Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-26.txt

Kent Watsen <kwatsen@juniper.net> Thu, 20 December 2018 21:24 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36093130F72 for <netconf@ietfa.amsl.com>; Thu, 20 Dec 2018 13:24:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.765
X-Spam-Level:
X-Spam-Status: No, score=-2.765 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.065, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6IfGchdFhtNx for <netconf@ietfa.amsl.com>; Thu, 20 Dec 2018 13:24:53 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 993FC130ED7 for <netconf@ietf.org>; Thu, 20 Dec 2018 13:24:53 -0800 (PST)
Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id wBKLORhh008375 for <netconf@ietf.org>; Thu, 20 Dec 2018 13:24:52 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=W84gBh3K+Ot8olIP/Zaio0Eb195c2yGdkfOCQuacOt0=; b=dGqlifMo5jV/dh7lNxz2uUoK2sAQ0gOJTxX9uTI2sEbPve9FwNqRX9FX+R9MQ86t6oVM MCga65ZA557jtOzBHd94xDZCdjVRhj6ue3nYx4lYLn/c7nsDkFtN0qUo4BIJbsmj/HOT krgVwIMkQ5Y4dC8a1r/IHsXfTBHQccEJC59b1LZFNfqhO2TluEWhqXi07qaO4pIVkxSp /M1q4xNbyo8L7BabfzyM6s2yzqejOyeDx/XH6uSxlB8TGSLrmsL17+FCQUz+7AD2gUXp v45IuHtFd+SohXUXfvKXi/jIyado+YBX5hMRqsLqKDkNVqEYvGC4subm632pWuAvvOHr fQ==
Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp2059.outbound.protection.outlook.com [104.47.37.59]) by mx0a-00273201.pphosted.com with ESMTP id 2pgg9hr9hw-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT) for <netconf@ietf.org>; Thu, 20 Dec 2018 13:24:52 -0800
Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB5340.namprd05.prod.outlook.com (20.176.120.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1446.14; Thu, 20 Dec 2018 21:24:50 +0000
Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::f0f3:20f0:2104:638c]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::f0f3:20f0:2104:638c%2]) with mapi id 15.20.1446.015; Thu, 20 Dec 2018 21:24:50 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-26.txt
Thread-Index: AQHUmJU9jQowK1LF7UWTvWOZKKILc6WHz+IA
Date: Thu, 20 Dec 2018 21:24:50 +0000
Message-ID: <077F57C7-3569-4755-9020-421255D2A420@juniper.net>
References: <154533196982.19062.13734868545043068788@ietfa.amsl.com>
In-Reply-To: <154533196982.19062.13734868545043068788@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.10.4.181110
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM6PR05MB5340; 6:OTmCm6i0eeZob7kb2OCDh4RiIN97SngsQivNXlkmdXBCtwEPJGQBpH7K4TQsRfzLYQ+I7VY6DIBWZbtYEyucoB5pYsTLAnDEaZBKaJIdgnv54c0qqX5PjWhowytrrmW7P0dxxdgWJ8qwWH+9lWTTdBvnozcDkcioW9ybQnHWnuQkqo1Le6w8vrWloeFDvQpf4frH9LAPvVWa0kv0kuFMKbhwEDUPqim5VrDDKeR+vpd2VVZwj68irFkNEE6XG1DeaqkqS64XgqFD8kb5HgEHId1riYsDRDVE062KvMrp633VjzFF4WjRORkb/VqyTVpEVIpTCQORfdMsgScJluqShCkPsEpBsFO/0W+Zn1gXP9HewO4z8qVrjml0wrXOBgk9e4HhXtUyX35ijV2PUonTbmR+Pa+s3IKTQdhWbJMmSV/1v3Twpp6stalwgSeeZee6ILIVR5tWXeBvY/akJ1D93w==; 5:uxjwiAFradoXjQiMy3TLc2EinLAoCf9uwkun0F5XbZ2a+Z2ET34LUMEs6ZKuWXPG6XaxRkWvu8xCwiOV26WgYFoSXpX2qgODByiuLv536tyVWOX0xZsfhuFQ+kbMCUMWRzeoXvRRWMnoa15MNnLQtbR3jtwuvz62MchvCULW5P8=; 7:WKWQh1numP8CtSYCXMNU4ZWby1RLrCmvAkM4DOWNBP6Zpwb3GIz538I7qsrtxyf7BBQgzXw9tRh25M/qTdYNyHRU1DgG4xtmtA8Nm/BpFQg6KvM2MqXydFlvAKQBA/quy9Gxfm1JwdaWUBBTyQSIbg==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: cef5cb0a-4ea3-40bf-b7dc-08d666c19320
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB5340;
x-ms-traffictypediagnostic: DM6PR05MB5340:
x-microsoft-antispam-prvs: <DM6PR05MB53406C9B4C154F3BB3D64C71A5BF0@DM6PR05MB5340.namprd05.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(3230021)(999002)(5005026)(6040522)(2401047)(8121501046)(3002001)(10201501046)(3231475)(944501520)(52105112)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123560045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:DM6PR05MB5340; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB5340;
x-forefront-prvs: 0892FA9A88
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39860400002)(396003)(376002)(366004)(136003)(13464003)(478694002)(189003)(199004)(8676002)(1730700003)(33656002)(81166006)(66574012)(58126008)(81156014)(8936002)(5660300001)(2501003)(6246003)(99286004)(25786009)(6436002)(36756003)(2616005)(446003)(6916009)(966005)(486006)(53936002)(575784001)(316002)(86362001)(11346002)(14454004)(76176011)(66066001)(476003)(6512007)(5640700003)(53546011)(97736004)(6506007)(106356001)(256004)(186003)(105586002)(7736002)(26005)(2906002)(6116002)(3846002)(14444005)(305945005)(229853002)(71190400001)(71200400001)(6486002)(83716004)(6306002)(102836004)(478600001)(82746002)(2351001)(4001150100001)(68736007); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB5340; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: p1RseO8Y4veVko6FD0bgJBW0FwdL+M09LL+uOhcjKw9BDpDObi4dEM3dWfHQg3/cDhJOnqkUVwJHYZl37f05O7Y+ecIFMK1S+XcxwUMKesKXUof7KzXXiIwXhBtRgFjwERHT5R95xYN3ghlG1Dfd5EkOhq7+BurdR3cWhJq1+te1b/Zb4F8rWOdnlqyls/VKM6xxbdSu9qsengo275avU77XuSNKqSiw7lEPg7/5lNVwNhTulS2SCgSqDh0iWssHZIuIr5Ws6mDgxJk15c7poWPQZMK/i0MT+pP9la4MrI0Hf7UkrH0gfMVx0fbGsD9S
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <0FA50024B779C6448946165AE9876540@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: cef5cb0a-4ea3-40bf-b7dc-08d666c19320
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Dec 2018 21:24:50.1129 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB5340
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-12-20_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1812200175
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/cottijGFJg477_3pVa0_cM95muo>
Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-26.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Dec 2018 21:24:58 -0000

