[OPS-DIR]Re: [Cats] Re: draft-ietf-cats-framework-15 early Opsdir review
Giuseppe Fioccola <giuseppe.fioccola@huawei.com> Fri, 17 October 2025 07:10 UTC
Return-Path: <giuseppe.fioccola@huawei.com>
X-Original-To: ops-dir@mail2.ietf.org
Delivered-To: ops-dir@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1E82A759C145; Fri, 17 Oct 2025 00:10:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.194
X-Spam-Level:
X-Spam-Status: No, score=-4.194 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BRJKM-ZLjUYI; Fri, 17 Oct 2025 00:10:19 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B6BBE759BF46; Fri, 17 Oct 2025 00:08:59 -0700 (PDT)
Received: from mail.maildlp.com (unknown [172.18.186.231]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4cnwpK08XHz6L55j; Fri, 17 Oct 2025 15:06:01 +0800 (CST)
Received: from dubpeml500004.china.huawei.com (unknown [7.214.147.1]) by mail.maildlp.com (Postfix) with ESMTPS id 80247140427; Fri, 17 Oct 2025 15:08:58 +0800 (CST)
Received: from dubpeml500004.china.huawei.com (7.214.147.1) by dubpeml500004.china.huawei.com (7.214.147.1) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Fri, 17 Oct 2025 08:08:58 +0100
Received: from dubpeml500004.china.huawei.com ([7.214.147.1]) by dubpeml500004.china.huawei.com ([7.214.147.1]) with mapi id 15.02.1544.011; Fri, 17 Oct 2025 08:08:58 +0100
From: Giuseppe Fioccola <giuseppe.fioccola@huawei.com>
To: "duzongpeng@foxmail.com" <duzongpeng@foxmail.com>, "ops-dir@ietf.org" <ops-dir@ietf.org>
Thread-Topic: [Cats] Re: draft-ietf-cats-framework-15 early Opsdir review
Thread-Index: AQHcPw5pI/uDUZIOnkGXSlZzJ4ZzcbTF6XPw
Date: Fri, 17 Oct 2025 07:08:57 +0000
Message-ID: <c22a4e16f9d34d49b722cdabc45d658b@huawei.com>
References: <175882164544.1492460.14461594686444337412@dt-datatracker-6c6cdf7f94-h6rnn>, <202510022312506967224@foxmail.com>, <tencent_57C407995D8A2FA1ED46AD338AB59C02AA05@qq.com>, <a6a76a066d93450fac70e94af63a2982@huawei.com> <tencent_3184A354CAC7A0347CB8D99DF822DA9CD509@qq.com>
In-Reply-To: <tencent_3184A354CAC7A0347CB8D99DF822DA9CD509@qq.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.45.147.103]
Content-Type: multipart/alternative; boundary="_000_c22a4e16f9d34d49b722cdabc45d658bhuaweicom_"
MIME-Version: 1.0
Message-ID-Hash: IEK6HK62PBF5MYQCRBDA27OI37ULC5Y4
X-Message-ID-Hash: IEK6HK62PBF5MYQCRBDA27OI37ULC5Y4
X-MailFrom: giuseppe.fioccola@huawei.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ops-dir.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: cats <cats@ietf.org>, "draft-ietf-cats-framework.all" <draft-ietf-cats-framework.all@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OPS-DIR]Re: [Cats] Re: draft-ietf-cats-framework-15 early Opsdir review
List-Id: Ops Directorate <ops-dir.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ops-dir/3Snv-pLkUXgntHWswS1pixhOFlo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ops-dir>
List-Help: <mailto:ops-dir-request@ietf.org?subject=help>
List-Owner: <mailto:ops-dir-owner@ietf.org>
List-Post: <mailto:ops-dir@ietf.org>
List-Subscribe: <mailto:ops-dir-join@ietf.org>
List-Unsubscribe: <mailto:ops-dir-leave@ietf.org>
Thank you for posting a new version! The changes are ok for me. Regards, Giuseppe From: duzongpeng@foxmail.com <duzongpeng@foxmail.com> Sent: Friday, October 17, 2025 4:33 AM To: Giuseppe Fioccola <giuseppe.fioccola@huawei.com>; ops-dir@ietf.org Cc: cats <cats@ietf.org>; draft-ietf-cats-framework.all <draft-ietf-cats-framework.all@ietf.org> Subject: Re: [Cats] Re: draft-ietf-cats-framework-15 early Opsdir review Hi Giuseppe , Thanks for the review. We have some comments about the modifications on the Github. Also, a new version 16 of the draft has been updated. Some further explanation can be found inline. If any problem, please connect us. Thanks. Best Regrards Zongpeng Du ________________________________ duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com> & duzongpeng@chinamobile.com<mailto:duzongpeng@chinamobile.com> From: Giuseppe Fioccola<mailto:giuseppe.fioccola=40huawei.com@dmarc.ietf.org> Date: 2025-10-16 01:47 To: duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com>; ops-dir@ietf.org<mailto:ops-dir@ietf.org> CC: cats<mailto:cats@ietf.org>; draft-ietf-cats-framework.all<mailto:draft-ietf-cats-framework.all@ietf.org> Subject: [Cats] Re: draft-ietf-cats-framework-15 early Opsdir review Hi Zongpeng, Thank you for addressing my comments. Please see inline [GF] Regards, Giuseppe From: duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com> <duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com>> Sent: Wednesday, October 15, 2025 5:49 AM To: Giuseppe Fioccola <giuseppe.fioccola@huawei.com<mailto:giuseppe.fioccola@huawei.com>>; ops-dir@ietf.org<mailto:ops-dir@ietf.org> Cc: cats <cats@ietf.org<mailto:cats@ietf.org>>; draft-ietf-cats-framework.all <draft-ietf-cats-framework.all@ietf.org<mailto:draft-ietf-cats-framework.all@ietf.org>> Subject: Re: Re: [Cats] draft-ietf-cats-framework-15 early Opsdir review Hi Giuseppe , We have made some modifications. Hope you can review it again, and check whether they make sense. Update draft-ietf-cats-framework.md by dzpzp · Pull Request #131 · ietf-wg-cats/draft-ietf-cats-framework<https://github.com/ietf-wg-cats/draft-ietf-cats-framework/pull/131/commits/e208f6a50cb8a18a8691aecb3ae03cb436d8c7bf> The above link is in the Github, and some explanations can be seen inline. Thanks for your review. Best Regrards Zongpeng Du ________________________________ duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com> & duzongpeng@chinamobile.com<mailto:duzongpeng@chinamobile.com> From: duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com> Date: 2025-10-02 23:12 To: Giuseppe Fioccola<mailto:giuseppe.fioccola@huawei.com>; ops-dir@ietf.org<mailto:ops-dir@ietf.org> CC: cats<mailto:cats@ietf.org>; draft-ietf-cats-framework.all<mailto:draft-ietf-cats-framework.all@ietf.org> Subject: Re: [Cats] draft-ietf-cats-framework-15 early Opsdir review Hi Giuseppe Some thoughts to share. Hope they can help. >From an OPSDIR point of view, I think it is good to have a section on "Operational and Manageability Considerations", as also highlighted in draft-opsarea-rfc5706bis. [Zongpeng] Agree. I understand that the specific means are out of scope, but, since NETCONF and IPFIX are mentioned, I would also add the references to RESTCONF and YANG Push, just for completeness. [Zongpeng] OK. I think we can add some references about them. Old1 The above task can be enabled using a variety of means (NETCONF [RFC6241], IPFIX [RFC7011], etc.). It is out of scope to discuss required CATS extension to these protocols. 5.2. Deployment Considerations New1 The above task can be enabled using a variety of means (NETCONF [RFC6241], IPFIX [RFC7011], RESTCONF [RFC8040], YANG-Push [RFC8639], etc.). It is out of scope to discuss required CATS extension to these protocols. [GF]: Ok. Regarding the possible deployment scenarios, I would add a pointer to draft-ietf-cats-usecases-requirements, because it reports the CATS use cases. [Zongpeng] OK. I think we can add a reference about it. Old2 5.2. Deployment Considerations This document does not make any assumption about how the various CATS functional elements are implemented and deployed. Concretely, whether a CATS deployment follows a fully distributed design or relies upon a mix of centralized (e.g., a C-PS) and distributed CATS functions (e.g., CATS traffic classifiers) is deployment-specific and may reflect the preferences and policies of the (CATS) service provider. New2 5.2. Deployment Considerations This document does not make any assumption about how the various CATS functional elements are implemented and deployed. Concretely, whether a CATS deployment follows a fully distributed design or relies upon a mix of centralized (e.g., a C-PS) and distributed CATS functions (e.g., CATS traffic classifiers) is deployment-specific *, which* may reflect the preferences and policies of the (CATS) service provider, and requirements of the usecases [draft-ietf-cats-usecases-requirements]. [GF]: Ok. I suggest to clarify in the text whether the framework covers only the case of single service provider. Otherwise, it would be better to provide some deployment considerations about the case of multiple service providers. [Zongpeng] Within my understanding, the draft is discussing under a single service provider scenario. The charter said that “The CATS WG will focus on single domain models.” However, I think that it is a single service provider, but it can include multiple CATS services, and each of the CATS services can have a unique CATS Service ID. Old3 5.3. Implementation Consideration on Using CATS Metrics According to the metric definition in New3 The framework covers only the case of a single service provider currently. Thus, the deployment considerations about the case of multiple service providers are not mentioned here. 5.3. Implementation Consideration on Using CATS Metrics According to the metric definition in [GF]: Maybe you can consider to clarify this point in the Introduction too, so it is clear from the beginning. [[Zongpeng]]: Thanks for the proposal. Perhaps we can consider it in future. I have additional suggestions for your consideration: - The client is defined in Section 2 as an endpoint that connects to a service provider network, but later in the text it is mentioned the case of the multi-homed client. Therefore the definition should be reviewed. [Zongpeng] I checked that in the Section 4.3., it says Note that multi-homed clients may be connected to multiple CATS infrastructures that may be operated by the same or distinct service providers. This version of the framework does not cover multihoming specifics. I wander whether we can delete the Note, so that we will not mention the case about the multi-homed client in the draft. Old4 Note that multi-homed clients may be connected to multiple CATS infrastructures that may be operated by the same or distinct service providers. This version of the framework does not cover multihoming specifics. 