Re: [I2nsf] questions & comments to draft-jeong-i2nsf-consumer-facing-interface-dm-03
"Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com> Wed, 16 August 2017 12:41 UTC
Return-Path: <jaehoon.paul@gmail.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 617DC12008A; Wed, 16 Aug 2017 05:41:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.987
X-Spam-Level:
X-Spam-Status: No, score=-1.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_RATIO_06=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_HK_NAME_FM_MR_MRS=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KwGn62nHgbxG; Wed, 16 Aug 2017 05:41:24 -0700 (PDT)
Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABA2F13201E; Wed, 16 Aug 2017 05:41:23 -0700 (PDT)
Received: by mail-it0-x22a.google.com with SMTP id 77so16829685itj.1; Wed, 16 Aug 2017 05:41:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BNykOii/U92Y7pm+yzMOTG5XzVuuoq8PZIoXfRZ2Vso=; b=Dr1f4gYzrJooNYVHCnt/ysMdMbRNGGDFiIxaiy3fMJDrSmtKF7BX752DPFJ8T3EAVB /NpT2DSHMZ24tRWnbTuiC6DF48feOWgQYJ7GWlZqYBVajsUEnjGhwT1cCkG8Pmnbrn0t h5Q0hUgvToXUbE31t0qlm73hzDAn4e0kCCBnlCoLGrbxfjyGQHmDjJBeMxutROUCbNak qCx72E/3qJdObXQIDbG9cb6emtxSeVGQHryFXhemfbT+i+uMiTL7RPGsHr2/hMXihRRy 3xhpEH15GANIPTO6M4U62qtdF9HSOAyT3Dx6JRZmy6gAqcWkgHM49Wl8EIcgufTMqr3c fOpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BNykOii/U92Y7pm+yzMOTG5XzVuuoq8PZIoXfRZ2Vso=; b=ifBAaiHq5i//R9mI0TcCptJ+1/ocvXU+dnVO02IODBrLq0POLNS9W60Zp3lG5PTOya lZNvytrQyuaVNcuCHgE4tyJikDeXfOyhHvU1O7IDkmdB/pmNMVX8E8n54KigYCc6fdIz w1l598CjffawMFjRjVxcK8z7GAoydDaagWc4vsYo6VI0oKwkZvQQYIS0cA9rCAeo2cgO m7tX9lN/f1ptdFw/p+nC2BEIMJUj6n5aa3QtOxr1yA9xCWEUresqP3EY47nqWAwAKex7 5qvQ4+UAqs7kMZ7SD+foYbuSPJ4nuUsWkAjbgoDdcuLZHPTPd9NjjgBzmSm4hr2YlI+i dDsg==
X-Gm-Message-State: AHYfb5jtZ1TsOSdffYoOwdK3AjgAT+3M/o9Snu6xpoNJ+7LRd6Ug9WPk MAk+SBs+UBIH5yMlQCGX4RrPQ+bY9Q==
X-Received: by 10.36.185.88 with SMTP id k24mr1632310iti.163.1502887281897; Wed, 16 Aug 2017 05:41:21 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.208.145 with HTTP; Wed, 16 Aug 2017 05:40:51 -0700 (PDT)
In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F65945DCAD@SJCEML702-CHM.china.huawei.com>
References: <4A95BA014132FF49AE685FAB4B9F17F65945DCAD@SJCEML702-CHM.china.huawei.com>
From: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Date: Wed, 16 Aug 2017 21:40:51 +0900
Message-ID: <CAPK2DewD3aLOffRnErxRHBBdnkVJLXz7jGd7KKJ9O9oe6-_W3Q@mail.gmail.com>
To: Linda Dunbar <linda.dunbar@huawei.com>
Cc: "i2nsf@ietf.org" <I2nsf@ietf.org>, "draft-jeong-i2nsf-consumer-facing-interface-dm@ietf.org" <draft-jeong-i2nsf-consumer-facing-interface-dm@ietf.org>, "Pauljeong@skku.edu" <Pauljeong@skku.edu>, skku_secu-brain_all@googlegroups.com
Content-Type: multipart/related; boundary="f403045d9a6a95cf5a0556de3648"
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/EbaZUzp9BP7Rp-g1lf8H5ZtHtZ0>
Subject: Re: [I2nsf] questions & comments to draft-jeong-i2nsf-consumer-facing-interface-dm-03
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Aug 2017 12:41:26 -0000
Hi Linda, You are right. In the revision, we authors will revise the Consumer-Facing Interface data model such that it lists individual values for rules. Also, we will explicitly list the 'Policy Endpoint Group' and 'Custom-List'. Thanks for your good points. Best Regards, Paul On Wed, Aug 16, 2017 at 8:03 AM, Linda Dunbar <linda.dunbar@huawei.com> wrote: > Paul, Eunsoo, Tae-Jin, Rakesh, and Sue, > > > > Thank you very much for the updated i2nsf-consumer-facing-interface-dm03, > which matches much better with the i2nsf-consumer-facing-im draft. > > > > Just a few questions. > > > > I noticed that you don’t list individual value for the rules. For example, > “primary-action” list the “permit”, “deny”, “rate limit”, etc in the > description: > > > > leaf primary-action { > > type string; > > description > > "This field identifies the action when a rule > > is matched by NSF. The action could be one of > > 'PERMIT', 'DENY', 'RATE-LIMIT', 'TRAFFIC-CLASS', > > 'AUTHENTICATE-SESSION', 'IPS, 'APP-FIREWALL', etc."; > > } > > > > > > In draft-ietf-netmod-acl-model-11, the actions are listed as explicit > value. > > > > > > Similar paten goes with the definition of “Source” and “destination”. You > have: > > > > leaf source { > > type string; > > description > > "This field identifies the source of > > the traffic. This could be reference to > > either 'Policy Endpoint Group' or > > 'Threat-Feed' or 'Custom-List' if Security > > Admin wants to specify the source; otherwise, > > the default is to match all traffic."; > > } > > > > > > Not an expert in the data model, I am wondering if you need to explicitly > list the 'Policy Endpoint Group', 'Custom-List', etc > > > > > > Thank you very much, > > > > Linda > > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > > -- =========================== Mr. Jaehoon (Paul) Jeong, Ph.D. Assistant Professor Department of Software Sungkyunkwan University Office: +82-31-299-4957 Email: jaehoon.paul@gmail.com, pauljeong@skku.edu Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php <http://cpslab.skku.edu/people-jaehoon-jeong.php>
- [I2nsf] questions & comments to draft-jeong-i2nsf… Linda Dunbar
- Re: [I2nsf] questions & comments to draft-jeong-i… Mr. Jaehoon Paul Jeong
- Re: [I2nsf] questions & comments to draft-jeong-i… Linda Dunbar
- Re: [I2nsf] questions & comments to draft-jeong-i… Mr. Jaehoon Paul Jeong