Re: [sfc] Roman Danyliw's Discuss on draft-ietf-sfc-ioam-nsh-11: (with DISCUSS and COMMENT)

Roman Danyliw <rdd@cert.org> Thu, 04 May 2023 20:51 UTC

Return-Path: <rdd@cert.org>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDBD5C17B351; Thu, 4 May 2023 13:51:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kKN_WaPWuY_Q; Thu, 4 May 2023 13:50:57 -0700 (PDT)
Received: from USG02-BN3-obe.outbound.protection.office365.us (mail-bn3usg02on0714.outbound.protection.office365.us [IPv6:2001:489a:2202:c::714]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91C3AC17B349; Thu, 4 May 2023 13:50:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=eOGKU+lvI3j+4GlK1Cu0z7+EGu5hwJ2fV/dZpXgTJVjVcz/FUvfJl+3sFp+J1PJstZLYW+8W/K6CSGcdJvB01GlR9usRbWoqIO+IHtpUs755jl4HlKVYFE3dNVs1U9bOTXZJ1V3Q2b8bi2nul3fZVXgUhMXqC2wkOljUW2+xkrem8eBuhePr+Q180PbezlM/4ir1t9SfQzttiZE3ulR5ZeqJrymxx7Ct6MSulb6dNz/jy0IXLb9F0NRA3GRB/P7CkU8lfM78Jj9zI7yZN5BEq6kfC+74n7kzOxdS/xhlppNPenMjOVRWZvzY8mWZ1oGI65ERiK4QnLdd4fJ6CXhVbQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=wtqyqmng4n84USKXsrtCpVqQf1d5YjdlKDvQ7otn9gY=; b=l+Rs52hU01ltn0Asb8qXD08CxlpFzBSURr7dVMhGLm1/uDi5CzO/I375chQ5qub8LhDGxJzu/DPwTvUGRlcPZ7VrlX711rEz+wI+PUt+9Pyl98urU/rZtG2gPRBgPHa83bJ8ZDyLTRUAGW1ZEuKuQYxeI57AYMvx7Qcj7dpmzPMT8+nAjwtyG9f/l1LnOEPTr9qEfqR4j7lGjmqxdLCW6CtP7/EZruLWhVWUGmK/l8wcCpzInbOUMx4YMdg9fRIHXEZxJaWuJXo2F1/8T+FLWd5mXEOst2wDu7PVywTyD29MUKmnN8Ml5wUm3i78ZRjdtEHX8STXpgZKdpP0A0gadg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cert.org; dmarc=pass action=none header.from=cert.org; dkim=pass header.d=cert.org; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wtqyqmng4n84USKXsrtCpVqQf1d5YjdlKDvQ7otn9gY=; b=rp+yM8yDHP+yVEdEns4GxULdEyP38Ph6LvOVTizm5xssjmS5EvxBjb3vE77sD52fuKJI7ffFpb3c1L+BW8uiynCmQEEyhLDAlTIgQJ+mK7MGvteMX2lJ4A2GV7gaSujT/Dhf6J8EMXaqIesM4P981ttpe0mSNwGPuF0ET9HRd6s=
Received: from BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM (2001:489a:200:168::11) by BN2P110MB1333.NAMP110.PROD.OUTLOOK.COM (2001:489a:200:179::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6340.36; Thu, 4 May 2023 20:50:52 +0000
Received: from BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM ([fe80::29b2:8307:6a90:c79f]) by BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM ([fe80::29b2:8307:6a90:c79f%7]) with mapi id 15.20.6340.036; Thu, 4 May 2023 20:50:52 +0000
From: Roman Danyliw <rdd@cert.org>
To: "Frank Brockners (fbrockne)" <fbrockne@cisco.com>
CC: "draft-ietf-sfc-ioam-nsh@ietf.org" <draft-ietf-sfc-ioam-nsh@ietf.org>, "sfc-chairs@ietf.org" <sfc-chairs@ietf.org>, "sfc@ietf.org" <sfc@ietf.org>, "gregory.mirsky@ericsson.com" <gregory.mirsky@ericsson.com>, The IESG <iesg@ietf.org>
Thread-Topic: Roman Danyliw's Discuss on draft-ietf-sfc-ioam-nsh-11: (with DISCUSS and COMMENT)
Thread-Index: AQHZfDpIhA568ja9/0eYjxueGn0Gn69KlCGAgAAHedA=
Date: Thu, 04 May 2023 20:50:52 +0000
Message-ID: <BN2P110MB110745FEFD87DEBB44E5A98BDC6D9@BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM>
References: <168295176724.49894.17967534193469617303@ietfa.amsl.com> <MWHPR11MB13115AB4336C466A3BAE079EDA6D9@MWHPR11MB1311.namprd11.prod.outlook.com>
In-Reply-To: <MWHPR11MB13115AB4336C466A3BAE079EDA6D9@MWHPR11MB1311.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cert.org;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN2P110MB1107:EE_|BN2P110MB1333:EE_
x-ms-office365-filtering-correlation-id: 7916d0a1-3709-415e-ee69-08db4ce13fb6
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230028)(39830400003)(136003)(366004)(396003)(451199021)(86362001)(82960400001)(52536014)(41320700001)(5660300002)(122000001)(38100700002)(38070700005)(33656002)(83380400001)(7696005)(4326008)(76116006)(6916009)(71200400001)(966005)(508600001)(8936002)(55016003)(8676002)(54906003)(41300700001)(66446008)(64756008)(66556008)(66946007)(66476007)(2906002)(186003)(9686003)(26005)(53546011)(6506007); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: gcYR610zIaChmf1Br5ByFutmZjncDUq4wU98tyIRfkMb653m/ARr3yOc7jvdwvQBZChVnqpDe2+2kn6K/0GICD50DIXrzZJpdflZDT8bi9bAhbMyugPK7C3/39Waq91WnTnqyVsS6FJ3rkdJlRbg+O1UBJJ1OtforYVCGMwF3stbNS1heCQwKnkt7I8xellf/lOQ4ep9kjAye1z4qv4fM+UeLWwEH1sD0FOBAT9uWkxAKK8YPRbMmvkxUnN3/wOxzoRLAGKlrLQHpqkfM6uHPX4HtkD/p3LClv2VJXLIawNgdoWYaZTq27xAqsfdQphHkRbdYC7AU6aYCmg2mKqin26hqF/qf7NW8KxphXOScgKtFouD1l8GrOXidPK8KZZao1M+qdABHx4sVYBO+BnvnbFkAH93864Q41M/rCePkys=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: cert.org
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN2P110MB1107.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 7916d0a1-3709-415e-ee69-08db4ce13fb6
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 May 2023 20:50:52.3063 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 95a9dce2-04f2-4043-995d-1ec3861911c6
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN2P110MB1333
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/StECc_AWI1MZQcd1F6GuGKZAC3Y>
Subject: Re: [sfc] Roman Danyliw's Discuss on draft-ietf-sfc-ioam-nsh-11: (with DISCUSS and COMMENT)
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 May 2023 20:51:01 -0000

