Re: [I2nsf] WG Adoption call for https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04
Linda Dunbar <linda.dunbar@huawei.com> Mon, 12 February 2018 16:59 UTC
Return-Path: <linda.dunbar@huawei.com>
X-Original-To: i2nsf@ietfa.amsl.com
Delivered-To: i2nsf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 974E2126DD9 for <i2nsf@ietfa.amsl.com>; Mon, 12 Feb 2018 08:59:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.23
X-Spam-Level:
X-Spam-Status: No, score=-4.23 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jVguuvPZqam9 for <i2nsf@ietfa.amsl.com>; Mon, 12 Feb 2018 08:59:30 -0800 (PST)
Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D29212421A for <i2nsf@ietf.org>; Mon, 12 Feb 2018 08:59:30 -0800 (PST)
Received: from lhreml708-cah.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id CCFEC72951847 for <i2nsf@ietf.org>; Mon, 12 Feb 2018 16:59:25 +0000 (GMT)
Received: from SJCEML703-CHM.china.huawei.com (10.208.112.39) by lhreml708-cah.china.huawei.com (10.201.108.49) with Microsoft SMTP Server (TLS) id 14.3.361.1; Mon, 12 Feb 2018 16:59:26 +0000
Received: from SJCEML521-MBB.china.huawei.com ([169.254.6.91]) by SJCEML703-CHM.china.huawei.com ([169.254.5.179]) with mapi id 14.03.0382.000; Mon, 12 Feb 2018 08:59:18 -0800
From: Linda Dunbar <linda.dunbar@huawei.com>
To: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
CC: "i2nsf@ietf.org" <i2nsf@ietf.org>, John Strassner <strazpdj@gmail.com>, Rakesh Kumar <rakeshkumarcloud@gmail.com>, "Xialiang (Frank)" <frank.xialiang@huawei.com>, Brian Kim <kimshallom12@gmail.com>, Susan Hares <shares@ndzh.com>, SecCurator_Team <skku_secu-brain_all@googlegroups.com>
Thread-Topic: [I2nsf] WG Adoption call for https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04
Thread-Index: AdOW/ItNXWRltlCQTlmUMdCnL5ZA6QI60LuAAACikgAATCxlAADB0sqAAAAOU7A=
Date: Mon, 12 Feb 2018 16:59:18 +0000
Message-ID: <4A95BA014132FF49AE685FAB4B9F17F66B009AB5@SJCEML521-MBB.china.huawei.com>
References: <4A95BA014132FF49AE685FAB4B9F17F66B002215@SJCEML521-MBB.china.huawei.com> <CAJwYUrEKRi2s6PTHSw0La2JaNRYA+tR0u9BmWvq9Br6rPsK75w@mail.gmail.com> <CAPK2Dey1tvt=zg12BheZksWtovXGYXPd9aR6xU5JWb5Fz9bEQA@mail.gmail.com> <4A95BA014132FF49AE685FAB4B9F17F66B00890F@SJCEML521-MBB.china.huawei.com> <CAPK2DewSeAsbMB3hAitphsj3iRLyBQLQYZnx22SLB_HhiPoahQ@mail.gmail.com>
In-Reply-To: <CAPK2DewSeAsbMB3hAitphsj3iRLyBQLQYZnx22SLB_HhiPoahQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.192.11.98]
Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F66B009AB5SJCEML521MBBchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/i2nsf/mp0TeeRyDAVWV10pXjy7_2wwwz4>
Subject: Re: [I2nsf] WG Adoption call for https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04
X-BeenThere: i2nsf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" <i2nsf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i2nsf/>
List-Post: <mailto:i2nsf@ietf.org>
List-Help: <mailto:i2nsf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i2nsf>, <mailto:i2nsf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Feb 2018 16:59:33 -0000
Paul, Thank you very much for the explanation. So the “Policy Domain” in your document is about a “Family (or group) of Tenants”, correct? Linda From: Mr. Jaehoon Paul Jeong [mailto:jaehoon.paul@gmail.com] Sent: Monday, February 12, 2018 2:56 AM To: Linda Dunbar <linda.dunbar@huawei.com> Cc: i2nsf@ietf.org; John Strassner <strazpdj@gmail.com>; Rakesh Kumar <rakeshkumarcloud@gmail.com>; Xialiang (Frank) <frank.xialiang@huawei.com>; Brian Kim <kimshallom12@gmail.com>; Susan Hares <shares@ndzh.com>; SecCurator_Team <skku_secu-brain_all@googlegroups.com>; Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com> Subject: Re: [I2nsf] WG Adoption call for https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04 Hi Linda, Here