From nobody Mon Aug 11 15:23:47 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C3D51A024E; Mon, 11 Aug 2014 15:15:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zEDzvl7-9oUr; Mon, 11 Aug 2014 15:15:41 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 77BFE1A01FF; Mon, 11 Aug 2014 15:15:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: IETF Secretariat To: IETF Announcement List X-Test-IDTracker: no X-IETF-IDTracker: 5.6.2.p5 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20140811221541.12576.82446.idtracker@ietfa.amsl.com> Date: Mon, 11 Aug 2014 15:15:41 -0700 Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/KPMoSaXsRl0oVkWSHOtqlsnhMBM X-Mailman-Approved-At: Mon, 11 Aug 2014 15:23:44 -0700 Cc: myo.zarny@gs.com, nsaas@ietf.org, linda.dunbar@huawei.com Subject: [Nsaas] New Non-WG Mailing List: NSaaS: Network Security as a Service X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Reply-To: ietf@ietf.org List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Aug 2014 22:15:43 -0000 A new IETF non-working group email list has been created. List address: nsaas@ietf.org Archive: http://www.ietf.org/mail-archive/web/nsaas/ To subscribe: https://www.ietf.org/mailman/listinfo/nsaas Purpose: Network Security as a Service (NSaaS) mailing list is for discussing topics related to protocols (or the interface) and architectures for “Requesters” to negotiate the network security related functions, that are not physically present at Requesters’ premises, as well as the associated attributes. The security functions under discussion are the ones that can be requested by one domain (e.g., two different domains of one service provider, enterprise clients, or applications, etc.) but may be owned or managed by another domain (e.g., service provider). Those security functions may be hosted on physical appliances or instantiated as virtual machines on common compute server (i.e. the Virtualized network functions defined by ETSI NFV). The “requester <-> provider” relationship has different connotations in different scenarios: · Client <-> Provider relationship, i.e. client requesting some network functions from its provider; · Inter-domain, e.g. Domain A <-> Domain B relationship, i.e. one operator domain requesting some network functions from another operator domain, where “A” and “B” can be from same operator or different operators; or · Applications <-> Network relationship, i.e. an application (e.g. cluster of servers) requesting some functions from network, etc. The security functions offered by 3rd party need Bi-directional periodic communications between the requesters and the providers for policy negotiation, validation, potentially re-directing traffic to higher level security functions, etc. Therefore, the service requires protocol exchange. Simply, an API is not enough. The proposed protocols between requester and provider can be used for the following scenarios: · A Client requests a certain network security function from a provider · The provider fulfills the request for example, by instantiating an instance of the service in question, or configures additional rules in an already provisioned service. Even though OpenStack has done a project on FW as a service: https://datatracker.ietf.org/doc/draft-dunbar-nsaas-problem-statement/, the specifications are very primitive, far from enough for NSaaS, due to it is open source code and there is no validation on its accuracy or completeness. Our goal is for IETF to take up the role of defining the complete specification, and providing a hand-off to OpenStack or other Open Source communities to provide the source code. For additional information, please contact the list administrators. From nobody Mon Aug 11 19:36:45 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBE3D1A0119 for ; Mon, 11 Aug 2014 19:36:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NmjzZN4Ae3jm for ; Mon, 11 Aug 2014 19:36:42 -0700 (PDT) Received: from mail-pa0-x231.google.com (mail-pa0-x231.google.com [IPv6:2607:f8b0:400e:c03::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B41221A010A for ; Mon, 11 Aug 2014 19:36:39 -0700 (PDT) Received: by mail-pa0-f49.google.com with SMTP id hz1so12129089pad.36 for ; Mon, 11 Aug 2014 19:36:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=4xx7RJfrYbQcbJkJLOskbYOgMGz7VBDe02DWyTbYrV0=; b=RPnvoJi/FRqO3dH9YqLzqOz8J5EsfjLHYXm9tzk3w8KK7pFzdv2dRX08psz3W7Fmrh rppKwgpzsryxeCCXWD+qvBlLbtK9Nc65oJpXKWR0pzUgIdhFKJtzF/DqmBC7x8lyvyDJ RTbU0bwbKKQdvFMLkhVukga/nO3j5DmG77/+mq0t2miTGzOn8dpixKphRfirtIw1Ijht bcv6M8y2YN/YAGXbZzCD0bXzZFdYRPs7HtTBkD5TyvkCZHOs0ScyKOGIPUDO3amz/FO3 EX/tjLKu8YIQRPj1OVlOIev+8E2udmY45CGsV+A3oYeoTXIwkAJtQVANgmOVwT38Rxfg ikhA== X-Received: by 10.66.174.17 with SMTP id bo17mr1570706pac.98.1407810999319; Mon, 11 Aug 2014 19:36:39 -0700 (PDT) Received: from spandex.local (216-67-123-104.dynamic.cdma.acsalaska.net. [216.67.123.104]) by mx.google.com with ESMTPSA id nt15sm19758903pdb.63.2014.08.11.19.36.38 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 11 Aug 2014 19:36:38 -0700 (PDT) Message-ID: <53E97DB5.3040106@gmail.com> Date: Mon, 11 Aug 2014 18:36:37 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: nsaas@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/Ds5KON1wr15_LGmN-ZZUvDI-i8k Subject: [Nsaas] Existing work, other things X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 02:36:44 -0000 I was a little (okay, a lot) surprised to see this work proposed without referencing prior IETF work in this space, including (but not limited to) midcom, nsis, and pcp. Ideally any new work proposed on this topic would include an explanation of why it would succeed where previous efforts haven't. It's certainly possible that this might succeed where others have failed, but some explanation of why its proponents think this time things are different would be helpful. Some discussion of what distinguishes "security" from other service functions would also be useful. Also, the open source vs. standards discussion is overly argumentative and likely to produce more heat than light, and fails to acknowledge the complementary nature of the two types of effort. We certainly do not need more unimplemented standards (see previous paragraph). Melinda From nobody Mon Aug 11 19:45:56 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB14D1A019B for ; Mon, 11 Aug 2014 19:45:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.58 X-Spam-Level: X-Spam-Status: No, score=-98.58 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CHARSET_FARAWAY_HEADER=3.2, CN_BODY_35=0.339, MIME_8BIT_HEADER=0.3, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ig5ABICP7D9m for ; Mon, 11 Aug 2014 19:45:54 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 149FD1A0196 for ; Mon, 11 Aug 2014 19:45:53 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLD13880; Tue, 12 Aug 2014 02:45:52 +0000 (GMT) Received: from NKGEML403-HUB.china.huawei.com (10.98.56.34) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 12 Aug 2014 03:45:51 +0100 Received: from NKGEML501-MBS.china.huawei.com ([169.254.2.209]) by nkgeml403-hub.china.huawei.com ([10.98.56.34]) with mapi id 14.03.0158.001; Tue, 12 Aug 2014 10:45:46 +0800 From: Zongning To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: [Nsaas] Existing work, other things Thread-Index: AQHPtdZHIyIdZ1WvB0S/i8dL+a9D05vMQqJg Date: Tue, 12 Aug 2014 02:45:45 +0000 Message-ID: References: <53E97DB5.3040106@gmail.com> In-Reply-To: <53E97DB5.3040106@gmail.com> Accept-Language: en-US, zh-CN Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.41.54] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/od102H-sqf4uuE0Ve-uFUFOfffE Subject: [Nsaas] =?gb2312?b?tPC4tDogIEV4aXN0aW5nIHdvcmssIG90aGVyIHRoaW5n?= =?gb2312?b?cw==?