Re: [Netconf] SSE and HTTP/2 in restcon-notif

Kent Watsen <kwatsen@juniper.net> Fri, 28 September 2018 01:34 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAB8A130DD2 for <netconf@ietfa.amsl.com>; Thu, 27 Sep 2018 18:34:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.157
X-Spam-Level:
X-Spam-Status: No, score=-3.157 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L94Bz5DuTe4k for <netconf@ietfa.amsl.com>; Thu, 27 Sep 2018 18:34:37 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8167130DCA for <netconf@ietf.org>; Thu, 27 Sep 2018 18:34:36 -0700 (PDT)
Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w8S1Xsgc000696; Thu, 27 Sep 2018 18:34:34 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=NkMjyX8BgGrqLqnHr84KjPDMmP111+1Lu3VHw6/ekLg=; b=R+xnSkhcA7dy5xzVgFNY9kDJdvg2XqitH8QsvpdneVgg8dghhCOeYQwHpKwLF+nqXAyn mNrFlJU2Cp65bzGHh/EzAEZc6voIkQZTFacB7/K0wyBpHix6Tb1uhk3qC1IvbGVxfxCH 90rQo4wfEeG3IwFPfagEPa8hoqUOVj+PFGEZJmdfHAQwywLewt9a4RlqFBBM960tzeDE 0JKy2MRw4JIOsh3FsNs0WPpGMN9HWwESlNryZ5hwFVNXUmT6YmQbqKiWFNfElV8kljMR IfiTj4eZZJGhA9yUe81RslMQNxpkfbRlkD+wmWFAOxejyLeAeJU9K8rsB2Q55PPq0nQO gw==
Received: from nam03-co1-obe.outbound.protection.outlook.com (mail-co1nam03lp0024.outbound.protection.outlook.com [216.32.181.24]) by mx0b-00273201.pphosted.com with ESMTP id 2ms9ucr2e9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 27 Sep 2018 18:34:34 -0700
Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB4619.namprd05.prod.outlook.com (20.176.109.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1185.16; Fri, 28 Sep 2018 01:34:32 +0000
Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495%3]) with mapi id 15.20.1185.014; Fri, 28 Sep 2018 01:34:32 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
CC: Andy Bierman <andy@yumaworks.com>, Martin Bjorklund <mbj@tail-f.com>, Netconf <netconf@ietf.org>, "rrahman=40cisco.com@dmarc.ietf.org" <rrahman=40cisco.com@dmarc.ietf.org>
Thread-Topic: [Netconf] SSE and HTTP/2 in restcon-notif
Thread-Index: AQHUVpLBkBpJSSIQbkWRq5O8cMUK2aUEmdsAgAAMawD//9QCgIAAStCA///hgoA=
Date: Fri, 28 Sep 2018 01:34:32 +0000
Message-ID: <067FCC27-2310-4205-8A9A-3418FAFF28C7@juniper.net>
References: <B51DAF9C-4294-44BF-9138-7145E61F42AB@juniper.net> <20180927.224854.1626742691261140238.mbj@tail-f.com> <CABCOCHSrEiibcUp99ho60FJr37RDLho+H14oc4htELjSHZqKvg@mail.gmail.com> <F8C1FF8F-3CCB-47B1-86F8-E43F9FCE1DFC@juniper.net> <20180927232339.3c5ous2xj3jhtu4p@anna.jacobs.jacobs-university.de>
In-Reply-To: <20180927232339.3c5ous2xj3jhtu4p@anna.jacobs.jacobs-university.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.10.2.180910
x-originating-ip: [66.129.241.13]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM6PR05MB4619; 6:8Nd1pR0c3PC81XoIIgj5/Mn2toGJL6qVD6Ivi52Ryw1jW4Qxfme2cM6BeSamavx22TXzWRrVnRkqBig4vKDxqEK4VoS/bew8SpgNVF3RgKzhFz71KySHvQZ9D0wyxR4h7kK0jImAv7EbGOlx4MSQSmph8CQCaAmzrdkelTi6cU4hvWxNmcWjxKCmstC+Bwn9gOsNDZO/w1vMDaN+jsWLf93sAoIrmon1eBNta3Y8fKxzom5uDGiPnWj0MbZL2UX3vzEBNcOG6yqivBHmU70fk/rM5uO3gWZ25vvXKLWNMYlGzzULMEpaB+oM8GBloG3PV+oknbYGWWKRm/GAyQrAcpqh9UqVqHO0W9Dkf57+9sHlVlwx3cMhSSiJZyJ4kEVnk2SaPivWpojUxDfBMZQHQy2y7x1CeSasCPgNar+O+f9lQbZr5sERVzSQfeIpFRfNjRp9vzPwy45GmBjGLXld8Q==; 5:pd9+N9N5cWVhjtjqmAjMvddusC4aEnkbDwtoxPnip+gZW/Og3lxopJJgJ5it24nAY7NJ/xMd4xjTPQShBPzAplvadNP08qUrPwtASMIzAwKREc657cC2gj/tyenHmUU66SrgDrjzzvWmzW1o5PXdZS2oe2tA8ZKqXms9CtiADjo=; 7:CZGbLWdVtZD2yT7pVHTQIk6wJoK/Ax7Klnbth/eko16g5Hi8fMfh3ZxOZ9qu69aspHATCYwcYRLSRwChZDGNQoc/FMxmtIvz1itJf51ZmSiWAdNnp2hr5vdV0EDlS3bcFVJ7X8f0/tPGoh4s9gGKyeAUwifeBZ53HnBUVCql+dqcNabrd/d6+gG4lLSD7en4ad14k8RYjPIJVqwDVCH9CB7iGJYJ4Uu7BWoKVcslOIiqcdaHfTohnDoI84B5nljg
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 2d6e4a38-b6e9-4558-53df-08d624e28a88
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534165)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB4619;
x-ms-traffictypediagnostic: DM6PR05MB4619:
x-microsoft-antispam-prvs: <DM6PR05MB4619F9561A65FC26902311BCA5EC0@DM6PR05MB4619.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231355)(944501410)(52105095)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123558120)(20161123560045)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991041); SRVR:DM6PR05MB4619; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB4619;
x-forefront-prvs: 0809C12563
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(346002)(376002)(366004)(136003)(396003)(199004)(189003)(58126008)(66066001)(54906003)(2906002)(6506007)(76176011)(2900100001)(478600001)(82746002)(256004)(14444005)(105586002)(99286004)(93886005)(186003)(36756003)(4326008)(102836004)(25786009)(106356001)(68736007)(5660300001)(26005)(33656002)(6916009)(6512007)(81166006)(81156014)(6246003)(97736004)(8676002)(3846002)(83716004)(8936002)(14454004)(71200400001)(53936002)(71190400001)(486006)(34290500001)(11346002)(2616005)(6486002)(476003)(86362001)(446003)(229853002)(6116002)(6436002)(5250100002)(7736002)(305945005)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4619; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: 064Inxj8fUKQ2Px3orlaSHyEUpCoLdPWCYrgozyTYziEf9b14Y8iqwU5Kh4j0muFYaN9in01G7GDFdKlsLIVhs1wDPaPJaCEH1XTEZSmCOW+jaLoPqS0XQ5lTFQ4Kyvk8DRA/1gesP+yBYvjnl9+jDgKe6PBqlY9v1FWoOdLjCCD4OXouvQHRq5nmFOwnCDGyJk55OEAuAOo0A3JYqkf31cGyzGXPCN0CRX48/v/5VzaMEIsWEqipSpxh65WgY0I/h6d/P/1lFTIIv6zAX+RORZLDf30ne3ikfFYKqBhzao1c/LP8D13eVxgfAfswkbaF8sxyIV2o/iFZHWXQM4fdeEFbGP3GktnFmBJfE+ul0w=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <014E5BBB61A1814D9265AD2098C2CA84@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 2d6e4a38-b6e9-4558-53df-08d624e28a88
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Sep 2018 01:34:32.3496 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4619
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-09-27_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1809280015
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/7vkZfrVSRzKSkOzxFL71topvLr8>
Subject: Re: [Netconf] SSE and HTTP/2 in restcon-notif
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Sep 2018 01:34:38 -0000



