Re: [netmod] [Incoming] AD review of draft-ietf-netmod-factory-default-12
Qin Wu <bill.wu@huawei.com> Tue, 25 February 2020 10:44 UTC
Return-Path: <bill.wu@huawei.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 060B13A0937; Tue, 25 Feb 2020 02:44:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jUaOqvEcsSZN; Tue, 25 Feb 2020 02:44:20 -0800 (PST)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 443003A0939; Tue, 25 Feb 2020 02:44:20 -0800 (PST)
Received: from lhreml709-cah.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id A7F93173316E55E3D2ED; Tue, 25 Feb 2020 10:44:15 +0000 (GMT)
Received: from lhreml708-chm.china.huawei.com (10.201.108.57) by lhreml709-cah.china.huawei.com (10.201.108.32) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 25 Feb 2020 10:44:15 +0000
Received: from lhreml708-chm.china.huawei.com (10.201.108.57) by lhreml708-chm.china.huawei.com (10.201.108.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Tue, 25 Feb 2020 10:44:14 +0000
Received: from DGGEML403-HUB.china.huawei.com (10.3.17.33) by lhreml708-chm.china.huawei.com (10.201.108.57) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256) id 15.1.1713.5 via Frontend Transport; Tue, 25 Feb 2020 10:44:14 +0000
Received: from DGGEML511-MBX.china.huawei.com ([169.254.1.89]) by DGGEML403-HUB.china.huawei.com ([fe80::74d9:c659:fbec:21fa%31]) with mapi id 14.03.0439.000; Tue, 25 Feb 2020 18:44:09 +0800
From: Qin Wu <bill.wu@huawei.com>
To: "Rob Wilton (rwilton)" <rwilton@cisco.com>, "draft-ietf-netmod-factory-default@ietf.org" <draft-ietf-netmod-factory-default@ietf.org>, "netmod@ietf.org" <netmod@ietf.org>
CC: Warren Kumari <warren@kumari.net>
Thread-Topic: [Incoming] AD review of draft-ietf-netmod-factory-default-12
Thread-Index: AdXrx8T4XASZFvhaQAqg95m5Nqbs3A==
Date: Tue, 25 Feb 2020 10:44:08 +0000
Message-ID: <B8F9A780D330094D99AF023C5877DABAAD4E358B@dggeml511-mbx.china.huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.138.33.123]
Content-Type: multipart/alternative; boundary="_000_B8F9A780D330094D99AF023C5877DABAAD4E358Bdggeml511mbxchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/aJX0Ix62leVDddct0oMYTVkKEtc>
Subject: Re: [netmod] [Incoming] AD review of draft-ietf-netmod-factory-default-12
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Feb 2020 10:44:25 -0000
HI, Rob: 发件人: Rob Wilton (rwilton) [mailto:rwilton@cisco.com] 发送时间: 2020年2月25日 18:23 收件人: Qin Wu <bill.wu@huawei.com>; draft-ietf-netmod-factory-default@ietf.org; netmod@ietf.org 抄送: Warren Kumari <warren@kumari.net> 主题: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12 Hi Qin, Thanks for getting back to be me quickly. Please see [RW] inline … From: Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>> Sent: 25 February 2020 02:22 To: Rob Wilton (rwilton) <rwilton@cisco.com<mailto:rwilton@cisco.com>>; draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org> Cc: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>> Subject: RE: [Incoming] AD review of draft-ietf-netmod-factory-default-12 Thanks Rob for good review and proposed text, I will incorporate them in v-13, the only comment I am not sure is comment 3, I have nothing to add for instruction for RFC editor besides RFC Editor note in the YANG data model code to remind the RFC Editor to replace RFC xxx and related date to actual RFC number and publication date respectively. [RW] I think that’s fine, it just means the instructions for the RFC editor can be very short. But there a couple of other considerations for the RFC editor: - Do we expect that the date of the YANG module to also be updated to when it is published? [Qin]: Yes, I prefer to add RFC Editor Note in the YANG module code with the following format in section 4. // RFC Ed.: update the date below with the date of RFC publication // and remove this note. // RFC Ed.: replace XXXX with actual RFC number and remove this // note. - There is also a request to the RFC editor that appendix A be deleted before publication. [Qin]: Yes, we have added RFC Editor note at the beginning of Appendix and remind RFC Editor to delete change log section. Do you think we should repeat and emphasize these RFC Editor note at the beginning of introduction section? Thanks, Rob -Qin 发件人: Rob Wilton (rwilton) [mailto:rwilton@cisco.com] 发送时间: 2020年2月25日 0:05 收件人: draft-ietf-netmod-factory-default@ietf.org<mailto:draft-ietf-netmod-factory-default@ietf.org>; netmod@ietf.org<mailto:netmod@ietf.org> 抄送: Warren Kumari <warren@kumari.net<mailto:warren@kumari.net>> 主题: [Incoming] AD review of draft-ietf-netmod-factory-default-12 Hi, Thanks for writing this document. I found this document to be well written, clear and understandable. However, there are a few issues which I think could be addressed before kicking off IETF LC. I have the following comments: 1. Title: The title of the document may be clearer as: “A YANG Data Model for Factory Default Settings”. 