Re: [netmod] [Incoming] AD review of draft-ietf-netmod-factory-default-12

Qin Wu <bill.wu@huawei.com> Tue, 25 February 2020 12:12 UTC

Return-Path: <bill.wu@huawei.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5ECA3A0AD0; Tue, 25 Feb 2020 04:12:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xns0m7YDPaVA; Tue, 25 Feb 2020 04:12:18 -0800 (PST)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC2AA3A0ACE; Tue, 25 Feb 2020 04:12:17 -0800 (PST)
Received: from LHREML713-CAH.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 3BF8FEB07CD2F3543EDF; Tue, 25 Feb 2020 12:12:14 +0000 (GMT)
Received: from DGGEML402-HUB.china.huawei.com (10.3.17.38) by LHREML713-CAH.china.huawei.com (10.201.108.36) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 25 Feb 2020 12:12:13 +0000
Received: from DGGEML511-MBX.china.huawei.com ([169.254.1.89]) by DGGEML402-HUB.china.huawei.com ([fe80::fca6:7568:4ee3:c776%31]) with mapi id 14.03.0439.000; Tue, 25 Feb 2020 20:12:10 +0800
From: Qin Wu <bill.wu@huawei.com>
To: "Rob Wilton (rwilton)" <rwilton@cisco.com>, "draft-ietf-netmod-factory-default@ietf.org" <draft-ietf-netmod-factory-default@ietf.org>, "netmod@ietf.org" <netmod@ietf.org>
CC: Warren Kumari <warren@kumari.net>
Thread-Topic: [Incoming] AD review of draft-ietf-netmod-factory-default-12
Thread-Index: AdXr1LMZoZ2z9KUZRNWHqOAQQrQ0Sw==
Date: Tue, 25 Feb 2020 12:12:10 +0000
Message-ID: <B8F9A780D330094D99AF023C5877DABAAD4E35E3@dggeml511-mbx.china.huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.138.33.123]
Content-Type: multipart/alternative; boundary="_000_B8F9A780D330094D99AF023C5877DABAAD4E35E3dggeml511mbxchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/DzlK8iRSgBFhfOqyXH71AqdFvKM>
Subject: Re: [netmod] [Incoming] AD review of draft-ietf-netmod-factory-default-12
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Feb 2020 12:12:21 -0000

Thanks Rob for clarification. I will post the new version based on your review suggestions soon.

-Qin
发件人: Rob Wilton (rwilton) [mailto:rwilton@cisco.com]
发送时间: 2020年2月25日 20:10
收件人: Qin Wu <bill.wu@huawei.com>; draft-ietf-netmod-factory-default@ietf.org; netmod@ietf.org
抄送: Warren Kumari <warren@kumari.net>
主题: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12

Hi Qin,

From: Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>>
Sent: 25 February 2020 10:44
To: Rob Wilton (rwilton) <rwilton@cisco.com<mailto:rwilton@cisco.com>>; draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org>
Cc: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>>
Subject: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12

HI, Rob:
发件人: Rob Wilton (rwilton) [mailto:rwilton@cisco.com]
发送时间: 2020年2月25日 18:23
收件人: Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>>; draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org>
抄送: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>>
主题: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12

Hi Qin,

Thanks for getting back to be me quickly.  Please see [RW] inline …

From: Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>>
Sent: 25 February 2020 02:22
To: Rob Wilton (rwilton) <rwilton@cisco.com<mailto:rwilton@cisco.com>>; draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org>
Cc: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>>
Subject: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12

Thanks Rob for good review and proposed text, I will incorporate them in v-13, the only comment I am not sure is comment 3, I have nothing to add for instruction for RFC editor besides
RFC Editor note in the YANG data model code to remind the RFC Editor to replace RFC xxx and related date to actual RFC number and publication date respectively.
[RW]
I think that’s fine, it just means the instructions for the RFC editor can be very short.

But there a couple of other considerations for the RFC editor:

-          Do we expect that the date of the YANG module to also be updated to when it is published?
[Qin]: Yes, I prefer to add RFC Editor Note in the YANG module code with the following format in section 4.
      // RFC Ed.: update the date below with the date of RFC publication
      // and remove this note.
      // RFC Ed.: replace XXXX with actual RFC number and remove this
      // note.

