Ok. I think your definition works.^_^ Dacheng
发件人: John Strassner <[email protected]> 日期: 2016年6月16日 星期四 下午2:05 至: dacheng de <[email protected]>, John Strassner <[email protected]> 抄送: "Xialiang (Frank)" <[email protected]>, Linda Dunbar <[email protected]>, Susan Hares <[email protected]>, "DIEGO LOPEZ GARCIA ([email protected])" <[email protected]>, "[email protected]" <[email protected]> 主题: Re: [I2nsf] 答复: questions about some terminologies defined by draft-ietf-i2nsf-terminology-00 Hi Dacheng, I agree that "I2NSF system" is not well defined. Your definition is better, but it should apply for all NSFs (not 'the NSF'). In addition, the Capability Layer is not an abstraction layer, it a simply a collection of abstractions (the capabilities). So how about: Capability Layer: Defines the set of capabilities available to the Controller for the set of NSFs that the Controller manages. or Capability Layer: Defines the set of features available to the Controller for the set of NSFs that the Controller manages. regards, John On Wed, Jun 15, 2016 at 8:55 PM, Dacheng Zhang <[email protected]> wrote: > I think I agree with Frank. The confusion is caused by the 'I2NSF system’. > Maybe we should change the definition in the terminology draft to Capability > Layer: Defines an abstraction layer that exposes a set of capabilities of the > NSF? > > 发件人: I2nsf <[email protected]> on behalf of "Xialiang (Frank)" > <[email protected]> > 日期: 2016年6月16日 星期四 上午11:47 > 至: Linda Dunbar <[email protected]>, John Strassner > <[email protected]>, Susan Hares <[email protected]>, "DIEGO LOPEZ GARCIA > ([email protected])" <[email protected]> > 抄送: "[email protected]" <[email protected]> > 主题: [I2nsf] 答复: questions about some terminologies defined by > draft-ietf-i2nsf-terminology-00 > > Hi Linda, > Frankly, I don’t see the essential difference for the meaning of terminology > “capability” between them. We just need to make some modification in two > places to keep consistence. > We can do it during the update of I2NSF terminology draft. > > B.R. > Frank > > > 发件人: I2nsf [mailto:[email protected]] 代表 Linda Dunbar > 发送时间: 2016年6月15日 23:40 > 收件人: John Strassner; Susan Hares; DIEGO LOPEZ GARCIA > ([email protected]) > 抄送: [email protected] > 主题: [I2nsf] questions about some terminologies defined by > draft-ietf-i2nsf-terminology-00 > > Dear Authors: > > The term “Capability Layer” defined by the “draft-ietf-i2nsf-terminology-00” > carries different meaning than the “Capability Layer” used by the I2NSF > charter. > > “draft-ietf-i2nsf-terminology-00”: > Capability: Defines a set of features that are available from a managed entity > (see also I2NSF Capability). > > Capability Layer: Defines an abstraction layer that exposes a set of > capabilities of the I2NSF system. > > I2NSF Charter: > I2NSF will specify interfaces at two functional levels for the control and > monitoring of network security functions: > The I2NSF Capability Layer specifies how to control and monitor NSFs at a > functional implementation level. The term "Functional Implementation" is used > to emphasize that the rules (for control and monitor) of NSFs have to be > implementable by most NSFs. I2NSF will standardize a set of interfaces by > which a security controller can invoke, operate, and monitor NSFs. > > The I2NSF Service Layer defines how clients' security policies may be > expressed to a security controller. The controller implements its policies > according to the various capabilities provided by the I2NSF Capability Layer. > The I2NSF Service Layer also allows the client to monitor the client specific > policies. > > If we use the definitions by the “draft-ietf-i2nsf-terminology-00”, we should > create a different terminology to represent the “South bound Interface” > between Controller and NSF. > > Thanks, Linda > > > > _______________________________________________ I2nsf mailing list > [email protected]https://www.ietf.org/mailman/listinfo/i2nsf -- regards, John
_______________________________________________ I2nsf mailing list [email protected] https://www.ietf.org/mailman/listinfo/i2nsf
