Re: [Nsaas] Existing work, other things

[DIEGO LOPEZ GARCIA <[e-mail]>]

I am aware of what NEA did (I was somehow involved with the people working there) but let me say that their problem space is different: NEA was dealing with the conditions for allowing endpoint attachment to a network, while NSaaS is intended precisely to deal with mediator (or middlebox if you like) functions. This said, it is very likely that many of the NEA results can be applicable one way or another to NSaaS, as well as many of the other results mentioned in this thread, and possibly together with others we will notice in the future.

I fully agree with your statement of trying to narrow the scope and identify the piece(s) of technical work to be solved. With that in mind I suggested the three aspects to be considered, intended as a first step to concrete the goals for a future group. For sure we need to refine them but I can tell you that we are seriously considering the provision of this kind of security services to our customers. So I guess we can consider the request to bring our "product managers" to the process fulfilled from our side...

Be goode,

On 7 Sep 2014, at 21:42 , Melinda Shore <[e-mail]> wrote:

> Again, there's been work done in the IETF on some of this (for example,
> network endpoint assessment (http://datatracker.ietf.org/wg/nea/charter/),
> tunnel endpoint discovery, ipsp, and so on.  I think my more general
> concern is that recently there's been a great deal of work being brought
> into the IETF that's not product-driven and doesn't have "organic"
> support, and it turns out to chew up a lot of IETF resources and
> frustrate the heck out of its proponents.  No technical work comes
> out of it and nobody's happy.  Because it's not product-driven there
> tends not to be a clear, existing framework to slip it into along
> with real-world requirements and expectations for how it might work.
> I don't think the problem statement/framework/requirements process
> that's developed is working well for the organization, IETF
> participants, or the industry, and I think that it might be time to
> take lessons learned about process and apply them here.
>
> That is to say, rather than getting mired in the same old unsuccessful
> process, it might be a better idea to identify a narrowly-scoped piece
> of work that *needs* to be done and focus on that.  Talk to product
> people before bringing a proposal in and asking for a BOF.  I tend to
> see this effort as going the way of the "cloud" effort, and so on,
> but it's early enough that it doesn't have to proceed down that same
> path.  Talk to product people *NOW*, and identify why this work belongs
> in the IETF.  It should never be the case that the problem you're
> trying to solve is how to create an IETF working group, but rather how
> to accomplish a specific piece of technical work that improves networks
> and networking.
>
> That is to say, talk to people who build products and talk to people
> who run networks, see what they need.  Bring your product managers
> into the process.
>
> Melinda

--
PLEASE NOTE MY NEW EMAIL ADDRESS
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
http://people.tid.es/diego.lopez/

e-mail: [e-mail]
Tel:    [phone]
Mobile: [phone]
----------------------------------


________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição