Re: [I2nsf] Request for review and comments of Extensions to the Access Control Lists (ACLs) YANG Model draft-dbb-netmod-acl-01

[Oscar González de Dios <[e-mail]>]

Hi Linda,

                The answer is Yes. It impacts the Yang model defined in ietf-i2nsf-nsf-facing-interface which imports ietf-packet-fields.

                Current extensions are proposed as augmentations to the acl yang model. The alternative is to go for, instead of augmentations, a new version of the ACL yang model (e.g. the packet fields one). The final choice will impact on how you use the extensions from i2nsf-nsf-facing-interface.

                Another issue which might require extra work to fit is the management of sets (list of prefixes, or list of ports), which are managed at the top-level and referenced by the matches.

                Best Regards,

                               Oscar


De: I2nsf <[e-mail]> En nombre de Linda Dunbar
Enviado el: lunes, 17 de octubre de 2022 17:12
Para: Oscar González de Dios <[e-mail]>
CC: [e-mail]
Asunto: Re: [I2nsf] Request for review and comments of Extensions to the Access Control Lists (ACLs) YANG Model draft-dbb-netmod-acl-01

Oscar,

Does the YANG models specified by the enhanced Access Control List draft impact what has been specified in I2NSF drafts?

Linda

On Mon, Oct 17, 2022 at 9:37 AM Oscar González de Dios <[e-mail]<mailto:[e-mail]>> wrote:
Dear i2nsf colleagues,

        FYI, it may be of interest to the participants of I2NSF WG the draft on enhanced Access Control Lists which has been submitted to netmod.  https://datatracker.ietf.org/doc/html/draft-dbb-netmod-acl

        The draft presents a set of enhancements to the Access Control Lists Yang Model of RFC 8519 based on operational experiences, such as  manipulating Lists of  Prefixes, creating Aliases or Defined Sets, IPv4/IPv6 Fragment Handling, better TCP Flags Handling, among others (see the draft for the whole set of proposals).

        We would like to receive feedback on the proposed extensions.

        Best Regards,

                Oscar

------------------------------------------------

A new version of I-D, draft-dbb-netmod-acl-01.txt has been successfully submitted by Mohamed Boucadair and posted to the IETF repository.

Name:           draft-dbb-netmod-acl
Revision:       01
Title:          Extensions to the Access Control Lists (ACLs) YANG Model
Document date:  2022-06-29
Group:          Individual Submission
Pages:          26
URL:            https://www.ietf.org/archive/id/draft-dbb-netmod-acl-01.txt
Status:         https://datatracker.ietf.org/doc/draft-dbb-netmod-acl/
Htmlized:       https://datatracker.ietf.org/doc/html/draft-dbb-netmod-acl
Diff:           https://www.ietf.org/rfcdiff?url2=draft-dbb-netmod-acl-01

Abstract:
   RFC 8519 defines a YANG data model for Access Control Lists (ACLs).
   This document discusses a set of extensions that fix many of the
   limitations of the ACL model as initially defined in RFC 8519.

Discussion Venues

   This note is to be removed before publishing as an RFC.

   Discussion of this document takes place on the Network Modeling
   Working Group mailing list ([e-mail]<mailto:[e-mail]>), which is archived at
   https://mailarchive.ietf.org/arch/browse/netmod/.

   Source for this draft and an issue tracker can be found at
   https://github.com/oscargdd/draft-dbb-netmod-enhanced-acl.




The IETF Secretariat



________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is confidential and privileged information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição
_______________________________________________
I2nsf mailing list
[e-mail]<mailto:[e-mail]>
https://www.ietf.org/mailman/listinfo/i2nsf

________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is confidential and privileged information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição