[netconf] Re: draft-ietf-netconf-privcand private candidate | Server capabilities advertisement

"James Cumming (Nokia)" <james.cumming@nokia.com> Thu, 10 October 2024 17:38 UTC

Return-Path: <james.cumming@nokia.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C45EC14F712; Thu, 10 Oct 2024 10:38:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.253
X-Spam-Level:
X-Spam-Status: No, score=-2.253 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nokia.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lLe946cetC2H; Thu, 10 Oct 2024 10:38:47 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2043.outbound.protection.outlook.com [40.107.236.43]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EB20C15107E; Thu, 10 Oct 2024 10:38:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ChHCsZrcbmvuYh1Yl2vc99ZcO4Ejf2Yxr6eCuATUm5Q5K21eKh0QAmNNN1gQNuI5iXdBtsdCLzSqs9sUtlAQrhKPTD2pP0rTJA9dywaEUDB8HvtEYPTWn3qf1apMnLONtmpgnkZICWEGeoCAhpHuTixTYiFoK6g6Oix7CQKmg2XAbK1KudXxrmqOHSLrYjKg4DCDs65Ql4DZdihf4dBV2d9JwNFcpAum0Bi/gk2uglGeou+Hjsni/HjCIJY2mpniwR0N9VDNVl3XZg0+vtR49CtviVB/W9j2a7XPFNGzRi3bn1oV/ybLMxOUBMQlpiXKLFUdGd8FI1ZWs1VCVTwVbA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iwhDABn7+ObK9yyFogqttalXghkT2c7Q3vNS0XgjqD0=; b=g8KnHHwPr5vN/AdmEWaCA5QdeAnCQ0wNEiWM8qI8IkF/jYja4xBvO+yIIO7+hLm4cNl/radtnocI8oHo+be56LEzCcrJd2ifhXoyZxlsr7oocdQyPP3oVSa253RfCHQp1eU6uWSpBrw74jvM0vvzzrhc1cNSsONkbdLHkcA0u98mu9/gRQF/pfND4Owrf0xSnR8Qbbyetym2nQ4HhUsvuNhwI9P6HZ365jHerYSvNYscbKUZdSCWApzRvh6WWCydJ9ToEvdoBpqSb3Qm/4WADQOdn1yvcBcRCs3iZbOGCCkWiPU5NOvGpeQslyiSTNoSxXdgtaxxcRVrr2p1iql07w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iwhDABn7+ObK9yyFogqttalXghkT2c7Q3vNS0XgjqD0=; b=Q+XUWJfDhKZ3F+XxLgZKaXftGYbIfphHibW04F0D+aIaWGW9TMEAE08XikhPp7+fbboAKfHvJXla4x+et4sdF+31aF6/b6k+nBLQrvbfj1FyoBPhK6Fys6avN10elncbwSSOm9mhBRyqrWJ4oS+Wbh3PXrMHHfT+NM9dQLKl/GqQ7KiE6YnC6NPfNkWz+Y7T9KAS/0/mvyMg92Fz07tNUQa2ECTpqJA2qbzHYXeyy44MJ3uZZ/CTTL3Bbps03Rv+rx8FF0IoWsacUg+1WbC6lQ4SMg550ztm+tYn7EhrvhheJQYwtGulS3jfJO2SMdIo7CxwYwzTwMrOh/bAzstzOA==
Received: from SA1PR08MB7215.namprd08.prod.outlook.com (2603:10b6:806:1a9::17) by BN0PR08MB6853.namprd08.prod.outlook.com (2603:10b6:408:12f::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.18; Thu, 10 Oct 2024 17:38:44 +0000
Received: from SA1PR08MB7215.namprd08.prod.outlook.com ([fe80::b10c:f208:adaa:c369]) by SA1PR08MB7215.namprd08.prod.outlook.com ([fe80::b10c:f208:adaa:c369%4]) with mapi id 15.20.8048.017; Thu, 10 Oct 2024 17:38:43 +0000
From: "James Cumming (Nokia)" <james.cumming@nokia.com>
To: "dylan.sadoun@orange.com" <dylan.sadoun@orange.com>, "netconf@ietf.org" <netconf@ietf.org>, "draft-ietf-netconf-privcand@ietf.org" <draft-ietf-netconf-privcand@ietf.org>
Thread-Topic: draft-ietf-netconf-privcand private candidate | Server capabilities advertisement
Thread-Index: AdrikGxvownpCKcXSKiSClpCr5m0tw4qjbVJ
Date: Thu, 10 Oct 2024 17:38:36 +0000
Message-ID: <SA1PR08MB72152814D392C664391F858CFF782@SA1PR08MB7215.namprd08.prod.outlook.com>
References: <AS4PR02MB852663AEFA28E56A3C7D2583F7B02@AS4PR02MB8526.eurprd02.prod.outlook.com>
In-Reply-To: <AS4PR02MB852663AEFA28E56A3C7D2583F7B02@AS4PR02MB8526.eurprd02.prod.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_Enabled=True;MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20;MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_SetDate=2024-07-30T14:50:07.0000000Z;MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_Name=Orange_restricted_internal.2;MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_ContentBits=0;MSIP_Label_e6c818a6-e1a0-4a6e-a969-20d857c5dc62_Method=Standard
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nokia.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SA1PR08MB7215:EE_|BN0PR08MB6853:EE_
x-ms-office365-filtering-correlation-id: e49b75e7-c052-497d-3669-08dce9526315
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA1PR08MB7215.namprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SA1PR08MB72152814D392C664391F858CFF782SA1PR08MB7215namp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR08MB7215.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e49b75e7-c052-497d-3669-08dce9526315
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Oct 2024 17:38:43.8406 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 2RyxDGxWLcnfKrl+mgcWY0a8+nbLJ+gzV/E+0wa3ed1RnIchcHcUn7lmc+oVGjY2gcM/uQgCpE0Rwchtb/1Mtw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0PR08MB6853
Message-ID-Hash: M5XXVHYL7TCQGJCNGWRHKVWMVMWL7Z6W
X-Message-ID-Hash: M5XXVHYL7TCQGJCNGWRHKVWMVMWL7Z6W
X-MailFrom: james.cumming@nokia.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-netconf.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc5
Precedence: list
Subject: [netconf] Re: draft-ietf-netconf-privcand private candidate | Server capabilities advertisement
List-Id: NETCONF WG list <netconf.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/yiqglPk-Cq9tT0v9RavEsuE9kvw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Owner: <mailto:netconf-owner@ietf.org>
List-Post: <mailto:netconf@ietf.org>
List-Subscribe: <mailto:netconf-join@ietf.org>
List-Unsubscribe: <mailto:netconf-leave@ietf.org>

