Re: [I2nsf] Request for review and comments of Extensions to the Access Control Lists (ACLs) YANG Model draft-dbb-netmod-acl-01

Linda Dunbar <dunbar.ll@gmail.com> Mon, 17 October 2022 15:12 UTC

Return-Path: <dunbar.ll@gmail.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E4FBC15256B for <i2nsf@ietfa.amsl.com>; Mon, 17 Oct 2022 08:12:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bXJh9wGWIss5 for <i2nsf@ietfa.amsl.com>; Mon, 17 Oct 2022 08:12:19 -0700 (PDT)
Received: from mail-ej1-x630.google.com (mail-ej1-x630.google.com [IPv6:2a00:1450:4864:20::630]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DFECC1526F8 for <i2nsf@ietf.org>; Mon, 17 Oct 2022 08:12:19 -0700 (PDT)
Received: by mail-ej1-x630.google.com with SMTP id w18so25627821ejq.11 for <i2nsf@ietf.org>; Mon, 17 Oct 2022 08:12:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=ylgBpU68PIym89OfQ6ikmOpJ31LyT7RfTf+Xfe51vuo=; b=fYQ66LHA8+36nGphWCplICEewN7S8S5Dpxxq01113Ro7p55jQQBcD2cDBol4gzct5+ OfmDhhaTDrTC2sXGPTgvgAklwE9d44BC674SKbnY6STL7niQ0hNYyI+MRup71Pl+nIwe VC+RKl0Tvw2dqUorfdoSP3mnbbXeHbowSvC7B9T/oZhN/uN8Cducfdd2oPov1wP+PCYD fHeo95AupcNOHDRPdJ7P310noPHoM2ktZd3kIuqQ4L7u2SRW/NZrNvHunN/ov51R35km +nFYBP5YjIO8uRNwKFFOMGS+hsCDSeGjcyWD5sDokaCL22pUx9jmgUCxZpvLkVbMwKED V9iQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ylgBpU68PIym89OfQ6ikmOpJ31LyT7RfTf+Xfe51vuo=; b=VOGGI3Y0964Sd0XRpsqQRHUEeUEKALm2h7NDrU+4nOlMR88jDOqxkOlUEXQkSYV8MD 1M8YYGiOVPpED/PZfN6TPa0TZamRXaKJkZr/6SQECrT1uJ5SvsiorJgkL0AeWAKggJNM QbylGb0yww69qadEDUwka3H28c6UYBeIaLtsYiFemKgMuYqlLSinWFyhycm0IUk7sAoC gk1d9P8bWYioZaHY5Pm3ECe0YoiQn8kmryrJBmn62wufTpWlAZ0o1+YvzqCoA/1RVCPw y+MIT9mP9Q9qnmC+MseTX83KaaJKx8V6HEuqah08MKlwUQyL2DZqShfozqVzKdd+2h7g pLrQ==
X-Gm-Message-State: ACrzQf0o6+johMsZpFRdTFI5hRT6U7aOu08SFFNtc1EWwXAXbfCHmkNX HLGsrC4IVC6i3YS+2sXKDa3ogPvF139hXEsWdIk=
X-Google-Smtp-Source: AMsMyM64JdEOGU60Yqio/0jj7zyksWk3vPKDs/mM6d9C+pRA1LYJVvdCzKKnqAU3A+Q74PYbO5+CMqBDeke2eLZ5mqc=
X-Received: by 2002:a17:907:9493:b0:78d:3415:bacd with SMTP id dm19-20020a170907949300b0078d3415bacdmr9084486ejc.184.1666019537591; Mon, 17 Oct 2022 08:12:17 -0700 (PDT)
MIME-Version: 1.0
References: <PAXPR06MB787207A71BF252D21F5FB7C2FD239@PAXPR06MB7872.eurprd06.prod.outlook.com> <PAXPR06MB7872CAECB250E31F3799A0BDFD299@PAXPR06MB7872.eurprd06.prod.outlook.com>
In-Reply-To: <PAXPR06MB7872CAECB250E31F3799A0BDFD299@PAXPR06MB7872.eurprd06.prod.outlook.com>
From: Linda Dunbar <dunbar.ll@gmail.com>
Date: Mon, 17 Oct 2022 10:12:05 -0500
Message-ID: <CAP_bo1bjtafEr+E9kmn6Wwd9cx2kHor6WtB98K2wN5KyATJzww@mail.gmail.com>
To: Oscar González de Dios <oscar.gonzalezdedios@telefonica.com>
Cc: "i2nsf@ietf.org" <i2nsf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ba251c05eb3c6634"
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/PS7g4jwAoDq8QIQTtVNQvagLQDA>
Subject: Re: [I2nsf] Request for review and comments of Extensions to the Access Control Lists (ACLs) YANG Model draft-dbb-netmod-acl-01
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Oct 2022 15:12:23 -0000