> The text should be removed. How HTTP/2 sessions are started is defined
> in section 3 of RFC 7540.

Perfect.  This applies to all RESTCONF connections. Looking more at 
the first paragraph, the first sentence says:

   For a dynamic subscription, where an HTTP client session doesn't
   already exist, a new client session is initiated from the subscriber.

But this isn't quite right.  Dynamic subscriptions, at least for this
draft are always on top of a RESTCONF connection.  Put together, the
first paragraph should change as:

OLD:
   For a dynamic subscription, where an HTTP client session doesn't
   already exist, a new client session is initiated from the subscriber.
   If the subscriber is unsure if HTTP2 is supported by the publisher,
   HTTP1.1 will be used for initial messages, and these messages will
   include an HTTP version upgrade request as per [RFC7230],
   Section 6.7.  If a publisher response indicates that HTTP2 is
   supported, HTTP2 will be used between subscriber and publisher for
   future HTTP interactions as per [RFC7540].
NEW:
   Dynamic subscriptions are established using the RESTCONF protocol
   [RFC8040].  Section 2 of RFC 8040 describes the transport protocol
   for RESTCONF.

Also, while looking at Section 3.1, the second sentence says:

   A subscriber SHOULD establish the HTTP session over TLS [RFC5246]
   In order to secure the content in transit.

This sentence should be removed, RESTCONF requires TLS.  I imagine
this being a holdover from before, but another notif draft needs to
be written if wanting to support HTTP-based notifications without
requiring TLS, or even RESTCONF.

Similarly, the 3rd paragraph regards a scenario where TLS might not
be in use, which won't ever happen.  For this reason, the first half
of this paragraph should be removed.

Kent // contributor