Re: [Netconf] restconf-notif, s3.1 (was: SSE and HTTP/2 in restcon-notif)

Kent Watsen <kwatsen@juniper.net> Fri, 12 October 2018 19:24 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B95B7130E81 for <netconf@ietfa.amsl.com>; Fri, 12 Oct 2018 12:24:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Ho1I-hqr1uR for <netconf@ietfa.amsl.com>; Fri, 12 Oct 2018 12:24:45 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29F88130E7B for <netconf@ietf.org>; Fri, 12 Oct 2018 12:24:45 -0700 (PDT)
Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w9CIxBJu008081; Fri, 12 Oct 2018 12:15:31 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=cJGTNeTsaKd1fgJrPldAWSr8GycjOt/fSeRyGWyeN9M=; b=nnl8GTv7Oq4Pfjpyw54gUctnUXDcUxyQggva6MaTPWMmh9E+Puvpgknrx/z+CGMogBRK pl1NuZbi0Qvo6oaRK+Q5h4r/i6O4eXLmOyraoEVSjODxPVSpT66ahPF3RPCrcAhm2O1A 5sVh/LAFuWI7X8UWyJxSFgOqtLMOte/tkBNWN+m8vCkfoWqiDfFU+C+uofbCI6UBFLiv 72NxxbtDL8U37SsfeSMly5faS/NlVu6tSLgg9UP1QQcdkA5P0zt8ClPYnw4wMG6plYrF R+Zv1a9adF/wT51shLBdir4VJ70fOCmXyjGrHtt+v2c/+9aTqH4AeiYoEfVWeAbVyRc/ 9A==
Received: from nam01-by2-obe.outbound.protection.outlook.com (mail-by2nam01lp0175.outbound.protection.outlook.com [216.32.181.175]) by mx0a-00273201.pphosted.com with ESMTP id 2n2tac8rrg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 12 Oct 2018 12:15:31 -0700
Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB4137.namprd05.prod.outlook.com (20.176.72.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.12; Fri, 12 Oct 2018 19:15:29 +0000
Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495%5]) with mapi id 15.20.1228.020; Fri, 12 Oct 2018 19:15:29 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: "rrahman=40cisco.com@dmarc.ietf.org" <rrahman=40cisco.com@dmarc.ietf.org>
CC: Netconf <netconf@ietf.org>
Thread-Topic: [Netconf] restconf-notif, s3.1 (was: SSE and HTTP/2 in restcon-notif)
Thread-Index: AQHUYl/wiwpVbo77yEe2ODlbo2E1lg==
Date: Fri, 12 Oct 2018 19:15:29 +0000
Message-ID: <1E0899EA-47C5-42E1-832E-8D141E3FFBD7@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.10.2.180910
x-originating-ip: [66.129.241.13]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM6PR05MB4137; 6:XbOoH46SNYk+pJ6s7blwCUlUPEMd/DxbhPxxxh5XGxPxdiuCJsmgJfY9TkceRK5fkJqwHn2Z/gpwmei8b1wcwPdSV9p7JC+p2WRCcxZNj0sBWo35WoiA6SXyvEhHB+l1b6EetBfjeyifPgDxYs2Xb4YSmqF3gJ3Ke0jLjm939AwXMbdbSnyJMgb5Ll4Z2pWMBXwD0HYBIJY4Y8+D4qk4ZeQ4ezYbswJRBt3I/3Yr68DKu9PevxXGXAClXEPbcTr4NUs64GqJw39a2DiaeB4I6bIbLWZicAaMmA/qklXhfdn1DW48RVDqNsF6a22SiURi0AjyCclFopfYKHksiGzVs96Q4vQr5nPAkKlIBF/tCuH4qZE0I2hojjiQiLB1AJ0uiyLHUvPTnR60qaPOSUorKA4G+Vae7ZQ28yhUoUaGI1/6vkuMhb+GcXYLP5aUOtzdluWxlesOOjgYcTxeYrKttg==; 5:f4PruQiGlZrZYIz/Um0q+Z4QHYdYfYi/Y8WwoNnakoNje7Xlok8QuR+DsqEn+44gnl+2BAv7TY3kA6PYaqLki7dqzKmHfAOtVQxRw9GvGYEsaVgxeKTit3jOeLLjFir5QU89uJ88xU0zOFt1JNVpFHCHutiDnXrOjbxlg5wf99s=; 7:FHPNUUOtxUaJgoAkfx/+VHvbPpBgxAwOsdJQmgQbiSG8A0uxsXjFUqmsMBqIeqZavOkzK71fXf313WY5MMZj77Afxi3BnyjFjnZ1tci9tx+8K2uiWVzVk3H1Qayzil1nY3kyf+sq+2OlcfBxxSvFe1rbxIVgwTEFE8ivcVItJDAl+V+dZ198AP3WhuwXfQ56qbWiOR6a6TuP5qAqN1P36SR2j7u3c999QXkRRMCrrHpTitxHbbYJoWycJ8zpr3VE
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 1a2246e7-d86d-4010-85f0-08d6307712cb
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB4137;
x-ms-traffictypediagnostic: DM6PR05MB4137:
x-microsoft-antispam-prvs: <DM6PR05MB4137D61AE0CEABDA0840E6C6A5E20@DM6PR05MB4137.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(10436049006162)(138986009662008);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(3231355)(944501410)(4982022)(52105095)(93006095)(93001095)(10201501046)(6055026)(149066)(150057)(6041310)(20161123560045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(201708071742011)(7699051); SRVR:DM6PR05MB4137; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB4137;
x-forefront-prvs: 0823A5777B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(376002)(366004)(346002)(396003)(39860400002)(13464003)(189003)(199004)(86362001)(575784001)(105586002)(25786009)(316002)(5250100002)(66066001)(8676002)(81166006)(36756003)(81156014)(68736007)(82746002)(8936002)(6506007)(6306002)(6512007)(99286004)(53546011)(97736004)(33656002)(476003)(6246003)(53936002)(2616005)(486006)(6486002)(6436002)(229853002)(256004)(14444005)(58126008)(478600001)(2900100001)(102836004)(186003)(966005)(26005)(7736002)(14454004)(5660300001)(305945005)(4326008)(3846002)(6116002)(2906002)(106356001)(83716004)(71190400001)(71200400001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4137; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: kKJNNhCaPVCcImtNs5AjpWqRm0QBZ2tDGgwV/zmwPLBpV33gQ83vanFEAI6xaPtrvlsTbBtMAneEsx+ndhHjqgwKa0w/hj8XpsU6q4X9NbcAaqk+vKfnmybnapNDIoS5piL+ViFsML3HsdPhoNTYUNhSoD97iVxDZDIHE5oHQ1HneMVaIMD9L7yDjNKIgLpXhRgXRTYqeqJN1HVhjXsRpjzbM+iizgKVkcW82WYy7Hdnfe77XUFReF+XKPHEI0zKuCGvqJ6/Uu2NZIWuVgdyMbScgpXe0qcQ2l04aqRIbjejJ/0t1BuwhvRjHvlcJvzVKGVK6Yd6f3fj+zGnBr19ohNhKskoYwA8raqB7R1sROk=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <2CA6AB6000ABD341B9E3BDF96FFFA5BE@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 1a2246e7-d86d-4010-85f0-08d6307712cb
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2018 19:15:29.3352 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4137
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-10-12_13:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1810120183
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/lLq87yDphU1egMfzU0G-BR_7s3Y>
Subject: Re: [Netconf] restconf-notif, s3.1 (was: SSE and HTTP/2 in restcon-notif)
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Oct 2018 19:24:49 -0000