1. Abstract: I would suggest condensing the abstract, which is currently very similar to the introduction, perhaps to the following text: “This document defines a YANG data model to allow clients to reset a server back to its factory default condition. It also defines a “factory-default” datastore to allow clients to read the factory default configuration for the device. The YANG data model in this document conforms to the Network Management Datastore Architecture (NMDA) defined in RFC 8342<https://tools.ietf.org/html/rfc8342>. ” 1. Introduction: It might be useful to include instructions for the RFC editor at the beginning of the introduction to summarize what actions are required before publication. 1. Terminology (section 1.1). For the definition of the factory-default datastore, I would add the sentence “This datastore is referred to as "<factory-default>.” 1. Terminology (section 1.1). I propose that you also important the term “datastore schema” from RFC 8342, for use with a proposed update to section 3. 1. Section 2, third bullet. It might be better to replace “ephemeral datastores” with “dynamic configuration datastores”, since that is the reference is RFC 8342. 1. Section 3, first paragraph. I suggest removing the word minimal, i.e. “preconfigured minimal initial configuration” => “preconfigured initial configuration”, since it isn’t required that the factory default configuration is minimal, although it would normally be so. 1. Section 3. I think that the document must define what the schema is for the “factory-default”. Hence, rather than “YANG modules: all”, perhaps “YANG modules: The factory default datastore schema MUST either be the same as the conventional configuration datastores, or a subset of the datastore schema for the conventional configuration datastores.” 1. Section 3. Probably add the following sentence to the end of section 3: “If supported, the factory-default datastore MUST be included in the list of datastores in YANG library [RFC 8525].” This would probably also add RFC 8525 as a normative reference. 1. YANG module, rpc factory-reset description. I suggest changing the description to “The server resets all datastores to their factory default content and any non-volatile storage back to factory condition, deleting all dynamically generated files, including those containing keys, certificates, logs, and other temporary files. Depending on the factory default configuration, after being reset, the device may become unreachable on the network.” 1. I think that the security section needs to explicitly mention that non volatile storage is expected to be wiped clean and reset back to the factory default state, but that there is no guarantee that the data is wiped to any particular data cleansing particular standard, and the owner of the device MUST NOT rely on any temporary data (e.g., including private keys) being unrecoverable after the factory-reset RPC has been invoked. Nits: Section 2: “are all reset to” => “are reset to” “datastores(e.g. “ => “datastores (e.g., “ Section 3: “with <operational> => “with the <operational>”. Section 7: “, Susan Hares to review this draft and provide important input to this document” => “, and Susan Hares for reviewing this document and providing important input”. Regards, Rob
- [netmod] [Incoming] AD review of draft-ietf-netmo… Rob Wilton (rwilton)
- Re: [netmod] [Incoming] AD review of draft-ietf-n… Qin Wu
- Re: [netmod] [Incoming] AD review of draft-ietf-n… Rob Wilton (rwilton)
- Re: [netmod] [Incoming] AD review of draft-ietf-n… Qin Wu
- Re: [netmod] [Incoming] AD review of draft-ietf-n… Rob Wilton (rwilton)
- Re: [netmod] [Incoming] AD review of draft-ietf-n… Qin Wu