[I2nsf] Fwd: RFC 9061 on A YANG Data Model for IPsec Flow Protection Based on Software-Defined Networking (SDN)

[Rafa Marin-Lopez <[e-mail]>]

Dear I2NSF WG members:

Authors would like to thank to all I2NSF WG members and reviewers of this document. Without them, it would have not been possible to achieve this goal. 

It was a pleasure to work with you.

Best Regards.

> Inicio del mensaje reenviado:
> 
> De: [e-mail]
> Asunto: [I2nsf] RFC 9061 on A YANG Data Model for IPsec Flow Protection Based on Software-Defined Networking (SDN)
> Fecha: 15 de julio de 2021, 8:17:35 CEST
> Para: [e-mail], [e-mail]
> Cc: [e-mail], [e-mail], [e-mail]
> 
> A new Request for Comments is now available in online RFC libraries.
> 
> 
>        RFC 9061
> 
>        Title:      A YANG Data Model for IPsec Flow Protection
>                    Based on Software-Defined Networking (SDN) 
>        Author:     R. Marin-Lopez,
>                    G. Lopez-Millan,
>                    F. Pereniguez-Garcia
>        Status:     Standards Track
>        Stream:     IETF
>        Date:       July 2021
>        Mailbox:    [e-mail],
>                    [e-mail],
>                    [e-mail]
>        Pages:      90
>        Updates/Obsoletes/SeeAlso:   None
> 
>        I-D Tag:    draft-ietf-i2nsf-sdn-ipsec-flow-protection-14.txt
> 
>        URL:        https://www.rfc-editor.org/info/rfc9061
> 
>        DOI:        10.17487/RFC9061
> 
> This document describes how to provide IPsec-based flow protection
> (integrity and confidentiality) by means of an Interface to Network
> Security Function (I2NSF) Controller.  It considers two main
> well-known scenarios in IPsec: gateway-to-gateway and host-to-host.
> The service described in this document allows the configuration and
> monitoring of IPsec Security Associations (IPsec SAs) from an I2NSF
> Controller to one or several flow-based Network Security Functions
> (NSFs) that rely on IPsec to protect data traffic. 
> 
> This document focuses on the I2NSF NSF-Facing Interface by providing
> YANG data models for configuring the IPsec databases, namely Security
> Policy Database (SPD), Security Association Database (SAD), Peer
> Authorization Database (PAD), and Internet Key Exchange Version 2
> (IKEv2). This allows IPsec SA establishment with minimal intervention
> by the network administrator. This document defines three YANG
> modules, but it does not define any new protocol.
> 
> This document is a product of the Interface to Network Security Functions Working Group of the IETF.
> 
> This is now a Proposed Standard.
> 
> STANDARDS TRACK: This document specifies an Internet Standards Track
> protocol for the Internet community, and requests discussion and suggestions
> for improvements.  Please refer to the current edition of the Official
> Internet Protocol Standards (https://www.rfc-editor.org/standards) for the 
> standardization state and status of this protocol.  Distribution of this 
> memo is unlimited.
> 
> This announcement is sent to the IETF-Announce and rfc-dist lists.
> To subscribe or unsubscribe, see
>  https://www.ietf.org/mailman/listinfo/ietf-announce
>  https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
> 
> For searching the RFC series, see https://www.rfc-editor.org/search
> For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk
> 
> Requests for special distribution should be addressed to either the
> author of the RFC in question, or to [e-mail].  Unless
> specifically noted otherwise on the RFC itself, all RFCs are for
> unlimited distribution.
> 
> 
> The RFC Editor Team
> Association Management Solutions, LLC
> 
> 
> _______________________________________________
> I2nsf mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/i2nsf

-------------------------------------------------------
Rafa Marin-Lopez, PhD
Dept. Information and Communications Engineering (DIIC)
Faculty of Computer Science-University of Murcia
30100 Murcia - Spain
Telf: [phone] Fax: [phone] e-mail: [e-mail]
-------------------------------------------------------