is my clarification on your question. > Is the “+--rw multi-tenancy” branch the attribute profile for “one > tenant”? or list of multiple “tenants” with the attributes listed for > one tenant? Yes, the "+--rw multi-tenancy” branch represents a list of multiple "tenants". In the list, a policy-domain represents a single domain distinguished by policy-domain-id, which is an organization (e.g., enterprise). Note that each domain can have multiple tenants that are actual customers in the domain, such as departments (e.g., Human Resources, Finance, and Legal Department). According to Section 4 (Information Model for Multi-Tenancy) of draft-kumar-i2nsf-client-facing-interface-im-04, which is the information model of the I2NSF Consumer-Facing Interface, a tenant is an entity within an organization (e.g., enterprise and university), such as a customer or department (e.g., Human Resources, Finance, and Legal Department). It could have its own security policies within the organization. For clarification in the data model tree, I think that policy-tenant should be a child node of policy-domain as below. | +--rw policy-domain* [policy-domain-id] | | +--rw policy-domain-id* uint16 | | +--rw name string | | +--rw address? string | | +--rw contact string | | +--rw date yang:date-and-time | | +--rw policy-tenant* [policy-tenant-id] | | +--rw policy-tenant-id* uint16 | | +--rw name string | | +--rw date yang:date-and-time | | +--rw domain -> /ietf-i2nsf-consumer-facing-interface/ | | multi-tenancy/policy-domain/ | | policy-domain-id In the next revision, we will reflect this one. If you have further questions, please let me know. Thanks. Best Regards, Paul On Fri, Feb 9, 2018 at 5:55 AM, Linda Dunbar <linda.dunbar@huawei.com<mailto:linda.dunbar@huawei.com>> wrote: Questions to the Authors: Is the “+--rw multi-tenancy” branch the attribute profile for “one tenant”? or list of multiple “tenants” with the attributes listed for one tenant? Thank you very much. Linda From: I2nsf [mailto:i2nsf-bounces@ietf.org<mailto:i2nsf-bounces@ietf.org>] On Behalf Of Mr. Jaehoon Paul Jeong Sent: Tuesday, February 06, 2018 6:05 PM To: John Strassner <strazpdj@gmail.com<mailto:strazpdj@gmail.com>> Cc: Rakesh Kumar <rakeshkumarcloud@gmail.com<mailto:rakeshkumarcloud@gmail.com>>; i2nsf@ietf.org<mailto:i2nsf@ietf.org>; SecCurator_Team <skku_secu-brain_all@googlegroups.com<mailto:skku_secu-brain_all@googlegroups.com>>; Linda Dunbar <linda.dunbar@huawei.com<mailto:linda.dunbar@huawei.com>>; Xialiang (Frank) <frank.xialiang@huawei.com<mailto:frank.xialiang@huawei.com>>; Brian Kim <kimshallom12@gmail.com<mailto:kimshallom12@gmail.com>>; Susan Hares <shares@ndzh.com<mailto:shares@ndzh.com>> Subject: Re: [I2nsf] WG Adoption call for https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04 Hi John, Thanks for your constructive suggestions on our draft. :-) We authors will clarify your suggestions on the next revision. You can give us your advice on our next revision. Thanks. Best Regards, Paul On Wed, Feb 7, 2018 at 8:46 AM, John Strassner <strazpdj@gmail.com<mailto:strazpdj@gmail.com>> wrote: IMHO, the purpose of a WG adopting a draft is to acknowledge that the draft is a good starting point for the work that WG wants to accomplish. To be perfectly clear, I am NOT objecting on the completeness of the document. Rather, I am objecting on the technical correctness of the starting point. I do NOT feel that the proposed documents represent a good starting point. Ignoring things that can be easily fixed (e.g., grammar), there are a host of problems, such as: - what, exactly, is this draft trying to do? I thought I would see YANG for policy rules sent over the Consumer-Facing Interface. Instead, I see the name of the interface, whose first element is multi-tenancy, that also contains