Subject: [IPsec] Fwd: [I2nsf] New Version Notification for draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt

From: Gabriel Lopez <[email-masked]>
Date: Tue, 2 May 2017 23:57:15 +0200

Dear all,

We have uploaded a new version of the draft Software-Defined Networking (SDN)-based IPsec Flow Protection (v02).
Comments are welcome!.

Best regards, Gabi.

> Inicio del mensaje reenviado:
> 
> De: GABRIEL LOPEZ MILLAN <[email-masked]>
> Asunto: [I2nsf] Fwd: New Version Notification for draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
> Fecha: 2 de mayo de 2017, 23:29:00 CEST
> Para: [email-masked]
> Cc: [email-masked], [email-masked]
> 
> 
> Hi all,
> 
> We have uploaded a new version of the i2nsf-sdn-ipsec-flow-protection. We have reviewed the main sections and added a first draft of a Yang model for IPsec management.
> 
> Comments are welcome.
> 
> Regards, Gabi.
> 
> ----- Mensaje reenviado de [email-masked] <mailto:[email-masked]> -----
> Fecha: Tue, 02 May 2017 09:01:12 -0700
>     De: [email-masked] <mailto:[email-masked]>
> Asunto: New Version Notification for draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
>   Para: Rafa Marin-Lopez <[email-masked] <mailto:[email-masked]>>, Rafael Lopez <[email-masked] <mailto:[email-masked]>>, Gabriel Lopez-Millan <[email-masked] <mailto:[email-masked]>>
> 
> A new version of I-D, draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
> has been successfully submitted by Rafa Marin-Lopez and posted to the
> IETF repository.
> 
> Name:                draft-abad-i2nsf-sdn-ipsec-flow-protection
> Revision:        02
> Title:                Software-Defined Networking (SDN)-based IPsec Flow Protection
> Document date:        2017-05-02
> Group:                Individual Submission
> Pages:                45
> URL:            https://www.ietf.org/internet-drafts/draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt <https://www.ietf.org/internet-drafts/draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt>
> Status:         https://datatracker.ietf.org/doc/draft-abad-i2nsf-sdn-ipsec-flow-protection/ <https://datatracker.ietf.org/doc/draft-abad-i2nsf-sdn-ipsec-flow-protection/>
> Htmlized:       https://tools.ietf.org/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02 <https://tools.ietf.org/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02>
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02 <https://datatracker.ietf.org/doc/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02>
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-abad-i2nsf-sdn-ipsec-flow-protection-02 <https://www.ietf.org/rfcdiff?url2=draft-abad-i2nsf-sdn-ipsec-flow-protection-02>
> 
> Abstract:
>    This document describes the use case of providing IPsec-based flow
>    protection by means of a Software-Defined Network (SDN) controller
>    (aka.  Security Controller) and establishes the requirements to
>    support this service.  It considers two main well-known scenarios in
>    IPsec: (i) gateway-to-gateway and (ii) host-to-host.  This document
>    describes a mechanism based on the SDN paradigm to support the
>    distribution and monitoring of IPsec information from a SDN
>    controller to one or several flow-based Network Security Function
>    (NSF).  The NSFs implement IPsec to protect data traffic between
>    network resources with IPsec.
> 
>    The document focuses in the NSF Facing Interface by providing models
>    for Configuration and State data model required to allow the Security
>    Controller to configure the IPsec databases (SPD, SAD, PAD) and IKE
>    to establish security associations with a reduced intervention of the
>    network administrator.  NOTE: State data model will be developed as
>    part of this work but it is still TBD.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
> 
> ----- Terminar mensaje reenviado -----
> 
> De: [email-masked]
> Asunto: New Version Notification for draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
> Fecha: 2 de mayo de 2017, 18:01:12 CEST
> Para: "Rafa Marin-Lopez" <[email-masked]>, "Rafael Lopez" <[email-masked]>, "Gabriel Lopez-Millan" <[email-masked]>
> 
> 
> 
> A new version of I-D, draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
> has been successfully submitted by Rafa Marin-Lopez and posted to the
> IETF repository.
> 
> Name:		draft-abad-i2nsf-sdn-ipsec-flow-protection
> Revision:	02
> Title:		Software-Defined Networking (SDN)-based IPsec Flow Protection
> Document date:	2017-05-02
> Group:		Individual Submission
> Pages:		45
> URL:            https://www.ietf.org/internet-drafts/draft-abad-i2nsf-sdn-ipsec-flow-protection-02.txt
> Status:         https://datatracker.ietf.org/doc/draft-abad-i2nsf-sdn-ipsec-flow-protection/
> Htmlized:       https://tools.ietf.org/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-abad-i2nsf-sdn-ipsec-flow-protection-02
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-abad-i2nsf-sdn-ipsec-flow-protection-02
> 
> Abstract:
>   This document describes the use case of providing IPsec-based flow
>   protection by means of a Software-Defined Network (SDN) controller
>   (aka.  Security Controller) and establishes the requirements to
>   support this service.  It considers two main well-known scenarios in
>   IPsec: (i) gateway-to-gateway and (ii) host-to-host.  This document
>   describes a mechanism based on the SDN paradigm to support the
>   distribution and monitoring of IPsec information from a SDN
>   controller to one or several flow-based Network Security Function
>   (NSF).  The NSFs implement IPsec to protect data traffic between
>   network resources with IPsec.
> 
>   The document focuses in the NSF Facing Interface by providing models
>   for Configuration and State data model required to allow the Security
>   Controller to configure the IPsec databases (SPD, SAD, PAD) and IKE
>   to establish security associations with a reduced intervention of the
>   network administrator.  NOTE: State data model will be developed as
>   part of this work but it is still TBD.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
> 
> 
> 
> _______________________________________________
> I2nsf mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/i2nsf

-----------------------------------------------------------
Gabriel López Millán
Departamento de Ingeniería de la Información y las Comunicaciones
University of Murcia
Spain
Tel: +34 868888504
Fax: +34 868884151
email: [email-masked] <mailto:[email-masked]>