial instantiation to scaling and termination. The descriptor includes critical deployment flavor definitions, which outline different sizing options, and affinity/anti-affinity rules that govern the placement of VNFs across physical hosts to ensure resilience. This declarative model enables a fully automated closed-loop automation framework, eliminating manual scripting errors.
Core Components of an NSD
A Network Service Descriptor (NSD) is a structured template that defines the topology, connectivity, and lifecycle rules for a composite network service. It is the single source of truth for orchestrators to instantiate and manage complex service chains.
Virtual Network Function Descriptors (VNFDs)
The NSD references one or more VNFDs that define the individual software components of the service. Each VNFD specifies the virtual machine or container resources, software images, and monitoring parameters for a single network function. The NSD links these atomic units together, defining how many instances are required and their specific roles within the overall service topology.
Virtual Links (VLs)
Virtual Links define the logical connectivity between VNFs and Physical Network Functions (PNFs). An NSD specifies the connection points on each function and the VLs that wire them together, creating a service graph. These descriptors include bandwidth requirements, Quality of Service (QoS) parameters, and latency constraints to ensure the inter-function communication meets the service's performance profile.
Forwarding Graphs (VNF-FGs)
The VNF Forwarding Graph defines the ordered sequence of network functions that traffic must traverse. It specifies the ingress and egress points and the chaining logic, such as:
- Linear chains: Traffic flows through functions in a strict A→B→C order.
- Branched paths: Traffic is steered to different functions based on classification rules. This graph is the blueprint for the service's data plane, dictating how packets are processed.
Deployment Flavours
A single NSD can contain multiple deployment flavours to support different scaling and redundancy models for the same logical service. Each flavour defines a specific set of resource requirements and placement policies. For example:
- A 'gold' flavour might specify geographically redundant VNF instances with strict anti-affinity rules.
- A 'bronze' flavour might use a single instance with best-effort resources. This allows the same descriptor to be used for both high-availability core services and cost-sensitive edge deployments.
Lifecycle Management Policies
The NSD embeds the rules for automated operations, known as Day 2 management. These policies dictate how the orchestrator should react to events without human intervention. Key policies include:
- Scaling rules: Thresholds for auto-scaling a VNF based on CPU or session load.
- Healing rules: Actions to take upon VNF failure, such as restarting or redeploying on a new host.
- Update procedures: The allowed method for upgrading a VNF, such as a rolling update or a blue-green deployment.
Service Deployment Points (SDPs)
Service Deployment Points are the external interfaces that expose the composed service to the outside world. The NSD defines these access points, which include public IP addresses, DNS names, and authentication parameters. SDPs abstract the internal complexity of the forwarding graph, presenting a single, consumable endpoint for client applications or other services to connect to the newly deployed network service.
Frequently Asked Questions
Clear, technically precise answers to the most common questions about the structure, function, and role of the Network Service Descriptor in automated network provisioning.
A Network Service Descriptor (NSD) is a standardized, machine-readable template that defines the complete topology, connectivity, and lifecycle management requirements for deploying an end-to-end network service composed of multiple Virtualized Network Functions (VNFs) and Physical Network Functions (PNFs). It works by providing the NFV Orchestrator (NFVO) with a declarative blueprint. This blueprint specifies the constituent VNFs via references to their own VNF Descriptors (VNFDs), the Virtual Links (VLs) that create the internal network topology connecting them, and any Connection Points that expose the service externally. The NSD also embeds deployment flavor rules, scaling policies, and dependency sequencing, allowing the orchestrator to automatically instantiate, scale, and terminate the entire composite service as a single atomic unit without manual intervention.
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Related Terms
A Network Service Descriptor (NSD) does not operate in isolation. It is the central document consumed by orchestrators and controllers to automate deployment. The following concepts form the critical technical ecosystem surrounding the NSD.
Service Orchestration
The automated coordination engine that consumes the NSD to sequence the deployment of individual VNFs and CNFs. It interprets the topology defined in the descriptor to create virtual links, assign IP addresses, and enforce security policies in the correct order. Without an orchestrator, the NSD is merely a static document; the orchestrator executes its lifecycle commands.
Virtual Network Function Descriptor (VNFD)
A companion template to the NSD that defines the properties of a single virtualized function. While the NSD describes the entire service topology, the VNFD specifies the compute, storage, and networking requirements for one component. The NSD references one or more VNFDs to assemble the complete service, linking them via Virtual Links.
Virtual Link Descriptor (VLD)
Defines the logical connectivity between components within an NSD. A VLD specifies the required bandwidth, Quality of Service (QoS) parameters, and latency constraints for the connection between two VNFs or PNFs. It is the blueprint that the orchestrator uses to create and configure the underlying SDN overlay networks.
Physical Network Function (PNF)
A hardware-based network appliance that can be incorporated into an NSD-defined service. Unlike a VNF, a PNF is not virtualized and runs on dedicated, purpose-built hardware. The NSD must account for the physical location and fixed capacity of a PNF, often connecting it to virtualized components through a Virtual Link to create a hybrid physical-virtual service chain.
ETSI NFV MANO
The European Telecommunications Standards Institute (ETSI) Management and Orchestration (MANO) architectural framework is the origin of the NSD standard. It defines three key blocks:
- NFV Orchestrator (NFVO): Manages the lifecycle of network services by processing NSDs.
- VNF Manager (VNFM): Manages the lifecycle of individual VNFs.
- Virtualized Infrastructure Manager (VIM): Controls the compute, storage, and network resources. The NSD is the primary data input for the NFVO.
TOSCA
Topology and Orchestration Specification for Cloud Applications (TOSCA) is an OASIS standard often used as an alternative or complementary language for defining NSDs. While ETSI uses YANG and its own descriptors, TOSCA provides a cloud-agnostic, declarative YAML-based syntax to model the topology and lifecycle of a composite service, making it portable across different orchestrators.

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us