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 02:45:55 -0000 SGksIE1lbGluZGEsDQoNCkkgYWdyZWUgdGhhdCBjbGVhcmx5IGxpc3RpbmcgZXhpc3Rpbmcgd29y ayBpbiBJRVRGIGFuZCBtYWtpbmcgYSBjaGVjayBsaXN0IG9uIGdhcCB3b3VsZCBiZSB2ZXJ5IGhl bHBmdWwgZm9yIHRoaXMgaW5pdGlhdGl2ZS4NCkkgZ3Vlc3MgTGluZGEgY2FuIHBvc3QgYSBicmll ZiBzdW1tYXJ5IG9mIGJhciBCb0YgZGlzY3Vzc2lvbiBpbiBUb3JvbnRvIHRvIGVubGlnaHQgdXMg bW9yZS4uLg0KDQpUaGFua3MuDQoNCi1OaW5nDQoNCi0tLS0t08q8/tStvP4tLS0tLQ0Kt6K8/sjL OiBOc2FhcyBbbWFpbHRvOm5zYWFzLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gTWVsaW5kYSBTaG9y ZQ0Kt6LLzcqxvOQ6IDIwMTTE6jjUwjEyyNUgMTA6MzcNCsrVvP7IyzogbnNhYXNAaWV0Zi5vcmcN Ctb3zOI6IFtOc2Fhc10gRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhpbmdzDQoNCkkgd2FzIGEgbGl0 dGxlIChva2F5LCBhIGxvdCkgc3VycHJpc2VkIHRvIHNlZSB0aGlzIHdvcmsgcHJvcG9zZWQgd2l0 aG91dCByZWZlcmVuY2luZyBwcmlvciBJRVRGIHdvcmsgaW4gdGhpcyBzcGFjZSwgaW5jbHVkaW5n IChidXQgbm90IGxpbWl0ZWQgdG8pIG1pZGNvbSwgbnNpcywgYW5kIHBjcC4NCklkZWFsbHkgYW55 IG5ldyB3b3JrIHByb3Bvc2VkIG9uIHRoaXMgdG9waWMgd291bGQgaW5jbHVkZSBhbiBleHBsYW5h dGlvbiBvZiB3aHkgaXQgd291bGQgc3VjY2VlZCB3aGVyZSBwcmV2aW91cyBlZmZvcnRzIGhhdmVu J3QuICBJdCdzIGNlcnRhaW5seSBwb3NzaWJsZSB0aGF0IHRoaXMgbWlnaHQgc3VjY2VlZCB3aGVy ZSBvdGhlcnMgaGF2ZSBmYWlsZWQsIGJ1dCBzb21lIGV4cGxhbmF0aW9uIG9mIHdoeSBpdHMgcHJv cG9uZW50cyB0aGluayB0aGlzIHRpbWUgdGhpbmdzIGFyZSBkaWZmZXJlbnQgd291bGQgYmUgaGVs cGZ1bC4gIFNvbWUgZGlzY3Vzc2lvbiBvZiB3aGF0IGRpc3Rpbmd1aXNoZXMgInNlY3VyaXR5IiBm cm9tIG90aGVyIHNlcnZpY2UgZnVuY3Rpb25zIHdvdWxkIGFsc28gYmUgdXNlZnVsLg0KDQpBbHNv LCB0aGUgb3BlbiBzb3VyY2UgdnMuIHN0YW5kYXJkcyBkaXNjdXNzaW9uIGlzIG92ZXJseSBhcmd1 bWVudGF0aXZlIGFuZCBsaWtlbHkgdG8gcHJvZHVjZSBtb3JlIGhlYXQgdGhhbiBsaWdodCwgYW5k IGZhaWxzIHRvIGFja25vd2xlZGdlIHRoZSBjb21wbGVtZW50YXJ5IG5hdHVyZSBvZiB0aGUgdHdv IHR5cGVzIG9mIGVmZm9ydC4gIFdlIGNlcnRhaW5seSBkbyBub3QgbmVlZCBtb3JlIHVuaW1wbGVt ZW50ZWQgc3RhbmRhcmRzIChzZWUgcHJldmlvdXMgcGFyYWdyYXBoKS4NCg0KTWVsaW5kYQ0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KTnNhYXMgbWFp bGluZyBsaXN0DQpOc2Fhc0BpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9uc2Fhcw0K From nobody Mon Aug 11 20:01:16 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E33811A0263 for ; Mon, 11 Aug 2014 20:01:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HsmcYHHjoyle for ; Mon, 11 Aug 2014 20:01:14 -0700 (PDT) Received: from mail-pd0-x235.google.com (mail-pd0-x235.google.com [IPv6:2607:f8b0:400e:c02::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25C6D1A0262 for ; Mon, 11 Aug 2014 20:01:14 -0700 (PDT) Received: by mail-pd0-f181.google.com with SMTP id g10so11657617pdj.26 for ; Mon, 11 Aug 2014 20:01:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=mzAx+aT2sZVgQ8F2z4IdQlha2jT+tXHpAqldjJapyA8=; b=PbFmCx0jx4POQS7V+fg1x0sfRXKqjEQhW4LwMKzoi1/FlUR3ncQWk5UlBV6B2XmvBd bt9eiy8APMHte5ziORJcsS80pFJxDb0xFIkiIcIT4XgPgwd9DKDoDSBACBNv2MVtUZsr gcUoKQFZB7DhgQcy9yu2qxSVB6Sp0GxpZBuacHo1DzGmdebo2p9yA0lcIlowJfduLygk QKsbiAjpkSa7cmxeH0MzecpwbkS3sJLs73uL/W2c+sGCdp+MmOJ+7Pz1YrRAP1lySXnt iHaAUHvdJPb7K6rbNssZM/Aa/gtQSA27xIeSW9sBP8J/RgxWcuq7EwOxgdrU+Vv555wj DEuw== X-Received: by 10.68.190.229 with SMTP id gt5mr1657475pbc.15.1407812473747; Mon, 11 Aug 2014 20:01:13 -0700 (PDT) Received: from spandex.local (216-67-123-104.dynamic.cdma.acsalaska.net. [216.67.123.104]) by mx.google.com with ESMTPSA id os4sm19824671pdb.67.2014.08.11.20.01.12 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 11 Aug 2014 20:01:13 -0700 (PDT) Message-ID: <53E98377.1030902@gmail.com> Date: Mon, 11 Aug 2014 19:01:11 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Zongning , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/UPzpG7xWkR-hVliKtmV-ZzvECvI Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 03:01:15 -0000 On 8/11/14 6:45 PM, Zongning wrote: > I agree that clearly listing existing work in IETF and making a check > list on gap would be very helpful for this initiative. I think that what really needs to be addressed is that these previous efforts have been unsuccessful. If the OpenStack project is seeing uptake, that's a big deal. Melinda From nobody Tue Aug 12 08:56:44 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACA301A0043 for ; Tue, 12 Aug 2014 08:56:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.081 X-Spam-Level: * X-Spam-Status: No, score=1.081 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CHARSET_FARAWAY_HEADER=3.2, MIME_8BIT_HEADER=0.3, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UF66f0qJO06q