Subject: Re: [netmod] Comments - I-D Action: draft-ietf-netmod-acl-model-00.txt

From: "Dana Blair (dblair)" <[email-masked]>
Date: Tue, 13 Jan 2015 04:29:28 +0000

Hi Sachin,

Comments below.

On 12/13/14, 11:29 PM, "Sachin Jain (EABU)" <[email-masked]> wrote:

>Dear Authors
>
>Couple of initial comments on the draft are:
>
>1. We to include a few more modules (or submodules) in the base draft.
>IMO, these should be applicable to most of the ACL implementations thats
>why I think they should be part of base ACL definition.
>
>   At a high level, following represents what could be new sub-modules
>under ietf-acl.
>
>module: ietf-acl
>    +-- access-lists
>    |
>    +-- policers
>    |
>    +-- bind-points
>    |
>    +-- company-proprietary-objects
>
>container policers {
>   Description
>   "Defines a list of policers. Each policer defines a set of policing
>parameters to rate limit or meter the traffic. One or more ACE can refer
>to a particular policer. This could be above the current way of defining
>policing parameters in the draft."
>}
>
>container bind-points {
>    description
>    "Defines list of bind points in the data path where the access-list is
>applied to take affect. Each bind point in uniquely defined by the ACL,
>the forwarding element that its applied to and along with its direction.
>For eg. an ACL could be bound to interface or a FIB in input or output
>direction. This should be extendible to include other company proprietary
>forwarding elements."
>}

The ideas above are interesting but should be published in a seperate draft
that augments the ACL model.  You can see examples in the
existing draft.

>
>2.
>
>Section 3.1 - Can we add a field 'operand' at ACE/ACL/match level? That
>will make the model very generic in terms of match expression.
>
>In the current form, its hardcoded to AND among matches for a ACE and OR
>among ACE for a ACL.

We will consider adding this to the existing model but need to see an
example
augmentation.

thanks,
Dana

>
>Regards
>Sachin
>
>
>
>On 11/12/14 1:06 AM, "[email-masked]" <[email-masked]>
>wrote:
>
>>
>>A New Internet-Draft is available from the on-line Internet-Drafts
>>directories.
>> This draft is a work item of the NETCONF Data Modeling Language Working
>>Group of the IETF.
>>
>>        Title           : Network Access Control List (ACL) YANG Data
>>Model
>>        Authors         : Dean Bogdanovic
>>                          Kiran Agrahara Sreenivasa
>>                          Lisa Huang
>>                          Dana Blair
>>	Filename        : draft-ietf-netmod-acl-model-00.txt
>>	Pages           : 23
>>	Date            : 2014-11-10
>>
>>Abstract:
>>   This document describes a data model of Access Control List (ACL)
>>   basic building blocks.
>>
>>
>>The IETF datatracker status page for this draft is:
>>https://datatracker.ietf.org/doc/draft-ietf-netmod-acl-model/
>>
>>There's also a htmlized version available at:
>>http://tools.ietf.org/html/draft-ietf-netmod-acl-model-00
>>
>>
>>Please note that it may take a couple of minutes from the time of
>>submission
>>until the htmlized version and diff are available at tools.ietf.org.
>>
>>Internet-Drafts are also available by anonymous FTP at:
>>ftp://ftp.ietf.org/internet-drafts/
>>
>>_______________________________________________
>>netmod mailing list
>>[email-masked]
>>https://www.ietf.org/mailman/listinfo/netmod
>
>_______________________________________________
>netmod mailing list
>[email-masked]
>https://www.ietf.org/mailman/listinfo/netmod