Re: [sfc] FW: New Version Notification for draft-maglione-sfc-nsh-radius-00.txt

"Roberta Maglione (robmgl)" <robmgl@cisco.com> Mon, 24 October 2016 11:12 UTC

Return-Path: <robmgl@cisco.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC13D12952D for <sfc@ietfa.amsl.com>; Mon, 24 Oct 2016 04:12:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.952
X-Spam-Level:
X-Spam-Status: No, score=-14.952 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YmnPsqubNn5g for <sfc@ietfa.amsl.com>; Mon, 24 Oct 2016 04:12:50 -0700 (PDT)
Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE5A3129536 for <sfc@ietf.org>; Mon, 24 Oct 2016 04:12:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6571; q=dns/txt; s=iport; t=1477307569; x=1478517169; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=L7PKlEzKyklHM2vJ32Qae9o7pla0m2gJjKSzUz/FO5E=; b=lcMjElnmfYex+Vk5C4Dh7Rn4iYe1NEMNj+8H/ORW0AgPpJK8TxsgZq/T Upe20CeVy1aGsG30rX23weUizKZYTaNrej8hTVLK39tqh7tfuEO9XZOs7 RS0Mu+oPAt0kePxkxUoVesMvC8+v16mxlklmWESfS0f6zyTsbEK79aVIf M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0B6AQD46w1Y/4oNJK1SChoBAQEBAgEBAQEIAQEBAYMqAQEBAQEdWH0HjS2WfZQ/ggccDYV4AoF3PxQBAgEBAQEBAQFiKIRiAQEBBAEBAWsJDgQCAQgRAQMBAQ0bBycLFAMFAQgCBAESCIhKDsIVAQEBAQEBAQEBAQEBAQEBAQEBAQEBHIsShB8ShXUFjkk7hTOFXQGGKYMGhlyBdU6EH4knjQaEAAEeNl6FAnIBAYc/gQABAQE
X-IronPort-AV: E=Sophos;i="5.31,541,1473120000"; d="scan'208";a="163248633"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 24 Oct 2016 11:12:48 +0000
Received: from XCH-RCD-006.cisco.com (xch-rcd-006.cisco.com [173.37.102.16]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id u9OBCmME007974 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 24 Oct 2016 11:12:48 GMT
Received: from xch-rcd-009.cisco.com (173.37.102.19) by XCH-RCD-006.cisco.com (173.37.102.16) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 24 Oct 2016 06:12:47 -0500
Received: from xch-rcd-009.cisco.com ([173.37.102.19]) by XCH-RCD-009.cisco.com ([173.37.102.19]) with mapi id 15.00.1210.000; Mon, 24 Oct 2016 06:12:47 -0500
From: "Roberta Maglione (robmgl)" <robmgl@cisco.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "sfc@ietf.org" <sfc@ietf.org>
Thread-Topic: [sfc] FW: New Version Notification for draft-maglione-sfc-nsh-radius-00.txt
Thread-Index: AQHSLcmZLa6Ssga+Y0mKdc8a+TR+qKC3a9qg
Date: Mon, 24 Oct 2016 11:12:47 +0000
Message-ID: <eb6bb475f92a4bdf97dd02387d6cdd6a@XCH-RCD-009.cisco.com>
References: <147651526420.14954.691320262825038260.idtracker@ietfa.amsl.com> <7b056fd8879c42a0ad63417586dff2a4@XCH-RCD-009.cisco.com> <787AE7BB302AE849A7480A190F8B933009D96F6E@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
In-Reply-To: <787AE7BB302AE849A7480A190F8B933009D96F6E@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.61.243.8]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/PqRDgd6_fPrkcMJ7lC05GfrDgqw>
Subject: Re: [sfc] FW: New Version Notification for draft-maglione-sfc-nsh-radius-00.txt
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Oct 2016 11:12:54 -0000

Hello Med,
Thanks for your comments.
Please see answers inline [RM]
Regards
Roberta


-----Original Message-----
From: mohamed.boucadair@orange.com [mailto:mohamed.boucadair@orange.com] 
Sent: Monday, October 24, 2016 9:38 AM
To: Roberta Maglione (robmgl) <robmgl@cisco.com>; sfc@ietf.org
Subject: RE: [sfc] FW: New Version Notification for draft-maglione-sfc-nsh-radius-00.txt

Hi Roberta, 

Thank you for sharing this draft. Some comments below:

* You may consider the template in https://tools.ietf.org/html/draft-ietf-radext-datatypes-08#section-2.1.3 for defining the RADIUS attributes. 

[RM] Thanks for the pointer, I can modify the format of the attributes adding "description" and "Type" fields in order to follow the guidelines defined there. 

* This draft is an implementation of the "C1: Interface between SFC Control Plane & SFC Classifier" interface: https://tools.ietf.org/html/draft-ietf-sfc-control-plane-08#section-3.3.1. Having a reference to the CP architecture would be helpful. If you can indicate which requirements from the CP document you are targeting, this would be even appreciated. 

