Re: [netmod] system configuration sync mechanism

Jürgen Schönwälder <j.schoenwaelder@jacobs-university.de> Wed, 04 August 2021 13:40 UTC

Return-Path: <J.Schoenwaelder@jacobs-university.de>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD1343A17AD for <netmod@ietfa.amsl.com>; Wed, 4 Aug 2021 06:40:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fQnl_jAX3X7R for <netmod@ietfa.amsl.com>; Wed, 4 Aug 2021 06:40:01 -0700 (PDT)
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50051.outbound.protection.outlook.com [40.107.5.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E164E3A1976 for <netmod@ietf.org>; Wed, 4 Aug 2021 06:40:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gKjbniQ6vU1P4UPOUpUyQHXNdm5mYkcZDdAwtUd664IeASkzoebJuF8ZdG85MDssLMXAM/JbMXb47hRyOJXpO8BL9ND6n8n3pTHqp0YgNtf54K87e5s+qFR/ByQNQOM6lqbqIwqpldhKyEAldKdr/u1W8EgHuLMKXU8/zyFfYV5bYbKJMDNIxnSSocXx+V75xkMBaAyQxxqDSFEez3wgzawiuUoOyKmtTvBBlBpWZ2kDnyin2ml2nkTL/Ku5OcRz8VXZEQoEFrQ27mknCoSgsXlFdq30hVxLpN5tAHBUQh9uyoyuHOrFidJSnMQFvUgyUZjSgT1auVrRBbEw5Be4Jw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9My157o2N5cH63rl9IkbBew/xs8G/TmNnRKdG6jIN9o=; b=obB9LW/MSuETNBVsFuEwq6J+/1nLSzRjuonwOg+ekFv8tA6Dz9Jqzy9ZQnmdhNn823AEWWWfvj++Aa3Nuz3eImwYas/XiVQ99L/UHcIgcxLwQ293GXWWi2B+5LEqiadCa1XmyUh0E8PmA0lLJ89LknkeaHvfBd36pKpKYqlKMr27/pusRaXJ1ZzCv73A6VhlW+V9DaD8OY3xvVHBsQ77qCtCQ4GhNod3+LWDZomdEmT4RLKmNsWZn3UyYYelbRI5p+SZMfUh4oj9tQl6WkcGE186StbeNo/RsdOM1p02+0REUsPBc660zVlCmjJdv75nwKD8jRb2Zh99cShlScqU6Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9My157o2N5cH63rl9IkbBew/xs8G/TmNnRKdG6jIN9o=; b=S2EKyXAK+o/gR4aJa4R7EkbiqZQx01xh1dAc+K5Vh/9Ul2Havs7HmOJ7qDU6X1w4fW4ucBF4D/pHpn+01M/Ghj/hcgdA0TW1SEOrDvTU5r5c9sBDYVMMt/E7ky0ARPMHxTrfp3FVEyjeRwPfEapxwyxXfnv/6CjprX+T4oCvmsE=
Authentication-Results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=jacobs-university.de;
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM4P190MB0018.EURP190.PROD.OUTLOOK.COM (2603:10a6:200:63::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.23; Wed, 4 Aug 2021 13:39:57 +0000
Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::58c1:599a:1d3d:cdeb]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::58c1:599a:1d3d:cdeb%9]) with mapi id 15.20.4373.027; Wed, 4 Aug 2021 13:39:57 +0000
Date: Wed, 04 Aug 2021 15:39:56 +0200
From: Jürgen Schönwälder <j.schoenwaelder@jacobs-university.de>
To: Kent Watsen <kent@watsen.net>
Cc: Andy Bierman <andy@yumaworks.com>, netmod@ietf.org
Message-ID: <20210804133956.p73si5f63t4esmcj@anna.jacobs.jacobs-university.de>
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: Kent Watsen <kent@watsen.net>, Andy Bierman <andy@yumaworks.com>, netmod@ietf.org
References: <CABCOCHR+E7uh5EOxXaMaFEBb-Oi0U_4G41Z=Jwk3mUAcodnAPg@mail.gmail.com> <0100017b1128b30f-fe4c9258-3392-476a-ae21-604d2a80f523-000000@email.amazonses.com>
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <0100017b1128b30f-fe4c9258-3392-476a-ae21-604d2a80f523-000000@email.amazonses.com>
X-ClientProxiedBy: PR3P251CA0012.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:b5::27) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from localhost (212.201.44.244) by PR3P251CA0012.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:b5::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4394.15 via Frontend Transport; Wed, 4 Aug 2021 13:39:57 +0000
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: e2ca436f-09c3-4dc3-2cf0-08d9574d593a
X-MS-TrafficTypeDiagnostic: AM4P190MB0018:
X-MS-Exchange-Transport-Forked: True
X-Microsoft-Antispam-PRVS: <AM4P190MB0018F456C4DE04DC4A1D7767DEF19@AM4P190MB0018.EURP190.PROD.OUTLOOK.COM>
X-MS-Oob-TLC-OOBClassifiers: OLM:10000;
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(39840400004)(136003)(376002)(396003)(346002)(366004)(186003)(8676002)(8936002)(2906002)(83380400001)(38350700002)(38100700002)(85182001)(5660300002)(6486002)(1076003)(26005)(4326008)(66946007)(52116002)(85202003)(6496006)(478600001)(966005)(956004)(316002)(3450700001)(786003)(66556008)(66476007)(6916009)(86362001); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: jacobs-university.de
X-MS-Exchange-CrossTenant-Network-Message-Id: e2ca436f-09c3-4dc3-2cf0-08d9574d593a
X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Aug 2021 13:39:57.2212 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: uI/G3kh4JlhC8JoUIeyeIuGURBif3zKvpv5YD6KYUZ0AQXIlaxXLjXChVf4VMVZCK2ZdB/uHC+PVy3xWxSxTNRDS1WhWFE8Bopdd7tzFG1E=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4P190MB0018
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/OnlIH3D8ZSPJ1-hIMXkOYhSPNFM>
Subject: Re: [netmod] system configuration sync mechanism
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Aug 2021 13:40:06 -0000

