[netconf] Comments on draft-jgc-netconf-privcand

"Joe Clarke (jclarke)" <jclarke@cisco.com> Thu, 27 July 2023 18:44 UTC

Return-Path: <jclarke@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9801AC151060 for <netconf@ietfa.amsl.com>; Thu, 27 Jul 2023 11:44:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.604
X-Spam-Level:
X-Spam-Status: No, score=-9.604 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b="NuJ7BC/x"; dkim=pass (1024-bit key) header.d=cisco.com header.b="cr70LxQJ"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VqREC_MLOGmd for <netconf@ietfa.amsl.com>; Thu, 27 Jul 2023 11:44:50 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93B28C15109B for <netconf@ietf.org>; Thu, 27 Jul 2023 11:44:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4659; q=dns/txt; s=iport; t=1690483490; x=1691693090; h=from:to:subject:date:message-id:mime-version; bh=+Cia9jBfuo7zdR0EhG8M6WSEZq+cBuEuhOaLX8ray1M=; b=NuJ7BC/xvz8qY8Q4LEmmL0swLBsfFXKFFMOB9Ut9XCeztgU8UxwYHSXS 2EQiNAEn3YsGjycijj4gSucNRzK8fEOYff5oxnWSgoZy+vuF1OpRdtBsG WUloCk1CgBe9m3rckloP6Iu1DZc3aFEaMcEPIeCB9MwunPT/BVIyu4bVO Y=;
X-IPAS-Result: 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
IronPort-PHdr: A9a23:S9qcHRAkp+OaRwhiLrFjUyQVoxdPi9zP1kY98JErjfdJaqu8usmkN 03E7vIrh1jMDs3X6PNB3vLfqLuoGXcB7pCIrG0YfdRSWgUEh8Qbk01oAMOMBUDhav+/Ryc7B 89FElRi+iLzKlBbTf73fEaauXiu9XgXExT7OxByI7H3EYrblce6/+uz4JbUJQ5PgWn1bbZ7N h7jtQzKrYFWmd57N68rwx3Vo31FM+hX3jZuIlSe3l7ws8yx55VktS9Xvpoc
IronPort-Data: A9a23:xTaz8q+fd4f6zPrz7e/KDrUD436TJUtcMsCJ2f8bNWPcYEJGY0x3y moWDG7Ub/6IMWX3ftkia47j9hlU6pWHx9VkQVFp/itEQiMRo6IpJzg2wmQcns+2BpeeJK6yx 5xGMrEsFOhtEjmE4E3F3oHJ9RGQ74nQLlbHILCCYnkZqTNMEn970ko8wbFh2OaEvPDga++zk YKqyyHgEAfNNw5cagr4PIra9XuDFNyr0N8plgRWicJj5TcypFFJZH4rHpxdGlOjKmVi8kFWc M6YpF2x1juxEx7AkbpJmJ6jGqEBaua60QRjFhO6VoD66iWuqBDe3Y54CPUxe0ldjQygluAqw 9MRs7icECQma/ikdOQ1C3G0EglkNqFAvbTAO3X674qYzlbNdD3nxPAG4EMeZNJDvL0oRzAVs 6VFd1jhbTjb7w6y6LCwTuB2hckLJ8jwN4RZsXZlpd3cJad9EcubEv+TjTNe9DI/idJkWurFX sUmNApqTzjGez1uAX5CXfrSm8/x1iWgLFW0smm9o6cr6G/VwiRw3aTjdt3PdbS3qd59hE2Uo CfN+H70R09cP92Ewj3D+XWp7gPSoc/lcMEuG5Cq+PRsuXSa9jcYDkEQcXfigvbs3yZSROljA 0AT/yMvq407+0qqUsTxUnWETJis40B0tz14TrNS1e2d9kbHy13GWTVcH1atfPRj5ZBmH2V7v rOct4qxXWQHjVGDdZ6KGl6pQd6aIyMZKyoJYjUJCFVD6Nj4q4Z1hRXKJjqCLEJXpoOvcd0T6 2naxMTbu1n1pZJTv0lc1Qyf6w9AXrCTEmYICvz/BwpJFD9Rao+/fJCP4lPG9/tGJ4vxZgDf7 SBfypbEt71SXMHleMmxrAMlQunBCxGtbmW0vLKTN8JJG8mFoiT6JtkAvFmS2m85aJlslcDVj L/74FMNu8A70IqCZq5saIX5ENUx0aXlDrzYugP8MLJzjmxKXFbfpklGPBfIt0i0yRREuf9kY /+zL53zZUv2/Iw6llJasc9Hj+9yrs3/rEuOLa3GI+OPjOTOOi7OGepfWLZMB8hghJ65TMzu2 483H+OByg5UV6v1ZSy/zGLZBQliwaQTbXwul/FqSw==
IronPort-HdrOrdr: A9a23:+IU5PazHZh+2Tlx59YcoKrPxo+skLtp133Aq2lEZdPULSK2lfp GV8sjziyWatN9IYgBbpTnhAsO9qADnhONICOgqTP+ftWzd2FdAQ7sSlbcKrweQfhEWldQtnp uIEZIOc+EYZGIS5a2XkWrIcerIq+P3l5xA8N2utkuFOjsaDZ2IgT0JbjpzFHcaeCB2Qb4CUL aM7MtOoDStPV4NaN6gO3UDV+/f4/XWiZPPe3c9dlMawTjLqQntxK/xEhCe0BtbeShI260e/W /MlBG8zrm/ssu81gTX2wbonthrcZrau5R+7f63+4kowwbX+0aVjUNaKv6/VQUO0a+SAZAR4Z vxSlkbToFOAjjqDx2ISFPWqnbdOXAVmjXfIZvyuwqlnSQ/LwhKT/ZplMZXdADU5FEnu8w52K VX33iBv54SFh/Ymj/hjuK4IC2Cu3DE1EbKq9Rj+0B3QM8bcvtcvIYf9ERaHNMJGz/78pkuFK 1rANvH7PhbfFuGZzSB11MfieCETzA2BFOLU0ICssua33xfm2141VIRwIgakm0b/JwwRpFY76 DPM7hulrtJUsgKBJgNctspUI+yECjAUBjMOGWdLRDuE7wGIWvEr9rt7LA89IiRCe41JVsJ6e f8uX9jxB4PkhjVeLOzNbVwg2HwfFk=
