Interface to Network Security Functions (I2NSF)

Slides:



Advertisements
Similar presentations
IETF Calsify.
Advertisements

Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
CCAMP Working Group Online Agenda and Slides at: Tools start page:
IETF 90: NetExt WG Meeting. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet- Draft.
SIPCLF Working Group Spencer Dawkins Theo Zourzouvillys IETF 76 – November 2009 Hiroshima, Japan.
EAP Method Update (EMU) IETF-79 Chairs Joe Salowey Alan DeKok.
CCAMP Working Group Online Agenda and Slides at: Data tracker:
Authentication and Authorization for Constrained Environment (ACE) WG Chairs: Kepeng Li, Hannes
IETF 89, LONDON, UK LISP Working Group. 2 Agenda and slides:  lisp.html Audio Stream 
IPR WG IETF 62 Minneapolis. IPR WG: Administrivia Blue sheets Scribes Use the microphones Note Well.
IETF #81 - NETCONF WG session 1 NETCONF WG IETF 81, Quebec City, Canada MONDAY, July 25, Bert Wijnen Mehmet Ersue.
OPSREA Open Meeting Area Directors: Dan Romascanu and Ron Bonica Monday, March 28, 2011 Morning Session, 10:30 – 11:30, Room Barcelona/Berlin Discussion.
IETF #82 - NETCONF WG session 1 NETCONF WG IETF 82, Taipei, Taiwan TUESDAY, November 15, Afternoon Session III Bert Wijnen Mehmet Ersue.
Interface to Network Security Functions (I2NSF) Chairs: Linda Dunbar Adrian Farrel IETF 95, Thursday April 7, 2016,
Alternatives to Content Classification for Operator Resource Deployment (ACCORD) BOF Chairs: Gonzalo Camarillo & Pete Resnick.
OPSAWG chairs: Scott Bradner Christopher Liljenstolpe.
1 Chairs: Pascal Thubert Thomas Watteyne Mailing list: Jabber: Etherpad for minutes:
Interface to Network Security Functions (I2NSF) Chairs: Linda Dunbar Adrian Farrel IETF 94, Tuesday November 3, 2015,
Interface to Network Security Functions (I2NSF) Chairs: Linda Dunbar Adrian Farrel IETF 96, Thursday July 21, 2016, 16:20-18:20.
Agenda Wednesday, July 29, :00 – 15:00 Congresshall B Please join the Jabber room: LEDBAT WG IETF 75.
Thu 30 July 2009SIDR IETF 75 Stockholm, SE1 SIDR Working Group IETF 75 Stockholm, SE THURSDAY, July 30, 2009.
STIR Secure Telephone Identity Revisited
Network Slicing (netslicing) BoF
WG Chairs Forum Wednesday 29 March 2017.
Agenda Alexey, Yoav, Tobias July 2012
LMAP WG IETF 97 – Seoul, SK November 17, 2016 Dan Romascanu Jason Weil
Layer Independent OAM Management in the Multi-Layer Environment LIME
NETCONF WG IETF 93 - Prague, Czech Republic THURSDAY, July 23, 2015
NOTE WELL Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
Chairs: Derek Atkins and Hannes Tschofenig
Gunter Van de Velde Kiran Kumar Chitimaneni Warren Kumari
IETF 95 NETMOD Working Group Buenos Aires April 4, 2016
SIPREC WG, Interim virtual meeting , GMT-4
Extensible Messaging and Presence Protocol (XMPP) WG
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
MODERN Working Group IETF 97 November 14, 2016.
CAPWAP Working Group IETF 73 Minneapolis 18 Nov 2008, 17:10-18:10
Network Virtualization Overlays (NVO3) Working Group IETF 97, November 2016, Seoul Chairs: Secretary: Sam Aldrin Matthew Bocci.
Joint OPS Area and OPSAWG Meeting
P2PSIP WG IETF 84 P2PSIP WG Agenda & Status Tuesday, July 31st, 2012
IETF 98 NETMOD Working Group
Kathleen Moriarty, Trusted Execution Environment Provisioning (TEEP) BoF IETF-100 November 2017 Chairs: Nancy Cam-Winget,
SPRING IETF-98 Tuesday, March 28.
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
Singapore – IETF 100 – November 2017
Thursday, 20th of July 2017.
16th November 2016 Gorry Fairhurst (via webrtc) David Black WG chairs
Multiple Interfaces (MIF) WG
JSON Object Signing and Encryption (JOSE) Working Group
SIPREC WG, Interim Meeting , GMT/UTC
Flexible Ethernet (Side meeting)
Joint Ops Area and OpsA WG
Joint NTP and TICTOC Meeting
Chairs: Samita Chakrabarti, Gabriel Montenegro
IETF DTN Working Group July 17th, 2017 Chairs:
Web Authorization Protocol (OAuth) WG Chairs: Hannes Tschofenig, Rifaat Shekh-Yusef, Security AD: Roman.
20th July 2017 Gorry Fairhurst Wes Eddy David Black WG chairs
DetNet WG Chairs: Lou Berger
Audio/Video Transport Core Maintenance (AVTCORE)
Web Authorization Protocol (OAuth) WG Chairs: Hannes Tschofenig, Rifaat Shekh-Yusef, Security AD: Roman.
SIPREC WG, Interim virtual meeting , GMT
Interface to Network Security Functions (I2NSF)
TEAS CCAMP MPLS PCE Working Groups
SIPBRANDY Chair Slides
Multiple Interfaces (MIF) WG
Interface to Network Security Functions (I2NSF)
Scott Bradner & Martin Thomson
NETCONF WG IETF 80, Prague, Czech Republic March 31,
IETF 100 Singapore MBONED.
Audio/Video Transport Extensions (avtext) Working Group
Presentation transcript:

