Re: [Supa] SUPA Update

Benoit Claise <bclaise@cisco.com> Wed, 05 July 2017 13:40 UTC

Return-Path: <bclaise@cisco.com>
X-Original-To: supa@ietfa.amsl.com
Delivered-To: supa@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A50C6132053; Wed, 5 Jul 2017 06:40:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R5GCV8hxjW01; Wed, 5 Jul 2017 06:39:59 -0700 (PDT)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09B6E132A30; Wed, 5 Jul 2017 06:39:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=47128; q=dns/txt; s=iport; t=1499261998; x=1500471598; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to; bh=kNz63EZFsA7USnF1Ur7/BXZYiK3Q9EBk53wbS7A9xpw=; b=YcXko8UbBYkihu/fx8Fjmymob6pmDcnGz/2wMmIGorzVlC7S/hIm6JXa pQ2FOADwE8vSlUoNy8mM5WTLTmHLnyk7jcH/uZMR6E8q2i4+laDx30Boy b+c6811BcEQuEFZL+HFJVj284Iqjgs7YR0l/MBTjlLfASfraKyXv7BthR 8=;
X-IronPort-AV: E=Sophos;i="5.40,312,1496102400"; d="scan'208,217";a="655886500"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Jul 2017 13:39:56 +0000
Received: from [10.55.221.38] (ams-bclaise-nitro5.cisco.com [10.55.221.38]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v65DdsHx031350; Wed, 5 Jul 2017 13:39:56 GMT
To: "Diego R. Lopez" <diego.r.lopez@telefonica.com>
Cc: "King, Daniel" <d.king@lancaster.ac.uk>, SUPA list <supa@ietf.org>, "ops-ads@ietf.org" <ops-ads@ietf.org>, "supa-chairs@ietf.org" <supa-chairs@ietf.org>, Benoit Claise <bclaise@cisco.com>
References: <65174429B5AF4C45BD0798810EC48E0A942C73B2@EX-0-MB2.lancs.local> <666784c3-d4df-9fa1-9661-d8e182e2c7da@cisco.com> <3790BAEB-0E40-413B-BD84-60EE2E9CF483@telefonica.com> <ad222f7b-1e6c-c379-def8-780d82c1047b@cisco.com> <77C6AB0B-58D5-45CD-A6D7-C3271AD76E81@telefonica.com>
From: Benoit Claise <bclaise@cisco.com>
Message-ID: <38bdf7e3-8d65-beeb-327f-f962f3b8f7da@cisco.com>
Date: Wed, 05 Jul 2017 15:39:54 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <77C6AB0B-58D5-45CD-A6D7-C3271AD76E81@telefonica.com>
Content-Type: multipart/alternative; boundary="------------E396D48C2CC808942E2AD81F"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/supa/QvG2xiFK1IHqC0RQLQsab-epsQY>
Subject: Re: [Supa] SUPA Update
X-BeenThere: supa@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This list is to discuss SUPA \(Simplified Use of Policy Abstractions\) related issues." <supa.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/supa>, <mailto:supa-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/supa/>
List-Post: <mailto:supa@ietf.org>
List-Help: <mailto:supa-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/supa>, <mailto:supa-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jul 2017 13:40:04 -0000

Hi Diego,

Thanks for the discussion.
So you're applying the SUPA data model 
(draft-ietf-supa-generic-policy-data-model-04) 
<https://datatracker.ietf.org/doc/draft-ietf-supa-generic-policy-data-model/>?
Can you please share how you reuse them and what's your experience?

Regards, Benoit
> Hi Benoit,
>
> In the CogNet project (http://www.cognet.5g-ppp.eu) we are applying 
> the data models to express the policy rules (and the events and 
> actions) derived from the application of the so-called Smart Engine. 
> We are discussing about following a similar path in SHIELD 
> (https://www.shield-h2020.eu) to express security policies, and 
> advocating for it in 5G-TRANSFORMER (http://5g-transformer.eu) when 
> expressing rules for policy-based management. The results of these 
> projects are being or will be transferred to our operational 
> practices, as well as what is being defined in I2NSF, where SUPA seems 
> the natural data model for expressing policies to the Security Controller.
>
> Is tis the kind of statement you were asking for?
>
> Be goode,
>
>> On 22 Jun 2017, at 07:58 , Benoit Claise <bclaise@cisco.com 
>> <mailto:bclaise@cisco.com>> wrote:
>>
>> Hi Diego,
>>
>> Can you expand on the re-usability aspects.
