Re: [netmod] [Netconf] LC of NDMA NETCONF/RESTCONF drafts

Mahesh Jethanandani <mjethanandani@gmail.com> Mon, 05 February 2018 21:33 UTC

Return-Path: <mjethanandani@gmail.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18ADF12895E; Mon, 5 Feb 2018 13:33:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3LjXMbPnyVce; Mon, 5 Feb 2018 13:33:17 -0800 (PST)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E28C812711E; Mon, 5 Feb 2018 13:33:16 -0800 (PST)
Received: by mail-io0-x22c.google.com with SMTP id b198so238933iof.6; Mon, 05 Feb 2018 13:33:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ONcebH6l0oMCOgoiizf3YgHlJj7L7Dzz5ybxmOm6Aj0=; b=vA9KrbGBrHVRvd2nyxDTVuCztkA+iFG7joBgPzYGisTqvCgSgkQVyCOmJnFrB5R3Ay mTDRIcgRtReKOVFxSl2Y467GiXwSQ/xnjpwLyOxZYEH86HZ+1NbOZuUgA56MHcYBZtdS 8kT+GWXv2sP2kWoJGt8mHASvOdZtrYqQu9+3RJ/HrwNxVEd/OAcd42XlF7F8exJOyaWD XHtPQ1UHNMc3WdC93juVs1QwUH+1Le/tBkgt1Vp9S81VQUpRUm1JvOXHETx80g5mf2jU tn2Ek1avyTVWk45OtuKKv4X7OcEsmHBBihoeHa1YVUnIiDuR+CtE3APrDFIwHBUgnSqo PRJA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ONcebH6l0oMCOgoiizf3YgHlJj7L7Dzz5ybxmOm6Aj0=; b=phN/z6nM3FjuRrChQdE2EKsOFXskNV7k5XJJE9WYR+HT696ppouh/DyDnunEtlHouX NcFiy99fQq4iNnFkb0855pwYBbACz38vT16VAuWeyBPzC9EUhfGdW5Jm2RN072jqbA0J WSby3cYEaBFb21pEOClkRyKJmxaFYx064RNnOENB5MZObuop07JyiQh94hl72ckiuJqW xNePiIHRNJPByC12cYsJLdlbV5dhYFQJK7MDAcBTVBFGJLffOuZpDdL5c7lOs9x8b8vs +HclMtOhCN73GKQQMHg1coPnD0ObxVHoxxgN9SPhUIxknbPMEkTVmD0WnsICaS7PTZL6 kS6w==
X-Gm-Message-State: APf1xPAq+mpxkQgc4533LIxIyUoNmvIjO3gnk017V4VcHzaJrHhPBR3e S/IZPLmfEfS/MiVjnBIiwStyIA==
X-Google-Smtp-Source: AH8x2261Fk4kptlo0B+PRJUJF2YrVv+7jXEqCZSpHrfEnxKx5qQlNIDoIQnaGgTm++Aw3OX/BykC0g==
X-Received: by 10.107.142.202 with SMTP id q193mr329527iod.100.1517866395800; Mon, 05 Feb 2018 13:33:15 -0800 (PST)
Received: from ?IPv6:2600:1700:edb0:8fd0:1d06:aab4:a2c5:e1c8? ([2600:1700:edb0:8fd0:1d06:aab4:a2c5:e1c8]) by smtp.gmail.com with ESMTPSA id a19sm5659103ioc.17.2018.02.05.13.33.14 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 05 Feb 2018 13:33:14 -0800 (PST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (1.0)
From: Mahesh Jethanandani <mjethanandani@gmail.com>
X-Mailer: iPhone Mail (14G60)
In-Reply-To: <20180205.184312.338993520253253388.mbj@tail-f.com>
Date: Mon, 05 Feb 2018 13:33:13 -0800
Cc: netconf@ietf.org, netmod@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <39203004-C003-4C07-A376-006B6F7969D6@gmail.com>
References: <29b8034ef2a94523944d53767e6789be@XCH-RTP-013.cisco.com> <20180131181619.ziqdv5peqdeeuhl4@elstar.local> <CF1EAD28-5535-4E5B-BD32-99BB5C46EEAD@gmail.com> <20180205.184312.338993520253253388.mbj@tail-f.com>
To: Martin Bjorklund <mbj@tail-f.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/_DJUbCX-l88ztXmFYvCJYlRH9Jo>
Subject: Re: [netmod] [Netconf] LC of NDMA NETCONF/RESTCONF drafts
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Feb 2018 21:33:20 -0000

For folks that provided comments as part of LC, please verify that your comments have been adequately addressed by -03 version of the draft. 