for ; Tue, 12 Aug 2014 08:56:39 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7843C1A002C for ; Tue, 12 Aug 2014 08:56:38 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLD87127; Tue, 12 Aug 2014 15:56:36 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 12 Aug 2014 16:56:35 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0158.001; Tue, 12 Aug 2014 08:56:20 -0700 From: Linda Dunbar To: Melinda Shore , Zongning , "nsaas@ietf.org" Thread-Topic: =?gb2312?B?W05zYWFzXSC08Li0OiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhpbmdz?= Thread-Index: AQHPtdma4rlWSy/aBkSWnwoV1iexc5vMvPyAgABc2FA= Date: Tue, 12 Aug 2014 15:56:19 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> In-Reply-To: <53E98377.1030902@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.144.204] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/ieSx7q8Bmc6cf7oav3ZxnDWJG-0 Subject: Re: [Nsaas] =?gb2312?b?tPC4tDogIEV4aXN0aW5nIHdvcmssIG90aGVyIHRoaW5n?= =?gb2312?b?cw==?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 15:56:40 -0000 TWVsaW5kYSwgDQoNCllvdSBoYXZlIGJyb3VnaHQgdXAgYSB2ZXJ5IGltcG9ydGFudCBhc3BlY3Qg b2YgTlNhYVMgdGhhdCBuZWVkcyB0byBiZSBhZGRyZXNzZWQuIA0KDQpPcGVuU3RhY2sgY29tcGxl dGVkIHRoZSBGaXJld2FsbCBhcyBhIFNlcnZpY2UgcHJvamVjdCBhbmQgc3BlY2lmaWVkIHRoZSBz ZXQgb2YgQVBJcyBmb3IgRmlyZXdhbGwgc2VydmljZXM6IGh0dHA6Ly9kb2NzLm9wZW5zdGFjay5v cmcvYWRtaW4tZ3VpZGUtY2xvdWQvY29udGVudC9md2Fhc19hcGlfYWJzdHJhY3Rpb25zLmh0bWwN Cg0KT3BlblN0YWNrIGhhcyBhbHNvIGRlZmluZWQgdGhlIEFQSXMgZm9yIG1hbmFnaW5nIFNlY3Vy aXR5IEdyb3VwczogaHR0cDovL2RvY3Mub3BlbnN0YWNrLm9yZy9hZG1pbi1ndWlkZS1jbG91ZC9j b250ZW50L3NlY3VyaXR5Z3JvdXBfYXBpX2Fic3RyYWN0aW9ucy5odG1sLiANCg0KSW4gYWRkaXRp b24sIHRoZXJlIGlzIGEgIlNlY3VyaXR5IGFzIGEgc2VydmljZSBieSBDbG91ZCBTZWN1cml0eSBB bGxpYW5jZSAoIjogaHR0cHM6Ly9jbG91ZHNlY3VyaXR5YWxsaWFuY2Uub3JnL3Jlc2VhcmNoL3Nl Y2Fhcy8jX2dldC1pbnZvbHZlZCANClNhYVMgYnkgQ1NBIGlzIGF0IHRoZSBpbml0aWFsIHN0YWdl IG9mIGRlZmluaW5nIHRoZSBzY29wZSBvZiB3b3JrLg0KDQpPcGVuU3RhY2ssIGFzIGl0IGlzIGFu IG9wZW4gc291cmNlIGNvbW11bml0eSwgaXRzIGNvbnRyaWJ1dGlvbnMgYXJlIGxpa2UgSUVURidz IGluZGl2aWR1YWwgc3VibWlzc2lvbnMuIFdoaWxlIElFVEYncyBpbmRpdmlkdWFsIHN1Ym1pc3Np b25zIHJlcXVpcmUgc29tZSBsZXZlbHMgb2YgZXhwZXJ0IHJldmlldyBiZWZvcmUgUkZDIGNhbiBi ZSBwdWJsaXNoZWQsIE9wZW5TdGFjayBkb2Vzbid0IGhhdmUgdGhpcyBzeXN0ZW0uIEJhc2ljYWxs eSwgaXQgaXMgbm90IHJlcXVpcmVkIHRvIGhhdmUgdmFsaWRhdGlvbiBvbiBjb3JyZWN0bmVzcyBh bmQgY29tcGxldGVuZXNzIG9mIHRoZSBzdWJtaXNzaW9ucy4gDQoNCkFzIHRoZSByZXN1bHQsIHRo ZSBhdHRyaWJ1dGVzIGRlZmluZWQgYnkgT3BlblN0YWNrIEZpcmV3YWxsL1NlY3VyaXR5IGFzIGEg U2VydmljZSBhcmUgdmVyeSBwcmltaXRpdmUsIGUuZy4gb25seSBzYXkgImZpcmV3YWxsIHJ1bGVz IiB3aXRob3V0IGV4cGxpY2l0IHNwZWNpZmljYXRpb24gb2Ygd2hhdC4gSW4gYWRkaXRpb24sIA0K DQpPbmUgb2YgdGhlIGdvYWxzIG9mIE5TYWFTIGluIElFVEYgaXMgdG8gY3JlYXRlIGEgcHJvZHVj dGl2ZSBlY28tc3lzdGVtIHdpdGggT3BlblN0YWNrIGFuZCBvdGhlciBPcGVuIFNvdXJjZSBjb21t dW5pdGllcywgd2l0aCBJRVRGIGRlZmluaW5nIHNwZWNpZmljYXRpb25zL3Byb3RvY29scywgT3Bl biBTb3VyY2UgY29tbXVuaXRpZXMgY29udHJpYnV0aW5nIHNvdXJjZSBjb2RlIGJhc2VkIG9uIElF VEYgaW5pdGlhbCBzcGVjaWZpY2F0aW9ucyAocG90ZW50aWFsbHkgd2l0aCBlbmhhbmNlbWVudCks IHdoaWNoIGluIHR1cm4gYXVnbWVudCBJRVRGIHNwZWNpZmljYXRpb24sIGFuZCB0aGVuIGJhY2sg dG8gT3BlbiBTb3VyY2UgY29tbXVuaXRpZXMuIA0KDQpUaGUgTlNhYVMgY2FuIHN0YXJ0IHdpdGgg d2lsbCB0aGUgT3BlblN0YWNrIGRlZmluZWQgaW50ZXJmYWNlLCBhbmQgbW92ZSBvbiB0byBtYWtl IHRoZW0gbW9yZSBjb21wbGV0ZSBhbmQgdXNlYWJsZS4gIA0KIA0KDQoNCkxpbmRhDQoNCg0KLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IE5zYWFzIFttYWlsdG86bnNhYXMtYm91bmNl c0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIE1lbGluZGEgU2hvcmUNClNlbnQ6IE1vbmRheSwgQXVn dXN0IDExLCAyMDE0IDEwOjAxIFBNDQpUbzogWm9uZ25pbmc7IG5zYWFzQGlldGYub3JnDQpTdWJq ZWN0OiBSZTogW05zYWFzXSC08Li0OiBFeGlzdGluZyB3b3JrLCBvdGhlciB0aGluZ3MNCg0KT24g OC8xMS8xNCA2OjQ1IFBNLCBab25nbmluZyB3cm90ZToNCj4gSSBhZ3JlZSB0aGF0IGNsZWFybHkg bGlzdGluZyBleGlzdGluZyB3b3JrIGluIElFVEYgYW5kIG1ha2luZyBhIGNoZWNrIA0KPiBsaXN0 IG9uIGdhcCB3b3VsZCBiZSB2ZXJ5IGhlbHBmdWwgZm9yIHRoaXMgaW5pdGlhdGl2ZS4NCg0KSSB0 aGluayB0aGF0IHdoYXQgcmVhbGx5IG5lZWRzIHRvIGJlIGFkZHJlc3NlZCBpcyB0aGF0IHRoZXNl