4.4. Service Contact Instance Affinity New4 Note that multi-homed clients may be connected to multiple CATS infrastructures that may be operated by the same or distinct service providers. This version of the framework does not cover multihoming specifics. [GF]: Ok. - I would add in Section 4 a flow chart to report the sequential steps. They might also be deducted from the text but a diagram would definitely help the reader. [Zongpeng] Thanks for the advice. I think we can prepare one for discussion. Old5 4. CATS Framework Workflow The following subsections provide an overview of a typical CATS workflow. In order to enable CATS in a given domain, some provisioning is needed; see more details in Section 5.1. Section 5.2 describes several deployment options (distributed, centralized, and hybrid model) to accommodate a variety of contexts. New5 4. CATS Framework Workflow The following subsections provide an overview of a typical CATS workflow. In order to enable CATS in a given domain, some provisioning is needed; see more details in Section 5.1. Section 5.2 describes several deployment options (distributed, centralized, and hybrid model) to accommodate a variety of contexts. +-----------------------------------+ | Service Announcement | +-----------------------------------+ | V +-----------------------------------+ | Metrics Distribution | +-----------------------------------+ | V +-----------------------------------+ | Service Access Processing | +-----------------------------------+ | V +-----------------------------------+ | Service Contact Instance Affinity | +-----------------------------------+ Figure 3: A Typical CATS Workflow [GF]: I noticed the comment from Med on the PR about this figure. It seems there are cases where the steps are not sequential. Maybe, you can include it as just an example or revise the diagram in order to consider all the possibilities, e.g. using additional arrows or bidirectional arrows where applicable. [[Zongpeng]]: Thanks for the proposal. We have some discussions here, and we have suggested not to include the Figure in the new version. Comments from Med are copied here: The figure may be interpreted as if we assume a sequentiality in the various state, which may not be always true. For example service announcement can be updated/modified after metric are distributed. - In Section 4.2, I would split the different metric distribution models (distributed, centralized, hybrid) in separate subsections to improve readability. [Zongpeng] Thanks for the advice. We can modify accordingly. Old6 4.2. Metrics Distribution Figure 3 shows an example of how CATS metrics can be disseminated in the distributed model. If the CATS framework is implemented using a centralized model, the metric can be, e.g., distributed as illustrated in Figure 4. If the CATS framework is implemented in the hybrid model, the metric can be distributed, e.g., as illustrated in the Figure 5. New6 4.2. Metrics Distribution 4.2.1 Metrics Distribution in Distributed Model Figure 4 shows an example of how CATS metrics can be disseminated in the distributed model. 4.2.2 Metrics Distribution in Centralized Model If the CATS framework is implemented using a centralized model, the metric can be, e.g., distributed as illustrated in Figure 5. 4.2.3 Metrics Distribution in Hybrid Model If the CATS framework is implemented in the hybrid model, the metric can be distributed, e.g., as illustrated in the Figure 6. [GF]: Ok. - In Section 6 and 7, I would highlight the different security and privacy implications if a single service provider or multiple service providers are involved. [Zongpeng] As talked before, I think we are under the case of single domain, so that it should be a single service provider from the network side. However, there could be multiple CATS services. Old7 6. Security Considerations The computing resource information changes over time very frequently, ... Also, C-SMA agents need to support a mechanism to authenticate the services for which they provide information to C-PS computation logics, among other CATS functions. 