Thanks 

Mahesh Jethanandani 
mjethanandani@gmail.com

> On Feb 5, 2018, at 9:43 AM, Martin Bjorklund <mbj@tail-f.com> wrote:
> 
> Hi,
> 
> Mahesh Jethanandani <mjethanandani@gmail.com> wrote:
>> This closes the LC for the two NDMA drafts for NETCONF and RESTCONF.
>> 
>> As part of the LC, there were a couple of comments/questions
>> raised. In particular 
>> 
>> - Vladmir reported an error, which Martin said is fixed in his local copy.
> 
> Fixed.
> 
>> - Robert suggested that “/yang-library/checksum” should be a
>>  reference. Juergen supported that comment, so I am assuming that
>>  that will be incorporated into the draft.
> 
> Yes, fixed.
> 
>> - Andy had questions around datastore set to “conventional”
> 
> Fixed.
> 
>>  , about origin filter limited to 1 source
> 
> Fixed.
> 
>>  and the behavior of with-defaults.
> 
> There were no additional changes to the document from the discussion
> about this.
> 
>>  I see some discussion around it with the authors
>>  agreeing that some of them need some text clarifying the
>>  position. Can the authors please post the suggested text/additions
>>  for the WG to review. 
>> - Anything else??
>> 
>> Once an updated draft has been posted, I will do a writeup on the
>> drafts and send it to IESG.  
> 
> The issues above are now addressed, in
> draft-ietf-netconf-nmda-netconf-03.
> 
> There were no additional comments on
> draft-ietf-netconf-nmda-restconf-02, so I believe this version is
> ready.
> 
> 
> /martin
> 
> 
>> 
>> Thanks.
>> 
>>> On Jan 31, 2018, at 10:16 AM, Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:
>>> 
>>> On Wed, Jan 31, 2018 at 04:53:48PM +0000, Eric Voit (evoit) wrote:
>>>> 
>>>> I do have one additional thought below on draft-ietf-netmod-revised-datastores section 5.3 default handling process.  See in-line...
>>>> 
>>> 
>>> Well, this document is with the RFC editor now. I do not think it needs
>>> clarification. It already has text in 5.3 such as:
>>> 
>>>  Requests to retrieve nodes from <operational> always return the value
>>>  in use if the node exists, regardless of any default value specified
>>>  in the YANG module.  If no value is returned for a given node, then
>>>  this implies that the node is not used by the device.
>>> 
>>> /js
>>> 
>>>> From: Robert Wilton -X, January 31, 2018 6:31 AM
>>>> 
>>>> 
>>>> Hi Andy,
>>>> 
>>>> On 31/01/2018 09:22, Andy Bierman wrote:
>>>> 
>>>> 
>>>> On Wed, Jan 31, 2018 at 12:11 AM, Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de <mailto:j.schoenwaelder@jacobs-university.de><mailto:j.schoenwaelder@jacobs-university.de <mailto:j.schoenwaelder@jacobs-university.de>>> wrote:
>>>>> On Tue, Jan 30, 2018 at 12:35:33PM -0800, Andy Bierman wrote:
>>>>> Hi,
>>>>> 
>>>>> I have some questions about these drafts.
>>>>> 
>>>>> 1) what if datastore set to "conventional"?
>>>>>   There are many places where a datastore-ref type is used.
>>>>>   However, "conventional" is valid for base "datastore", even though
>>>>>   it is ambiguous as a datastore selector.
>>>> 
>>>> We can add explicit text that an identity that does not resolve to a
>>>> datastore implemented by the server results in an invalid value error.
>>>> 
>>>> 
>>>> OK
>>>> 
>>>> 
>>>>> 2) origin filter is limited to 1 source
>>>>>  This filtering seems rather limited.  A client must retrieve
>>>>> <with-origin> and check
>>>>>   all the values in use, then make repeated requests for each source as a
>>>>> different
>>>>>   <origin-filter> leaf
>>>> 
>>>> If the client does <with-origin>, then it has all origin information
>>>> and it can filter locally. That said, we could make origin-filter a
>>>> leaf-list which is logically ORed so that one can retrieve
>>>> origin-filter=or:system or origin-filter=or:learned in one request.
>>>> 
>>>> 
>>>> OK
>>>> 
>>>>> 3) with-defaults broken
>>>>>   The operational datastore does not support with-defaults.
>>>>>    Instead, the client must use origin-filter=or:default or with-origin
>>>>>    and check all the origin attributes.  Since a client needs to use
>>>>>    with-defaults for other datastores, this special handling of
>>>>> <operational>
>>>>>    seems unhelpful.
>>>> 
>>>> I think the with-defaults semantics for conventional configuration
>>>> datastores are much more complicated than necessary for the
>>>> operational state datastore. Note that that the operational state
>>>> datastore reports in-use values not really defaults:
>>>> 
>>>> <leaf or:origin='default'>foo</leaf>
>>>> 
>>>> This reports that the value 'foo' is in use and that it originates
>>>> from a default value. Note that this could also be
>>>> 
>>>> <leaf or:origin='intended'>foo</leaf>
>>>> 
>>>> in case the intended configuration datastore configured the value
>>>> 'foo' (despite this value matching the default). The with-defaults
>>>> solution is pretty complex because it tries to handle how different
>>>> systems deal with configuration defaults. The idea is to not carry
>>>> this complexity over to in-use values in the operational state
>>>> datastore.
>>>> 
>>>> 
>>>> Before NMDA, the client could decide if it wanted to retrieve default nodes or not.
>>>> This client-choice has been removed from NMDA, which is a problem.
>>>> We tried to reach a sensible compromise on the data returned from operational (defined in section 5.3 of the NMDA architecture):
>>>> - it should return explicit values for everything that is affecting the actual running state of the device (regardless of whether the operational value matches a schema default value).
>>>> - it does not need to, and should not, return operational values for stuff that isn't actually in use, i.e. don't return needless and unwanted data.
>>>> 
>>>> In particular, if no value is returned from a particular data node in <operational> then, barring mgmt protocol errors, a client can assume that any functionality associated with that data node is off (i.e. not in use).
>>>> 
>>>> Some examples to illustrate the behavior:
>>>> 
>>>> (i) If a protocol, e.g. OSPF,  is not enabled/running then <operational> does not need to return any data for it.  It would be reasonable to return a flag to indicate that OSPF is not enabled/running.
>>>> 
>>>> (ii) If you have some funky widget on an interface that defaults to being off and isn't being used then <operational> don't need to return any data for it.
>>>> 
>>>> (iii) But, if you have some funky widget on an interface that defaults to being on, then the server should return data for it. If it is actually enabled, then it would indicate that it is on and return any associated values with its operational state, or if it is disabled then it should explicitly report that it is off.
>>>> 
>>>> (iv) I would regard that all applied configuration is "in use" by the system, even if it matches the default value, and hence it should be reported.
>>>> 
>>>> 
>>>> This behavior for <operational> is obviously slightly different from the existing with-default handling that is supported for configuration datastores.  As I recall, there were a couple of reasons that we decided to have a different behavior for <operational>:
>>>> (a) to have consistent semantics for all servers, rather than different servers supporting different with-defaults behaviors (which makes life harder for clients because they must cope with all variants).
>>>> (b) to remove any potential ambiguity if data isn't returned.  I.e. with the existing with-defaults semantics it is not clear to me that servers will always return an explicit value to indicate that a particular widget is off if the schema defines that the default it that is enabled.  If the server doesn't support a given widget at all, it is quite plausible that it will just return no data for it.  In theory features/deviations should handle this, but those don't work so well if different linecards have different capabilities.  Hence being explicit about stuff that is in use seems more robust.
>>>> 
>>>> <eric> These are good examples.  It would be great if section 5.3 could be tweaked to make clearer the relationship between running datastore defaults and other operational datastore defaults for the same tree.
>>>> 
>>>> For example, let’s say I create a configured subscription, and the default transport protocol is NETCONF.  NETCONF will be used for that subscription even though the node might not be populated.  In this case, the object would not appear in the running datastore, but MUST* appear in the operational datastore with the default origin (as it is in-use).
>>>> 
>>>> This to me is the desired behavior as it doesn’t incorrectly add information to the running datastore, but shows what is in-use within operational.   I suspect other such relationships for other operational tree defaults could be asserted, perhaps based on the origin.
>>>> 
>>>> (* Maybe ‘MUST eventually’, as obviously there is a temporal relationship between the two datastores.)
>>>> 
>>>> Eric
>>>> 
>>>> Thanks,
>>>> Rob
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> /js
>>>> 
>>>> Andy
>>>> 
>>>> --
>>>> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
>>>> Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
>>>> Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> _______________________________________________
>>>> 
>>>> netmod mailing list
>>>> 
>>>> netmod@ietf.org <mailto:netmod@ietf.org><mailto:netmod@ietf.org <mailto:netmod@ietf.org>>
>>>> 
>>>> https://www.ietf.org/mailman/listinfo/netmod <https://www.ietf.org/mailman/listinfo/netmod>
>>>> 
>>> 
>>>> _______________________________________________
>>>> netmod mailing list
>>>> netmod@ietf.org <mailto:netmod@ietf.org>
>>>> https://www.ietf.org/mailman/listinfo/netmod <https://www.ietf.org/mailman/listinfo/netmod>
>>> 
>>> 
>>> -- 
>>> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
>>> Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
>>> Fax:   +49 421 200 3103         <https://www.jacobs-university.de/ <https://www.jacobs-university.de/>>
>>> 
>>> _______________________________________________
>>> netmod mailing list
>>> netmod@ietf.org <mailto:netmod@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/netmod <https://www.ietf.org/mailman/listinfo/netmod>
>> Mahesh Jethanandani
>> mjethanandani@gmail.com
>>