Interface to Network Security Functions (I2NSF) IETF 99, Tuesday, July 18, 13:30-15:30 Chairs: Linda Dunbar <linda.dunbar@huawei.com> Adrian Farrel <adrian@olddog.co.uk>

Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made within the context of an IETF activity is considered an "IETF Contribution". Such statements include oral statements in IETF sessions, as well as written and electronic communications made at any time or place, which are addressed to: The IETF plenary session The IESG, or any member thereof on behalf of the IESG Any IETF mailing list, including the IETF list itself, any working group or design team list, or any other list functioning under IETF auspices Any IETF working group or portion thereof Any Birds of a Feather (BOF) session The IAB or any member thereof on behalf of the IAB The RFC Editor or the Internet-Drafts function All IETF Contributions are subject to the rules of RFC 5378 and RFC 8179. Statements made outside of an IETF session, mailing list or other function, that are clearly not intended to be input to an IETF activity, group or function, are not IETF Contributions in the context of this notice.  Please consult RFC 5378 and RFC 8179 for details. A participant in any IETF activity is deemed to accept all IETF rules of process, as documented in Best Current Practices RFCs and IESG Statements. A participant in any IETF activity acknowledges that written, audio and video records of meetings may be made and may be available to the public.

Administrivia Charter: http://datatracker.ietf.org/wg/i2nsf/charter/ Mailing List: https://www.ietf.org/mailman/listinfo/i2nsf Minutes Taker: Jabber Scribe: Blue Sheets Please fill them in and circulate They are now scanned and published online

Reminders Agenda: Meeting materials, slides, audio streams Jabber room https://datatracker.ietf.org/meeting/99/agenda/i2nsf/ Meeting materials, slides, audio streams http://tools.ietf.org/agenda/99/ Minutes Takers (Etherpad): http://etherpad.tools.ietf.org:9000/p/notes-ietf-99-i2nsf?useMonospaceFont=true Jabber room i2nsf@jabber.ietf.org Wiki and issue tracker https://tools.ietf.org/wg/i2nsf/ State your name clearly and slowly at the mic