>> What is being reused? the information model, the data model, 
>> something else? I hope more than the concepts.
>> What are you, yourself, reusing?
>>
>> Regards, Benoit
>>> Hi Benoit,
>>>
>>> While I cannot talk for YANG module authors, and it is true that the 
>>> WG has a significant delay in its deliverables, I ‘d like to stress 
>>> that SUPA has produced reusable work that is being used elsewhere, 
>>> and a closing of the group before it finishes its commitments would 
>>> damage these other works. I am directly involved in the I2NSF WG 
>>> (that is progressing quite well in my opinion), and in several 
>>> collaborative European projects related with 5G and security, 
>>> including a number of network operators that are experimenting with 
>>> SUPA-based policy statements. And I am aware of the ONUG interest as 
>>> well, though not being involved I cannot detail what they are 
>>> targeting now.
>>>
>>> So I would ask you to reconsider the decision of closing SUPA at 
>>> IETF 99.
>>>
>>> Be goode,
>>>
>>>> On 15 Jun 2017, at 14:46 , Benoit Claise <bclaise@cisco.com 
>>>> <mailto:bclaise@cisco.com>> wrote:
>>>>
>>>> Dear all,
>>>>
>>>> After the last IETF, I put a calendar reminder on June 16th to 
>>>> decide on the next steps for SUPA.
>>>> This is inline with the our previous meeting minutes, so it should 
>>>> not come as a surprise.
>>>> Granted, this is one day earlier than foreseen, but the IESG agenda 
>>>> coordination call takes place today, and it was important from a 
>>>> scheduling point of view to understand if SUPA would meet. The 
>>>> chairs informed me that no SUPA meeting is required in Prague. That 
>>>> triggered this discussion, just one day earlier.
>>>>
>>>> Our meeting minutes: 
>>>> https://www.ietf.org/mail-archive/web/supa/current/msg01612.html
>>>>
>>>>     At the SUPA WG at IETF 98 (Tuesday, 28 March) we discussed the
>>>>     progress of the WG.  Benoit (our AD) summed up the situation, pointing
>>>>     out that our drafts are not updated very frequently, and that the SUPA
>>>>     mailing list has been very quiet between meetings.
>>>>
>>>>     At the meeting the authors of the SUPA Information model and the SUPA
>>>>     Data Model drafts said that those drafts should be ready for WG Last
>>>>     Call by 1 June, so that they could be sent to IESG for approval by
>>>>     about 1 July.
>>>>
>>>>     After summing up the pros and cons for SUPA continuing, Benoit
>>>>     concluded by saying that the WG will be closed at IETF 99 (Prague, 16
>>>>     July) unless there is substantive progress on the Information Model
>>>>     and especially on the Data Model drafts by one month before the Prague
>>>>     meeting.  'Substantive progress' here means seeing comments on and/or
>>>>     reviews of these drafts demonstrating that people - outside the small
>>>>     group of authors - have carefully read the drafts, or better, that they
>>>>     are actually using SUPA's Information and Data Models.
>>>>
>>>> I've been watching the list.
>>>> Since the last IETF meeting, we received two new drafts ...
>>>>
>>>>     draft-ietf-supa-generic-policy-info-model-03.txt
>>>>     draft-ietf-supa-generic-policy-data-model-03.txt
>>>>
>>>> ... and some draft reviews:
>>>>
>>>>         gunter.wang@ericsson.com on on
>>>>         draft-ietf-supa-policy-based-management-framework:
>>>>
>>>>             Good feedback but it seems like only editorial to me.
>>>>
>>>>         Tony tianxu@chinamobile.com on draft-cheng-supa-applicability:
>>>>
>>>>             Some editorial comments and three technical ones:
>>>>
>>>>             1.       I wonder the meaning of section 3, the part
>>>>             copied from framework draft, may not be needed.
>>>>
>>>>             2.       I suggest to replace the title of 4.2.2.and
>>>>             4.2.3 with detailed information instead of writing just
>>>>               Example 1 / 2.
>>>>
>>>>             3.       The writer wrote “We will define
>>>>             "edgeInterface" role and "EnterpriseDomain" later in
>>>>              this note” but I failed to find the explanation for
>>>>             these two term.
>>>>
>>>>             Benoit => it's more like one technical comment, the
>>>>             last one.