IHByZXZpb3VzIGVmZm9ydHMgaGF2ZSBiZWVuIHVuc3VjY2Vzc2Z1bC4gIElmIHRoZSBPcGVuU3Rh Y2sgcHJvamVjdCBpcyBzZWVpbmcgdXB0YWtlLCB0aGF0J3MgYSBiaWcgZGVhbC4NCg0KTWVsaW5k YQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpO c2FhcyBtYWlsaW5nIGxpc3QNCk5zYWFzQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL25zYWFzDQo= From nobody Tue Aug 12 09:20:21 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D00931A01DD for ; Tue, 12 Aug 2014 09:20:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJ4nd434Qmqz for ; Tue, 12 Aug 2014 09:20:17 -0700 (PDT) Received: from mail-pa0-x22a.google.com (mail-pa0-x22a.google.com [IPv6:2607:f8b0:400e:c03::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60F071A01AA for ; Tue, 12 Aug 2014 09:20:17 -0700 (PDT) Received: by mail-pa0-f42.google.com with SMTP id lf10so13340596pab.1 for ; Tue, 12 Aug 2014 09:20:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=ihGzWjvNPK1/W8uqe9JGHliuGthAz8SNhF2aV5Iu0t8=; b=q3sXLg3gJAV9ti2hERmANSdfOGfrG9FcPKEz2ukK6V2C0WRPIywofanPLnzAqTF/iq +icVmgtnEFmc6wLDB5M3doP85nvoUoKBB7An9FCJNwdBZxUXT+4m1UVJSCn9bJIyOxV+ yQg2R1sNML+CiTEainufcujFQz2IOfD0S/CpLGU4p+22b9C8iSFGIv40PntzCaA1f3hA xu4/oUFbL5/mJaErz01grsjnzMWrhKodJv//plmIBJ52sb2r0NcBDqf8UeXFQMa3eiuB 4QEdYhbhWWNF0WGTEnIMxaQoguBg6CT6t2b41U4zKm0VNw2SqTzPHBu0P75MmN3+umFR Rdrg== X-Received: by 10.66.251.197 with SMTP id zm5mr5256700pac.65.1407860417065; Tue, 12 Aug 2014 09:20:17 -0700 (PDT) Received: from spandex.local (216-67-123-104.dynamic.cdma.acsalaska.net. [216.67.123.104]) by mx.google.com with ESMTPSA id dw8sm14422863pab.35.2014.08.12.09.20.15 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 12 Aug 2014 09:20:16 -0700 (PDT) Message-ID: <53EA3EBE.50200@gmail.com> Date: Tue, 12 Aug 2014 08:20:14 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Linda Dunbar , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/YxKLhg_4bTlcPBxdGDymNRyP5tg Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 16:20:19 -0000 I'm finding the discussion to be a little bit difficult to follow, to be honest. Maybe it would be helpful to break things down point-by-point: 1) The IETF has had considerable experience standardizing protocols between some sort of agent or controller and a network security device. These have largely been unsuccessful, in the sense that they haven't been implemented and deployed. I think any new effort in this area needs to make a case for why it will be successful, given that history. 2) If OpenStack is producing work that's being implemented, that's a good thing. It is unclear to me why you would bring work "fixing" shortcomings in OpenStack to the IETF, rather than to OpenStack 3) I'm not at all clear on why this work is not being discussed in the context of sfc, while we're at it. Why would it not fit there - that is to say, why is it a different problem? Melinda From nobody Tue Aug 12 09:51:30 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF9201A030B for ; Tue, 12 Aug 2014 09:51:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.569 X-Spam-Level: X-Spam-Status: No, score=-4.569 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WH1SbJBLNX5I for ; Tue, 12 Aug 2014 09:51:24 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 494221A0302 for ; Tue, 12 Aug 2014 09:51:24 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIE21979; Tue, 12 Aug 2014 16:51:22 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 12 Aug 2014 17:51:20 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0158.001; Tue, 12 Aug 2014 09:51:17 -0700 From: Linda Dunbar To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: =?utf-8?B?W05zYWFzXSDnrZTlpI06ICBFeGlzdGluZyB3b3JrLCBvdGhlciB0aGluZ3M=?