Re: [Netconf] Monitor the whole operation state vs Monitor applied configuration from intended

Kent Watsen <kwatsen@juniper.net> Tue, 17 July 2018 13:19 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4085130E58 for <netconf@ietfa.amsl.com>; Tue, 17 Jul 2018 06:19:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.71
X-Spam-Level:
X-Spam-Status: No, score=-0.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k0tocgoezBqT for <netconf@ietfa.amsl.com>; Tue, 17 Jul 2018 06:19:36 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 237CD130E79 for <netconf@ietf.org>; Tue, 17 Jul 2018 06:19:36 -0700 (PDT)
Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w6HDJVWA032203; Tue, 17 Jul 2018 06:19:31 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=LNH98+DlBHRckePUnpAde0rECaFXHNwvUB5iwMZkLXA=; b=FDt1/3mCthVYPvUO1sYCpNVSVPi6gbVWOXDqwb/Ku6wMfhk5N59iYHypZjSS0ZHaM1I5 e/wvT8vb8qOtPN/RluKkA651KTB/winc1HBIGZ7zMe9/yVcUANkTLZS8Ru19K2CNDrlD /JiMoNSgm2P4trPpMrTGCuoh4peXRVGO1Y2MKg/05hZIyuNjUrGzw3sTQE3g1151Xw3G XM3bZbxQuYPRW9M6jf4HfyLn4+U9tz3mIzS8SptVmfua8Ivq2MP/22zUB4K1XcHKqQSC nXGts8HTHNPoaReiCeCyH+sUYAh8MINkoktsdVsgtgrs9toLFrtudRRUQgBV45wS6zyq Gg==
Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0180.outbound.protection.outlook.com [216.32.181.180]) by mx0a-00273201.pphosted.com with ESMTP id 2k9bys8qda-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 17 Jul 2018 06:19:31 -0700
Received: from BYAPR05MB4230.namprd05.prod.outlook.com (52.135.200.153) by BYAPR05MB4343.namprd05.prod.outlook.com (52.135.202.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.973.14; Tue, 17 Jul 2018 13:19:29 +0000
Received: from BYAPR05MB4230.namprd05.prod.outlook.com ([fe80::9006:fad3:993d:25fe]) by BYAPR05MB4230.namprd05.prod.outlook.com ([fe80::9006:fad3:993d:25fe%2]) with mapi id 15.20.0973.016; Tue, 17 Jul 2018 13:19:29 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: Qin Wu <bill.wu@huawei.com>
CC: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] Monitor the whole operation state vs Monitor applied configuration from intended
Thread-Index: AdQdvBAmwWsE3r6dTZ+nr9RUYJDuEwAFLqkx
Date: Tue, 17 Jul 2018 13:19:29 +0000
Message-ID: <E6E08F02-526F-48B5-B337-A243FAADAA3A@juniper.net>
References: <B8F9A780D330094D99AF023C5877DABA9AF501EA@nkgeml513-mbx.china.huawei.com>
In-Reply-To: <B8F9A780D330094D99AF023C5877DABA9AF501EA@nkgeml513-mbx.china.huawei.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [2001:67c:1232:144:961:3af6:d8a7:bef8]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BYAPR05MB4343; 6:PKRYRTX4XEsMeVCJGEcg488hBfAoDscpjallr+awyDGjt9+DjB0pyERDlcsAzLOog3W798iyaXcsDtRyrvvjX69NhxNDSxsqtfqtVkKeqbPfnbSwUQdC4vmQd43n9V2oYDgPo5PeeM1bvg/+Ih+lh3d7IkX52UpEjoU3D6F0CCkhyOSSzyYmgnWmXeBWewrPd0Ztwa9fkeNcXI0KW5tFB87CFqc5by6vOfYexyLU2Kld56eHtSjDQL+gvYSWOvdlSm5nTuHwCC1hn8+iCXNvsprrr5UzAm8Q+gP3Q39BwXAN6hm17mQwZ2hT7c2LkXMFo8T1DmEUfyFiH44pTM1lsQWu6C+heHL+teKCU+TAgUPcEgQ8ILfj8LcL76L95+qbSyXtjXNQUgHh6HRWHkouEEdNsL9iqtIRq9FcIrdLbs/19yybE+cO5O9GiPB7YWgWRZHszfHxGONtAkpUpomQqA==; 5:GF5M9ChyBsBE4eyK6U9B8Frw9cnv5xBtgiEOPjOZOPc6GSLy57V28RNn83K6ESBTPFzaqBytmZjZf/AX6UPdbeQB9ajSzVgaxoy74HJcXtwMZOYH03iitIb/Ljdjbvln+AsOlg+nvzX0rR72/mlYaGi7kTwOXDmbQCRfPuZgO04=; 7:miYkQg6dlZbc6v/gK4CfkBG71wAWmNbzSBFKZ0ASIm/ZykO2wseDmeyCpRIiMc5k73wPMWBhAVa5FzQjdHg5h/1Y9cER+nqBLGo7y1VGrR9j+YMhLQuIBeqyxniTvEQ4GZGIzHVBZMOOJc10ugnfoEc21uJwwOwxaSERKnG8I9wIkplfNONInVKhjGeWonltJvnDBLBhkKm0iNG02aE4txR1MMr/utXBQQYjAH8gmwaZIiee0V+H9S9lRjH8QDUQ
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 086a075a-f71a-47dc-9ff5-08d5ebe7ed63
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(49563074)(7193020); SRVR:BYAPR05MB4343;
x-ms-traffictypediagnostic: BYAPR05MB4343:
x-microsoft-antispam-prvs: <BYAPR05MB43437E02F85088A8CE605EE6A55C0@BYAPR05MB4343.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(10436049006162)(120809045254105)(50582790962513);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(102415395)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231311)(944501410)(52105095)(10201501046)(3002001)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123560045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:BYAPR05MB4343; BCL:0; PCL:0; RULEID:; SRVR:BYAPR05MB4343;
x-forefront-prvs: 073631BD3D
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(346002)(366004)(39860400002)(136003)(376002)(51444003)(189003)(199004)(6246003)(5250100002)(25786009)(4326008)(68736007)(53936002)(229853002)(6916009)(8936002)(478600001)(966005)(14454004)(54896002)(6306002)(236005)(5660300001)(81166006)(81156014)(6512007)(33656002)(7736002)(6486002)(2906002)(561944003)(99936001)(8676002)(6436002)(2900100001)(256004)(14444005)(606006)(46003)(53546011)(99286004)(102836004)(36756003)(2616005)(476003)(6506007)(486006)(575784001)(186003)(82746002)(105586002)(76176011)(86362001)(83716003)(106356001)(97736004)(6116002)(790700001)(11346002)(446003)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4343; H:BYAPR05MB4230.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: KxSz5wDEezb5lDs00xNzCcbVddWYZhqlT+8M6CLiHaXYk8kz05LmuzNpeDtd/E66bFfDvycixcdEYmdAtyMD2h0CLNqhcSAI5Qyp2F4FrcfDn+GrVdrziWujtKksEnmkDIYRSlar3Aw0ipO8XobSqUEaZYGPllF5Oloe3edcVh7/+Rd0eB3BH3n/8SDDE7LDoathGQzo6GaraF3qYHzqmW4V41BUGt72JE1XwxWPOczz01urwMjDU9AokbTq29Q7vPuDhrNA+3+a7L6wrYYO61foQuFTVKU9LvgtU5TRMNW8pIc9ScUwSxnetN/467Yh9MtBRFc4f168q1MPDtitioPPmoiWoTeM/wR74W2Ytzc=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/related; boundary="_004_E6E08F02526F48B5B337A243FAADAA3Ajunipernet_"; type="multipart/alternative"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 086a075a-f71a-47dc-9ff5-08d5ebe7ed63
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2018 13:19:29.3776 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4343
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-07-17_03:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1806210000 definitions=main-1807170140
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/ISaC4rOgD9sINtfRgx3orHAljEY>
Subject: Re: [Netconf] Monitor the whole operation state vs Monitor applied configuration from intended
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jul 2018 13:19:42 -0000

