IETF Logo Mail Archive

[bmwg] Version 10, draft-ietf-bmwg-ngfw-performance

bmonkman@netsecopen.org Sun, 26 September 2021 14:31 UTC

Return-Path: <bmonkman@netsecopen.org>
X-Original-To: bmwg@ietfa.amsl.com
Delivered-To: bmwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43A393A267C for <bmwg@ietfa.amsl.com>; Sun, 26 Sep 2021 07:31:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=netsecopen-org.20210112.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V8-O6-aBNNVh for <bmwg@ietfa.amsl.com>; Sun, 26 Sep 2021 07:30:57 -0700 (PDT)
Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 861373A267F for <bmwg@ietf.org>; Sun, 26 Sep 2021 07:30:57 -0700 (PDT)
Received: by mail-qt1-x835.google.com with SMTP id j13so14311461qtq.6 for <bmwg@ietf.org>; Sun, 26 Sep 2021 07:30:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netsecopen-org.20210112.gappssmtp.com; s=20210112; h=from:to:cc:subject:date:message-id:mime-version:thread-index :content-language; bh=G0T5Q82masGE0kjcH2v8pphJkINFxUxYTLrPGSlrKeU=; b=x9ECQllp7W3brU9FBniPDhFkxm19G2Pj0DP0QIKJU3Q/GAksFOE/vQHEFL+u71IHr0 gFhA9KJALsCNTbJwziHupFmxvpV3VI1iEjWjh4t3gI2F+StBM7/yyeXBjaJkk2H7MWI1 MkgUklcYG/uuAHBhetDgUvnHwl8lGZxmFuGNckm4dKc4HnksZHlSONSXY9uYfAwUcoTh xQdIe5GHPUJLl+tSC3Vazc88D6Did5MkQV2HTBtmHrQxiEYIjNLsd+IS4W0VOav2cljq Fgv2FFGTjUql3eSCHTYsjgb6akCua9GMg/pSXVh3QRy8NPoM7o+J2aPCRYhuQZ1wM5R8 R4aw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :thread-index:content-language; bh=G0T5Q82masGE0kjcH2v8pphJkINFxUxYTLrPGSlrKeU=; b=YdixVKpdN3nAGO+Q+cZ9+qq0U6/FPMSDBINq104aqP6K4WmoamsfizXAeD3K1nDweH FXu/bFY3lhhKdUrVa4i2YJax9C7dheW8qEeWZKlnt1wvr9f0igH0meysJ5oPb+0g3SOB e+Md2dVnyfzovyIz2qUHHvWDEf/7XcY0xRJJc9hgdrtKpHEEb9xlWhU3FPhjjnVw+bq5 mDEOYCyZimVfHS159ZeODY1bWfVXBjSNMcAgtRtl6331Ia3EG1HMyeejQn2N1U+uc0dU qBOEtZ6dQHlLqv97qTWG0kln+RNkxaB5AIeVKbKWTxLAUgS8Rs8hy2++aS1SXkDFXTGe qyPw==
X-Gm-Message-State: AOAM530wkar/ciL7bygQ5Q0It0MBNYg22wbVL+2jBH6pPiQeV1PfdQ/n QzrouYdNH/E/dlUh1yRAMaW8MPyAKLIuOjsZ
X-Google-Smtp-Source: ABdhPJzJ3py7wSuYmlxf8rc9FwivPUqY4rPC3UTAunt/YoEhu/iUMkvZdD+TvZZwvyAMj1RxMTjHBw==
X-Received: by 2002:ac8:6b45:: with SMTP id x5mr14522443qts.72.1632666656227; Sun, 26 Sep 2021 07:30:56 -0700 (PDT)
Received: from DESKTOP42TMNEU (c-98-235-212-118.hsd1.pa.comcast.net. [98.235.212.118]) by smtp.gmail.com with ESMTPSA id j21sm9201371qkl.25.2021.09.26.07.30.55 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 26 Sep 2021 07:30:55 -0700 (PDT)
From: bmonkman@netsecopen.org
To: bmwg@ietf.org
Cc: 'Carsten Rossenhoevel' <cross@eantc.de>, bm.balarajah@gmail.com
Date: Sun, 26 Sep 2021 10:30:54 -0400
Message-ID: <70d001d7b2e3$1d2b3450$57819cf0$@netsecopen.org>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_70D1_01D7B2C1.9619E270"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: Adey4izhXQMeeaMDTuC62XLqnd4r2A==
Content-Language: en-us
Archived-At: <https://mailarchive.ietf.org/arch/msg/bmwg/2DUy9AU233rTgnWm39SndBg1Jec>
Subject: [bmwg] Version 10, draft-ietf-bmwg-ngfw-performance
X-BeenThere: bmwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Benchmarking Methodology Working Group <bmwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/bmwg>, <mailto:bmwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/bmwg/>
List-Post: <mailto:bmwg@ietf.org>
List-Help: <mailto:bmwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/bmwg>, <mailto:bmwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Sep 2021 14:31:03 -0000

Folks,

 

An update to draft-ietf-bmwg-ngfw-performance has been posted. I believe the
next step is WG Chair review.

 

Version 10 has gone through multiple reviews . As a result, we have
corrected a number of typos and grammatical errors. Additionally, we
clarified wording in a few spots. The following has also been changed as a
result of comments/discussions from/with Sarah Banks. (Sarah, thank you.)

*	Removed NGIDS from the draft
*	Added the following text in section 3 for "Inline" mode and
"Fail-open" clarification: " This document provides testing terminology and
testing methodology for modern and next-generation network security devices
that are configured in Active ("Inline") mode."
*	Also, we added the following text in section 4.2:  "DUT/SUT MUST be
configured in "Inline" mode so that the traffic is actively inspected by the
DUT/SUT.  Also "Fail-Open" behavior MUST be disabled on the DUT/SUT."
*	Added more clarification for the parameters and values defined in
section "4.3.1.  Client Configuration": This section specifies which
parameters SHOULD be considered while configuring clients using test
equipment.  Also, this section specifies the RECOMMENDED values for certain
parameters.  The values are the defaults used in most of the client
operating systems currently.
*	Rephrased section 5 " Testbed Consideration". Added recommended
steps for reference test.
*	Explained the usage of the parameter "Initial throughput": "Initial
throughput is not a KPI to report.  This value is configured on the traffic
generator and used to perform Step 1: "Test Initialization and
Qualification" described under the Section 7.1.4."

Brian

 

---------

Brian Monkman

Executive Director, NetSecOPEN

Office: +1-717-610-0808 

Fax: +1-717-506-0460

Mobile: +1-717-462-5422

 



 <https://www.netsecopen.org> https://www.netsecopen.org

v2.23.0 | Report a Bug | By Email