= Thread-Index: AQHPtdma4rlWSy/aBkSWnwoV1iexc5vMvPyAgABc2FCAAIJpAP//i1lA Date: Tue, 12 Aug 2014 16:51:17 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> In-Reply-To: <53EA3EBE.50200@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.144.204] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/uGprjz3g3MUbTjpy2z3an-6bxG4 Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 16:51:27 -0000 TWVsaW5kYSwgDQoNClRoYW5rcyBmb3IgdGhlIHN1Z2dlc3RlZCB3b3JkaW5nIGZvciBJRVRGLiAN CkFuc3dlcnMgdG8geW91ciBvdGhlciBxdWVzdGlvbnMgYXJlIGluc2VydGVkIGJlbG93Og0KDQot LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogTWVsaW5kYSBTaG9yZSBbbWFpbHRvOm1l bGluZGEuc2hvcmVAZ21haWwuY29tXSANClNlbnQ6IFR1ZXNkYXksIEF1Z3VzdCAxMiwgMjAxNCAx MToyMCBBTQ0KVG86IExpbmRhIER1bmJhcjsgbnNhYXNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBb TnNhYXNdIOetlOWkjTogRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhpbmdzDQoNCkknbSBmaW5kaW5n IHRoZSBkaXNjdXNzaW9uIHRvIGJlIGEgbGl0dGxlIGJpdCBkaWZmaWN1bHQgdG8gZm9sbG93LCB0 byBiZSBob25lc3QuICBNYXliZSBpdCB3b3VsZCBiZSBoZWxwZnVsIHRvIGJyZWFrIHRoaW5ncyBk b3duDQpwb2ludC1ieS1wb2ludDoNCg0KMSkgVGhlIElFVEYgaGFzIGhhZCBjb25zaWRlcmFibGUg ZXhwZXJpZW5jZSBzdGFuZGFyZGl6aW5nDQogICBwcm90b2NvbHMgYmV0d2VlbiBzb21lIHNvcnQg b2YgYWdlbnQgb3IgY29udHJvbGxlciBhbmQgYQ0KICAgbmV0d29yayBzZWN1cml0eSBkZXZpY2Uu ICBUaGVzZSBoYXZlIGxhcmdlbHkgYmVlbg0KICAgdW5zdWNjZXNzZnVsLCBpbiB0aGUgc2Vuc2Ug dGhhdCB0aGV5IGhhdmVuJ3QgYmVlbiBpbXBsZW1lbnRlZA0KICAgYW5kIGRlcGxveWVkLiAgSSB0 aGluayBhbnkgbmV3IGVmZm9ydCBpbiB0aGlzIGFyZWEgbmVlZHMNCiAgIHRvIG1ha2UgYSBjYXNl IGZvciB3aHkgaXQgd2lsbCBiZSBzdWNjZXNzZnVsLCBnaXZlbiB0aGF0DQogICBoaXN0b3J5Lg0K DQpbTGluZGFdIEkndmUgc2VlbiBJRVRGIHdvcmsgb24gZ2VuZXJhbCBjb250cm9sIDwtPiBhZ2Vu dCwgYnV0IG5vdCBzcGVjaWZpY2FsbHkgdG8gU2VjdXJpdHkgZnVuY3Rpb25zLCBsaWtlIEZXIHBv bGljaWVzLCBuZWdvdGlhdGlvbnMsIGFuZCB2YWxpZGF0aW9ucyBvZiBzZWN1cml0eSBmdW5jdGlv bnMgdGhhdCBhcmUgbm90IHBoeXNpY2FsbHkgbG9jYXRlZCBpbiB0aGUgY3VzdG9tZXIgcHJlbWlz ZXMgYnV0IGFjY2Vzc2VkIHZpYSByZW1vdGVseS4gDQpUaGVyZSBhcmUgbWFueSBuZXR3b3JrIGZ1 bmN0aW9ucyBiZWluZyBkZXBsb3llZCBhbmQgbmV3IG9uZXMgYXJlIHBvcHBpbmcgdXAgd2l0aCBi dXNpbmVzcyBhbmQgYXBwbGljYXRpb24gZGVtYW5kcy4gSXQgaXMgZGlmZmljdWx0IHNwZWNpZnkg Y29uY3JldGUgcHJvdG9jb2xzIGZvciBhbGwgbmV0d29yayBmdW5jdGlvbnMuIEp1c3QgdG8gc3Bl Y2lmeSBGVyBmaWxlcyBhbG9uZSBpcyBhIGJpZyB0YXNrLiANCg0KTlNhYVMgZm9jdXNlcyBvbiB0 aGUgbmV0d29yayBzZWN1cml0eSByZWxhdGVkIGZ1bmN0aW9ucyBiZWNhdXNlIHRoZSB3aWRlIGFj Y2VwdGFuY2Ugb2Ygc2VjdXJpdHkgZnVuY3Rpb25zIHRoYXQgYXJlIG5vdCBydW5uaW5nIG9uIGN1 c3RvbWVyL2VudGVycHJpc2UgcHJlbWlzZXMuIE51bWVyb3VzIHNlY3VyaXR5IHZlbmRvcnMgYXJl IG5vdyBsZXZlcmFnaW5nIGNsb3VkIGJhc2VkIG1vZGVscyB0byBkZWxpdmVyIHNlY3VyaXR5IHNv bHV0aW9ucy4gVGhpcyBzaGlmdCBoYXMgb2NjdXJyZWQgZm9yIGEgdmFyaWV0eSBvZiByZWFzb25z IGluY2x1ZGluZyBncmVhdGVyIGVjb25vbWllcyBvZiBzY2FsZSwgc3RyZWFtbGluZWQgZGVsaXZl cnkgbWVjaGFuaXNtcywgYW5kIHRoZSBkZW1hbmQgb2YgYnVzaW5lc3MgYW5kIGFwcGxpY2F0aW9u cyBmb3IgbW9yZSBzb3BoaXN0aWNhdGVkIHNlY3VyaXR5IGZ1bmN0aW9ucyB0aGF0IHRoZXkgZG8g bm90IGhhdmUuIENvbnN1bWVycywgZW50ZXJwcmlzZSBjbGllbnRzIGFzIHdlbGwgYXMgYXBwbGlj YXRpb25zIGFyZSBlbWJyYWNpbmcgdGhlIGJ1c2luZXNzIG1vZGVsIG9mIHJlcXVlc3RpbmcgZm9y IHNlY3VyaXR5IGZ1bmN0aW9ucyB0aGF0IGRvIG5vdCBydW4gb24gdGhlaXIgb3duIHByZW1pc2Vz IG9uIGRlbWFuZCwgYWxzbyBrbm93biBhcyBTZWN1cml0eSBhcyBhIFNlcnZpY2UuDQoNCg0KMikg SWYgT3BlblN0YWNrIGlzIHByb2R1Y2luZyB3b3JrIHRoYXQncyBiZWluZyBpbXBsZW1lbnRlZCwN CiAgIHRoYXQncyBhIGdvb2QgdGhpbmcuICBJdCBpcyB1bmNsZWFyIHRvIG1lIHdoeSB5b3Ugd291 bGQNCiAgIGJyaW5nIHdvcmsgImZpeGluZyIgc2hvcnRjb21pbmdzIGluIE9wZW5TdGFjayB0byB0 aGUgSUVURiwNCiAgIHJhdGhlciB0aGFuIHRvIE9wZW5TdGFjaw0KDQpbTGluZGFdIEFwb2xvZ3kg Zm9yIG15IGltcHJvcGVyIHdvcmRpbmcuIEkgZGlkbid0IG1lYW4gdG8gImZpeCBzaG9ydGNvbWlu Z3Mgb2YgT3BlblN0YWNrIi4gSSB3YW50IHRvIGFkdm9jYXRlIGEgcHJvZHVjdGl2ZSBlY28tc3lz dGVtIGZvciBJRVRGIHRvIGJlIHBsdWdnZWQgaW4gdG8gdGhpcyB1cHRyZW5kIE9wZW4gU291cmNl IGluaXRpYXRpdmVzIGluIG91ciBpbmR1c3RyeS4gSUVURiBjYW4gcGxheSBhIHZlcnkgYWN0aXZl IHJvbGUgaW4gdGhpcyBpbml0aWF0aXZlLCBlLmcuIGxldmVyYWdpbmcgaXRzIGV4cGVyaWVuY2Ug aW4gc3BlY2lmeWluZyBjb21wcmVoZW5zaXZlIHNwZWNpZmljYXRpb24gdGhhdCBjYW4gYmUgdXNl ZCBhcyBpbnB1dCB0byBPcGVuIFNvdXJjZSBjb21tdW5pdGllcy4gDQoNCg0KDQozKSBJJ20gbm90 IGF0IGFsbCBjbGVhciBvbiB3aHkgdGhpcyB3b3JrIGlzIG5vdCBiZWluZyBkaXNjdXNzZWQNCiAg IGluIHRoZSBjb250ZXh0IG9mIHNmYywgd2hpbGUgd2UncmUgYXQgaXQuICBXaHkgd291bGQgaXQg bm90DQogICBmaXQgdGhlcmUgLSB0aGF0IGlzIHRvIHNheSwgd2h5IGlzIGl0IGEgZGlmZmVyZW50 IHByb2JsZW0/DQoNCltMaW5kYV0gU0ZDIGRvZXNuJ3QgY292ZXIgaW4tZGVwdGggc3BlY2lmaWNh