[I2nsf] 答复: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt

["Xialiang (Frank)" <[e-mail]>]

Hi Luyuan,
I am interested with those you mentioned.
Please share with us~~

B.R.
Frank

-----邮件原件-----
发件人: Luyuan Fang [mailto:[e-mail]] 
发送时间: 2015年10月19日 15:37
收件人: Xialiang (Frank); [e-mail]
主题: RE: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt

Hi Frank,

Very good work.

Some quick comments on IPv6 - there are more need to be considered/added, like in table 1 and other places.

For example, ICMPv6 (next header 58) is very different in v6 than ICMP for v4. We must distinguish each msg type under header 58. Such as,
	- Msg type 128,129: Echo Request/Reply
	- Msg type 130 - 132: MLD
	- Msg type 133 - 137: ND (RS, RA, NS, NA, RD). 

When we implement filtering rules, we must look the v6 next header value and then the message type, to decide on the action, just basic v6 header, or the next header 58 is not good enough.

DHCPv6 also has its unique security issues. And the use of link-local carries its security risks.
These are very important when we implement ipv6 security in our Cloud, Data Centers. It would be very important in other networks too.

I can send you some suggested text for IPv6 security later, and we can discuss it.

Thanks,
Luyuan



-----Original Message-----
From: I2nsf [mailto:[e-mail]] On Behalf Of Xialiang (Frank)
Sent: Sunday, October 18, 2015 6:53 PM
To: [e-mail]
Subject: [I2nsf] 转发: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt

Hi all,
We submit a latest version of I2NSF capability interface IM draft. In this draft, the main changes include:
1.  Introduce a security capability category; 2.  Restructure the draft to make it more clear; 3.  Improve the network security control IM; 4.  Add new security capabilities: content security control and attack mitigation control; 5.  Editorial changes.

Your comments are greatly appreciated!

B.R.
Frank

-----邮件原件-----
发件人: [e-mail] [mailto:[e-mail]]
发送时间: 2015年10月19日 9:44
收件人: [e-mail]; Dacheng Zhang; DaCheng Zhang; Xialiang (Frank); Nicolas Bouthors; Edward Lopez; Nicolas BOUTHORS; Xialiang (Frank)
主题: New Version Notification for draft-xia-i2nsf-capability-interface-im-04.txt


A new version of I-D, draft-xia-i2nsf-capability-interface-im-04.txt
has been successfully submitted by Liang Xia and posted to the IETF repository.

Name:		draft-xia-i2nsf-capability-interface-im
Revision:	04
Title:		Information Model of Interface to Network Security Functions Capability Interface
Document date:	2015-10-19
Group:		Individual Submission
Pages:		23
URL:            https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fwww.ietf.org%2finternet-drafts%2fdraft-xia-i2nsf-capability-interface-im-04.txt&data=01%7c01%7clufang%40microsoft.com%7cbc91a3262cda4f4bd62608d2d827ff6f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=r%2fC%2fLD8r0atAlSvOAYBjGP%2bv87kHYCQ6jV0ckKrtt4M%3d
Status:         https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fdatatracker.ietf.org%2fdoc%2fdraft-xia-i2nsf-capability-interface-im%2f&data=01%7c01%7clufang%40microsoft.com%7cbc91a3262cda4f4bd62608d2d827ff6f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=ZYXm6Uemtxo49E43cUD1ql1iNo2AQSe0bEUnb0VUbeM%3d
Htmlized:       https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2ftools.ietf.org%2fhtml%2fdraft-xia-i2nsf-capability-interface-im-04&data=01%7c01%7clufang%40microsoft.com%7cbc91a3262cda4f4bd62608d2d827ff6f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=mrozUlRKVCIs%2fcCrJvrYrG0cxXqsiTFqc9HBH%2ff9jvI%3d
Diff:           https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fwww.ietf.org%2frfcdiff%3furl2%3ddraft-xia-i2nsf-capability-interface-im-04&data=01%7c01%7clufang%40microsoft.com%7cbc91a3262cda4f4bd62608d2d827ff6f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=m4UGQ953OCwyvcdRCxBovltz%2buWXHqazJStaVE3Hgb4%3d

Abstract:
   This draft is focused on the capability interface of NSFs (Network
   Security Functions) and proposes its information model for
   controlling the various network security functions.

                                                                                  


Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

_______________________________________________
I2nsf mailing list
[e-mail]
https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fwww.ietf.org%2fmailman%2flistinfo%2fi2nsf%0a&data=01%7c01%7clufang%40microsoft.com%7cbc91a3262cda4f4bd62608d2d827ff6f%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=NvL%2fciCXhav5GYpn9PIAuCsSoDQKDrjm5SjWZUCOq90%3d