The figure in RFC 8342 section 5 documents what was agreed upon
before. System configuration flows into <operational> but not upwards
into <running>. Over the years, we discussed several corner cases
(including things like configuring a new user and the system
automatically assigns an unused uid, which afterwards needs to be kept
stable). While there are for sure tricky corner cases, I am not
convinced that the model defined in RFC 8342 for the general cases is
wrong and that merging a new system datastore into <running> is the
right approach. If people want to change the model documented in RFC
8342, then they should make an explicit statement about this and
provide strong reasons that the model is flawed or incomplete.

Note that the model does allow having a system client merging config
into <running> (ideally controlled by an ACM so that such a client can
be turned off if it leads to surprises).

/js

On Wed, Aug 04, 2021 at 12:34:45PM +0000, Kent Watsen wrote:
> 
> I am confused by the confusion  ;)
> 
> You all know that JUNOS implemented this concept before YANG was even a thing, right?  
> 
> Admittedly, it’s not a “datastore“, but flexing the NMDA is where we can do better. 
> 
> A “with-system” mechanism could also work.  The only downside is the inability for a client to get only the system configuration, without the rest of <running>.   
> 
> Please stop stating/suggesting “config true” nodes are referencing “config false” nodes,  or that config is referencing operational state.  There is no intention to break either of these tenants here.  
> 
> I think that some folks just joined the conversation and may have missed out when we covered all this before.  
> 
> The draft needs to be updated to more clearly identify the goals. 
> 
> K. 
> 
> 
> 
> _______________________________________________
> netmod mailing list
> netmod@ietf.org
> https://www.ietf.org/mailman/listinfo/netmod

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>