[I2nsf] 答复: questions about some terminologies defined by draft-ietf-i2nsf-terminology-00

2016-06-19 Thread Xialiang (Frank)
Hi John, My comments inline: 发件人: I2nsf [mailto:i2nsf-boun...@ietf.org] 代表 John Strassner 发送时间: 2016年6月19日 13:02 收件人: Linda Dunbar; John Strassner 抄送: I2NSF@ietf.org; Dacheng Zhang; DIEGO LOPEZ GARCIA (diego.r.lo...@telefonica.com); Susan Hares 主题: Re: [I2nsf] questions about some terminologies

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-19 Thread Rafa Marin Lopez
Dear Sowmini: > El 19 jun 2016, a las 23:45, Sowmini Varadhan > escribió: > > On (06/19/16 20:06), Rafa Marin Lopez wrote: >>> I had a related question Section 8.2, #2 as well: is the first >>> data packet in the clear or not? If it is not in the clear, how >>>

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-19 Thread Sowmini Varadhan
On (06/19/16 20:06), Rafa Marin Lopez wrote: > > I had a related question Section 8.2, #2 as well: is the first > > data packet in the clear or not? If it is not in the clear, how > > can you determine the flow in the general case? > > [Rafa] Please be aware that, if ESP (AH does not encrypt

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-19 Thread Rafa Marin Lopez
Dear Sowmini: Thanks for asking about our I-D. > El 17 jun 2016, a las 23:26, Sowmini Varadhan > escribió: > > On (06/17/16 20:50), Linda Dunbar wrote: >> - Section 8.1: Page 11: Bullet 1: >> You stated that the node sends the first packet to Controller for

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-19 Thread Rafa Marin Lopez
Dear Linda: Thank you for reviewing our I-D. Please see my comments inline. > El 17 jun 2016, a las 22:50, Linda Dunbar escribió: > > Rafa, > > Quickly reading through your draft, I have a few questions: > > - Do you mean that the (SDN) controller will be

Re: [I2nsf] Help on turning I2NSF Information Models to Data Models

2016-06-19 Thread Aldo Basile
Dear Susan, further answers to your answers... I listed the condition match algorithms we support, tried to clarify the custom match, exposed the risk for non-interoperability in case of too much obscurity for custom match algorithms, and added some more hints on the resolution strategies.