dGlvbiAoZS5nLiBydWxlcyBmb3IgdGhlIHJlcXVlc3RlZCBGVykgZm9yIGNsaWVudHMgdG8gcmVx dWVzdCBpdHMgbmVlZGVkIGZ1bmN0aW9ucy4gSW4gU0ZDLCBGVyBmdW5jdGlvbiBpcyBhIGJsYWNr IGJveCwgdGhhdCBpcyB0cmVhdGVkIGluIHNhbWUgd2F5IGFzIFZpZGVvIE9wdGltaXphdGlvbiBm dW5jdGlvbi4gU0ZDIGRvZXNuJ3QgY292ZXIgdGhlIG5lZ290aWF0aW9uIHBhcnQsIGUuZy4gQ2xp ZW50IG5lZWRzIFJ1bGUgeC95L3ogZm9yIEZXLCBidXQgdGhlIFByb3ZpZGVyIGNhbiBvbmx5IG9m ZmVyIHgvei4gDQoNCiANCk1lbGluZGENCg== From nobody Tue Aug 12 09:55:38 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B7061A034A for ; Tue, 12 Aug 2014 09:55:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wUlBDlSEuMTl for ; Tue, 12 Aug 2014 09:55:36 -0700 (PDT) Received: from mail-pd0-x234.google.com (mail-pd0-x234.google.com [IPv6:2607:f8b0:400e:c02::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADB571A0342 for ; Tue, 12 Aug 2014 09:55:36 -0700 (PDT) Received: by mail-pd0-f180.google.com with SMTP id v10so11160195pde.39 for ; Tue, 12 Aug 2014 09:55:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=zV4drJY2SMTNbAMIMcOX1lmNDc/Lq9ex/lu1YcSpbww=; b=wQc+mCjs9cc1YoPcZkCJZzwrQNgralBiZN2pWpIotWfbHGGZF0cWfmN94glObgWHiU E0lo+bPQwYJwxx9ap+PS39yFOoW5srIpCR1IUwAT/kXcfEnZl3xZTVAiGmUetWggE5aE CXHMO+jDDV2IQoU0QONRwYp5F0jXJ6GtkZWxQQv+791GPZ6PCz8tyu/0fz8yhJmgL0F1 mZGF679d/78bjiLZ0ah5+7J1kjgMVD0Lo9OxnectzEu87gT7WtYhT/OQ5c6mscGhaQbi akvhDZT6709pKSZiwM5x3NU6MExL6KbJahoxH9HzklRP+Rey9eTzXxBUg1icVvl5s20f WATA== X-Received: by 10.68.244.40 with SMTP id xd8mr5450940pbc.24.1407862536402; Tue, 12 Aug 2014 09:55:36 -0700 (PDT) Received: from spandex.local (216-67-123-104.dynamic.cdma.acsalaska.net. [216.67.123.104]) by mx.google.com with ESMTPSA id t7sm22981149pdj.94.2014.08.12.09.55.34 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 12 Aug 2014 09:55:35 -0700 (PDT) Message-ID: <53EA4704.2090401@gmail.com> Date: Tue, 12 Aug 2014 08:55:32 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Linda Dunbar , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/NT1xA7bCWPCpkrEjGh1J92CgGKg Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 16:55:37 -0000 On 8/12/14 8:51 AM, Linda Dunbar wrote: > [Linda] I've seen IETF work on general control <-> agent, but not > specifically to Security functions, like FW policies, negotiations, > and validations of security functions that are not physically located > in the customer premises but accessed via remotely. midcom, nsis, pcp, (arguably) SOCKS. Melinda From nobody Tue Aug 12 10:09:05 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4B701A03C6 for ; Tue, 12 Aug 2014 10:09:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.569 X-Spam-Level: X-Spam-Status: No, score=-4.569 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gBBIYZtQ6wtq for ; Tue, 12 Aug 2014 10:09:03 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6097E1A0354 for ; Tue, 12 Aug 2014 10:09:03 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIE22988; Tue, 12 Aug 2014 17:09:02 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 12 Aug 2014 18:09:01 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0158.001; Tue, 12 Aug 2014 10:08:51 -0700 From: Linda Dunbar To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: =?utf-8?B?W05zYWFzXSDnrZTlpI06ICBFeGlzdGluZyB3b3JrLCBvdGhlciB0aGluZ3M=?= Thread-Index: AQHPtdma4rlWSy/aBkSWnwoV1iexc5vMvPyAgABc2FCAAIJpAP//i1lAgAB+hAD//434oA== Date: Tue, 12 Aug 2014 17:08:50 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB2460@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> In-Reply-To: <53EA4704.2090401@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.144.204] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/Wr9BSOQvP17gVmWircHBmgagwpY Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 17:09:05 -0000 TWVsaW5kYSwgDQoNClRoYW5rIHlvdSBmb3IgdGhlIGxpc3RpbmcuIFRoZXJlIGlzIGFsc28gU0FD TS4gDQpJIHdpbGwgaW5jbHVkZSB0aG9zZSBJRVRGIGluaXRpYXRpdmVzIGluIHRoZSBleGlzdGlu ZyB3b3JrIG9mIElFVEYuIEdhcCBhbmFseXNpcyB3aWxsIGJlIG5lZWRlZC4gDQoNCkxpbmRhDQoN Ci0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBNZWxpbmRhIFNob3JlIFttYWlsdG86 