Re: [netconf] WGLC for draft-ietf-netconf-notification-capabilities

Balázs Lengyel <balazs.lengyel@ericsson.com> Fri, 27 September 2019 12:47 UTC

Return-Path: <balazs.lengyel@ericsson.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 650E5120128 for <netconf@ietfa.amsl.com>; Fri, 27 Sep 2019 05:47:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wwhDk6sT7NLs for <netconf@ietfa.amsl.com>; Fri, 27 Sep 2019 05:47:44 -0700 (PDT)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60045.outbound.protection.outlook.com [40.107.6.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8C8D12001E for <netconf@ietf.org>; Fri, 27 Sep 2019 05:47:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QK/7lOY9X40KxgrvxuWmK5QEUM+opm2+LGAMeFiC4izxIs7D1cNjWNh7xwlY/HjKBb92OL/U07do8WOwuqMOdPZdLv4PclYHUW1VmXkgnJGyLrnFM6wCgdnlp/+RZ6uaSAqkQMgEiOdUQnfpL3sw145qQ4VJZkJoIDniTeMEhpY+Jz3bNCy7frmbcDAqO6RR8WEtXG4FwAgo3kSOkpunSMl1n84VUErrJY8MNUuXqqydsqA7pk7v7ERSNzNu+g/a4Z+3Ewk0X66WlaalnBwHTNI+gm/KsRE+pKyXl6xRmmY9tkc2TYwog3c2YqbmjVrzCl07h6IHOuADNd13NlD5qA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TvGxOCWMMQjtivMJnjN+G3KR5fT4ylDSjHT3l466/Xw=; b=PjCJtdWrHk60Zsn0f2OvWnj9xkeN00ZwpROXor40ljU7dobu2yKqW6XoyIn+m9qFZrY7PIc/Y0mJDcsd2KotCYGmoPfeXkFjHUqOzM35gAb4VZsGFccTz2jAqXxbk9Z0897ZJTVSUmP+Th88ilzgRkEOqzvQ0HwU/QgxdkW0j9peR8yNATUCCu2qRfm3hX4WX1S2gvg/FIl2Id+Ld9vh2OkHEBVuj+M1hzjqNKnSfH+0wI7Lf/lw+eXSAkXQWzvVvSymy/jE1QSDloHDdRxaQsSFgSWNO9G2MOtM4MH5h/D+BDuuMDnKXYyLF08sr52oUQdLnLubmeHgKvkYA2jFyA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TvGxOCWMMQjtivMJnjN+G3KR5fT4ylDSjHT3l466/Xw=; b=PJOqowOtxXClEFB1HW8gpVQpEFBbIYwj8grCSLJgFxd2vmRuPGOBO7EI7p+6qBZ1A8IRkM1wrqE7F3X+AKbBbJy3J14SurMAg7+0zYStAwEK4aQJxKLRKaq4NMtufN5je2uAkld6Ou7NKzfrfNcusVDjGDJjQpJXTrR1QEMU4wE=
Received: from VI1PR0701MB2286.eurprd07.prod.outlook.com (10.169.137.153) by VI1PR0701MB2750.eurprd07.prod.outlook.com (10.173.79.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2327.9; Fri, 27 Sep 2019 12:47:40 +0000
Received: from VI1PR0701MB2286.eurprd07.prod.outlook.com ([fe80::f44b:854c:51cf:c69f]) by VI1PR0701MB2286.eurprd07.prod.outlook.com ([fe80::f44b:854c:51cf:c69f%7]) with mapi id 15.20.2305.017; Fri, 27 Sep 2019 12:47:40 +0000
From: =?utf-8?B?QmFsw6F6cyBMZW5neWVs?= <balazs.lengyel@ericsson.com>
To: "Eric Voit (evoit)" <evoit@cisco.com>, Mahesh Jethanandani <mjethanandani@gmail.com>, Alexander Clemm <ludwig@clemm.org>, "Benoit Claise (bclaise)" <bclaise@cisco.com>
CC: Netconf <netconf@ietf.org>
Thread-Topic: [netconf] WGLC for draft-ietf-netconf-notification-capabilities
Thread-Index: AQHVaCiq/P3ytjAdYEi7Gp+LSYgUDqc7MLcAgAA5KYCAA/LsEA==
Date: Fri, 27 Sep 2019 12:47:40 +0000
Message-ID: <VI1PR0701MB22864F116F517E960EC32A0AF0810@VI1PR0701MB2286.eurprd07.prod.outlook.com>
References: <D3B39347-DFB7-4BEE-8B22-0EE07AEB1F5A@gmail.com> <4F49DF08-B7FC-4EBD-9D6B-7BC329E50334@gmail.com> <BN7PR11MB262749DCC86F32F725D1C67AA1840@BN7PR11MB2627.namprd11.prod.outlook.com>
In-Reply-To: <BN7PR11MB262749DCC86F32F725D1C67AA1840@BN7PR11MB2627.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=balazs.lengyel@ericsson.com;
x-originating-ip: [89.135.192.225]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 12df3307-dbec-4fb1-a749-08d74348e222
x-ms-traffictypediagnostic: VI1PR0701MB2750:
x-microsoft-antispam-prvs: <VI1PR0701MB275045830342B21AF8808EA2F0810@VI1PR0701MB2750.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0173C6D4D5
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(366004)(346002)(376002)(396003)(39860400002)(51914003)(189003)(199004)(3846002)(6506007)(64756008)(110136005)(66066001)(85202003)(33656002)(790700001)(7110500001)(6116002)(8676002)(66574012)(81156014)(6436002)(6306002)(54896002)(9686003)(55016002)(2420400007)(15650500001)(316002)(6246003)(81166006)(4326008)(229853002)(26005)(99936001)(508600001)(14454004)(256004)(236005)(2906002)(86362001)(85182001)(14444005)(606006)(71200400001)(186003)(7696005)(99286004)(71190400001)(76116006)(66946007)(446003)(25786009)(76176011)(476003)(8936002)(74316002)(11346002)(486006)(7736002)(52536014)(66616009)(53546011)(66446008)(66556008)(66476007)(5660300002)(102836004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0701MB2750; H:VI1PR0701MB2286.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: FgjLwP856mpkZ1WhOTAXmgSwsWIn0j0o1ogko6rmhuV/p2vxFRQL5jU9R7Tw0RNy97thbbCMtQfvk8z0hPaR8QIz01TVHzJj7wMZ9EVq8Ks5+7CTJzc4j49BF9f2wiaO1fluhIUZXE2NQQjFHeVuMX01empoSnN7YyGb/XwV4+7pBugW9Kr/xMId6jPU/enxUOMwFL5lCB/fkbAEkZGrKfucVqwp4WkJ2IpLOLbj+O+vjYBEwfll9lqPAhkZI3DwmG1AGpi143H5WZ6T8ob7fCTk7d6znCCQM0YGL9Hy5NH2c30mGWxEhD2htaixTrKg6Q+parcXLl+USE/7d3RtELUPQ85HtV5ROiT4pQ5elLjJoK3q1AxBteyPzcTev7GkKkmWJihFxxt3fapuY5nnmcw1Kw8LntvDBFwV9opDmMw=
x-ms-exchange-transport-forked: True
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_04B6_01D57542.81D66360"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 12df3307-dbec-4fb1-a749-08d74348e222
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Sep 2019 12:47:40.4403 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 4no6wRDIN/Yk1y8g2rMc+QbyQTG/Rqms22QDoTjNQ7jXWOIdBRlKziYr/1Dl20taMQQOcN2DsGLMIbO5K6mY1LeXKIvEybPjDUzb2UB+yb8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB2750
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/aW3c2DstsSpxaJzhA7SKl0LB6i0>
Subject: Re: [netconf] WGLC for draft-ietf-netconf-notification-capabilities
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Sep 2019 12:47:47 -0000

