[OPSAWG] FW: New Version Notification for draft-gray-sampled-streaming-00.txt
"Gray, Andrew A" <Andrew.Gray@charter.com> Mon, 05 August 2019 14:45 UTC
Return-Path: <Andrew.Gray@charter.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DB63120253 for <opsawg@ietfa.amsl.com>; Mon, 5 Aug 2019 07:45:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t-dwFiEMYPZO for <opsawg@ietfa.amsl.com>; Mon, 5 Aug 2019 07:45:47 -0700 (PDT)
Received: from mail.chartercom.com (nce.mail.chartercom.com [142.136.234.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C746120240 for <opsawg@ietf.org>; Mon, 5 Aug 2019 07:45:46 -0700 (PDT)
IronPort-SDR: 8OTl7AsPIaoehGAwQUP283JgEuBz+G2GlM5XhGJ3YUeSZ+QgnvEPfMHQ68D4JXsOIfmh5RqWXS OYBgqlXuUebg==
X-IronPort-AV: E=Sophos;i="5.64,350,1559538000"; d="scan'208";a="61782201"
Received: from unknown (HELO NCEMEXGP011.CORP.CHARTERCOM.com) ([142.136.234.156]) by mail.chartercom.com with ESMTP; 05 Aug 2019 09:45:45 -0500
Received: from NCEMEXGP011.CORP.CHARTERCOM.COM (2002:8e88:ea10::8e88:ea10) by NCEMEXGP011.CORP.CHARTERCOM.com (2002:8e88:ea10::8e88:ea10) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Mon, 5 Aug 2019 09:45:44 -0500
Received: from NCEMEXGP011.CORP.CHARTERCOM.COM ([fe80::e832:53f4:2a29:ec5f]) by NCEMEXGP011.CORP.CHARTERCOM.com ([fe80::e832:53f4:2a29:ec5f%19]) with mapi id 15.00.1365.000; Mon, 5 Aug 2019 09:45:44 -0500
From: "Gray, Andrew A" <Andrew.Gray@charter.com>
To: "opsawg@ietf.org" <opsawg@ietf.org>
Thread-Topic: New Version Notification for draft-gray-sampled-streaming-00.txt
Thread-Index: AQHVS5s0zdM9IXz3ZkSkvVyjx4XblqbskPCA
Date: Mon, 05 Aug 2019 14:45:44 +0000
Message-ID: <329D5F49-7EEE-4A38-B96F-97E15287F81F@charter.com>
References: <156501580187.24363.14759919501093494102.idtracker@ietfa.amsl.com>
In-Reply-To: <156501580187.24363.14759919501093494102.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [142.136.234.122]
Content-Type: text/plain; charset="utf-8"
Content-ID: <168ACCECD9E9F04F9E610B9C465BA506@chartercom.com>
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/Zz_fvzK5bUZaNywTQEmAqrNP3ag>
Subject: [OPSAWG] FW: New Version Notification for draft-gray-sampled-streaming-00.txt
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Aug 2019 14:47:05 -0000
Hello opsawg, I spoke to a number of IETF folks at IETF 105, along with Tianran and Ignas (who I thank for their feedback and suggestions), and it was decided that opsawg would be the best place to at least start the conversations about a new draft I am proposing, as detailed below. I document several use cases in the draft, but the short version is we are wanting to standardize a method for different vendors to handle ASIC-level replication of packets, to a remote server, including any and all information that ASIC may have about the packet, along with at least part of the payload, with a configurable sampling rate and filtering capabilities. Some things on my TODO list for it still: 1. I want to take a closer look at Flowspec rule definition, and see if that can be adequately encoded here. It looks like the YANG model for Flowspec rules was draft-wu-idr-flowspec-yang-cfg but that has since expired. 2. I'm planning on talking at NANOG 77 in Austin with other operators to see if there's additional use cases and how much appetite there is. 3. I'm talking with a couple vendors about implementations - there is interest here about it as well. I am sending out the -00 version of this draft and very much welcome comments and feedback. Thanks Andrew Gray On 8/5/19, 8:36 AM, "internet-drafts@ietf.org" <internet-drafts@ietf.org> wrote: A new version of I-D, draft-gray-sampled-streaming-00.txt has been successfully submitted by Andrew Gray and posted to the IETF repository. Name: draft-gray-sampled-streaming Revision: 00 Title: Sampled Traffic Streaming Document date: 2019-08-05 Group: Individual Submission Pages: 17 URL: https://www.ietf.org/internet-drafts/draft-gray-sampled-streaming-00.txt Status: https://datatracker.ietf.org/doc/draft-gray-sampled-streaming/ Htmlized: https://tools.ietf.org/html/draft-gray-sampled-streaming-00 Htmlized: https://datatracker.ietf.org/doc/html/draft-gray-sampled-streaming Abstract: This document standardizes the means of requesting a sampled capture stream from a router, receiving details about the resulting data flow, and the structure of the data flow itself. This is specifically tailored to having various hardware ASICs be able to perform this operation as quickly as possible, by allowing communication of the specific bit formats of headers applied to the packet flow, in a way that enhances interoperability between sources and sinks. Historically, NetFlow and its ilk have been used for these use cases, however the growth in hardware forward speeds is far outpacing the growth in CPU speeds, and the CPU-heavy parts of NetFlow is resulting in a reduction of sampling rates that include all of the fields provided by NetFlow that require CPU lookups. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.
- [OPSAWG] FW: New Version Notification for draft-g… Gray, Andrew A
- Re: [OPSAWG] New Version Notification for draft-g… Joe Clarke (jclarke)
- Re: [OPSAWG] New Version Notification for draft-g… Gray, Andrew A
- Re: [OPSAWG] New Version Notification for draft-g… Joe Clarke (jclarke)
- Re: [OPSAWG] New Version Notification for draft-g… Gray, Andrew A