Re: [Nsaas] : A ore accurate name....
Linda Dunbar <firstname.lastname@example.org> Mon, 15 September 2014 19:01 UTC
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42D391A8791 for <email@example.com>; Mon, 15 Sep 2014 12:01:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Status: No, score=-5.852 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([220.127.116.11]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hICoSEYzej0E for <firstname.lastname@example.org>; Mon, 15 Sep 2014 12:01:18 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [18.104.22.168]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C9FC1A6FC7 for <email@example.com>; Mon, 15 Sep 2014 11:51:21 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BJM22693; Mon, 15 Sep 2014 18:51:19 +0000 (GMT)
Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 22.214.171.124; Mon, 15 Sep 2014 19:51:18 +0100
Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0158.001; Mon, 15 Sep 2014 11:51:17 -0700
From: Linda Dunbar <firstname.lastname@example.org>
To: Myo Zarny <email@example.com>, "firstname.lastname@example.org" <email@example.com>, "firstname.lastname@example.org" <email@example.com>
Thread-Topic: : A ore accurate name....
Date: Mon, 15 Sep 2014 18:51:16 +0000
References: <4A95BA014132FF49AE685FAB4B9F17F645DECABE@dfweml701-chm> <CAFzRpbw-xn+COrqc0Kfmmh++MCJiX10gY9oSpWVi2K54dNLwLQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F645E00334dfweml701chm_"
Cc: "Zarny, Myo" <Myo.Zarny@gs.com>
Subject: Re: [Nsaas] : A ore accurate name....
List-Id: "*NSaaS: Network Security as a Service mailing list*" <nsaas.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/nsaas>, <mailto:firstname.lastname@example.org?subject=unsubscribe>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nsaas>, <mailto:email@example.com?subject=subscribe>
X-List-Received-Date: Mon, 15 Sep 2014 19:01:23 -0000
Agree with Myo that prioritization/scoping of NSaaS will be crucial. IMHO, standard Interface to Virtual Network Security Functions (I2NSF, or I2VNSF) is a tool to enable NSaaS. NSaaS might have broader scope, which might touch upon services model, SLA, etc. IETF has traditionally been good in building tools, instead of broad service model (not to say that IETF can’t do it). Another important point, strictly speaking, API is normally referring to function calls among different functions on one system, what we want to achieve is the interface between separate entities (boxes), as what I2RS is doing. Therefore, “Programmatic interfaces” might be more accurate. Any thoughts? Linda From: Myo Zarny [mailto:firstname.lastname@example.org] Sent: Sunday, September 14, 2014 8:27 PM To: email@example.com; firstname.lastname@example.org Cc: Zarny, Myo; Linda Dunbar Subject: Re: FW: A ore accurate name.... Hi Brian, I agree that the scopes of SACM and NSaaS aren't the same even though there is overlap. NSaaS is broader. Its domain/scope is more than just endpoints, consistent APIs, communication protocols between endpoints and network-based security services. It's all that plus--as you've pointed out--how security policies are translated and provisioned on the "southbound" side--regardless of their form-factor (hardware, software, hypervisor-based, container-based). And so on. The challenge is in determining which ones should be prioritized. To me, as a user (not a vendor) of services, being able to dynamically reserve network (security) services and have appropriate (security) policies dynamically applied is the holy grail. (Especially if those policies can be defined in user friendly terms and the system be smart enough to translate them.) The question is how do we define and prioritize the steps towards achieving them. Regards, From: Nsaas [mailto:email@example.com] On Behalf Of Brian Ford (brford) Sent: Wednesday, September 10, 2014 7:10 PM To: firstname.lastname@example.org<mailto:email@example.com> Subject: [Nsaas] A ore accurate name.... Linda, IMO someone can make the argument that just about any acronym is like a ‘Marketing program’. Changing the name of the pre-WG effort for that reason alone doesn’t seem wise ego me. Changing it from something …’was’ to include ‘Open’ doesn’t seem like a big win. When I first read your messages about Network Security as a Service I was interested. I still am even though I know little more than the name. I have been watching and involved in SACM, Security Automation and Continuous Monitoring. One of my concerns that I have about SACM are its almost myopic endpoint focus. I’m particularly interested in NSaaS because it could or might address the application of security policy in networks that protect all devices be they endpoints or VMs or intelligent lightbulbs in an IoT (or IoE). I see ‘daylight’ between SACM and NSaaS. But they could help each other. Let’s start working on the real problem. Liberty, Brian Via the offline discussion with Melinda, I learned that many people may think that NSaaS is more like Marketing slogan. Since the goal is to define a common interface for network security functions (like what I2RS has done for routers), so that Service Providers or 3rd party operators can offer Network Security Functions that may not physically present in the client premises. Is "I2NSF" (Open Interface to Network Security functions) a more appropriate name? Any more suggestions? Linda -- Brian Ford | OCTAO | firstname.lastname@example.org<mailto::email@example.com> | Direct 212.714.4288<tel:212.714.4288> | Mobile: 516.769.5884<tel:516.769.5884> | twitter.com/ccie2106<http://twitter.com/ccie2106> -- Regards, Myo
- Re: [Nsaas] Need your to reply to this email FW: … Myo Zarny
- Re: [Nsaas] : A ore accurate name.... Linda Dunbar
- Re: [Nsaas] : A ore accurate name.... Lisa Lorenzin