>>>>
>>>>
>>>>         Haining Wang: 18901341229@189.cn on
>>>>         draft-ietf-supa-generic-policy-data-model-03:
>>>>
>>>>             I understand that the GPIM YANG model provides an
>>>>             example of how to convert IM to DM (for general
>>>>             policy), and John’s SNMP blocking example
>>>>             (https://mailarchive.ietf.org/arch/msg/supa/DWEzaSBK6KBdsmQ0FE2-eypTzeY)
>>>>             exposes some details. But I am sorry that the whole
>>>>             picture is still not clear to me. It would be nice if
>>>>             the ECA Data Model part can explain in more details.
>>>>
>>>>         March Blanchet on
>>>>         draft-ietf-supa-policy-based-management-framework:
>>>>
>>>>             - larger comment: I’m not sure what to do with this
>>>>             document. It looks like a large wish list of features.
>>>>             I guess I’m probably too used to
>>>>             implementation/protocol details. I guess I will wait
>>>>             until to see the actual protocol/yang models. 
>>>>
>>>>
>>>> Let's analyze the situation:
>>>> I don't consider those reviews (btw a single one the DM, none on 
>>>> the IM) as "substantive progress".
>>>> I don't see interest from YANG module authors, ready to reuse the 
>>>> SUPA YANG constructs.
>>>> Being a year late according to the charter milestones, the window 
>>>> of opportunity to produce reusable work has been closing rapidly.
>>>> I believe that SUPA had multiple chances to make it happen, and 
>>>> failed to deliver.
>>>> With this in mind, I don't see how I should conclude anything else 
>>>> than this WG will be closing at IETF 99.
>>>>
>>>> Regards, Benoit (OPS AD)
>>>>>
>>>>> Dear supa’rs,
>>>>>
>>>>> We have cancelled our formal meeting in Prague. This decision was 
>>>>> taken based on a proposed plan to focus effort on completing the 
>>>>> existing WG items and prepare for closure of the supa working 
>>>>> group sometime between IETF 99 and 100. A plan that is yet to be 
>>>>> approved by Benoit.
>>>>>
>>>>> During the last working group meeting Benoit stated:
>>>>>
>>>>> “the WG will be closed at IETF 99 (Prague, 16 July) unless there 
>>>>> is substantive progress on the Information Model and especially on 
>>>>> the Data Model draft by one month before the Prague meeting.”
>>>>>
>>>>> The authors of the Data Model and Information Model I-Ds did 
>>>>> submit new versions but we only received one review. However, 
>>>>> Nevil and I are working with the IM and DM authors to gather 
>>>>> reviewers in preparation of Last Call. Essentially, we are working 
>>>>> to prep folks who would be able to review the documents we Last 
>>>>> Call, ideally these should be from policy/yang implementers.
>>>>>
>>>>> The Framework I-D has also received a review which is positive, 
>>>>> and I am in the process of reviewing the document myself to also 
>>>>> help prepare the document for Last Call. Additionally, the 
>>>>> Applicability I-D (a non-working group document) received a review 
>>>>> which is also useful.
>>>>>
>>>>> We have also seen notifications from other SDOs following supa, 
>>>>> specifically:
>>>>>
>>>>> - ONUG: Investigating I2NSF combined with the SUPA data model and 
>>>>> framework
>>>>>
>>>>> - ETSI Experiential Networked Intelligence (ENI): New initiative 
>>>>> defining context aware networking systems, SUPA was identified as 
>>>>> a key building block
>>>>>
>>>>> - MEF Open Lifecycle Service Orchestrator (LSO): Using SUPA 
>>>>> between functional components
>>>>>
>>>>> However, the indication from ONUG, ETSI and MEF does not 
>>>>> materially change the situation of SUPA but it does demonstrate 
>>>>> wider interest in our work, and at least some responsibility for 
>>>>> supa/IETF to complete it (if possible). If you are aware of 
>>>>> near-term implementations now is the time to highlight them.
>>>>>
>>>>> Again, we felt we did not need a WG meeting in Prague to progress 
>>>>> the working group I-Ds, and given the IETF agenda coordination 
>>>>> call (is today) we had to cancel the supa WG session request ASAP, 
>>>>> and unfortunately before we had a chance to communicate the 
>>>>> current situation to the rest of the working group. Apologies for 
>>>>> any surprise when you saw the cancellation notification, and the 
>>>>> lack of opportunity for wider discussion.
