Re: [netmod] [Netconf] draft-kwatsen-netconf-server / VRF specification for listening ports & outgoing connections
Ladislav Lhotka <lhotka@nic.cz> Wed, 05 March 2014 16:51 UTC
Return-Path: <lhotka@nic.cz>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CAF61A0784; Wed, 5 Mar 2014 08:51:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.898
X-Spam-Level:
X-Spam-Status: No, score=-0.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_CZ=0.445, HOST_EQ_CZ=0.904, MIME_8BIT_HEADER=0.3, RP_MATCHES_RCVD=-0.547] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w_EoYQ67Bbgw; Wed, 5 Mar 2014 08:51:14 -0800 (PST)
Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) by ietfa.amsl.com (Postfix) with ESMTP id 813E31A078C; Wed, 5 Mar 2014 08:51:14 -0800 (PST)
Received: from wireless-v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:160:81f5:2b14:607f:7f9c]) by mail.nic.cz (Postfix) with ESMTPSA id 178E613F94C; Wed, 5 Mar 2014 17:51:09 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nic.cz; s=default; t=1394038270; bh=eRyNDXhPrtbyG7sNqC2dKGt3mRBYRnh+FKZzyIf7KBQ=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=kUWN5XYPbuK8/EaAJOk9BYuRWAt/CJMQ4kClBUQau9pqfadilC8yPOcrGGi7T4cXl 49B+7qk9XXq46/slznHylvf6Mg6kHdCzRdLZ2u00dFXBy5N9E5Lt6F84CGSedsn3ii D7tF9HBHICPu8QsxPX4PT55K2aZBLlknwB0pXfhA=
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Ladislav Lhotka <lhotka@nic.cz>
In-Reply-To: <20140305.163154.391777655.mbj@tail-f.com>
Date: Wed, 05 Mar 2014 16:51:08 +0000
Content-Transfer-Encoding: 7bit
Message-Id: <9DA17C69-64BB-4F07-A5F8-91AF1ACB8796@nic.cz>
References: <20140303140039.GZ856433@jupiter.n2.diac24.net> <20140305.163154.391777655.mbj@tail-f.com>
To: Martin Björklund <mbj@tail-f.com>
X-Mailer: Apple Mail (2.1874)
X-Virus-Scanned: clamav-milter 0.97.8 at mail
X-Virus-Status: Clean
Archived-At: http://mailarchive.ietf.org/arch/msg/netmod/L1Z1KU-Xlb_nmRBN8l3euGk5rS0
Cc: Netconf <netconf@ietf.org>, netmod@ietf.org
Subject: Re: [netmod] [Netconf] draft-kwatsen-netconf-server / VRF specification for listening ports & outgoing connections
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Mar 2014 16:51:16 -0000
On 05 Mar 2014, at 16:31, Martin Bjorklund <mbj@tail-f.com> wrote: > Hi, > > David Lamparter <equinox@diac24.net> wrote: >> Hi, >> >> >> (this is the mail version of the somewhat garbled comment on the mic) >> >> The original question was, how the configured device chooses a "VPN" >> for >> either incoming or outgoing connections. This referred to VRF >> instances. In particular, for the very simplest case where this >> matters, there are devices that have out of band management ports and >> treat those as a VRF. So, both for listening and for connecting, the >> device needs to choose between "VR-Default" and "VR-Mgmt" (actual >> names, >> guess the vendor.) It could even listen in both VRFs, to be >> manageable >> inband (normal ops maybe?) and out of band (network in flames?). >> >> Even though this was raised on the server config model, this is a >> rather >> generic problem. E.g. specifying a NTP or Syslog server has the same >> issue. (Cc' from netconf to netmod due to this.) > > If I understand this correctly, the proposal is to include a reference > to a routing-instance (rt:routing-instance-ref) in all cases where we > currently have an ip-address (or host) and a port, since the > combination of ip-adress and port is not guaranteed to be unique, on > systems with multiple routing instances. > > leaf address { type inet:ip-address; } > leaf port { type inet:port-number; } > leaf routing-instance { type rt:routing-instance-ref; } > > > The existsing data models (specifically ietf-system) are designed in a > way that vendors can augment there own definition of routing-instance > or vrf. (However, I noticed that ietf-snmp is not). > > The question is if the IETF models should include a standardized way > to handle this. I can see three alternatives: > > 1) Do nothing. I.e., assume ip/port is unique. > > 2) In all our data models, always make sure we add an (optional) > reference to a routing-instance, whenever we have a ip/port for > inbound/outbound traffic. > > 3) Do not add the routing-instance references, but design our data > models so that vendors can augment with this if they have to. My preference is #3. Lada > > > /martin > > _______________________________________________ > Netconf mailing list > Netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Ladislav Lhotka, CZ.NIC Labs PGP Key ID: E74E8C0C
- [netmod] draft-kwatsen-netconf-server / VRF speci… David Lamparter
- Re: [netmod] draft-kwatsen-netconf-server / VRF s… Martin Bjorklund
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Juergen Schoenwaelder
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka
- Re: [netmod] draft-kwatsen-netconf-server / VRF s… David Lamparter
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… David Lamparter
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Martin Bjorklund
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Kent Watsen
- Re: [netmod] [Netconf] draft-kwatsen-netconf-serv… Ladislav Lhotka