Re: [I2nsf] need more review and support to close the WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm

Hi,

Regarding the level of detail, I think it is appropriate for allowing security vendors to build on it. My only concern could be the possibility of extending the model if more detail becomes required, but that comes with YANG factory settings…

Be goode,

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
https://www.linkedin.com/in/dr2lopez/

e-mail: diego.r.lopez@telefonica.com<mailto:diego.r.lopez@telefonica.com>
Mobile:  +34 682 051 091
----------------------------------

On 26/7/22, 09:14, "I2nsf on behalf of Susan Hares" <i2nsf-bounces@ietf.org<mailto:i2nsf-bounces@ietf.org> on behalf of shares@ndzh.com<mailto:shares@ndzh.com>> wrote:

Paul - Thank you for your kind words!

WG members:

We should chat if you-all feel the same way as I do.  It is important for Roman, Yoav, and Linda to hear if you think we’ve got this level of detail right.  The customer facing interface data model is a new concept in creating something that a certain class of security vendors can build on.

Do you think we got it correctly?  I’m a co-author so – I’m biased.  This yang model could be a lot more detailed or less detailed.

Would it help to discuss specifics or have you heard enough?  Either way Roman, Yoav, and Linda need to hear about it.

Thanks!
Sue

From: Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com>
Sent: Tuesday, July 26, 2022 9:07 AM
To: Susan Hares <shares@ndzh.com>
Cc: Roman Danyliw <rdd@cert.org>; Linda Dunbar <linda.dunbar@futurewei.com>; Yoav Nir <ynir.ietf@gmail.com>; i2nsf@ietf.org; skku-iotlab-members <skku-iotlab-members@googlegroups.com>; Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com>
Subject: Re: [I2nsf] need more review and support to close the WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm

Sue,
Thanks for your thorough review and evaluation on the Consumer-Facing Interface YANG Data Model:
https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-consumer-facing-interface-dm-22

As Sue said, the YANG module of this Consumer-Facing Interface data model has been proved
through many IETF I2NSF hackathon projects.
This time my SKKU team demonstrated the mature functionality of Security Policy Translator
over this Consumer-Facing Interface YANG data model.

- Slides of IETF-114 I2NSF Hackathon Project
  https://github.com/IETF-Hackathon/ietf114-project-presentations/blob/main/IETF114-I2NSF-Hackathon-Project-20220724.pdf

- Github Repository of IETF-114 I2NSF Hackathon Project
  https://github.com/jaehoonpaul/i2nsf-framework/tree/master/Hackathon-114/react

- Demo Video Clip of IETF-114 I2NSF Hackathon Project
  https://www.youtube.com/watch?v=_y6xLtUXBzw

I believe that this draft is ready to move toward the IESG evaluation.

Thanks.

Best Regards,
Paul

On Tue, Jul 26, 2022 at 7:56 AM Susan Hares <shares@ndzh.com<mailto:shares@ndzh.com>> wrote:
Linda and I2NSF:

Review of draft-ietf-i2nsf-consumer-facing-inteface-dm.

Status: Ready to publish

Textual Comments:  The write-up for this data model has excellent clarity in the English text.
Review Question: Right level of detail?  Yes – Excellent choices on detail.

One of the questions from the Security Ads have asked about this model is whether the level of detail in this model is sufficient.  My review of this model is that it hits a good balance for a consumer-facing model.  The challenge in the customer-facing model is to provide enough information to handle the grouping of information into a common set of primitives.   This group appears to be at the right level of detail.

Most of the I2NSF enabled security devices are network security devices that have a combination of functions (routing, firewall, accounting) as part of network access and control.  These devices will be found on the edge of network provider or within enterprise networks.  If these devices are successful there, this technology could move toward data centers.  However, IMHO I do not thing that will be first.

The Yang module for the customer interface is a challenging creation because it must be specific enough to group the information but leave some flexibility to be tailored for different deployments.  From my experience in creating a routing/switch/firewall, this appears to have the right balance.

Yang module checks:  All my manual check on this Yang module did not find a problem.  I did not run it through automatic checks.

Note for AD:  Several of the original reviews for this module included reviews of the hackathon code with feedback.  I have been aware of the hackathon early results.  I believe several people gave early feedback based on the prototypes.   If you did not see list discussion, it was because the discussions occurred in review of prototype code.

I hope this helps.

Sue Hares

From: I2nsf <i2nsf-bounces@ietf.org<mailto:i2nsf-bounces@ietf.org>> On Behalf Of Linda Dunbar
Sent: Tuesday, July 12, 2022 1:17 PM
To: i2nsf@ietf.org<mailto:i2nsf@ietf.org>
Subject: [I2nsf] need more review and support to close the WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm

I2NF WG,

draft-ietf-i2nsf-consumer-facing-interface-dm WGLC was inconclusive due to lack of support and some LC comments not properly addressed. There appeared to be limited reviews of the document during the WGLC
See the discussion history: [I2nsf] WGLC for draft-ietf-i2nsf-consumer-facing-interface-dm-16<https://mailarchive.ietf.org/arch/msg/i2nsf/MFOohjnJ9fbylLB9eyccMRhrp04/>

To proceed to publication more reviews and support from the WG for publication is needed.
We really appreciate more people reviewing the document, especially the people who are not the authors.

Thank you
Linda Dunbar
_______________________________________________
I2nsf mailing list
I2nsf@ietf.org<mailto:I2nsf@ietf.org>
https://www.ietf.org/mailman/listinfo/i2nsf

________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is confidential and privileged information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição