[netconf] Re: RFC 8040/8527: ETags on /ds/operational?
Kent Watsen <kent@watsen.net> Wed, 07 October 2026 14:04 UTC
Received: from a48-90.smtp-out.amazonses.com (a48-90.smtp-out.amazonses.com [54.240.48.90]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 2E16230 for <netconf@ietf.org>; Wed, 07 Oct 2026 14:04:21 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=amazonses.com header.s=224i4yxa5dv7c2xz3womw6peuasteono header.b=pT9ANNGG; spf=pass (mx.ietf.org: domain of 010001a116add9c0-462e07e8-d58f-4378-9efa-655dcb7fbeae-000000@amazonses.watsen.net designates 54.240.48.90 as permitted sender) smtp.mailfrom=010001a116add9c0-462e07e8-d58f-4378-9efa-655dcb7fbeae-000000@amazonses.watsen.net; dmarc=pass (policy=none) header.from=watsen.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1791381854; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=hDrTVRjwe22aPtD01YYI6YVGTmmSKHkI5eylBeMpSAk=; b=pT9ANNGG/L8lwjhAtVGkLDCdZ71Xv6zTlGPEAXI6rH9ecs8KSq5VeL/S5XxVSKOW RlPIir8gocZoscPlUqQma9siWXB9v3DElwKuT3aTMXNwRQUlfJCEBwpqTzDTL+cBP4u f6EFV/ZaTOj+l5kzaZ3U5WuriLzWTsa3TA7a1brk=
From: Kent Watsen <kent@watsen.net>
Message-ID: <010001a116add9c0-462e07e8-d58f-4378-9efa-655dcb7fbeae-000000@email.amazonses.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_D0400AB1-0780-40E0-BC94-E779BB6E47DA"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81.1.6\))
Date: Wed, 07 Oct 2026 14:04:14 +0000
In-Reply-To: <01cff6c5-7cdf-4313-a77e-a98029214081@cesnet.cz>
To: Tomáš Pecka <tomas.pecka@cesnet.cz>
References: <8efeb723-c870-4a61-918a-5c4b903c5cc1@cesnet.cz> <010001a1139c9bd0-33534e35-8c48-4648-ac35-b3654136da6f-000000@email.amazonses.com> <01cff6c5-7cdf-4313-a77e-a98029214081@cesnet.cz>
X-Mailer: Apple Mail (2.3826.700.81.1.6)
Feedback-ID: ::1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
X-SES-Outgoing: 2026.10.07-54.240.48.90
X-Spamd-Bar: -----
Message-ID-Hash: SZXEVHW25QSPR7TUVOGMNP4T4SLH2EYG
X-Message-ID-Hash: SZXEVHW25QSPR7TUVOGMNP4T4SLH2EYG
X-MailFrom: 010001a116add9c0-462e07e8-d58f-4378-9efa-655dcb7fbeae-000000@amazonses.watsen.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-netconf.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "netconf@ietf.org" <netconf@ietf.org>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [netconf] Re: RFC 8040/8527: ETags on /ds/operational?
List-Id: NETCONF WG list <netconf.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/ojroTdZs7FFil6MVMt9PR_2gBoU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Owner: <mailto:netconf-owner@ietf.org>
List-Post: <mailto:netconf@ietf.org>
List-Subscribe: <mailto:netconf-join@ietf.org>
List-Unsubscribe: <mailto:netconf-leave@ietf.org>
Hi Tomáš,
> On Oct 7, 2026, at 4:26 AM, Tomáš Pecka <tomas.pecka=40cesnet.cz@dmarc.ietf.org> wrote:
>
> Hello Kent,
>
> thanks for the reply and the intended interpretation.
>
> I understand the mechanisms are used in place of locking. I was confused that RFC 8527 does not say anything about not supporting them on read-only datastores (as it does, for instance, in Section 3.2 about write operations on <intended>), while RFC 8040 says the server MUST support them for the datastore resource. I probably read the document too literally, hence the confusion.
For RFC 8040, there is only the "data" resource that represents "unified view of the underlying datastore implementation on the server". There is no "operational" datastore and hence its statement about maintaining ETags for "configuration".
> Re {+restconf}/data (not) being available: I think that removing it would contradict Section 1 (Introduction) of RFC 8527. It explicitly says that RFC 8527 is backwards compatible with RFC 8040.
In theory, RFC 8527 is backwards compatible to RFC 8040. In practice, not so much. As NMDA is now "best practice", my advice is for *new* server implementations to skip trying to be non-NMDA. My own RESTCONF server implementation does this.
Case in point. Let's say a server supports both NMDA and non-NMDA:
what would YANG Library say? If it declares support for both NMDA-native and non-NMDA "state" modules, what would an NMDA-client receive from <operational>?
Obviously a non-NMDA client access <operational>, <system>, <startup>, <factory-default>, <system>, or <intended>. If there's a mix of NMDA-aware and -unaware clients, the unaware clients are effectively blind to the workings of the system.
Kent
- [netconf] RFC 8040/8527: ETags on /ds/operational? Tomáš Pecka
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Kent Watsen
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Tomáš Pecka
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Kent Watsen
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Kent Watsen
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Per Andersson
- [netconf] Re: RFC 8040/8527: ETags on /ds/operati… Kent Watsen