Hi Dylan,

Rob and I have been reviewing this in conjunction with the other feedback and direction from the working group at the last IETF meeting.

The consensus was that the draft should move in the direction of having the private candidate functionality as a ‘mode’ of the candidate solution.  The -05 version of the draft will therefore, explicitly tie candidate and private-candidate together meaning that it will not be possible to support private candidates without the shared candidate support.

This is a very important point to bring up and an important one for the WG to consider.  If the working group feels strongly that a server should support private candidates without shared candidate support then reverting to the NMDA capable solution in the -04 version would be the approach we should take.

Kind regards,

James



From: dylan.sadoun@orange.com <dylan.sadoun@orange.com>
Date: Tuesday, 30 July 2024 at 11:00
To: netconf@ietf.org <netconf@ietf.org>, draft-ietf-netconf-privcand@ietf.org <draft-ietf-netconf-privcand@ietf.org>
Subject: draft-ietf-netconf-privcand private candidate | Server capabilities advertisement

Hello



Quoting 4.4.1:



"A non-NMDA capable NETCONF server that advertises the :private-candidate capability MUST also advertise the :candidate capability."



Also, quoting rfc8342's 4.1: "In NETCONF, for example, support for <candidate> and <startup> is optional" or 5.1.2: "The candidate configuration datastore may not be supported by all protocols or implementations."



What if that NETCONF server is NOT (shared) candidate-capable? Why should it advertise :candidate if it does not support it? Can you explain the reasoning?



Best regards,
Dylan Sadoun
Orange Restricted