Re: [Rats] draft-birkholz-rats-network-device-subscription-00

["Eric Voit (evoit)" <[e-mail]>]

> Dave Thaler, July 28, 2020 10:10 AM
> 
> I asked in the meeting how a subscriber knows who to subscribe to, and I
> believe the answer was that CHARRA answers that.  

The answer I gave was that the problem was the same as Charra.  I believe I
also said the problem itself is generic to any YANG based network element (I
don't remember if that came out).  Generalizing more from there, Network
Operators have diverse set embedded management systems which include
discovery, addressability, inventory, etc. of the network devices they
manage.

Moving back to YANG, these network management systems don't include all YANG
info about a device.  So once you have found that a device exists, the
device capabilities it supports can be acquired via a variety of mechanisms
like: 
 - NETCONF RFC 6241, Section 7 (and RFC6470)
 - YANG Library RFC 8525

> Well I looked in draft-
> ietf-rats-yang-tpm-charra-02 and it does not contain any mention of the
> subject.  I think one or the other of the two drafts needs to address this
> issue.  

This topic has not been within the scope of the many other YANG drafts/RFC
which exist.   This is reasonable as there is a huge breadth of topology
discovery protocols available and in-use for routers and switches.

Eric

> My preference is that it be in draft-birkholz-rats-network-device-
> subscription since that's the draft that talks about limitations like
> > Evidence is not streamed to an interested Verifier as soon as it is
> generated.
> Which certainly still applies, it's just another case... you didn't know
to
> subscribe to it until after the evidence was generated when it booted.
> 
> Dave
> 
> -----Original Message-----
> From: RATS <[e-mail]> On Behalf Of Eric Voit (evoit)
> Sent: Wednesday, June 24, 2020 9:41 AM
> To: [e-mail]
> Cc: Wei Pan <[e-mail]>; Birkholz, Henk
> <[e-mail]>
> Subject: [Rats] draft-birkholz-rats-network-device-subscription-00
> 
> Hi All,
> 
> This draft defines how to subscribe to a stream of attestation related
> Evidence on TPM-based network devices.  When subscribed, a Telemetry
> stream of verifiably fresh YANG notifications (which are generated when
> TPM PCRs are
> extended) are pushed to the subscriber.
> 
> This draft integrates:
>  *  Section 5 of draft-voit-rats-trusted-path-routing-01
>  *  Elements of draft-xia-rats-pubsub-model
> 
> Thanks!
> 
> Eric, Henk, and Wei
> 
> 
> -----Original Message-----
> From: [e-mail] <[e-mail]>
> Sent: Wednesday, June 24, 2020 12:19 PM
> To: Eric Voit (evoit) <[e-mail]>; Wei Pan
> <[e-mail]>; Henk Birkholz
> <[e-mail]>
> Subject: New Version Notification for
> draft-birkholz-rats-network-device-subscription-00.txt
> 
> 
> A new version of I-D,
draft-birkholz-rats-network-device-subscription-00.txt
> has been successfully submitted by Eric Voit and posted to the IETF
> repository.
> 
> Name:		draft-birkholz-rats-network-device-subscription
> Revision:	00
> Title:		Attestation Event Stream Subscription
> Document date:	2020-06-24
> Group:		Individual Submission
> Pages:		20
> URL:
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ietf.org%2Finternet-drafts%2Fdraft-birkholz-rats-network-device-
> subscription-
> 00.txt&amp;data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a37834
> 49230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7
> C637286137029115135&amp;sdata=MnEJ5ZwAh4BlTNs09fk0Vr1H39j5N%2BJd
> yBQHNJp7BdY%3D&amp;reserved=0
> Status:
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatat
> racker.ietf.org%2Fdoc%2Fdraft-birkholz-rats-network-device-
> subscription%2F&amp;data=02%7C01%7Cdthaler%40microsoft.com%7C2582
> 5e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7
> C1%7C0%7C637286137029115135&amp;sdata=qukLQaq17P4ts20nW1L%2B2d
> B9zIM9XB9SRcscFWcOeLw%3D&amp;reserved=0
> Htmlized:
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.
> ietf.org%2Fhtml%2Fdraft-birkholz-rats-network-device-subscription-
> 00&amp;data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a37834492
> 30a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63
> 7286137029125095&amp;sdata=Q0TfFjrfHZU%2FKFOT3li4JG0QoBa3Vo%2FkH
> Tp00T6GbZY%3D&amp;reserved=0
> Htmlized:
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatat
> racker.ietf.org%2Fdoc%2Fhtml%2Fdraft-birkholz-rats-network-device-
> subscription&amp;data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a
> 3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%
> 7C0%7C637286137029125095&amp;sdata=RLSvdRTcWX4Gew50X2DL7t2pE7N
> %2FA%2BKWrAVz0NhsbiA%3D&amp;reserved=0
> 
> 
> Abstract:
>    This document defines how to subscribe to a stream of attestation
>    related Evidence on TPM-based network devices.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
tools.ietf.org.
> 
> The IETF Secretariat
> 
> 
> _______________________________________________
> RATS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/rats