Thanks for the comments. See answers below. 

I hope the group will be ok with using the term publisher instead of server. IMHO it is clearer as the client server relationship can be reversed e.g. for https notification transport.

Balazs

 

From: Eric Voit (evoit) <evoit@cisco.com> 
Sent: 2019. szeptember 24., kedd 23:15
To: Mahesh Jethanandani <mjethanandani@gmail.com>om>; Balázs Lengyel <balazs.lengyel@ericsson.com>om>; Alexander Clemm <ludwig@clemm.org>rg>; Benoit Claise (bclaise) <bclaise@cisco.com>
Cc: Netconf <netconf@ietf.org>
Subject: RE: [netconf] WGLC for draft-ietf-netconf-notification-capabilities

 

Here are some comments...

 

Section 1: Terminology

 

YANG-Push is the RFC-8641 term rather than Yang-Push.   Both variants are used in this document

BALAZS: OK. Updated references to RFC and the capitalization to YANG-Push

 

On-change Notification Capability: Is this different from support for RFC-8641 feature "on-change"?  If they are the same, it might be possible to remove the term.  Especially as this term is used inconsistently.

BALAZS: In RFC 8641 on-change is not defined as a capability. It is used for many more things (e.g. On-change subscription,  trigger condition, type of push updates, a feature.) In this draft the on change capability is just the servers capability to send on-change notification globally, for a specific datastore or a specific data node. Description will be reworded.

Implementation-time information is used twice in the document, but without the dash

BALAZS: OK. I corrected the missing dashes. After this the term is used 5 times.

