Re: [I2nsf] [Last-Call] Yangdoctors last call review of draft-ietf-i2nsf-nsf-monitoring-data-model-06

tom petch <ietfa@btconnect.com> Mon, 06 September 2021 15:36 UTC

Return-Path: <ietfa@btconnect.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 574EC3A132F for <i2nsf@ietfa.amsl.com>; Mon, 6 Sep 2021 08:36:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1iJVSvfo5KpM for <i2nsf@ietfa.amsl.com>; Mon, 6 Sep 2021 08:36:00 -0700 (PDT)
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50125.outbound.protection.outlook.com [40.107.5.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2179C3A1324 for <i2nsf@ietf.org>; Mon, 6 Sep 2021 08:36:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MCRILn6srAd0+q0Zspml37oYdbOoi3t3fufNrfPI6Ob7sf+kzXi9VVsHsc4TrktxYYvU3CYcZggLNW/3q4TnSAmSCb1wRw37DvcllvDtW2+jV+vrk7phyQH4IBzITa8PS3paK2dgz1PCJZTGmjwDdK+XoQe/vG3SerEMi4Subcqxk0WX97HW7df2onIAciaBlntu0XR4ybXzh9asMN+KNgEwt2YVEbjWGolUrECp6jDOoNr7iDF8NQytW7Poz6LXMQmMavEhQRoaVJDpJ8EkCIui0ocnILvwj5eE8xX2hnS1rjNfwHTA7djtJOV9DG3IMyuvybT3qy6+yvLIhlRTFA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=w19bQGPDU9mQzwOvfQkR0HVzdJiPPBZl1RpHJaL2pgI=; b=ABSkrzDxjdMRF9Q8pQywXDb3UiiOwHcen/ajbWx+pEsNOZvXaD8H3coSjKZB7fjyw3E+lLTjZvFQJQDCnZG32eAn1v4N1de/356/ZwywQDaFFlenHVEdnYQDcEse6zuRSY2cfTBi0v5Mvf9z3CuaPQ0C7/75E8RjnRl9sTbmkwrfWt1s0M6aWUaGkMsQ+8LCUZwx0q69E9zyfwVcgZHRw5fAZV2GslYtajgIFIoKUIQFgPkkwjRozwHUUgNZalNb/NO5wADCSA1oejbB4GTiX3cDOfpIwmhObKG/5m8lpIx2R2pt8XHjnx4GjjUZ/j+tbBO9edap8SdHTyqzKG4YxA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w19bQGPDU9mQzwOvfQkR0HVzdJiPPBZl1RpHJaL2pgI=; b=Raj4fVE+dsrdEmr3CGJnH6XQ6OkKuDhRaCwHnOaM316U9EGzTpvs9/pmv/mhXe3ZcAbMObNXU2+vXJZ9VZUyM50sS1nmmoD9ujLUeTKeDQcnCRPCzgNHs1Tc5EHtGENmkTUnuMZC20RCR8W7P0eyzrdLlE0quzpd8SiVTRMi2oA=
Received: from DB7PR07MB5546.eurprd07.prod.outlook.com (2603:10a6:10:73::23) by DBBPR07MB7641.eurprd07.prod.outlook.com (2603:10a6:10:1f3::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4500.7; Mon, 6 Sep 2021 15:35:55 +0000
Received: from DB7PR07MB5546.eurprd07.prod.outlook.com ([fe80::1df3:bc53:dcc9:1187]) by DB7PR07MB5546.eurprd07.prod.outlook.com ([fe80::1df3:bc53:dcc9:1187%4]) with mapi id 15.20.4500.012; Mon, 6 Sep 2021 15:35:55 +0000
From: tom petch <ietfa@btconnect.com>
To: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
CC: "i2nsf@ietf.org" <i2nsf@ietf.org>
Thread-Topic: [I2nsf] [Last-Call] Yangdoctors last call review of draft-ietf-i2nsf-nsf-monitoring-data-model-06
Thread-Index: AQHXn+92avUdc8r+D0KCWkfzdlun7KuXJtJr
Date: Mon, 06 Sep 2021 15:35:54 +0000
Message-ID: <DB7PR07MB5546C943660A17CA0A80CCF3A2D29@DB7PR07MB5546.eurprd07.prod.outlook.com>
References: <6130B864.50606@btconnect.com>
In-Reply-To: <6130B864.50606@btconnect.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
suggested_attachment_session_id: 178eee10-1e46-d527-16d9-ba7be1ba3b92
authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=btconnect.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 10177b41-7a0c-47af-5e0d-08d9714c0429
x-ms-traffictypediagnostic: DBBPR07MB7641:
x-microsoft-antispam-prvs: <DBBPR07MB764184E221620190A72B9194A2D29@DBBPR07MB7641.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR07MB5546.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(396003)(366004)(346002)(136003)(39860400002)(376002)(2906002)(53546011)(33656002)(6506007)(966005)(9686003)(6916009)(26005)(478600001)(7696005)(55016002)(8676002)(186003)(8936002)(122000001)(316002)(4326008)(38100700002)(38070700005)(76116006)(91956017)(83380400001)(5660300002)(86362001)(71200400001)(66946007)(66476007)(66446008)(66556008)(52536014)(64756008); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB7PR07MB5546.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 10177b41-7a0c-47af-5e0d-08d9714c0429
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Sep 2021 15:35:54.9399 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: w7nOmysrqPT8Mk+DLBZS8zIgSE8rnuMmBY4YvBHsURdMyMvZIPSQAta3i8I0RwWsVLzmAlfMpegVCfuhLAFn2A==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR07MB7641
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/W72na0KfFug5Y7IM-iEb4KP4HHU>
Subject: Re: [I2nsf] [Last-Call] Yangdoctors last call review of draft-ietf-i2nsf-nsf-monitoring-data-model-06
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Sep 2021 15:36:06 -0000

