Re: [Tsv-art] [netmod] TSV-ART review of draft-ietf-netmod-acl-model-19

Hi Allison,

Please see inline:

Thanks,
Sonal.

On Mon, Jul 9, 2018 at 12:43 PM, Allison Mankin <allison.mankin@gmail.com>
wrote:

> I've reviewed this document as part of the transport area review team's
> ongoing effort to review key IETF documents. These comments were written
> primarily for the transport area directors, but are copied to the
> document's authors for their information and to allow them to address any
> issues raised. When done at the time of IETF Last Call, the authors should
> consider this review together with any other last-call comments they
> receive. Please always CC tsv-art@… if you reply to or forward this
> review..
>
> Summary:
> Almost Ready (but I do have a question)
>
> Technicals:
> I reviewed that the details about TCP, UDP, ECN, and DSCP are consistent
> with the specifications, and that the specifications are accurate.  The
> model is accurate for these.
>
>
> Question:
>  What is the use case for ACLs referencing TCP PSH and URG flags, and
> sequence numbers?  These are not very predictable and I would think not
> very useful for the work that ACLs do, but I'm willing to be informed.
>
> [SA] The use case for this would be for applications that use ACL's and
> require high levels of security. Enumerating all the supported flags and
> their bit positions makes it clear to the user. These flags and the
> sequence number are all part of the TCP header.
> https://en.wikipedia.org/wiki/Transmission_Control_Protocol
>

>
>
>
> _______________________________________________
> netmod mailing list
> netmod@ietf.org
> https://www.ietf.org/mailman/listinfo/netmod
>
>