All,

This update is generally to clear the IESG DISCUSS/COMMENTS.
Please be aware that Section 4.2 (DNS Server) changed substantially.

The only IESG review that hasn't closed yet is Benjamin Kaduk's,
due to him 1st being on PTO and now the holidays.  His review
may not close until after the New Year.

That said, I'm unsure if you all picked up on one of Benjamin's
comments regarding maybe the term "zerotouch" being perhaps 
overly broad places, perhaps everywhere.  The simplest change,
if there must be one, is to generally move the draft to use
the acronym "SZTP", which is already used in the draft in 
places, though not very prominently.  Any thoughts on this 
before Benjamin comes back?

There are two other issues I reported to Mahesh and Ignas a 
while back and was advised to raise here:

1) ietf-zerotouch-bootstrap-server.yang needs a couple feature 
   statements so that parts of its API can be enabled only when
   needed:

   Here are the features:

     feature redirect-server {
       description
         "The server supports being a 'redirect server'.";
     }
     
     feature onboarding-server {
       description
        "The server supports being an 'onboarding server'.";
     }

   And here are where they're used:

     get-bootstrapping-data {
       ...
       output {
         leaf reporting-level {
           if-feature onboarding-server;
       <snip/>

     rpc report-progress {
       if-feature onboarding-server;
       ...


2) There is currently a normative reference to yang-data-ext 
   which appears to be going nowhere fast in the NETMOD WG.
   In fact, the draft is currently expired.  As mentioned 
   previously, if faced with this situation, we could revert
   it to again use rc:yang-data from RFC 8040.  It appears
   that time has now come...


If there are no objections, I'll include these two updates
in the -27 update that also addresses the remainder of Benjamin
Kaduk's comments.


Thanks,
Kent  // contributor





-----Original Message-----
From: Netconf <netconf-bounces@ietf.org> on behalf of "internet-drafts@ietf.org" <internet-drafts@ietf.org>
Reply-To: NETCONF Working Group <netconf@ietf.org>
Date: Thursday, December 20, 2018 at 1:53 PM
To: "i-d-announce@ietf.org" <i-d-announce@ietf.org>
Cc: NETCONF Working Group <netconf@ietf.org>
Subject: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-26.txt


A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Network Configuration WG of the IETF.

        Title           : Zero Touch Provisioning for Networking Devices
        Authors         : Kent Watsen
                          Mikael Abrahamsson
                          Ian Farrer
	Filename        : draft-ietf-netconf-zerotouch-26.txt
	Pages           : 95
	Date            : 2018-12-20

Abstract:
   This draft presents a technique to securely provision a networking
   device when it is booting in a factory-default state.  Variations in
   the solution enables it to be used on both public and private
   networks.  The provisioning steps are able to update the boot image,
   commit an initial configuration, and execute arbitrary scripts to
   address auxiliary needs.  The updated device is subsequently able to
   establish secure connections with other systems.  For instance, a
   device may establish NETCONF (RFC 6241) and/or RESTCONF (RFC 8040)
   connections with deployment-specific network management systems.


The IETF datatracker status page for this draft is:
https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dnetconf-2Dzerotouch_&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=vJKQhx0Qf7Ixv-wr48XL7wByaVS6aiG0x8lboNHDbVc&e=

There are also htmlized versions available at:
https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Dietf-2Dnetconf-2Dzerotouch-2D26&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=L7WoYCQKYK8YH8A1DeowPU6ZIDlt79F3t71kEuhx-9I&e=
https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_html_draft-2Dietf-2Dnetconf-2Dzerotouch-2D26&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=Ddyzykq8AdroFDDvqz-jrYvfVtyk0qi3XMiddat1m2I&e=

A diff from the previous version is available at:
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_rfcdiff-3Furl2-3Ddraft-2Dietf-2Dnetconf-2Dzerotouch-2D26&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=McftO_kdOH3tXwDfbllyTOCYYVfw3EnjgV4JoL4qbJU&e=


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
https://urldefense.proofpoint.com/v2/url?u=ftp-3A__ftp.ietf.org_internet-2Ddrafts_&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=mhVd0ObYta0kJDM9eGO1LTVBGjsHnHwZJic4cD8q8Rg&e=

_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_netconf&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=YrvhG5xT7KG-g1wp0Ykc6Sg73WvwOrcpGFqmPZuYZEQ&s=iYsGz2rWbvsh_fJ9UUleAS3Mj-tWr3wyaELd39NPRLg&e=