Subject: [netmod] draft-ietf-netmod-acl-model-00.txt

From: <[email-masked]>
Date: Mon, 17 Nov 2014 15:59:21 +0000

Dear Authors,

I just had a look at this draft which sounds important for us.
Please find some comments, I did not take time to review comments already done on the list, so sorry for the potential overlap.

The current structure is a good base but I would add the followings :

For IP filters :
- dscp matching using a list of dscp rather than just a value
- Requires IP fragment flags support
- Requires IP packet length matching as a range
- Requires TCP flags matching
- Requires ICMP code matching
- Requires IPv6 extension header matching

For MAC filters :
- Requires dot1p matching using list
- Requires etype matching
- requires vlan tag matching (inner or outer)

In term of actions, I would be in favor of having policing (rate-limiting) as part of standard. Note that BGP Flowspec (RFC 5575) is standard and supports this, I think YANG ACL must at least be aligned with this.

There are some typo issues :
+--:(hiearchical-policer)
         +--rw hierarchitacl-policer?   string

Best Regards,

Stephane

-----Original Message-----
From: I-D-Announce [mailto:[email-masked]] On Behalf Of [email-masked]
Sent: Tuesday, November 11, 2014 20:36
To: [email-masked]
Cc: [email-masked]
Subject: I-D Action: draft-ietf-netmod-acl-model-00.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.
 This draft is a work item of the NETCONF Data Modeling Language Working Group of the IETF.

        Title           : Network Access Control List (ACL) YANG Data Model
        Authors         : Dean Bogdanovic
                          Kiran Agrahara Sreenivasa
                          Lisa Huang
                          Dana Blair
	Filename        : draft-ietf-netmod-acl-model-00.txt
	Pages           : 23
	Date            : 2014-11-10

Abstract:
   This document describes a data model of Access Control List (ACL)
   basic building blocks.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-netmod-acl-model/

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-netmod-acl-model-00

Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.