[new subject]

Hi Reshad,

Looking at the 07 --> 08 diff, I see that some of the changes below were made to Section 3.1 (Transport Connectivity).  Thanks for that.

Comments:

1) the 1st paragraph refers to "HTTP client session".  Should this be "RESTCONF client session" or maybe just "RESTCONF session"?

2) assuming we do (1), then the 2nd paragraph seems unnecessary, as RESTCONF already requires TLS.

3) unsure if the 3rd paragraph belongs in this section or another, but maybe split it into two paragraphs? - one regarding what happens to dynamic subscriptions when the underlying transport is lost, and another for strategies for maintaining connectivity?  (note: on the latter, unsure if this is something this document needs to say at all, as it's not a subscription-specific thing.)


Kent // contributor


-----Original Message-----
From: Netconf <netconf-bounces@ietf.org> on behalf of Kent Watsen <kwatsen@juniper.net>
Date: Thursday, September 27, 2018 at 9:34 PM
To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Cc: "rrahman=40cisco.com@dmarc.ietf.org" <rrahman=40cisco.com@dmarc.ietf.org>, "netconf@ietf.org" <netconf@ietf.org>
Subject: Re: [Netconf] SSE and HTTP/2 in restcon-notif



> The text should be removed. How HTTP/2 sessions are started is defined
> in section 3 of RFC 7540.

Perfect.  This applies to all RESTCONF connections. Looking more at 
the first paragraph, the first sentence says:

   For a dynamic subscription, where an HTTP client session doesn't
   already exist, a new client session is initiated from the subscriber.

But this isn't quite right.  Dynamic subscriptions, at least for this
draft are always on top of a RESTCONF connection.  Put together, the
first paragraph should change as:

OLD:
   For a dynamic subscription, where an HTTP client session doesn't
   already exist, a new client session is initiated from the subscriber.
   If the subscriber is unsure if HTTP2 is supported by the publisher,
   HTTP1.1 will be used for initial messages, and these messages will
   include an HTTP version upgrade request as per [RFC7230],
   Section 6.7.  If a publisher response indicates that HTTP2 is
   supported, HTTP2 will be used between subscriber and publisher for
   future HTTP interactions as per [RFC7540].
NEW:
   Dynamic subscriptions are established using the RESTCONF protocol
   [RFC8040].  Section 2 of RFC 8040 describes the transport protocol
   for RESTCONF.

Also, while looking at Section 3.1, the second sentence says:

   A subscriber SHOULD establish the HTTP session over TLS [RFC5246]
   In order to secure the content in transit.

This sentence should be removed, RESTCONF requires TLS.  I imagine
this being a holdover from before, but another notif draft needs to
be written if wanting to support HTTP-based notifications without
requiring TLS, or even RESTCONF.

Similarly, the 3rd paragraph regards a scenario where TLS might not
be in use, which won't ever happen.  For this reason, the first half
of this paragraph should be removed.

Kent // contributor



_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_netconf&d=DwICAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=9zkP0xnJUvZGJ9EPoOH7Yhqn2gsBYaGTvjISlaJdcZo&m=4-zpxZ3c2teGtRV9W0TOIBYwvc720tdoMFc59pxbLGU&s=FUTsUvXH79i7IgEKfUvzY7wLgf_qMKx9iBscs6jmAH4&e=