policies? Policies do not care about multi-tenancy. They do care about domains. The organization of the YANG is incorrect. - sec 4: in the ieft-i2nsf-cf-interface module - why is multi-tenancy at the top of the tree? Shouldn't a DOMAIN be able to have multiple tenants? - why does a domain have an authentication-method? First, multiple such methods should be able to be used. Second, how would a domain know what an authentication method even is? - why is tenant a sibling of domain, and not a child? - why is domain a leaf within policy-tenant? This should be a reference, and why doesn't domain have a reference to policy-tenant? - policy roles have nothing to do with multi-tenancy - why are they here? I could go on, but even the above means that the rest of the YANG will be wrong. Therefore, the document is NOT a good starting point, and will NOT accelerate the path to getting a good RFC. regards, John On Fri, Jan 26, 2018 at 3:23 PM, Linda Dunbar <linda.dunbar@huawei.com<mailto:linda.dunbar@huawei.com>> wrote: The authors of I2NSF Consumer-Facing Interface YANG Data Model https://tools.ietf.org/html/draft-jeong-i2nsf-consumer-facing-interface-dm-04 Have requested working group adoption of this draft. Please bear in mind that WG Adoption doesn’t mean that the draft current content is ready, WG Adoption only means that it is a good basis for a working group to work on. While all feedback is helpful, comments pro or con with explanations are much more helpful than just "yes please" or "no thank you". Thank you. Linda & Yoav _______________________________________________ I2nsf mailing list I2nsf@ietf.org<mailto:I2nsf@ietf.org> https://www.ietf.org/mailman/listinfo/i2nsf -- regards, John _______________________________________________ I2nsf mailing list I2nsf@ietf.org<mailto:I2nsf@ietf.org> https://www.ietf.org/mailman/listinfo/i2nsf -- =========================== Mr. Jaehoon (Paul) Jeong, Ph.D. Assistant Professor Department of Software Sungkyunkwan University Office: +82-31-299-4957 Email: jaehoon.paul@gmail.com<mailto:jaehoon.paul@gmail.com>, pauljeong@skku.edu<mailto:pauljeong@skku.edu> Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php<http://cpslab.skku.edu/people-jaehoon-jeong.php> -- =========================== Mr. Jaehoon (Paul) Jeong, Ph.D. Assistant Professor Department of Software Sungkyunkwan University Office: +82-31-299-4957 Email: jaehoon.paul@gmail.com<mailto:jaehoon.paul@gmail.com>, pauljeong@skku.edu<mailto:pauljeong@skku.edu> Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php<http://cpslab.skku.edu/people-jaehoon-jeong.php>
- [I2nsf] WG Adoption call for https://tools.ietf.o… Linda Dunbar
- Re: [I2nsf] WG Adoption call for https://tools.ie… Mr. Jaehoon Paul Jeong
- Re: [I2nsf] WG Adoption call for https://tools.ie… 최영환
- Re: [I2nsf] WG Adoption call for https://tools.ie… 최영환
- [I2nsf] 答复: WG Adoption call for https://tools.ie… dongyue (D)
- Re: [I2nsf] WG Adoption call for https://tools.ie… 안태진 (Network Intelligence Proj)
- Re: [I2nsf] WG Adoption call for https://tools.ie… 박정수
- Re: [I2nsf] WG Adoption call for https://tools.ie… Sangwon Hyun
- Re: [I2nsf] WG Adoption call for https://tools.ie… elopez.ietf
- Re: [I2nsf] WG Adoption call for https://tools.ie… John Strassner
- Re: [I2nsf] WG Adoption call for https://tools.ie… Mr. Jaehoon Paul Jeong
- Re: [I2nsf] WG Adoption call for https://tools.ie… Linda Dunbar
- Re: [I2nsf] WG Adoption call for https://tools.ie… Seil Jeon
- Re: [I2nsf] WG Adoption call for https://tools.ie… Mr. Jaehoon Paul Jeong
- Re: [I2nsf] WG Adoption call for https://tools.ie… Linda Dunbar
- Re: [I2nsf] WG Adoption call for https://tools.ie… Mr. Jaehoon Paul Jeong
- Re: [I2nsf] WG Adoption call for https://tools.ie… Yoav Nir
- Re: [I2nsf] WG Adoption call for https://tools.ie… Mr. Jaehoon Paul Jeong