Hi Jenny (and co-authors),

overall, I think it was a good decision to move the authentication part into a 
separate draft — that improves clarity and separation of concerns.

Some additional remarks:
--
Terminology: The terms "public peering," "private peering," and "PNI" are used 
throughout the draft, but I couldn't find formal definitions. In particular, 
"PNI" appears in Sections 4.1 and 6.3.3 and seems to be used interchangeably 
with "private peering" in some places. It would be helpful to define these 
terms explicitly to avoid ambiguity.
--
Section 4.1: Step 5 refers to PeeringDB as the source of peering information. 
In practice, such information may come from multiple sources (e.g., IXP member 
lists, IXP AS-SETs, direct communication between peering managers). I suggest 
making the information source abstract here, with the only requirement being a 
shared identifier for the peering location and where to look it up (e.g., 
PeeringDB or whatever pops up in the future).
--
Broken structure (missing line break): "Optional: checks traffic levels, prefix 
limit counters, other desired internal checks. 2. ADD SESSIONS (SERVER BATCHED 
RESPONSE)"
--
Section 6: This section includes implementation-specific guidance (e.g., fuzz 
testing endpoints, internal system access restrictions). These may be out of 
scope for the draft and could benefit from clarification or removal.
--

Great to see progress on the document.

Best regards,
Matthias

On 09.07.25, 17:20, "Jenny Ramseyer" <ramseyer=40meta....@dmarc.ietf.org> wrote:
Hello GROW WG,

Based on the feedback we received at the previous IETF meetings, we (Arturo, 
Carlos, Matt, Q, Tom, and I) have posted a new version of the Peering API 
draft: https://datatracker.ietf.org/doc/draft-ietf-grow-peering-api/01/ 
<https://datatracker.ietf.org/doc/draft-ietf-grow-peering-api/01/><https://datatracker.ietf.org/doc/draft-ietf-grow-peering-api/01/%3e>

Of note: We have changed the authentication method of the API to support both 
standard OAuth, and RPKI Attested OAuth. The details of RPKI Attested OAuth 
have been split into a new draft: 
https://datatracker.ietf.org/doc/html/draft-blahaj-grow-rpki-oauth 
<https://datatracker.ietf.org/doc/html/draft-blahaj-grow-rpki-oauth><https://datatracker.ietf.org/doc/html/draft-blahaj-grow-rpki-oauth%3e>

Arturo will present Peering API at the next grow and opsarea meetings at 
IETF123.

Thank you all for the feedback on our draft.

Jenny







_______________________________________________
GROW mailing list -- grow@ietf.org
To unsubscribe send an email to grow-le...@ietf.org

Reply via email to