Subject: [netmod] Comments - I-D Action: draft-ietf-netmod-acl-model-00.txt

From: "Sachin Jain (EABU)" <[email-masked]>
Date: Sun, 14 Dec 2014 04:29:11 +0000

Dear Authors

Couple of initial comments on the draft are:

1. We to include a few more modules (or submodules) in the base draft.
IMO, these should be applicable to most of the ACL implementations thats
why I think they should be part of base ACL definition.

   At a high level, following represents what could be new sub-modules
under ietf-acl.

module: ietf-acl
    +-- access-lists
    |
    +-- policers
    |
    +-- bind-points
    |
    +-- company-proprietary-objects

container policers {
   Description
   "Defines a list of policers. Each policer defines a set of policing
parameters to rate limit or meter the traffic. One or more ACE can refer
to a particular policer. This could be above the current way of defining
policing parameters in the draft."
}

container bind-points {
    description
    "Defines list of bind points in the data path where the access-list is
applied to take affect. Each bind point in uniquely defined by the ACL,
the forwarding element that its applied to and along with its direction.
For eg. an ACL could be bound to interface or a FIB in input or output
direction. This should be extendible to include other company proprietary
forwarding elements."
}

2.

Section 3.1 - Can we add a field 'operand' at ACE/ACL/match level? That
will make the model very generic in terms of match expression.

In the current form, its hardcoded to AND among matches for a ACE and OR
among ACE for a ACL.

Regards
Sachin

On 11/12/14 1:06 AM, "[email-masked]" <[email-masked]>
wrote:

>
>A New Internet-Draft is available from the on-line Internet-Drafts
>directories.
> This draft is a work item of the NETCONF Data Modeling Language Working
>Group of the IETF.
>
>        Title           : Network Access Control List (ACL) YANG Data
>Model
>        Authors         : Dean Bogdanovic
>                          Kiran Agrahara Sreenivasa
>                          Lisa Huang
>                          Dana Blair
>	Filename        : draft-ietf-netmod-acl-model-00.txt
>	Pages           : 23
>	Date            : 2014-11-10
>
>Abstract:
>   This document describes a data model of Access Control List (ACL)
>   basic building blocks.
>
>
>The IETF datatracker status page for this draft is:
>https://datatracker.ietf.org/doc/draft-ietf-netmod-acl-model/
>
>There's also a htmlized version available at:
>http://tools.ietf.org/html/draft-ietf-netmod-acl-model-00
>
>
>Please note that it may take a couple of minutes from the time of
>submission
>until the htmlized version and diff are available at tools.ietf.org.
>
>Internet-Drafts are also available by anonymous FTP at:
>ftp://ftp.ietf.org/internet-drafts/
>
>_______________________________________________
>netmod mailing list
>[email-masked]
>https://www.ietf.org/mailman/listinfo/netmod