>>>>>
>>>>> As mentioned our proposed plan has been submitted to Benoit and is 
>>>>> yet to be approved, therefore we will wait for his thoughts and 
>>>>> ultimate decision.
>>>>>
>>>>> The SUPA Chairs would sincerely like to thank everyone for their 
>>>>> participation and especially the authors of I-Ds for their efforts.
>>>>>
>>>>> BR, Nevil and Dan.
>>>>>
>>>>
>>>> _______________________________________________
>>>> SUPA mailing list
>>>> SUPA@ietf.org <mailto:SUPA@ietf.org>
>>>> https://www.ietf.org/mailman/listinfo/supa
>>>
>>> --
>>> "Esta vez no fallaremos, Doctor Infierno"
>>>
>>> Dr Diego R. Lopez
>>> Telefonica I+D
>>> http://people.tid.es/diego.lopez/
>>>
>>> e-mail: diego.r.lopez@telefonica.com
>>> Tel:    +34 913 129 041
>>> Mobile: +34 682 051 091
>>> ----------------------------------
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>> Este mensaje y sus adjuntos se dirigen exclusivamente a su 
>>> destinatario, puede contener información privilegiada o confidencial 
>>> y es para uso exclusivo de la persona o entidad de destino. Si no es 
>>> usted. el destinatario indicado, queda notificado de que la lectura, 
>>> utilización, divulgación y/o copia sin autorización puede estar 
>>> prohibida en virtud de la legislación vigente. Si ha recibido este 
>>> mensaje por error, le rogamos que nos lo comunique inmediatamente 
>>> por esta misma vía y proceda a su destrucción.
>>>
>>> The information contained in this transmission is privileged and 
>>> confidential information intended only for the use of the individual 
>>> or entity named above. If the reader of this message is not the 
>>> intended recipient, you are hereby notified that any dissemination, 
>>> distribution or copying of this communication is strictly 
>>> prohibited. If you have received this transmission in error, do not 
>>> read it. Please immediately reply to the sender that you have 
>>> received this communication in error and then delete it.
>>>
>>> Esta mensagem e seus anexos se dirigem exclusivamente ao seu 
>>> destinatário, pode conter informação privilegiada ou confidencial e 
>>> é para uso exclusivo da pessoa ou entidade de destino. Se não é 
>>> vossa senhoria o destinatário indicado, fica notificado de que a 
>>> leitura, utilização, divulgação e/ou cópia sem autorização pode 
>>> estar proibida em virtude da legislação vigente. Se recebeu esta 
>>> mensagem por erro, rogamos-lhe que nos o comunique imediatamente por 
>>> esta mesma via e proceda a sua destruição
>>
>
> --
> "Esta vez no fallaremos, Doctor Infierno"
>
> Dr Diego R. Lopez
> Telefonica I+D
> http://people.tid.es/diego.lopez/
>
> e-mail: diego.r.lopez@telefonica.com
> Tel:    +34 913 129 041
> Mobile: +34 682 051 091
> ----------------------------------
>
>
> ------------------------------------------------------------------------
>
> Este mensaje y sus adjuntos se dirigen exclusivamente a su 
> destinatario, puede contener información privilegiada o confidencial y 
> es para uso exclusivo de la persona o entidad de destino. Si no es 
> usted. el destinatario indicado, queda notificado de que la lectura, 
> utilización, divulgación y/o copia sin autorización puede estar 
> prohibida en virtud de la legislación vigente. Si ha recibido este 
> mensaje por error, le rogamos que nos lo comunique inmediatamente por 
> esta misma vía y proceda a su destrucción.
>
> The information contained in this transmission is privileged and 
> confidential information intended only for the use of the individual 
> or entity named above. If the reader of this message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution or copying of this communication is strictly prohibited. 
> If you have received this transmission in error, do not read it. 
> Please immediately reply to the sender that you have received this 
> communication in error and then delete it.
>
> Esta mensagem e seus anexos se dirigem exclusivamente ao seu 
> destinatário, pode conter informação privilegiada ou confidencial e é 
> para uso exclusivo da pessoa ou entidade de destino. Se não é vossa 
> senhoria o destinatário indicado, fica notificado de que a leitura, 
> utilização, divulgação e/ou cópia sem autorização pode estar proibida 
> em virtude da legislação vigente. Se recebeu esta mensagem por erro, 
> rogamos-lhe que nos o comunique imediatamente por esta mesma via e 
> proceda a sua destruição