Subject: [netmod] On the road towards a YANG data model for Stateless Packet Filters

From: "Alexander Clemm (alex)" <[email-masked]>
Date: Tue, 19 Nov 2013 21:43:45 +0000

Hi,

at the IETF 88 in Vancouver, we were going to present an update on the YANG data model for stateless packet filter configuration - draft-huang-netmod-acl-03.txt, but unfortunately the session ran out of time before.  Therefore we wanted to give a quick update on the mailer.

Just to recap, the draft presents an extensible and modular framework for management of stateless packet filters (SPFs).  IP, MAC, and ARP are addressed as initial SPF types, more can be defined. We presented the first draft of this a year ago in Atlanta, then an update in Orlando.  There was good support for this expressed by the working group. A number of changes have been incorporated into subsequent revisions based on feedback from the group, including an explanation of how SPF chains would be supported, and (new in this latest revision 03) refactoring this to stateless packet filters (beyond ACLs).

Our ask is to adopt this as a standards-track working group item. We believe there are several strong reasons for this:  SPFs and ACLs are an important part of device configuration.  They are needed both by administrators and by applications.  Also, many SDN-type applications involve control loops involving manipulation of stateless packet filters; in the context of I2RS (which looks like it will leverage YANG) and Open Daylight (which does today) this need been repeatedly stated.  Clearly, standardization is needed to enable this and, if not championed by the IETF, may well happen outside. Since we have been discussing this data model for a while, we believe that it is time for the working group to reach a decision.

Please let us know if you have any questions.  We would also like to ask you to please speak up and let the working group know if you believe that this should be pursued further.

Thanks
--- Lisa, Alex, Andy