X-Talos-CUID: 9a23:ipIlJmEptx6vM8c9qmIkyEE5CM4vdET0xUeLKEnkD0JFEZ6aHAo=
X-Talos-MUID: 9a23:Ps9DgAxrLMkgVPi+3/zUKhyDN0uaqKGhB1In1okdgsa7aBx1GBublBSWeaZyfw==
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-6.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 27 Jul 2023 18:44:49 +0000
Received: from rcdn-opgw-5.cisco.com (rcdn-opgw-5.cisco.com [72.163.7.169]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 36RIin5i018263 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for <netconf@ietf.org>; Thu, 27 Jul 2023 18:44:49 GMT
Authentication-Results: rcdn-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com; spf=Pass smtp.mailfrom=jclarke@cisco.com; dmarc=pass (p=quarantine dis=none) d=cisco.com
X-IronPort-AV: E=Sophos;i="6.01,235,1684800000"; d="scan'208,217";a="4755727"
Received: from mail-co1nam11lp2171.outbound.protection.outlook.com (HELO NAM11-CO1-obe.outbound.protection.outlook.com) ([104.47.56.171]) by rcdn-opgw-5.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 27 Jul 2023 18:44:49 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kxlLSIq5FzWgcb5qrq21ac1fonp3wybRcr34csA8vhhVmE2oWcRZ178ytGlZY/voR8sXrexaTDEh1ve5RKq1OL0tP6ljcEg+Vwf8c3Xd2rXTBM5ntmot/oIjhAePp9M8qEgQaQmjkdGjYE3YKuVaz5w8w04awIwy2a4ZX+HhLZtuWPgwpKc+XwkX2SZme8XR/Aib6EzByRmVxxZrNhEovRPBsXUcbqzz5jrYaHwutoeTo+k+VVAPo257q3vlT+GBvTKg1CAKcsOp3BuLgZc0QZwJGhrdnZ42UFAbMA7b7h3uEVGWJVLsLGCBEOtqTA+BHb2q5piBT1GMFrw8n1iUJg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=W3m2FGafuraA6NLnc1QMPETPdq57JbPOAak3zdIFKv8=; b=Q+sD6ul3vxvZrOc16oyMyiWc1qnVEKu43VlPip6Sq2hkg6nQ79roiKk2tdYxR2bCxzASmhG0UF1fu7j4Q81rSFbB1Z11O0m/YVI3zJ2K3DrA8VqTp8TeU9yAWdtPgffBb4q4FaLYB2ttG6WIedlbDwbyooVAtLu1xzBZxvkpamIuzA0BB2VhzWaY3M19Q/u4aB+BD7w8GTVIvjUh8fwlRGxLJvznpBfH1VzWJLSGKuUrB0tT7Y5FiCpq2crl6KT+gMPzskIZUHfQz58CXN7o4d3Azn+bM/upEIX9vFo4VC19h5ExyiEZU0Cz39++c/IIlXaLp78obRDpNX6Q4rJ5Og==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W3m2FGafuraA6NLnc1QMPETPdq57JbPOAak3zdIFKv8=; b=cr70LxQJvQXWAXHMMA3nhMQOeHq2Rsd9XfHyc26z3HMwU5gzB5IFCCTgOGTZXaCcyXlobbunau7yJSb1GSAvFDezg1qSsdukwkgPSd9NxOpSIpsYwT9y7z2qkBETrFcvesFMnGt4uFVnEZ438eY+FCt0L7ojDEX8MINi1ur4dyU=
Received: from BN9PR11MB5371.namprd11.prod.outlook.com (2603:10b6:408:11c::11) by SJ1PR11MB6107.namprd11.prod.outlook.com (2603:10b6:a03:48a::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6609.33; Thu, 27 Jul 2023 18:44:47 +0000
Received: from BN9PR11MB5371.namprd11.prod.outlook.com ([fe80::616e:ead1:6cd0:bdbb]) by BN9PR11MB5371.namprd11.prod.outlook.com ([fe80::616e:ead1:6cd0:bdbb%4]) with mapi id 15.20.6631.026; Thu, 27 Jul 2023 18:44:47 +0000
From: "Joe Clarke (jclarke)" <jclarke@cisco.com>
