Re: [I2nsf] need more review and support to close the WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm

"Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com> Thu, 11 August 2022 12:36 UTC

Return-Path: <jaehoon.paul@gmail.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F9ADC15A734 for <i2nsf@ietfa.amsl.com>; Thu, 11 Aug 2022 05:36:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.408
X-Spam-Level:
X-Spam-Status: No, score=-0.408 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_HK_NAME_FM_MR_MRS=0.01, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, URI_DOTEDU=1.685] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xxBc28CWtm8t for <i2nsf@ietfa.amsl.com>; Thu, 11 Aug 2022 05:36:06 -0700 (PDT)
Received: from mail-pg1-x52a.google.com (mail-pg1-x52a.google.com [IPv6:2607:f8b0:4864:20::52a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 821EAC15AB6B for <i2nsf@ietf.org>; Thu, 11 Aug 2022 05:36:06 -0700 (PDT)
Received: by mail-pg1-x52a.google.com with SMTP id 24so560708pgr.7 for <i2nsf@ietf.org>; Thu, 11 Aug 2022 05:36:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc; bh=odu2wd+Y7O7RThGTsgRtD9nNFf8IkvRFHDtyFxI6bsE=; b=kfwMk53DWO63jy5fprQYRQMDkajMSBHumdCfOvZCIKnPv2LcW6KzdMPFByri0Ai9n3 rCMHM5luDJQBlvbaCaxw/OkWt8jK+fzRMFfLqCnD63x2yvaK1jxaww236DoGPWeDKgHk M1BFYf9uOwEmHaLTeLEU3DDGClXxx3BO3R2ldwdG6NVpwBZxSi4w4VgC1uxwOmVwz9/Q aI8tVlWXV7LUy+ekwgYN1Uwmnq6+G9ltV/MVBEi+TpQvm5tJPNSRQFhRn7eUsueZspA5 fjJQxT5qLhsAUNZNhyN2hDHAqG2X172z8lhiZBYGXFq0+vt5DL9ER/wDqusZ8cMUrFij 3c5Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc; bh=odu2wd+Y7O7RThGTsgRtD9nNFf8IkvRFHDtyFxI6bsE=; b=nulmImEYPNe+hS3GiH1UmOxU5EeSq06ZUjjCu8HhFGD5wh8pLkCT6Wp2YztbNU91W9 F0xZRBC7zACX7G33+dORJ3MKqoNC9cWawlHNevC+LIIIxKvMlhX5+fIKKtoERVlGoepA s8ZS2P0jqTQN5dxBLVYIRzL2HTWazYyl+jYVxnkwy7nDDc2c9R1Tqhv+YPuuBsDpii5V XiGg+JZroke74rO2UGZs//EqoEEzCzaXcvkifuZuwi+qFo2ZMQdzcxcz92RPhymGVGi1 /b4SJxWhSyEVZEbw2CfJqvIZXn7y537i7oUjOGwYBy7DEtpGrpspF6CPamZ9wYeaYPcL AHHA==
X-Gm-Message-State: ACgBeo2i9m3VY/QlvKgij028fxYzXgqzCqxqvl2OLxriussPUpSVIyw3 H7fNqcoQO6nxuQYvuFXG8VnIfcZlUYUA2GO6gN4=
X-Google-Smtp-Source: AA6agR6A5giDgXakwu4C96s5uF2rdDkTTYx4OsB5omukKTXmNp5ev6Gms8s/dwNNZqnZ4N2dWjgTeTDmLaPkHWbSYW0=
X-Received: by 2002:a05:6a00:1501:b0:52e:67e9:56d7 with SMTP id q1-20020a056a00150100b0052e67e956d7mr31382084pfu.48.1660221365669; Thu, 11 Aug 2022 05:36:05 -0700 (PDT)
MIME-Version: 1.0
References: <CO1PR13MB49200B723C19BDC266EA98EC85869@CO1PR13MB4920.namprd13.prod.outlook.com> <BYAPR08MB487221C91BF204B34F337304B3869@BYAPR08MB4872.namprd08.prod.outlook.com> <CO1PR13MB4920C96E21FDD1536B27A0A685869@CO1PR13MB4920.namprd13.prod.outlook.com> <62EAA528.1070405@btconnect.com> <CAPK2Dezc3UVfDn1pHAeN449yJjym=M0JYh1TTG61JtXDFBYU=A@mail.gmail.com> <62F4E8AF.5000008@btconnect.com>
In-Reply-To: <62F4E8AF.5000008@btconnect.com>
From: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Date: Thu, 11 Aug 2022 21:35:52 +0900
Message-ID: <CAPK2DexiYvwFipaTB+++-DKBt05HuF7si+SvQyC-u9sCVZkYqQ@mail.gmail.com>
To: Linda Dunbar <linda.dunbar@futurewei.com>, t petch <ietfa@btconnect.com>
Cc: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>, Roman Danyliw <rdd@cert.org>, Susan Hares <shares@ndzh.com>, "i2nsf@ietf.org" <i2nsf@ietf.org>, skku-iotlab-members <skku-iotlab-members@googlegroups.com>
Content-Type: multipart/alternative; boundary="000000000000bfd4fc05e5f668fc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/6MgPuWUkUcVlMpZBlf0MQH_qulg>
Subject: Re: [I2nsf] need more review and support to close the WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Aug 2022 12:36:10 -0000

Hi Tom,
Thanks for your quick confirmation.