 

Run-time information is used once.  And the definition refers to the availability of information over network management protocols.  Is it worth differentiating the term via a linkage to run-time state objects?

BALAZS: Sorry but in my count the term appears 9 times. IMHO the duality that the same information is available both during implementation and run-time is an important point, so I would like to keep the term.  Which protocol is used to get the info is not crucial. It could be the CLI. I put Netconf/Restconf there because someone asked for it.

 

 

 

Section 2

 

Paragraph 4: instead of " meaningless (e.g., a temperature gauge changing 0.1 degrees)", how about "irrelevant to the receiver (e.g., a temperature gauge change of 0.1 degrees within a predetermined and acceptable range)"?

BALAZS: OK, updated

 

Paragraph 6:  instead of "not available early in some document"  how about " not documented in a way available to the NMS designer".  Also // from, is/ from is

BALAZS: OK, updated. 

 

Bullet #1 under Run time information: not sure what is meant by "it does not care which data nodes send notification, it will just handle what is available.".  Should reword.

BALAZS: OK, reworded.

 

Bullet #3: might want to reword: " implementation time capability information about the capabilities"

BALAZS: OK, updated

 

 

 

Section 3

 

Paragraph 2, bullet 2: Instead of  "amount of notifications the server can send out", do you mean "the minimum periodicity of updates which a server can send out for an object"

BALAZS: That too, but also the max-objects-per-update. I was told not to repeat information in the main text and in the YANG module, so I tried to find a wording that covers both. Also  its not always the minimum times. Some servers support  a specific set of times, not a anything over a minimum.

 

Paragraph 2, bullets 3 & 4: I don't think these should be indented as bullets are they are more about proper behavior of a correctly populated model.

BALAZS: I don’t really understand this comment.  Please explain.

 

Paragraph 3, bullets 2: why isn't SHALL instead MUST?   Also, shouldn't this point out that both NETCONF and RESTCONF MUST be supported if on-change is advertised, and this draft is supported?

BALAZS: As I understand RFC 2119 MUST and SHALL both mean the same, but I will change to MUST. No I do not want to mandate implementing both Netconf AND Restconf. IMO a server with just Netconf would work just fine; or maybe I misunderstand your comment?

 

 

 

YANG Model

 

I am not sure why "server" is preferable to "publisher".  The initial YANG-Push draft moved to "Publisher" because it is possible for the client-server roles to be reversed for some transport protocols.  For example, the recent HTTP notif draft might have the receiver fill the HTTP server role.   I believe it cleaner to revert to the "publisher" terminology.

BALAZS: OK. I agree. Actually had that problem when explaining the HTTPS notification transport in my company. I will start using the term “publisher”.

 

I do like the tiered structure of specific and generic values.  There are lots of good parallels to other YANG work.

 

 

Section 4

 

I suspect that you will need to do a security analysis per YANG object.   This has been done the other YANG push family.

BALAZS: The full module is readOnly and not sensitive or private in any manner.  The security text for the readOnly parts of YangPush is the exact same text: not very informative, but gives you the illusion of security awareness.

 

I suspect that manipulating the reporting intervals could have some security implications.   E.g., a hacker could push up the damping period or periodic interval to a level where the information they are changing then becomes invisible to a monitoring system.

BALAZS: The full YAM is read-only so manipulating the data is not a concern.

 

Thanks, 

Eric 

 

 

From: netconf <netconf-bounces@ietf.org <mailto:netconf-bounces@ietf.org> > On Behalf Of Mahesh Jethanandani
Sent: Tuesday, September 24, 2019 1:50 PM
To: Netconf <netconf@ietf.org <mailto:netconf@ietf.org> >
Subject: Re: [netconf] WGLC for draft-ietf-netconf-notification-capabilities

 

We were supposed to have closed on the WGLC today. However, between the document becoming a WG item and it going into LC, we have not received too many comments on the draft. As such, we are extending the LC by another week. Please review the draft and provide any comments you might have.

 

Mahesh & Kent (as co-chairs)

 

 

On Sep 10, 2019, at 3:39 PM, Mahesh Jethanandani <mjethanandani@gmail.com <mailto:mjethanandani@gmail.com> > wrote:

 

Authors have published -04 <https://tools.ietf.org/html/draft-ietf-netconf-notification-capabilities-04>  version of the draft, which addresses comments they received in IETF 105. If you provided comments please check to make sure your comments have been addressed. At this point, the authors believe that the document is ready for WGLC.

 

This therefore starts a two week LC, ending on September 24th. Please provide any technical comments you might have on the document. If you believe the document is not ready for LC, please state your reasons.

 

We will issue a IPR poll separately. 

 

Mahesh & Kent (as co-chairs)