Hi Frank!

Thanks for this follow-up explanation and the revised text in -12.  I've cleared my ballot.

Roman

> -----Original Message-----
> From: Frank Brockners (fbrockne) <fbrockne@cisco.com>
> Sent: Thursday, May 4, 2023 4:24 PM
> To: Roman Danyliw <rdd@cert.org>; The IESG <iesg@ietf.org>
> Cc: draft-ietf-sfc-ioam-nsh@ietf.org; sfc-chairs@ietf.org; sfc@ietf.org;
> gregory.mirsky@ericsson.com
> Subject: RE: Roman Danyliw's Discuss on draft-ietf-sfc-ioam-nsh-11: (with
> DISCUSS and COMMENT)
> 
> Hi Roman,
> 
> Thanks a lot for your review. We've just posted an updated revision (12):
> https://www.ietf.org/archive/id/draft-ietf-sfc-ioam-nsh-12.txt
> 
> Please see inline below:
> 
> > -----Original Message-----
> > From: Roman Danyliw via Datatracker <noreply@ietf.org>
> > Sent: Monday, 1 May 2023 16:36
> > To: The IESG <iesg@ietf.org>
> > Cc: draft-ietf-sfc-ioam-nsh@ietf.org; sfc-chairs@ietf.org;
> > sfc@ietf.org; gregory.mirsky@ericsson.com; gregory.mirsky@ericsson.com
> > Subject: Roman Danyliw's Discuss on draft-ietf-sfc-ioam-nsh-11: (with
> > DISCUSS and COMMENT)
> >
> > Roman Danyliw has entered the following ballot position for
> > draft-ietf-sfc-ioam-nsh-11: Discuss
> >
> > When responding, please keep the subject line intact and reply to all
> > email addresses included in the To and CC lines. (Feel free to cut
> > this introductory paragraph, however.)
> >
> >
> > Please refer to
> > https://www.ietf.org/about/groups/iesg/statements/handling-ballot-
> > positions/
> > for more information about how to handle DISCUSS and COMMENT
> > positions.
> >
> >
> > The document, along with other ballot positions, can be found here:
> > https://datatracker.ietf.org/doc/draft-ietf-sfc-ioam-nsh/
> >
> >
> >
> > ----------------------------------------------------------------------
> > DISCUSS:
> > ----------------------------------------------------------------------
> >
> > (revised ballot)
> >
> > ** Section 5.
> >    IOAM is considered a "per domain" feature, where one or several
> >    operators decide on leveraging and configuring IOAM according to
> >    their needs.
> >
> > This seems like an an expansion of the applicability statement of
> > IOAM.  I don’t see reference to multiple operators in Section 3 of
> > RFC9197.  Please explicitly cite the RFC9197 applicability statement
> > to be clear that scope is not being expanded and and consider if
> > discussion of multiple operators is needed.
> >
> ...FB: This is a good catch. The new rev -12 now refers to a single operator only.
> 
> IOAM is considered a "per domain" feature, where the operator decides
>    on leveraging and configuring IOAM according to the operator's needs.
> 
> 
> >
> > ----------------------------------------------------------------------
> > COMMENT:
> > ----------------------------------------------------------------------
> >
> > I support Jim Guichard's DISCUSS position on clarifying Section 3's text:
> > "[t]he operator MUST ensure that all nodes along the service path
> > support IOAM.
> >  Otherwise   packets with IOAM are likely to be dropped per [RFC8300]."
> >
> > ** Section 5. Wrong reference. (Same observation as Jim)
> >
> >    For additional IOAM
> >    related security considerations, see Section 10 in [RFC9197].
> >
> > s/see Section 10/see Section 9/.
> >
> >
> 
> ...FB: Thanks. The reference were corrected.
> 
> Thanks again for your review.
> 
> Cheers, Frank