Hi Qin,

Related to your base-notifications draft is Alex’s NMDA-diff draft [1], which will be presented on Friday in NETMOD session 2.  This seems to be the RPC I was asking about yesterday.

We may want to move this draft to that WG also.

I think that we may want three kinds of notifications:

  - one for when the system starts applying <intended>

  - one for when the system is unable to apply something

  - one for when the system has finished trying to apply <intended>

[1] https://tools.ietf.org/html/draft-clemm-netmod-nmda-diff-00.

Kent

On Jul 17, 2018, at 7:18 AM, Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>> wrote:

Hi, All:
When we discussed NMDA base event draft (https://tools.ietf.org/html/draft-wu-netconf-base-notification-nmda-01<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Dwu-2Dnetconf-2Dbase-2Dnotification-2Dnmda-2D01&d=DwMFAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=1plcIxboqyr85aJ4aCLZfaYP33crrYJihpJfDF5ZBoY&s=Hb6_5CzXLXS_dUMyulBzCPWVI4t78io1BdH3gr7jWGk&e=>), one issues raised is about whether we should monitor operational state via subscription and see whether it converge. I think this is close to what we proposed in (https://datatracker.ietf.org/meeting/102/materials/slides-102-netconf-base-notifications-for-nmda-01<https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_meeting_102_materials_slides-2D102-2Dnetconf-2Dbase-2Dnotifications-2Dfor-2Dnmda-2D01&d=DwMFAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=1plcIxboqyr85aJ4aCLZfaYP33crrYJihpJfDF5ZBoY&s=P28K2mMsZqHgE8NJ80clH3KkBDyGyOOLDiAwRvxljuk&e=>), but I don’t understand when you subscribe something, but you don’t expect notification to be sent from the server. So notification is necessary, otherwise you may send RPC query message every time. the application or client can choose not subscribe these data if they are not interested in it, just like what RFC6470 is doing.

In our proposal, we only monitor applied configuration from intended, we don’t monitor the whole operational state, we don’t monitor learned configuration, system configuration, default configuration, since this is something we can not control based on NMDA architecture, when we only monitor applied configuration from intended, see whether they are validated correctly based on figure 2 of RFC8342, the server should know when these small amount of configuration data can be applied comparing with the whole operational state.

Also I believe in your BGP route converging case, it indicate you are interested in how system state or learned configuration, etc are validated, however this is not specified in NMDA architecture of RFC8342, based on figure 2 of RFC8342, the only configuration data that is subject to validation are the configuration data that is applied from intended.
<image001.png>
Also I believe when you apply configuration on linecard that is not present, this can be detected by the server since this is just a internal operation. Figure 2 of RFC8342 has already listed this as example of misresource.

-Qin
_______________________________________________
Netconf mailing list
Netconf@ietf.org<mailto:Netconf@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_netconf&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=1plcIxboqyr85aJ4aCLZfaYP33crrYJihpJfDF5ZBoY&s=tz0NhuIwKmlGrcU2ips-CLNsBHVI48tNZfewPGFhbaQ&e=