Agenda Administrivia - Chairs [5 mins: 5/120] IETF 99 I2NSF Hackathon Report [5 mins: 10/120] I2NSF Capability Informational Model [10 mins: 20/120] draft-xibassnez-i2nsf-capability-02 - Presenter: Frank Xia I2NSF Applicability (to fulfill the milestone) [10 mins: 30/120] draft-jeong-i2nsf-applicability-01 - Presenter: Jaehoon Paul Jeong NSF Facing Interface Information/Data Model [40 mins: 70/120] draft-zhang-i2nsf-info-model-monitoring-04 [5 mins] - Presenter Henk Birkholz draft-hares-i2nsf-capability-data-model-03 [5 mins] - Presenter: Sue Hares draft-kim-i2nsf-nsf-facing-interface-data-model-02 [10 mins] - Presenter: Jaehoon Paul Jeong draft-hyun-i2nsf-registration-interface-im-02 & draft-hyun-i2nsf-registration-interface-dm-01 [10 mins] - Presenter: Sangwon Hyun draft-abad-i2nsf-sdn-ipsec-flow-protection-03 [10 min] - Presenter: Gabriel Lopez Client Facing Interface information/data [30 mins: 100/120] draft-ietf-i2nsf-client-facing-interface-req-02 [5 mins] - Presenter: Nabil draft-kumar-i2nsf-client-facing-interface-im-03 [10 mins] - Presenter: Nabil draft-xia-i2nsf-security-policy-object-01 [5 mins] - Presenter: Qiushi Lin draft-jeong-i2nsf-consumer-facing-interface-dm-03 [10 mins] - Presenter: Jaehoon Paul Jeong Others : [10 min: 120/120] draft-hyun-i2nsf-nsf-triggered-steering-03 [10 mins] - Presenter: Sangwon Hyun

Milestones Achieved RFC 8192 Final stage: draft-ietf-i2nsf-problem-and-use-cases: congratulations to the authors WGLC completed (new revision needed): draft-ietf-i2nsf-framework Stay current as WG document until WG finishes its milestone draft-ietf-i2nsf-terminology draft-ietf-i2nsf-gap-analysis Decision point if following is ready for WGLC? draft-ietf-i2nsf-client-facing-interface-req WG adoption candidates: draft-jeong-i2nsf-applicability-01 draft-xibassnez-i2nsf-capability-02 draft-kumar-i2nsf-client-facing-interface-im-03 draft-hares-i2nsf-capability-data-model-03 draft-kim-i2nsf-nsf-facing-interface-data-model-02

From our Model Discussion – A few thoughts Susan Hares

Aligning Data Model and Info Models Informational Models are blueprints for Data models Two types of alignment: Exact or subset Understanding which is your core concept in blueprint (data model) Group your data models around core concept using simple concept Provide easy to understand modules

Blueprints are the basis for complex structures But coders start with building a portion of the information model - just like you start by building a large building.

It is important to verify the Blueprint If data model = information model, you can check the data model with tools. Issues: You must implement all the data model, and it may create a broken data model at a large cost.

Recommendation Verify the complete information model, Prague Castle Verify the complete information model, Build a portion of the model in stages Simple, then more complex. Hackathon code, then product code. Base everything on key model (Capability)

Base everything on our key model I2NSF Capability model is our key model

Why + How of DM Grouping Simple subsets help you get data models accepted and deployed. Data catalog and registry concept helps you group simple data models into a clear subset of informational model draft-clacla-netmod-model-catalog-00  draft-openconfig-netmod-model-catalog-02

Information Model & Data Model draft-kumar-i2nsf-client-facing-interface-im-03 draft-hyun-i2nsf-registration-interface-im-02 draft-xibassnez-i2nsf-capability-02 draft-zhang-i2nsf-info-model-monitoring-04 draft-xia-i2nsf-security-policy-object-01 Per RFC 3444: IMs are primarily useful for designers to describe the managed environment, for operators to understand the modeled objects, and for implementors as a guide to the functionality that must be described and coded in the DMs. Data Model: draft-kim-i2nsf-nsf-facing-interface-data-model-02 draft-hares-i2nsf-capability-data-model-03 Base Model (subset) draft-jeong-i2nsf-consumer-facing-interface-dm-02 draft-hyun-i2nsf-registration-interface-dm-01 draft-hong-i2nsf-monitoring-data-model-00

Don’t Forget the Wiki etc. The working group tools page has resources for you https://tools.ietf.org/wg/i2nsf/ Includes an issue tracker Includes a wiki You can (should) use these to help you with your work Anyone can add anything relevant