[RM] let me take another  closer look at the control plane draft and I come back to you on this point.

* The draft focuses on two pieces of information that can be instructed via the CP. I do agree those two are important ones, but I wonder whether those are sufficient to cover SFC needs in the broadband case. For example, how to demux among multiple services to be delivered to the same subscriber? Do you assume that other control protocols are used to instruct the classification rules or this is done by RADIUS?

[RM] SPI and SI are the minimal set of parameters required to identify a service chain. Regarding your question about demuxing multiple services, the idea here is that each subscriber will subscribe/pay for a different offer/service. A service may require to go across different SF's thus a service chain is required. A classification rule can be used to specific which type of traffic should go through the service chain
The classification rule can be sent by RADIUS, as written at the end of 
Section 3, " A classification rule, to be associated with the SPI, can also be sent by the AAA Server as part of the list of attribute-value pairs."
Or it can be specified by other means, for example pre-configured on the NAS. In most of the case that could be all the traffic coming from that subscriber line.

* Because NSH-SI may be bound to a given path, the presence of NSH-SPI attribute may be required.
[RM] You are correct and this is taken in care by the text in section 4.1

"  If the NAS does not receive the NSH-SPI attribute in the Access-
   Accept message, it MAY fall back to a pre-configured default NSH SPI,
   if any.  If the NAS does not have any pre-configured NSH SPI, the
   traffic generated by that specific subscriber does not have to be
   sent across any service chain."

 BTW, I wonder whether you can define a "SFC Rule" RADIUS attribute that can convey one or many SFC-related TLVs (e.g., NSH-SPI, NSH-SI, etc.).

[RM] I don't think such complexity would be required to address most of the common broadband use cases.



Thank you.

Cheers,
Med 

> -----Message d'origine-----
> De : sfc [mailto:sfc-bounces@ietf.org] De la part de Roberta Maglione
> (robmgl)
> Envoyé : samedi 22 octobre 2016 11:52
> À : sfc@ietf.org
> Objet : [sfc] FW: New Version Notification for draft-maglione-sfc-nsh- 
> radius-00.txt
> 
> Hello,
> We submitted this document about Radius attributes for NSH.
> The draft is targeted at addressing Broadband access use cases.
> Your comments are welcome.
> Best Regards
> Roberta
> 
> -----Original Message-----
> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> Sent: Saturday, October 15, 2016 9:08 AM
> To: Guillermo Trueba (gtrueba) <gtrueba@cisco.com>; Roberta Maglione
> (robmgl) <robmgl@cisco.com>; Carlos Pignataro (cpignata) 
> <cpignata@cisco.com>
> Subject: New Version Notification for 
> draft-maglione-sfc-nsh-radius-00.txt
> 
> 
> A new version of I-D, draft-maglione-sfc-nsh-radius-00.txt
> has been successfully submitted by Roberta Maglione and posted to the 
> IETF repository.
> 
> Name:		draft-maglione-sfc-nsh-radius
> Revision:	00
> Title:		RADIUS Attributes for NSH
> Document date:	2016-10-14
> Group:		Individual Submission
> Pages:		10
> URL:            https://www.ietf.org/internet-drafts/draft-maglione-sfc-
> nsh-radius-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-maglione-sfc-nsh-
> radius/
> Htmlized:       https://tools.ietf.org/html/draft-maglione-sfc-nsh-radius-
> 00
> 
> 
> Abstract:
>    Network Service Header (NSH) protocol defines the Service Function
>    Chaining (SFC) encapsulation required to support the Service Function
>    Chaining (SFC) Architecture.  One of the components of the Network
>    Service Header (NSH) protocol is the Service Path Identifier (SPI),
>    which identifies a service path, another important element of the NSH
>    protocol is the Service Index (SI), which provides location within
>    the Service Path.
> 
>    When Service Providers would like to deliver customized services
>    offers requiring Service Functions Chains, a different service chain
>    may be required for each subscriber or group of subscribers.  In
>    order to simplify the service provisioning in this scenario, it would
>    be useful to be able to associate the Service Path Identifier (SPI),
>    identifying the service chain, and the appropriate Service Index
>    (SI), identifying the location in the service path, with the customer
>    profile.
> 
>    In some Broadband networks, the customer profile information may be
>    stored in Authentication, Authorization, and Accounting (AAA)
>    servers.  This document specifies two new Remote Authentication Dial-
>    In User Service (RADIUS) attributes to carry the Service Path
>    Identifier (SPI) and the Service Index (SI).
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of 
> submission until the htmlized version and diff are available at 
> tools.ietf.org.
> 
> The IETF Secretariat
> 
> _______________________________________________
> sfc mailing list
> sfc@ietf.org
> https://www.ietf.org/mailman/listinfo/sfc