[bess] Jim Guichard's No Objection on draft-ietf-bess-bgp-sdwan-usage-20: (with COMMENT)

[Jim Guichard via Datatracker <[e-mail]>]

Jim Guichard has entered the following ballot position for
draft-ietf-bess-bgp-sdwan-usage-20: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-bess-bgp-sdwan-usage/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

- Abstract: First paragraph use of 'The document' instead of 'This document'
seems awkward, I suggest using the latter. Further the second paragraph seems
completely out of place, and I would suggest removing it as it does not appear
to provide any value.

- Section 3.1.1 (1st paragraph) - Add references for both IPsec and MPLS VPN on
first usage. Same comment for VRFs.

- Section 3.1.1 (2nd paragraph) - Please expand on what the text "Additionally,
it assumes that one SD-WAN VPN can be mapped to one or multiple virtual
topologies governed by the SD-WAN controller's policies" means. From the
written text I am unable to understand it.

- Section 3.1.1 (3rd paragraph) - please explain what a 'Client Route' is. I
assume that you mean a route generated by an attached SD-WAN site, but the text
does not say that. In addition, please correct the text 'Route Target in the
BGP Extended Community' - Route Target Community is defined in RFC4360 so
please add with reference.

- Section 3.1.1 (4th paragraph) - "For packets carried by an IPsec tunnel, the
IPsec tunnel's inner encapsulation header can have the SD-WAN VPN Identifier to
distinguish the packets belonging to different SD-WAN VPNs". Can they? is there
an RFC or draft defining that?

- Section 3.4 - add references for 'MPLS-in-IP/GRE-in-IPsec'.

- Section 4.3 - "In the context of a BGP-controlled SD-WAN, BGP UPDATE messages
can disseminate IPsec-related attribute values for each node..." - do you mean
using RFC5566 here? if so, please add a reference - if not then please add a
reference on how BGP should disseminate the IPsec-related attribute values.

- Section 5.1 - add reference for NHRP (RFC2332)