Re: [Anima] I-D Action: draft-yizhou-anima-l2-acp-based-ani-00.txt

Hi,

This is an interesting draft and I think the topic is important. Can you please compare with draft-carpenter-anima-l2acp-scenarios-02? Unfortunately we did not get much response to that draft 2 years ago.

I don't really understand this statement:

  The DULL instance of GRASP is used to discover neighbours. 

DULL allows GRASP discovery, but this discovers ASAs handling a particular GRASP Objective. It is not designed to discover GRASP-capable nodes as such; GRASP doesn't need that. I've been running GRASP over L2 for 4 or 5 years, with no such neighbour discovery.

Also you write:

  Therefore similar functions of topology
  collection and loop-free topology creation is required for L2 ACP.

I don' think that is needed. On a single link, there is no need to know topology. When there are multiple links, the GRASP relaying procedures for M_FLOOD and M_DISCOVER (which are link-local multicast packets) prevent loops. Normal IPv6 routing takes care of unicast packets.

The essential problem with using L2 as an ACP is security. Apart from security, GRASP works perfectly over L2, as long as it supports native link-local multicast.

So, did you look at the L2-independent security proposed in draft-carpenter-anima-quads-grasp? It describes quite strong security for GRASP over any layer 2, but it needs a shared secret. BRSKI and the standard ACP avoid that defect. As far as I can see, that is the entire problem of any L2 ACP solution. If you can avoid a shared secret without BRSKI, that would be great, but I'm not sure it's possible. In fact QUADS is more general than L2; it also secures GRASP on a routed network.

(The code for QUADS security is built into my GRASP code. It is documented at page 22 in https://github.com/becarpenter/graspy/raw/master/graspy.pdf)

Regards
   Brian Carpenter

On 19-Oct-21 20:58, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
>         Title           : Requirement and a Reference Model of L2 ACP based ANI
>         Authors         : Yizhou Li
>                           Yujing Zhou
>                           Li Shen
> 	Filename        : draft-yizhou-anima-l2-acp-based-ani-00.txt
> 	Pages           : 7
> 	Date            : 2021-10-19
> 
> Abstract:
>    This document discusses the scenarios, requirements and a reference
>    model of ANI (Autonomic Networking Infrastructure) to be constructed
>    in a layer 2 network using L2 Autonomic Control Plane (ACP) and the
>    related functions.  It expands the applicability of ANI to L2 network
>    and maintains the same infrastructure.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-yizhou-anima-l2-acp-based-ani/
> 
> There is also an htmlized version available at:
> https://datatracker.ietf.org/doc/html/draft-yizhou-anima-l2-acp-based-ani-00
> 
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> I-D-Announce mailing list
> I-D-Announce@ietf.org
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
> 