Re: [Int-dir] Request for Review of I2NSF NSF-Facing Interface YANG Data Model Draft

[Adding INT directorate and Jean-Michel Combes]

Hello Paul,

Sorry for belated reply, the IETF-113 meeting week was quite busy for me ;-) May I also kindly suggest to always add the full IETF draft name in the subject line (many IESG members use the Subject + name as a filter) ?

As noted by Jean-Michel Combes in his INT directorate review (thank you Jean-Michel), I still find pretty sad that the IPv6 extension headers are not supported (also wonder why not directly reusing the RFC 8519 YANG module for ACL as such module exists).

Like Jean-Michel, I find that the identities "interface-alarm" (and other ones) should rather be renamed into "interface-event" (as the state change is not always dramatic).

About my own DISCUSS, the change to a "choice layer-3" is still a XOR: either IPv4 or IPv6 and this is not what security practitioners want to do as they do want congruent security policies. As we are kind of circling and not really reaching a final agreement, I will change my ballot from DISCUSS to ABSTAIN.

It is a real pity that RFC 8519 and its network ACL data model does not cover all IEEE 802 fields and even less the IPv6 ones :-( but this is outside of this document scope.

Thank you for implementing the rest of Jean-Michel and my comments.

Regards

-éric

From: "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Date: Friday, 25 March 2022 at 13:21
To: Eric Vyncke <evyncke@cisco.com>
Cc: The IESG <iesg@ietf.org>, "i2nsf@ietf.org" <i2nsf@ietf.org>, Roman Danyliw <rdd@cert.org>, skku-iotlab-members <skku-iotlab-members@googlegroups.com>, "Mr. Jaehoon Paul Jeong" <jaehoon.paul@gmail.com>
Subject: Re: Request for Review of I2NSF NSF-Facing Interface YANG Data Model Draft

Hi Éric,
Here is the revision of I2NSF NSF-Facing Interface YANG Data Model Draft:
https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-nsf-facing-interface-dm-23

I attach the revision letter.

If this revision is fine to you, please clear your DISCUSS on the IESG evaluation.

Thanks.

Best Regards,
Paul

On Mon, Mar 21, 2022 at 9:36 PM Mr. Jaehoon Paul Jeong <jaehoon.paul@gmail.com<mailto:jaehoon.paul@gmail.com>> wrote:
Hi Alexey, Jean-Michel, Erik, Martin, Éric, Francesca, Robert, Murray, and Zaheduzzaman,
Here is the revised draft of I2NSF NSF-Facing Interface YANG Data Model:
https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-nsf-facing-interface-dm-22

I attach the revision letter to explain how Patrick and I have reflected your comments.
In the 1st page of the revision letter, there is an index table to mark the start page
of the comments and responses for each reviewer.

If each of you is satisfied with the revision, please let us know and update the status of your stance on this draft.

Thanks.

Best Regards,
Paul
--
===========================
Mr. Jaehoon (Paul) Jeong, Ph.D.
Associate Professor
Department Head
Department of Computer Science and Engineering
Sungkyunkwan University
Office: +82-31-299-4957
Email: pauljeong@skku.edu<mailto:pauljeong@skku.edu>, jaehoon.paul@gmail.com<mailto:jaehoon.paul@gmail.com>
Personal Homepage: http://iotlab.skku.edu/people-jaehoon-jeong.php<http://cpslab.skku.edu/people-jaehoon-jeong.php>

On Mon, Mar 21, 2022 at 5:19 PM <internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>> wrote:

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Interface to Network Security Functions WG of the IETF.

        Title           : I2NSF Network Security Function-Facing Interface YANG Data Model
        Authors         : Jinyong (Tim) Kim
                          Jaehoon (Paul) Jeong
                          Jung-Soo Park
                          Susan Hares
                          Qiushi Lin
        Filename        : draft-ietf-i2nsf-nsf-facing-interface-dm-22.txt
        Pages           : 82
        Date            : 2022-03-20

Abstract:
   This document defines a YANG data model for configuring security
   policy rules on Network Security Functions (NSF) in the Interface to
   Network Security Functions (I2NSF) framework.  The YANG data model in
   this document corresponds to the data model in Capability data model
   in the I2NSF framework [I-D.ietf-i2nsf-capability-data-model].

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-i2nsf-nsf-facing-interface-dm/

There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-i2nsf-nsf-facing-interface-dm-22

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-i2nsf-nsf-facing-interface-dm-22

Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts

_______________________________________________
I2nsf mailing list
I2nsf@ietf.org<mailto:I2nsf@ietf.org>
https://www.ietf.org/mailman/listinfo/i2nsf