I think I agree with Frank. The confusion is caused by the 'I2NSF system’.
Maybe we should change the definition in the terminology draft to Capability
Layer: Defines an abstraction layer that exposes a set of capabilities of
the NSF?

发件人:  I2nsf <[email protected]> on behalf of "Xialiang (Frank)"
<[email protected]>
日期:  2016年6月16日 星期四 上午11:47
至:  Linda Dunbar <[email protected]>, John Strassner
<[email protected]>, Susan Hares <[email protected]>, "DIEGO LOPEZ GARCIA
([email protected])" <[email protected]>
抄送:  "[email protected]" <[email protected]>
主题:  [I2nsf] 答复: questions about some terminologies defined by
draft-ietf-i2nsf-terminology-00

Hi Linda,
Frankly, I don’t see the essential difference for the meaning of terminology
“capability” between  them.  We just need to make some modification in two
places to keep consistence.
We can do it during the update of I2NSF terminology draft.
 
B.R.
Frank
 

发件人: I2nsf [mailto:[email protected]] 代表 Linda Dunbar
发送时间: 2016年6月15日 23:40
收件人: John Strassner; Susan Hares; DIEGO LOPEZ GARCIA
([email protected])
抄送: [email protected]
主题: [I2nsf] questions about some terminologies defined by
draft-ietf-i2nsf-terminology-00
 
Dear Authors:
 
The term “Capability Layer” defined by the “draft-ietf-i2nsf-terminology-00”
carries different  meaning than the “Capability Layer” used by the I2NSF
charter. 
 
“draft-ietf-i2nsf-terminology-00”:
Capability: Defines a set of features that are available from a managed
entity (see also I2NSF Capability).
 
Capability Layer: Defines an abstraction layer that exposes a set of
capabilities of the I2NSF system.
 
I2NSF Charter: 
I2NSF will specify interfaces at two functional levels for the control and
monitoring of network security functions:
The I2NSF Capability Layer specifies how to control and monitor NSFs at a
functional implementation level. The term "Functional Implementation" is
used to emphasize that the rules (for control and monitor) of NSFs have to
be implementable by most NSFs. I2NSF will standardize a set of interfaces by
which a security controller can invoke, operate, and monitor NSFs.

The I2NSF Service Layer defines how clients' security policies may be
expressed to a security controller. The controller implements its policies
according to the various capabilities provided by the I2NSF Capability
Layer. The I2NSF Service Layer also allows the client to monitor the client
specific policies.
 
If we use the definitions by the “draft-ietf-i2nsf-terminology-00”, we
should create a different terminology to represent the “South bound
Interface” between Controller and NSF.
 
Thanks, Linda
 
 
 
_______________________________________________ I2nsf mailing list
[email protected] https://www.ietf.org/mailman/listinfo/i2nsf

_______________________________________________
I2nsf mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/i2nsf

Reply via email to