Re: [Netconf] My review of draft-ietf-netconf-netconf-event-notifications

"Eric Voit (evoit)" <evoit@cisco.com> Fri, 16 February 2018 01:31 UTC

Return-Path: <evoit@cisco.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD2C912426E for <netconf@ietfa.amsl.com>; Thu, 15 Feb 2018 17:31:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.531
X-Spam-Level:
X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id go_HzajOvmdt for <netconf@ietfa.amsl.com>; Thu, 15 Feb 2018 17:31:54 -0800 (PST)
Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94440124235 for <netconf@ietf.org>; Thu, 15 Feb 2018 17:31:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4345; q=dns/txt; s=iport; t=1518744714; x=1519954314; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=XoMs6IXYzAMFHVA8lrCN5KmjupazrHmIXlY5s96FyhM=; b=OcyC7eXd53xb23K9K9ks40H5K8wNs8J2SR2zx3yo1tx3irnQDZgyaAFf xpy6tqbP7I3nO+C1ylZRjD5sCOTTendVZCC0LqGpHnYYZneM7GO+cN+X0 thXETb0eD6oZu7hmODVs54h7CmRDrSKKi3RNtqgWmbRNwwseSVYSL6ndG c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BYAgBkM4Za/4UNJK1cGQEBAQEBAQEBAQEBAQcBAQEBAYNSZnAoCpwCggKBF4d/jkaCGAoYC4RJTwKCQlYWAQIBAQEBAQECayiFIwEBAQMBAQE4NAkHBwQCAQgOAwQBAQ0BEQkHIQYLFAkIAgQBEgiKFQMNCBCxK4c5DYEyghMBAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYUDgieBV4Fogy6Ca0QBAYdtBZJPkS41CQKQeIUCgiiGKoQZh2SLFoM3iSICERkBgTsBJggqgVFwFT2CRoR3eIx8gRkBAQE
X-IronPort-AV: E=Sophos;i="5.46,519,1511827200"; d="scan'208";a="138684051"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Feb 2018 01:31:53 +0000
Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id w1G1Vr9u029590 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 16 Feb 2018 01:31:53 GMT
Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Thu, 15 Feb 2018 20:31:52 -0500
Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1320.000; Thu, 15 Feb 2018 20:31:52 -0500
From: "Eric Voit (evoit)" <evoit@cisco.com>
To: Mahesh Jethanandani <mjethanandani@gmail.com>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] My review of draft-ietf-netconf-netconf-event-notifications
Thread-Index: AQHTprghQVc0eNU9PUW2YkI3xFxXj6OmJvmg
Date: Fri, 16 Feb 2018 01:31:52 +0000
Message-ID: <0ecfec48824b45449b5172c3f09d8a65@XCH-RTP-013.cisco.com>
References: <0E223D53-3F4D-48A1-B70C-F5BEFD385F92@gmail.com>
In-Reply-To: <0E223D53-3F4D-48A1-B70C-F5BEFD385F92@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.118.56.228]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/ikDd-l9GWb0r65pBXfhdvZ9N7HY>
Subject: Re: [Netconf] My review of draft-ietf-netconf-netconf-event-notifications
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Feb 2018 01:31:57 -0000

Hi Mahesh,

Thanks for going through his, some thoughts....

> -----Original Message-----
> From: Netconf [mailto:netconf-bounces@ietf.org] On Behalf Of Mahesh
> Jethanandani
> Sent: Thursday, February 15, 2018 6:57 PM
> To: netconf@ietf.org
> Subject: [Netconf] My review of draft-ietf-netconf-netconf-event-notifications
> 
> I have read -07 version of the above draft, and I believe the document needs
> work.
> 
> Abstract:
> 
> One does not put normative references in the abstract section. You have to
> spell them out (without any cross references), and put a RFC editor note some
> where to indicate that the references need to be updated to the RFC number,
> whenever that is assigned.

Ok.  This should be straight-forward.  I will post a new revision including this.

> Since you repeat what is included in the abstract in the introduction section
> also, you can shorten the abstract to say that it provides NETCONF bindings for
> subscribed notifications and yang-push - period.

Ok
 
> Section 3:
> 
> Can you please follow the template in RFC 6241, Appendix D for defining a new
> capability.

What I think you are saying that a new ":subscribe" capability should be used to indicate support for subscriptions over NETCONF.  I had been hoping that advertising support subscribed-notifications.yang (plus the existing RFC5277 interleave) would be sufficient to indicate support.  Am I reading it right in that you not believe this is sufficient? 

> Also see examples in the same document for what all things need to
> be captured as part of defining a new capability, e.g. Positive Response,
> Negative Response, Example, SHOULD, MUST, and MAY conditions.

If I have your ask above correct, I will follow the examples which exist in RFC 4741, Section 8.
 
> Section 5.1 and 5.2 and the entire Section 7 will then move under the
> Overview section of the template from Appendix D of RFC 6241.

If I have your ask above correct, you want to insert the framework of RFC 6241 Appendix D into where Section 3 is now.  This would make it:

	3.1.  capability-name - Subscription

	3.1.1.  Overview

	(Move Section 4.1, 5.2, & 7 here)

	3.1.3.  Capability Identifier

	Something like:
	"urn:ietf:params:netconf:capability:subscription:1.0"

If I have it right, this would not be hard to do.

> Section 8 Security Considerations
> 
> Should this follow the template in rfc6087bis, at least for the part about
> NETCONF protocol and the security it provides.

The security sections of subscribed-notifications (5.3) and yang-push (7.0) are aimed at the types of vulnerabilities discussed in Section  3.7.1 or RFC6087bis.  As these vulnerabilities are not really NETCONF specific, it didn't seem necessary to place/repeat them in the NETCONF draft.  In any of the docs, do you specific gaps which should be articulated?
 
> Please update reference to rfc6536bis instead of RFC6536.

Ok.

> Missing IANA considerations section.
> 
> Needs to capture the new capability in the NETCONF capability registry of
> IANA.

If I got the ask right above, I will add.

> Appendix
> 
> Most of the examples in the appendix are for subscribed-notifications or yang-
> push. Why are these examples not in those documents?

The intent has been to have transport specific examples in each of the transport specific drafts.  I.e., it would be confusing to have NETCONF examples in YANG Push cluttering up the base specification for a reader who is interested in HTTP, UDP, or COMI transports.

> Which brings up the question. If the examples are moved to their own
> documents, you would be left with the new :interleave capability. Do you
> really need a separate draft just for that?

Per above, if we insert the template from RFC 6241 appendix D into Section 3 of this document, then there still is much meat here.  I don't see an alternative home for NETCONF binding specific info such as error codes, mandatory datastores / streams.

Eric

> Thanks.
> 
> Mahesh Jethanandani
> mjethanandani@gmail.com
> 
> _______________________________________________
> Netconf mailing list
> Netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf