Re: [I2nsf] questions & comments to draft-jeong-i2nsf-consumer-facing-interface-dm-03

"Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com> Wed, 16 August 2017 12:41 UTC

Return-Path: <jaehoon.paul@gmail.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 617DC12008A; Wed, 16 Aug 2017 05:41:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.987
X-Spam-Level:
X-Spam-Status: No, score=-1.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_IMAGE_RATIO_06=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_HK_NAME_FM_MR_MRS=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KwGn62nHgbxG; Wed, 16 Aug 2017 05:41:24 -0700 (PDT)
Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABA2F13201E; Wed, 16 Aug 2017 05:41:23 -0700 (PDT)
Received: by mail-it0-x22a.google.com with SMTP id 77so16829685itj.1; Wed, 16 Aug 2017 05:41:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BNykOii/U92Y7pm+yzMOTG5XzVuuoq8PZIoXfRZ2Vso=; b=Dr1f4gYzrJooNYVHCnt/ysMdMbRNGGDFiIxaiy3fMJDrSmtKF7BX752DPFJ8T3EAVB /NpT2DSHMZ24tRWnbTuiC6DF48feOWgQYJ7GWlZqYBVajsUEnjGhwT1cCkG8Pmnbrn0t h5Q0hUgvToXUbE31t0qlm73hzDAn4e0kCCBnlCoLGrbxfjyGQHmDjJBeMxutROUCbNak qCx72E/3qJdObXQIDbG9cb6emtxSeVGQHryFXhemfbT+i+uMiTL7RPGsHr2/hMXihRRy 3xhpEH15GANIPTO6M4U62qtdF9HSOAyT3Dx6JRZmy6gAqcWkgHM49Wl8EIcgufTMqr3c fOpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BNykOii/U92Y7pm+yzMOTG5XzVuuoq8PZIoXfRZ2Vso=; b=ifBAaiHq5i//R9mI0TcCptJ+1/ocvXU+dnVO02IODBrLq0POLNS9W60Zp3lG5PTOya lZNvytrQyuaVNcuCHgE4tyJikDeXfOyhHvU1O7IDkmdB/pmNMVX8E8n54KigYCc6fdIz w1l598CjffawMFjRjVxcK8z7GAoydDaagWc4vsYo6VI0oKwkZvQQYIS0cA9rCAeo2cgO m7tX9lN/f1ptdFw/p+nC2BEIMJUj6n5aa3QtOxr1yA9xCWEUresqP3EY47nqWAwAKex7 5qvQ4+UAqs7kMZ7SD+foYbuSPJ4nuUsWkAjbgoDdcuLZHPTPd9NjjgBzmSm4hr2YlI+i dDsg==
X-Gm-Message-State: AHYfb5jtZ1TsOSdffYoOwdK3AjgAT+3M/o9Snu6xpoNJ+7LRd6Ug9WPk MAk+SBs+UBIH5yMlQCGX4RrPQ+bY9Q==
X-Received: by 10.36.185.88 with SMTP id k24mr1632310iti.163.1502887281897; Wed, 16 Aug 2017 05:41:21 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.208.145 with HTTP; Wed, 16 Aug 2017 05:40:51 -0700 (PDT)
In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F65945DCAD@SJCEML702-CHM.china.huawei.com>
References: <4A95BA014132FF49AE685FAB4B9F17F65945DCAD@SJCEML702-CHM.china.huawei.com>
From: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Date: Wed, 16 Aug 2017 21:40:51 +0900
Message-ID: <CAPK2DewD3aLOffRnErxRHBBdnkVJLXz7jGd7KKJ9O9oe6-_W3Q@mail.gmail.com>
To: Linda Dunbar <linda.dunbar@huawei.com>
Cc: "i2nsf@ietf.org" <I2nsf@ietf.org>, "draft-jeong-i2nsf-consumer-facing-interface-dm@ietf.org" <draft-jeong-i2nsf-consumer-facing-interface-dm@ietf.org>, "Pauljeong@skku.edu" <Pauljeong@skku.edu>, skku_secu-brain_all@googlegroups.com
Content-Type: multipart/related; boundary="f403045d9a6a95cf5a0556de3648"
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/EbaZUzp9BP7Rp-g1lf8H5ZtHtZ0>
Subject: Re: [I2nsf] questions & comments to draft-jeong-i2nsf-consumer-facing-interface-dm-03
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Aug 2017 12:41:26 -0000

Hi Linda,
You are right.
In the revision, we authors will revise the Consumer-Facing Interface data
model
such that it lists individual values for rules.
Also, we will explicitly list the 'Policy Endpoint Group' and 'Custom-List'.

Thanks for your good points.

Best Regards,
Paul

On Wed, Aug 16, 2017 at 8:03 AM, Linda Dunbar <linda.dunbar@huawei.com>
wrote:

> Paul, Eunsoo, Tae-Jin, Rakesh, and Sue,
>
>
>
> Thank you very much for the updated i2nsf-consumer-facing-interface-dm03,
> which matches much better with the i2nsf-consumer-facing-im draft.
>
>
>
> Just a few questions.
>
>
>
> I noticed that you don’t list individual value for the rules. For example,
> “primary-action” list the “permit”, “deny”, “rate limit”, etc in the
> description:
>
>
>
>              leaf primary-action {
>
>                type string;
>
>                description
>
>                  "This field identifies the action when a rule
>
>                  is matched by NSF. The action could be one of
>
>                  'PERMIT', 'DENY', 'RATE-LIMIT', 'TRAFFIC-CLASS',
>
>                  'AUTHENTICATE-SESSION', 'IPS, 'APP-FIREWALL', etc.";
>
>              }
>
>
>
>
>
> In  draft-ietf-netmod-acl-model-11, the actions are listed as explicit
> value.
>
>
>
>
>
> Similar paten goes with the definition of “Source” and “destination”. You
> have:
>
>
>
>              leaf source {
>
>                type string;
>
>                description
>
>                  "This field identifies the source of
>
>                  the traffic. This could be reference to
>
>                  either 'Policy Endpoint Group' or
>
>                  'Threat-Feed' or 'Custom-List' if Security
>
>                  Admin wants to specify the source; otherwise,
>
>                  the default is to match all traffic.";
>
>              }
>
>
>
>
>
> Not an expert in the data model, I am wondering if you need to explicitly
> list the 'Policy Endpoint Group', 'Custom-List', etc
>
>
>
>
>
> Thank you very much,
>
>
>
> Linda
>
>
>
> _______________________________________________
> I2nsf mailing list
> I2nsf@ietf.org
> https://www.ietf.org/mailman/listinfo/i2nsf
>
>


-- 
===========================
Mr. Jaehoon (Paul) Jeong, Ph.D.
Assistant Professor
Department of Software
Sungkyunkwan University
Office: +82-31-299-4957
Email: jaehoon.paul@gmail.com, pauljeong@skku.edu
Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php
<http://cpslab.skku.edu/people-jaehoon-jeong.php>