Re: [Supa] SUPA questions

Benoit Claise <bclaise@cisco.com> Thu, 12 February 2015 12:56 UTC

Return-Path: <bclaise@cisco.com>
X-Original-To: supa@ietfa.amsl.com
Delivered-To: supa@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA33D1A87B9 for <supa@ietfa.amsl.com>; Thu, 12 Feb 2015 04:56:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.51
X-Spam-Level:
X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bGm8cLPfUgkT for <supa@ietfa.amsl.com>; Thu, 12 Feb 2015 04:56:47 -0800 (PST)
Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4653D1A6EE1 for <supa@ietf.org>; Thu, 12 Feb 2015 04:56:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23598; q=dns/txt; s=iport; t=1423745806; x=1424955406; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to; bh=W5wgnIEqcA54oJA6tOn0TzNupVzCKBl4aT3CBgap3Qo=; b=NKx6NNGM4tS4axouo6RkB02mMFRzO4iBEAjik3fcPyilJ3yWgx7OgLvE J9q4z35nXD9PmFm/eysZTe88jjI5JuiG3xSRsyXCLOZjjAqnosD3K0+gg EMER+NyrN4VQIGsFMRW2eaGA0sSXy9IgftlwfGffXPKPiDHykL1OCrpZL 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BJBQAGotxU/xbLJq1bg1hagwLAKYVxAoFpAQEBAQEBfIQNAQECAiNLCgEQCQIYCRYBBwMCAgkDAgECATQRBgEMAQUCAQEWiBMNoA6cbJcXAQEBAQEBAQECAQEBAQEBAQEBAQEXiwyEFQFXBwmCX4FCBY1BhTqFXYEYOIR1iHyDPiKCAgUXgVE9MQGBAQEfgSEBAQE
X-IronPort-AV: E=Sophos;i="5.09,565,1418083200"; d="scan'208,217";a="347394393"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP; 12 Feb 2015 12:56:43 +0000
Received: from [10.60.67.90] (ams-bclaise-8919.cisco.com [10.60.67.90]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t1CCugSL031101; Thu, 12 Feb 2015 12:56:42 GMT
Message-ID: <54DCA30A.5010809@cisco.com>
Date: Thu, 12 Feb 2015 13:56:42 +0100
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: JF Tremblay <jean-francois.tremblay@viagenie.ca>, "supa@ietf.org" <supa@ietf.org>
References: <54CF8F4D.4010002@cisco.com> <9E366C09-44E7-41A9-B30D-96435C3BEE82@viagenie.ca>
In-Reply-To: <9E366C09-44E7-41A9-B30D-96435C3BEE82@viagenie.ca>
Content-Type: multipart/alternative; boundary="------------030003060508050700060600"
Archived-At: <http://mailarchive.ietf.org/arch/msg/supa/Jmg1lAAIjTspvlSXPQHJDmHl9-8>
Cc: "ops-ads@tools.ietf.org" <ops-ads@tools.ietf.org>, "rtg-ads@tools.ietf.org" <rtg-ads@tools.ietf.org>
Subject: Re: [Supa] SUPA questions
X-BeenThere: supa@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This list is to discuss SUPA \(Shared Unified Policy Automation\) related issues." <supa.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/supa>, <mailto:supa-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/supa/>
List-Post: <mailto:supa@ietf.org>
List-Help: <mailto:supa-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/supa>, <mailto:supa-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Feb 2015 12:56:51 -0000

Thanks JF.

For the rest of the SUPA people, don't hesitate to jump in this discussion.