To: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: Comments on draft-jgc-netconf-privcand
Thread-Index: AQHZwLmEn7pNrofG5UyJcf/ZxW1q7Q==
Date: Thu, 27 Jul 2023 18:44:47 +0000
Message-ID: <BN9PR11MB5371CDCD6BAA91426638E9C8B801A@BN9PR11MB5371.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN9PR11MB5371:EE_|SJ1PR11MB6107:EE_
x-ms-office365-filtering-correlation-id: 41af4803-9e30-4896-052b-08db8ed18d21
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN9PR11MB5371.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(451199021)(186003)(6506007)(52536014)(5660300002)(8676002)(8936002)(86362001)(2906002)(66574015)(122000001)(55016003)(33656002)(38070700005)(66899021)(83380400001)(76116006)(6916009)(66556008)(66446008)(64756008)(66476007)(316002)(66946007)(9686003)(38100700002)(7696005)(41300700001)(478600001)(71200400001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_BN9PR11MB5371CDCD6BAA91426638E9C8B801ABN9PR11MB5371namp_"
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN9PR11MB5371.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 41af4803-9e30-4896-052b-08db8ed18d21
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jul 2023 18:44:47.0054 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ZdfOyohc8U0ZfBbonsCwWetrPFsM4OBRZUVOMnPttD+y/F0AH9o0ew024bxN4KbNjJ4+9GcGwx5uvA5mVQUJnw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ1PR11MB6107
X-Outbound-SMTP-Client: 72.163.7.169, rcdn-opgw-5.cisco.com
X-Outbound-Node: rcdn-core-6.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/83CjtCxGVCQ_xT2brZtcOezssFU>
Subject: [netconf] Comments on draft-jgc-netconf-privcand
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Jul 2023 18:44:54 -0000

I mentioned some of this in chat (as my browser permissions were giving me a fit).  I support this work.  I think taken with the tracing and txid work it brings the possibility of more context and metadata to configuration changes.  I like the “git” aspects being pushed to the NETCONF/RESTCONF server.

I agree with Balazs that conflict resolution is important here, and I like the idea of using txid as a means to do this.  I don’t particularly like the auto-update approach, though.  I’d rather attempt a <commit> and find than an update and potential resolution is needed.

I was also going to make a similar comment to Quifang.  I would like to see the ability to delete a private candidate on commit.  If we care about the private candidate name (perhaps for tracing), I might want to do one type of change in private-add-exampleco1-vpn, commit it, and then have the candidate deleted so I can continue my session with a new private candidate for another change.

I suppose I can <delete-config> this to remove the old private candidate, but I’d like an extension to commit to do this at once (though not so much of a big deal).  I’d rather not have to disconnect and reconnect the session to perform this type of flow, though.

Joe