7. Privacy Considerations CATS solutions must support preventing on-path nodes in the underlay infrastructure to fingerprint and track clients (e.g., determining which client accesses which service). ... The specific encryption method may be applied at the network layer, transport layer, or at the application/protocol level depending on the implementation, so this is out of the scope of this document. For more discussion about privacy, refer to [RFC6462] and [RFC6973]. New7 6. Security Considerations The computing resource information changes over time very frequently, ... Also, C-SMA agents need to support a mechanism to authenticate the services for which they provide information to C-PS computation logics, among other CATS functions. This version of the framework mainly focuses on the scenario of a single service provider. Hence, the security issues about the multiple service providers are not included currently. 7. Privacy Considerations CATS solutions must support preventing on-path nodes in the underlay infrastructure to fingerprint and track clients (e.g., determining which client accesses which service). ... The specific encryption method may be applied at the network layer, transport layer, or at the application/protocol level depending on the implementation, so this is out of the scope of this document. This version of the framework mainly focuses on the scenario of a single service provider. Hence, the privacy issues about the multiple service providers are not included currently. For more discussion about privacy, refer to [RFC6462] and [RFC6973]. [GF]: Ok. Best Regrards Zongpeng Du ________________________________ duzongpeng@foxmail.com<mailto:duzongpeng@foxmail.com> & duzongpeng@chinamobile.com<mailto:duzongpeng@chinamobile.com> From: Giuseppe Fioccola via Datatracker<mailto:noreply@ietf.org> Date: 2025-09-26 01:34 To: ops-dir@ietf.org<mailto:ops-dir@ietf.org> CC: cats<mailto:cats@ietf.org>; draft-ietf-cats-framework.all<mailto:draft-ietf-cats-framework.all@ietf.org> Subject: [Cats] draft-ietf-cats-framework-15 early Opsdir review Document: draft-ietf-cats-framework Title: A Framework for Computing-Aware Traffic Steering (CATS) Reviewer: Giuseppe Fioccola Review result: Has Nits This document describes the Computing-Aware Traffic Steering (CATS) framework. In particular, it defines the CATS components and the related procedures. I think the document is generally clear and well written. >From an OPSDIR point of view, I think it is good to have a section on "Operational and Manageability Considerations", as also highlighted in draft-opsarea-rfc5706bis. I understand that the specific means are out of scope, but, since NETCONF and IPFIX are mentioned, I would also add the references to RESTCONF and YANG Push, just for completeness. Regarding the possible deployment scenarios, I would add a pointer to draft-ietf-cats-usecases-requirements, because it reports the CATS use cases. I suggest to clarify in the text whether the framework covers only the case of single service provider. Otherwise, it would be better to provide some deployment considerations about the case of multiple service providers. I have additional suggestions for your consideration: - The client is defined in Section 2 as an endpoint that connects to a service provider network, but later in the text it is mentioned the case of the multi-homed client. Therefore the definition should be reviewed. - I would add in Section 4 a flow chart to report the sequential steps. They might also be deducted from the text but a diagram would definitely help the reader. - In Section 4.2, I would split the different metric distribution models (distributed, centralized, hybrid) in separate subsections to improve readability. - In Section 6 and 7, I would highlight the different security and privacy implications if a single service provider or multiple service providers are involved. -- Cats mailing list -- cats@ietf.org<mailto:cats@ietf.org> To unsubscribe send an email to cats-leave@ietf.org<mailto:cats-leave@ietf.org>
- [OPS-DIR]draft-ietf-cats-framework-15 early Opsdi… Giuseppe Fioccola via Datatracker
- [OPS-DIR]Re: [Cats] draft-ietf-cats-framework-15 … duzongpeng@foxmail.com
- [OPS-DIR]Re: [Cats] draft-ietf-cats-framework-15 … Giuseppe Fioccola
- [OPS-DIR]Re: [Cats] draft-ietf-cats-framework-15 … duzongpeng@foxmail.com
- [OPS-DIR]Re: [Cats] draft-ietf-cats-framework-15 … Giuseppe Fioccola
- [OPS-DIR]Re: [Cats] Re: draft-ietf-cats-framework… duzongpeng@foxmail.com
- [OPS-DIR]Re: [Cats] Re: draft-ietf-cats-framework… Giuseppe Fioccola