Top-posting one more comment about the different I-Ds being different:-)

This I-D uses the leaf start-time where other I-D s use leaf start-date-time.  This inconsistency was apparent when I looked at
draft-lingga-i2nsf-application-interface-dm-00
where there are two examples one after the other with the different formats.  I think that start-date-time  is better but, as ever, I do like consistency!

Tom Petch

From: I2nsf <i2nsf-bounces@ietf.org> on behalf of t petch <ietfa@btconnect.com>
Sent: 02 September 2021 12:41

----- Original Message -----
From: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Sent: Tuesday, August 24, 2021 3:27 PM

> Hi Tom,
> Patrick and I have addressed your comments below with -09 version:
>
> I attach the revision letter to explain how to address them.
>
> Please let us know where this revision satisfies you or not.

Paul

Getting there.

You have added some references to the YANG module - good - but you must
also add them to the I-D References

I see
RFC854, RFC913, RFC1081, RFC4340, RFC4960, RFC5321, RFC7230, RFC7231.
RFC1081 is obsoleted by RFC1225 so that would likely be a better
reference.  In other I-D you have cited RFC793bis - I do not know if
that is appropriate here.

You import
  ietf-i2nsf-policy-rule-for-nsf {
with   prefix nsfi but in nsf-facing the prefix is nsfintf
Needs to be consistent

In identity, derived from application-protocol (a base which I like), I
note that 'imap' is present elsewhere but not here.  I do not know if
that is relevant to this module or not.

In the data module:

/http:/https:/

        leaf src-zone {
I was thrown by this thinking of IPv6 address zones but the description
makes in clear that this is nothing of the sort.  Probably not worth
changing but if you do I would suggest src-location as is used in the
description clause.

              leaf-list user-agent {
I think that the description violates (!) the limit on line length for
an RFC

      container i2nsf-counters {
       description
          "This is probably better covered by an import as this
This seems unfinished

            leaf alarm-type {
elsewhere you have switched to lower case (which I think right) but this
needs bringing in line (I do like consistency).

10.  I2NSF Event Stream
you are using the NETMOD convention for line breaks; would benefit from
a reference
"line breaks as per [RFC8792]

The I-D is big and I hope to find time this month to go through it again
in more detail.  Meanwhile, on to capability.

In passing, I get a bounce for skku-iotlab-members every time.