Linda,
Since Tom has confimed the readiness of the CFI draft
along with other reviewers, I think you can forward it
to the IESG.

Thanks.

Best Regards,
Paul

2022년 8월 11일 (목) 오후 8:31, t petch <ietfa@btconnect.com>님이 작성:

> On 08/08/2022 11:42, Mr. Jaehoon Paul Jeong wrote:
> > Hi Tom,
> > Here is the revision of CFI with your comments:
> >
> https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-consumer-facing-interface-dm-23
> >
> > Patrick and I have reflected your comments on the revision, and
> > I attach the revision letter.
>
> Yes, I have reviewed it and have no more comments
>
> Tom Petch
> >
> > Thanks.
> >
> > Best Regards,
> > Paul
> >
> > On Thu, Aug 4, 2022 at 1:40 AM t petch <ietfa@btconnect.com> wrote:
> >
> >> On 12/07/2022 18:44, Linda Dunbar wrote:
> >>> Sue,
> >>>
> >>> Thank you very much for the offer.
> >>>
> >>> The unsolved comments are from Tom Petch: Re: [I2nsf] WGLC for
> >> draft-ietf-i2nsf-consumer-facing-interface-dm-16<
> >>
> https://mailarchive.ietf.org/arch/msg/i2nsf/d_Wk5fH35Jo_cdz4D0QZN5VNhFA/>
> >>> There are several responses to address Tom Petch's comments. Just Tom
> >> hasn't sent feedback if he is satisfied with the response.
> >>
> >> Weelll, probably as satisfied as I am going to get.
> >>
> >> I have reviewed cfi (customer facing interface-dm)-22 and compared some
> >> of it with capability-32.  I have not - but hope to - compare against
> >> nsf-facing; nor have I re-read all the posts to the list but will.
> >>
> >> I do think that cfi is now in much better shape.  I do see capability as
> >> the key, the base, set of definitions against which the others should be
> >> judged.  capability says whether or not the box can do it, the others
> >> tell you how to do it.
> >>
> >> With that in mind, I am unconvinced about the response to my comments
> >> about icmp.  The treatment is different.  capability deals in
> >> icmpv4/icmpv6, type/code; cfi deals in echo/echo-reply which is the sort
> >> of user interface I am used to and would expect a security practitioner
> >> to be familiar with so some words about the mapping, referring to the
> >> IANA website for all the detail, could help users.  I would put that in
> >> the body of the text not the YANG module
> >>
> >> Likewise, cfi has primary and secondary action which makes a lot of
> >> sense but what is the capability that makes that possible? capability
> >> has ingress-action, egress-action, default-action which seems a
> >> different axis to me.  Again, some words about how the two relate could
> >> help, in the body of the document.
> >>
> >> Again continent is present in cfi but not in capability.  Can a user
> >> tell if the capability is present?  I expect not; as ever, worth a note.
> >>
> >> signature-set and signature-type sound the same but seem different.
> >> This is an aspect of security that I am not familiar with, at least not
> >> in those terms.
> >>
> >> Finally, there are some minor editorial glitches.
> >>
> >> RFC8075 I see in the YANG module; it needs adding to the I-D References.
> >>
> >> page 17 text version last sentence I cannot parse; perhaps a missing
> >> preposition
> >>
> >> the two rate-limit objects could do with units - I note that they are
> >> present in the examples
> >>
> >> page 55 text version [STIX] looks like an XML anchor but YANG modules
> >> must be plain text.
> >>
> >> Tom Petch
> >>
> >>>
> >>> Linda
> >>>
> >>> From: Susan Hares <shares@ndzh.com>
> >>> Sent: Tuesday, July 12, 2022 12:21 PM
>
-- 
===========================
Mr. Jaehoon (Paul) Jeong, Ph.D.
Associate Professor
Department Head
Department of Computer Science and Engineering
Sungkyunkwan University
Office: +82-31-299-4957
Email: pauljeong@skku.edu, jaehoon.paul@gmail.com
Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php
<http://cpslab.skku.edu/people-jaehoon-jeong.php>