Regards, Benoit
> Benoit,
> Let me try to answer some of your questions below. These are 
> definitely not “finalized” answers and might not reflect the consensus 
> of the whole group.
>
> This is an effort to move the discussion forward on the points you 
> raised. Comments inline.
>
> JF
>
>
>> On Feb 2, 2015, at 9:53 AM, Benoit Claise <bclaise@cisco.com 
>> <mailto:bclaise@cisco.com>> wrote:
>>
>> I spent 2 hours preparing for this call today (reading some of the 
>> emails, some of the drafts, and the latest charter proposal). Here 
>> are some of my questions, posted to hopefully help structure the 
>> call, or follow up after the call.
>> Apologies if some of the questions have been answered on the mailing 
>> or during one of the weekly calls.
>>
>> Regards, Benoit
>
> Thanks for taking the time to comment.
>
>> =============================
>>
>> _http://tools.ietf.org/html/draft-karagiannis-supa-problem-statement-04_
>>
>> Same question as during the bar BoF: what is the connection with I2RS 
>> in terms of topology?
>> When I spoke to Alia Atlas some months ago, she mentioned that the 
>> topology would be done in I2RS.
>
> Right. Alia said I2RS was willing to continue this work, but:
> - This wasn’t discussed in Hawaii (it wasn’t on the agenda and 
> draft-clemm-i2rs-yang-network-topo-01 was expired at that time)
> - There’s been very little discussions on this topic on the I2RS list 
> for the past year.
>
> The good news is that topology work is on the agenda for the I2RS 
> interim next Thursday (see 
> http://trac.tools.ietf.org/wg/i2rs/trac/wiki/TopologyDesignTeams). 
> Supa participants are willing to re-use the work of other groups such 
> as I2RS, as long as a timely completion envisioned.
>
>
>> Btw, is this really a BUS? I thought it was RESCONF/NETCONF? Slide 4 
>> shows RESTCONF/NETCONF
>
> My personal opinion would be to remove the BUS terminology from these 
> drafts. A bus in computer engineers terms usually refers to some level 
> of parallelization or serialization (at least according to Wikipedia). 
> I don’t see how these concepts apply here.
>
>
>> I don't quite get the change from "applications" to "AOMA "(what is 
>> this?), and "controller" to "management agent" from previous draft 
>> versions?
>
> This was discussed on the list and during interim calls. Juergen 
> suggested getting back to more classic terms such as management 
> application and controller. I agree.  Juergen also mentioned 
> “management agent” could be confused with a component of SNMP.
>
>> I would be great if you could agree on a single set of terminology
>
> Agreed.
>
>
>> - From your slide, do you target option 1 or option 2 for the charter?
>
> As Tina mentioned, these more or less show the same thing with 
> different levels of details, they shouldn’t be called options. This 
> will be updated in the slides.
>
>
>> - I still don't understand what "Shared Unified Policy Automation" means
>>     Shared between?
>>     Unified between?
>> Disclaimer: I recall proposing not to change the mailing list/draft 
>> names one more time ... but you would still need to explain what you 
>> mean.
>
> As discussed yesterday, the list and the name are mostly placeholders 
> at this point because the group wanted to avoid yet another renaming.
>
>
>> <ifgceied.png>
>> Wrt the south-band interface, does SUPA limit its use cases to what 
>> I2RS can do? Btw, I2RS selected YANG.
>> I was thinking to have NETCONF there.
>
> Supa would not be limited to I2RS behaviors on the southbound, for sure.
>
>
>> It seems that you want to address the interface between an 
>> application and a controller?
>
> Yes.
>
>> Does this top down approach work without also standardizing the 
>> device/protocol specific interface/YANG models?
>
> Good point. It’s entirely true that supa is all about a top-down 
> approach.
>
>> Or maybe you want to base the use cases on what the vendor CLIs can 
>> do today? Then how do we solve the multi-vendor/proprietary issues?
>
> I believe this is what the wording around “mapping” was about. 
> Connecting the top-down approach to proprietary implementations is 
> definitely not is scope here. It has to connect to common, 
> inter-operable concepts.
>
>
>> Having a L3VPN services model is not complex IMO, but translating to 
>> the PE configurations is what make challenging, specifically when 
>> from different vendors. It seems that SUPA completely hides this 
>> complexity.
>> IMO, this is however exactly where a SDO such as the IETF would add a 
>> lot of values.
>> Look at the different discussions on standardizing the 
>> routing-related YANG models.
>
> I’ve taken a look at draft-zhuang-l3vpn-yang-cfg, for example. My 
> understanding was that supa would provide a protocol-agnostic layer 
> above that and use a model like l3vpn-yang to configure in the 
> southbound direction (I use “direction” here because it would probably 
> talk to a controller and not to devices directly).
>
> The advantage of such an abstraction is to hide the implementation 
> details, including the fact it’s an L3VPN, form the higher-level apps. 
> In my mind, a supa interface consumer would only get a high-level 
> abstract topology information and then provision network resources 
> over that topology. I’m not sure this view is shared amongst all group 
> participants, some discussions on this would be welcome.
>
>
>> _Questions on the cha__rter (next to the ones I asked above)_
>> - It seems that you discuss multiple use cases in different drafts 
>> but I don't see any in the charter as deliverable?
>> How would you know if you are successful?
>> On the other hand, I see in the charter text:
>>
>>     The first use case that the working group will focus on will be VPN
>>     inter-datacenter traffic management, including the automated
>>     provisioning of site-to-site virtual private networks (VPNs) of
>>     various types (for example IPsec, tunnels, MPLS L2 and L3).
>>
>> "VPN, IPSEC, tunneles, MPLS L2 or L3", they look to me as multiple 
>> use cases, at least multiple distinct technolgies, and therefore as a 
>> huge piece of work
>
> Agreed, this has to be clarified and boiled down to a single well 
> defined action item.
>
>> -  "A set of policy rules is then defined to manage the service"
>> I don't know what you mean by "policy rules"? A new language? A set 
>> of YANG models, depending on the use case (Policy-based routing, QoS 
>> rate-limiting policy, ACL drop policy, etc...), something else?
>
> The policy side is also unclear to me. But again, this would be a 
> high-level top-down approach. I like what’s described 
> in draft-hares-i2rs-info-model-policy-02 (and the related presentation 
> at http://tools.ietf.org/agenda/90/slides/slides-90-i2rs-2.pdf), but 
> again, that’s an I2RS document.
>
> JF
>
>
>
>
>