Tom Petch







>
> Thanks.
>
> Best Regards,
> Paul
>
> On Wed, May 5, 2021 at 7:44 PM t petch
<ietfa@btconnect.com<mailto:ietfa@btconnect.com>> wrote:
> Paul
>
> Top posting since this is a more general response (and leaving in YANG
> doctors since I note that five different YANG doctors reviewed the
five
> I-D and so might not see the issue that concerns me).
>
> As you have probably realised, I have now looked at the five YANG I-D
of
> I2NSF and am concerned at the disparate approaches to the same topics
> that I think will confuse a user and, likely, induce mistakes.  I
> provided some detailed comments  in response to WG LC on
> capability-data-model but really it cuts across all five.  It may be
> that the inconsistenicies that I see can be justified but if so, then
I
> think that the I-D may need some text to say so, to relate one I-D to
> another.
>
> The treatment of YANG identity for ICMP is to me a clear example.  I
> think that nsf-monitoring is good here, deriving icmpv4 and icmpv6
from
> icmp (and ipv4 and ipv6)
> while capability is not good having icmp (sic) and icmpv6 as two
> unrelated identity, no common base.
>
> But at a higher level it may be that capability has a better treatment
> where it has
>    base event; [from which is derived]
>      identity system-event-capability {
>      identity system-alarm-capability {
>
>    base system-event-capability;
>      identity access-violation {
>      identity configuration-change {
>
>    base system-alarm-capability;
>      identity memory-alarm {
>      identity cpu-alarm {
>      identity disk-alarm {
>      identity hardware-alarm {
>      identity interface-alarm {
>
> while nsf-monitoring has
>
>    base alarm-type;
>      identity mem-usage-alarm {
>      identity cpu-usage-alarm {
>      identity disk-usage-alarm {
>      identity hw-failure-alarm {
>      identity ifnet-state-alarm {
>
>    base event-type;
>      identity access-denied {
>      identity config-change {
>
> Different structure, different terminology, and these examples are
quite
> close compared to some others.  I would expect at least the root of
the
> identifier to be the same if not the whole identifier.
>
> What is missing, for me, is an underlying, high-level, information
model
> to provide a consistent structure and a consistent terminology for the
> I2NSF YANG I-D.
>
> Tom Petch
>
>
> ----- Original Message -----
> From: "Mr. Jaehoon Paul Jeong"
<jaehoon.paul@gmail.com<mailto:jaehoon.paul@gmail.com>>
> To: <tom petch>
> Cc: <Last Call>; <i2nsf@ietf.org<mailto:i2nsf@ietf.org>>; <Andy
Bierman>; <Yoav Nir>;
>
<draft-ietf-i2nsf-nsf-monitoring-data-model.all@ietf.org<mailto:draft-ie
tf-i2nsf-nsf-monitoring-data-model.all@ietf.org>>; <Linda
> Dunbar>; <Patrick Lingga>; <YANG Doctors>; <skku-iotlab-members>; <Mr.
> Jaehoon Paul Jeong>
> Sent: Thursday, April 29, 2021 3:49 PM
> Subject: Re: [I2nsf] [Last-Call] Yangdoctors last call review of
> draft-ietf-i2nsf-nsf-monitoring-data-model-06
>
>
> > > Hi Tom,
> > > Patrick and I have addressed all your comments below with the
> following revision.
> > >
>
https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-nsf-monitoring-da
>
ta-model-08<https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-nsf-m
onitoring-data-model-08>
> > >
> > > I attach our revision letter.
> > >
> > > Thanks.
> > >
> > > Best Regards,
> > > Paul
> > >
> > > On Mon, Apr 12, 2021 at 6:59 PM tom petch
>
<daedulus@btconnect.com<mailto:daedulus@btconnect.com><mailto:daedulus@b
tconnect.com<mailto:daedulus@btconnect.com>>> wrote:
> > > Paul
> > >
> > > Some admin comments on -07; I think that you need to:
> > >
> > > - change the title in YANG revision reference
> > >
> > > - add to the I-D references
> > > RFC959
> > > RFC8632
> > >
> > > - shorten lines. There is a limit to line length in RFC as per the
> Style
> > > Guide.  This is exceeded in the YANG where some of the path
statements
> > > take it over 80 while some of the examples are over 100.
> > >
> > > - add a reference for the import of
> > > ietf-i2nsf-policy-rule-for-nsf
> > >
> > > HTH
> > >
> > > Tom Petcb
> > >
> > > On 01/04/2021 03:09, Mr. Jaehoon Paul Jeong wrote:
> >>> > > > Hi Andy, Linda, and Yoav,
> >>> > > > Patrick and I have addressed all the comments from Andy.
> >>> > > > Here is the revised draft -07:
> > > ATT00001.txt 130 bytes
>
> Attachments:
>
Revision-Letter-for-NSF-Monitoring-YANG-Data-Model-version-09-20210824.d
ocx 103 kB
>
Revision-Letter-for-NSF-Monitoring-YANG-Data-Model-version-09-20210824.p
df 420 kB

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.ietf.org/mailman/listinfo/i2nsf