Oscar,

Does the YANG models specified by the enhanced Access Control List draft
impact what has been specified in I2NSF drafts?

Linda

On Mon, Oct 17, 2022 at 9:37 AM Oscar González de Dios <
oscar.gonzalezdedios@telefonica.com> wrote:

> Dear i2nsf colleagues,
>
>         FYI, it may be of interest to the participants of I2NSF WG the
> draft on enhanced Access Control Lists which has been submitted to netmod.
> https://datatracker.ietf.org/doc/html/draft-dbb-netmod-acl
>
>         The draft presents a set of enhancements to the Access Control
> Lists Yang Model of RFC 8519 based on operational experiences, such as
> manipulating Lists of  Prefixes, creating Aliases or Defined Sets,
> IPv4/IPv6 Fragment Handling, better TCP Flags Handling, among others (see
> the draft for the whole set of proposals).
>
>         We would like to receive feedback on the proposed extensions.
>
>         Best Regards,
>
>                 Oscar
>
> ------------------------------------------------
>
> A new version of I-D, draft-dbb-netmod-acl-01.txt has been successfully
> submitted by Mohamed Boucadair and posted to the IETF repository.
>
> Name:           draft-dbb-netmod-acl
> Revision:       01
> Title:          Extensions to the Access Control Lists (ACLs) YANG Model
> Document date:  2022-06-29
> Group:          Individual Submission
> Pages:          26
> URL:
> https://www.ietf.org/archive/id/draft-dbb-netmod-acl-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-dbb-netmod-acl/
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-dbb-netmod-acl
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-dbb-netmod-acl-01
>
> Abstract:
>    RFC 8519 defines a YANG data model for Access Control Lists (ACLs).
>    This document discusses a set of extensions that fix many of the
>    limitations of the ACL model as initially defined in RFC 8519.
>
> Discussion Venues
>
>    This note is to be removed before publishing as an RFC.
>
>    Discussion of this document takes place on the Network Modeling
>    Working Group mailing list (netmod@ietf.org), which is archived at
>    https://mailarchive.ietf.org/arch/browse/netmod/.
>
>    Source for this draft and an issue tracker can be found at
>    https://github.com/oscargdd/draft-dbb-netmod-enhanced-acl.
>
>
>
>
> The IETF Secretariat
>
>
>
> ________________________________
>
> Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario,
> puede contener información privilegiada o confidencial y es para uso
> exclusivo de la persona o entidad de destino. Si no es usted. el
> destinatario indicado, queda notificado de que la lectura, utilización,
> divulgación y/o copia sin autorización puede estar prohibida en virtud de
> la legislación vigente. Si ha recibido este mensaje por error, le rogamos
> que nos lo comunique inmediatamente por esta misma vía y proceda a su
> destrucción.
>
> The information contained in this transmission is confidential and
> privileged information intended only for the use of the individual or
> entity named above. If the reader of this message is not the intended
> recipient, you are hereby notified that any dissemination, distribution or
> copying of this communication is strictly prohibited. If you have received
> this transmission in error, do not read it. Please immediately reply to the
> sender that you have received this communication in error and then delete
> it.
>
> Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário,
> pode conter informação privilegiada ou confidencial e é para uso exclusivo
> da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário
> indicado, fica notificado de que a leitura, utilização, divulgação e/ou
> cópia sem autorização pode estar proibida em virtude da legislação vigente.
> Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique
> imediatamente por esta mesma via e proceda a sua destruição
> _______________________________________________
> I2nsf mailing list
> I2nsf@ietf.org
> https://www.ietf.org/mailman/listinfo/i2nsf
>