-          There is also a request to the RFC editor that appendix A be deleted before publication.
[Qin]: Yes, we have added RFC Editor note at the beginning of Appendix and remind RFC Editor to delete change log section.

Do you think we should repeat and emphasize these RFC Editor note at the beginning of introduction section?
[RW]
I wasn’t suggesting you repeat the specific text but highlight the sections/things that the RFC editor needs to check for, since I see that it does no harm, and I’ve seen others suggest in prior reviews that this is helpful.  Having checked with an existing AD, there doesn’t seem to be common precedent for how to add RFC editor instructions, so I’ll leave it to your discretion whether to highlight these in the introduction or keep with what you have.

Thanks,
Rob


-Qin
发件人: Rob Wilton (rwilton) [mailto:rwilton@cisco.com]
发送时间: 2020年2月25日 0:05
收件人: draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org>
抄送: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>>
主题: [Incoming] AD review of draft-ietf-netmod-factory-default-12

Hi,

Thanks for writing this document.  I found this document to be well written, clear and understandable.  However, there are a few issues which I think could be addressed before kicking off IETF LC.

I have the following comments:


  1.  Title: The title of the document may be clearer as: “A YANG Data Model for Factory Default Settings”.


  1.  Abstract: I would suggest condensing the abstract, which is currently very similar to the introduction, perhaps to the following text:



 “This document defines a YANG data model to allow clients to

  reset a server back to its factory default condition.  It

  also defines a “factory-default” datastore to allow clients

  to read the factory default configuration for the device.



  The YANG data model in this document conforms to the Network

  Management Datastore Architecture (NMDA) defined in RFC 8342<https://tools.ietf.org/html/rfc8342>.
   ”


  1.  Introduction: It might be useful to include instructions for the RFC editor at the beginning of the introduction to summarize what actions are required before publication.



  1.  Terminology (section 1.1).   For the definition of the factory-default datastore, I would add the sentence “This datastore is referred to as "<factory-default>.”



  1.  Terminology (section 1.1).  I propose that you also important the term “datastore schema” from RFC 8342, for use with a proposed update to section 3.



  1.  Section 2, third bullet.  It might be better to replace “ephemeral datastores” with “dynamic configuration datastores”, since that is the reference is RFC 8342.



  1.  Section 3, first paragraph.  I suggest removing the word minimal, i.e. “preconfigured minimal initial configuration” => “preconfigured initial configuration”, since it isn’t required that the factory default configuration is minimal, although it would normally be so.


  1.  Section 3. I think that the document must define what the schema is for the “factory-default”.  Hence, rather than “YANG modules: all”, perhaps “YANG modules: The factory default datastore schema MUST either be the same as the conventional configuration datastores, or a subset of the datastore schema for the conventional configuration datastores.”


  1.  Section 3. Probably add the following sentence to the end of section 3: “If supported, the factory-default datastore MUST be included in the list of datastores in YANG library [RFC 8525].”  This would probably also add RFC 8525 as a normative reference.


  1.  YANG module, rpc factory-reset description.  I suggest changing the description to



“The server resets all datastores to their factory default content and any non-volatile storage back to factory condition, deleting all dynamically generated files, including those containing keys, certificates, logs, and other temporary files.



Depending on the factory default configuration, after being reset, the device may become unreachable on the network.”


  1.  I think that the security section needs to explicitly mention that non volatile storage is expected to be wiped clean and reset back to the factory default state, but that there is no guarantee that the data is wiped to any particular data cleansing particular standard, and the owner of the device MUST NOT rely on any temporary data (e.g., including private keys) being unrecoverable after the factory-reset RPC has been invoked.


Nits:

Section 2:
“are all reset to” => “are reset to”
“datastores(e.g. “ => “datastores (e.g., “

Section 3:
“with <operational> => “with the <operational>”.

Section 7: “, Susan Hares to review this draft and provide important input to this document” => “, and Susan Hares for reviewing this document and providing important input”.

Regards,
Rob