Re: [Dots] TR: New Version Notification for draft-nishizuka-dots-signal-control-filtering-06.txt
<mohamed.boucadair@orange.com> Tue, 02 April 2019 14:45 UTC
Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81390120124 for <dots@ietfa.amsl.com>; Tue, 2 Apr 2019 07:45:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5jIvNSht0PNX for <dots@ietfa.amsl.com>; Tue, 2 Apr 2019 07:45:27 -0700 (PDT)
Received: from orange.com (mta134.mail.business.static.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 469A21200DB for <dots@ietf.org>; Tue, 2 Apr 2019 07:45:27 -0700 (PDT)
Received: from opfednr00.francetelecom.fr (unknown [xx.xx.xx.64]) by opfednr26.francetelecom.fr (ESMTP service) with ESMTP id 44YX7T2MM9zyp6; Tue, 2 Apr 2019 16:45:25 +0200 (CEST)
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.104]) by opfednr00.francetelecom.fr (ESMTP service) with ESMTP id 44YX7T1JWzzDq7Y; Tue, 2 Apr 2019 16:45:25 +0200 (CEST)
Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5F.corporate.adroot.infra.ftgroup ([fe80::193b:bc32:1ad3:362d%21]) with mapi id 14.03.0439.000; Tue, 2 Apr 2019 16:45:24 +0200
From: mohamed.boucadair@orange.com
To: Jon Shallow <supjps-ietf@jpshallow.com>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] TR: New Version Notification for draft-nishizuka-dots-signal-control-filtering-06.txt
Thread-Index: AQHU6VV8tXarL0WSm0CyTZCHY1fb3aYo2JKg///x84CAACYg4A==
Date: Tue, 02 Apr 2019 14:45:24 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93302EA513BB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <155421064292.6387.16657228529546449549.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302EA512C0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <151801d4e95f$5d98ffe0$18caffa0$@jpshallow.com>
In-Reply-To: <151801d4e95f$5d98ffe0$18caffa0$@jpshallow.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/kgLrK4LguxyO702AqeIGgKroT64>
Subject: Re: [Dots] TR: New Version Notification for draft-nishizuka-dots-signal-control-filtering-06.txt
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Apr 2019 14:45:30 -0000
Hi Jon, Thank you for the review. Please see inline. Cheers, Med > -----Message d'origine----- > De : Jon Shallow [mailto:supjps-ietf@jpshallow.com] > Envoyé : mardi 2 avril 2019 16:21 > À : BOUCADAIR Mohamed TGI/OLN; dots@ietf.org > Objet : RE: [Dots] TR: New Version Notification for draft-nishizuka-dots- > signal-control-filtering-06.txt > > Hi Med, > > Thanks for this. > > Clarification / comment > > 3.2.1 Parameters & Behaviors > ... > acl-name: A name of an access list defined using the DOTS data > channel (Section 7.2 of [I-D.ietf-dots-data-channel]). > > > The acl-name is unique per cuid, but the name can be duplicated, so perhaps [Med] Indeed. We do already have the following in Section 3.1: "Note that an ACL name unambiguously identifies an ACL bound to a DOTS client, but the same name may be used by distinct DOTS clients." > > Updated > > acl-name: A name of an access list defined using the DOTS data > channel (Section 7.2 of [I-D.ietf-dots-data-channel]) that is associated > with the DOTS client's 'cuid'. [Med] Sure (even if this is implied by the reference to the data channel spec). I added: "that is associated with the DOTS client." No need to mention the cuid (again) given the discussion in Section 3.1. > > Old > Figure 5: GET to Retrieve the Filtering (After Mitigation) > New > Figure 5: DOTS Data Channel GET response after Mitigation > [Med] OK. > Old > Figure 6: DOTS Data Channel Request to Create an Accep-List Filter > New > Figure 6: DOTS Data Channel Request to Create an Accept-List Filter > [Med] Thanks for catching the missing "t". Fixed. > > Regards > > Jon > > > -----Original Message----- > > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of > > mohamed.boucadair@orange.com > > Sent: 02 April 2019 14:13 > > To: dots@ietf.org > > Subject: [Dots] TR: New Version Notification for draft-nishizuka-dots- > signal- > > control-filtering-06.txt > > > > Hi all, > > > > This version takes into account the comments received in Prague. > > > > The text was also restructured for a better readability. > > > > Questions, comments, and suggestions are more than welcome. > > > > Cheers, > > Med > > > > > -----Message d'origine----- > > > De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > > Envoyé : mardi 2 avril 2019 15:11 > > > À : Takahiko Nagata; Tirumaleswar Reddy; BOUCADAIR Mohamed TGI/OLN; > > Reddy K; > > > Kaname Nishizuka > > > Objet : New Version Notification for draft-nishizuka-dots-signal-control- > > > filtering-06.txt > > > > > > > > > A new version of I-D, draft-nishizuka-dots-signal-control-filtering- > 06.txt > > > has been successfully submitted by Mohamed Boucadair and posted to the > > > IETF repository. > > > > > > Name: draft-nishizuka-dots-signal-control-filtering > > > Revision: 06 > > > Title: Controlling Filtering Rules Using Distributed Denial-of- > > > Service Open Threat Signaling (DOTS) Signal Channel > > > Document date: 2019-04-02 > > > Group: Individual Submission > > > Pages: 23 > > > URL: https://www.ietf.org/internet-drafts/draft-nishizuka- > dots- > > > signal-control-filtering-06.txt > > > Status: https://datatracker.ietf.org/doc/draft-nishizuka-dots- > signal- > > > control-filtering/ > > > Htmlized: https://tools.ietf.org/html/draft-nishizuka-dots-signal- > > > control-filtering-06 > > > Htmlized: https://datatracker.ietf.org/doc/html/draft-nishizuka- > dots- > > > signal-control-filtering > > > Diff: https://www.ietf.org/rfcdiff?url2=draft-nishizuka-dots- > > > signal-control-filtering-06 > > > > > > Abstract: > > > This document specifies an extension to the DOTS signal channel so > > > that DOTS clients can control their filtering rules when an attack > > > mitigation is active. > > > > > > Particularly, this extension allows a DOTS client to activate or de- > > > activate existing filtering rules during a DDoS attack. The > > > characterization of these filtering rules is supposed to be conveyed > > > by a DOTS client during an idle time by means of the DOTS data > > > channel protocol. > > > > > > Editorial Note (To be removed by RFC Editor) > > > > > > Please update these statements within the document with the RFC > > > number to be assigned to this document: > > > > > > o "This version of this YANG module is part of RFC XXXX;" > > > > > > o "RFC XXXX: Controlling Filtering Rules Using Distributed Denial- > > > of-Service Open Threat Signaling (DOTS) Signal Channel"; > > > > > > o reference: RFC XXXX > > > > > > o [RFCXXXX] > > > > > > Please update these statements with the RFC number to be assigned to > > > the following documents: > > > > > > o "RFC SSSS: Distributed Denial-of-Service Open Threat Signaling > > > (DOTS) Signal Channel Specification" (used to be > > > [I-D.ietf-dots-signal-channel]) > > > > > > o "RFC DDDD: Distributed Denial-of-Service Open Threat Signaling > > > (DOTS) Data Channel Specification" (used to be > > > [I-D.ietf-dots-data-channel]) > > > > > > Please update the "revision" date of the YANG module. > > > > > > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > submission > > > until the htmlized version and diff are available at tools.ietf.org. > > > > > > The IETF Secretariat > > > > _______________________________________________ > > Dots mailing list > > Dots@ietf.org > > https://www.ietf.org/mailman/listinfo/dots
- [Dots] TR: New Version Notification for draft-nis… mohamed.boucadair
- Re: [Dots] TR: New Version Notification for draft… Jon Shallow
- Re: [Dots] TR: New Version Notification for draft… mohamed.boucadair