bWVsaW5kYS5zaG9yZUBnbWFpbC5jb21dIA0KU2VudDogVHVlc2RheSwgQXVndXN0IDEyLCAyMDE0 IDExOjU2IEFNDQpUbzogTGluZGEgRHVuYmFyOyBuc2Fhc0BpZXRmLm9yZw0KU3ViamVjdDogUmU6 IFtOc2Fhc10g562U5aSNOiBFeGlzdGluZyB3b3JrLCBvdGhlciB0aGluZ3MNCg0KT24gOC8xMi8x NCA4OjUxIEFNLCBMaW5kYSBEdW5iYXIgd3JvdGU6DQo+IFtMaW5kYV0gSSd2ZSBzZWVuIElFVEYg d29yayBvbiBnZW5lcmFsIGNvbnRyb2wgPC0+IGFnZW50LCBidXQgbm90IA0KPiBzcGVjaWZpY2Fs bHkgdG8gU2VjdXJpdHkgZnVuY3Rpb25zLCBsaWtlIEZXIHBvbGljaWVzLCBuZWdvdGlhdGlvbnMs IA0KPiBhbmQgdmFsaWRhdGlvbnMgb2Ygc2VjdXJpdHkgZnVuY3Rpb25zIHRoYXQgYXJlIG5vdCBw aHlzaWNhbGx5IGxvY2F0ZWQgDQo+IGluIHRoZSBjdXN0b21lciBwcmVtaXNlcyBidXQgYWNjZXNz ZWQgdmlhIHJlbW90ZWx5Lg0KDQptaWRjb20sIG5zaXMsIHBjcCwgKGFyZ3VhYmx5KSBTT0NLUy4N Cg0KTWVsaW5kYQ0KDQo= From nobody Tue Aug 12 10:22:46 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5EFF1A03FE for ; Tue, 12 Aug 2014 10:22:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SFZvp3wNV0hT for ; Tue, 12 Aug 2014 10:22:42 -0700 (PDT) Received: from mail-pa0-x22e.google.com (mail-pa0-x22e.google.com [IPv6:2607:f8b0:400e:c03::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE58C1A03E6 for ; Tue, 12 Aug 2014 10:22:41 -0700 (PDT) Received: by mail-pa0-f46.google.com with SMTP id lj1so13263610pab.19 for ; Tue, 12 Aug 2014 10:22:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=1s0F+X2EHJsV0AvU52lZ7qxNx2bXEI8J1DKXlXPz3+I=; b=wVJ9bcCcI9f/UtUgb0aD8LENDLXEnrzKTjJqcZo3Btx00+Lc2ImuFC7GI7RbtozDEU 2CU+yebatZ9w9rtsyDgiY8UjNvtnybsuujN/7EPwdHTkx560jNhYde4nNxGKbBujV4ze zwjouVLRAKC6lK6Nx7hs+pJT3Fov/iU6O2YQLNs5IDCcPZo37/CQRmFR8hqmCcVJllRn JTEKiZc03k1fp8p+06//an7HCFKqqhVA6/2z0nRmHVjMsRaVid79hjtvd2AgCpaV48xm UBKuKxOzW6KtAWE+MPKNIClwgE3rK9Wj8JFeOW9yM9w5hv3ZPmOd0hQuw775rmyrxk7x zlyA== X-Received: by 10.66.66.202 with SMTP id h10mr5557028pat.70.1407864161609; Tue, 12 Aug 2014 10:22:41 -0700 (PDT) Received: from spandex.local (216-67-123-104.dynamic.cdma.acsalaska.net. [216.67.123.104]) by mx.google.com with ESMTPSA id i3sm12178919pdp.2.2014.08.12.10.22.40 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 12 Aug 2014 10:22:40 -0700 (PDT) Message-ID: <53EA4D5E.70303@gmail.com> Date: Tue, 12 Aug 2014 09:22:38 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Linda Dunbar , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2460@dfweml701-chm.china.huawei.com> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DB2460@dfweml701-chm.china.huawei.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/0N46pWSpZIxX7SR18IG2ErpcmiU Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 17:22:44 -0000 On 8/12/14 9:08 AM, Linda Dunbar wrote: > Thank you for the listing. There is also SACM. > I will include those IETF initiatives in the existing work of IETF. Gap analysis will be needed. I think a gap analysis is premature, given the lack of a sense of overall direction. And my question really is *not* about why these protocols may not be applicable. My question is why you feel that new work would be successful given the lack of implementation and deployment of previous efforts (and also given that OpenStack has an implementation of their own design). We pretty clearly do not want to sink time and effort into yet another unimplemented protocol. Melinda From nobody Tue Aug 12 10:57:55 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F1301A0442 for ; Tue, 12 Aug 2014 10:57:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.569 X-Spam-Level: X-Spam-Status: No, score=-4.569 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U3wG90f7a0ow for ; Tue, 12 Aug 2014 10:57:49 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E6F41A034E for ; Tue, 12 Aug 2014 10:57:48 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLD94692; Tue, 12 Aug 2014 17:57:47 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 12 Aug 2014 18:57:46 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0158.001; Tue, 12 Aug 2014 10:57:45 -0700 From: Linda Dunbar To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: =?utf-8?B?W05zYWFzXSDnrZTlpI06ICBFeGlzdGluZyB3b3JrLCBvdGhlciB0aGluZ3M=?= Thread-Index: AQHPtdma4rlWSy/aBkSWnwoV1iexc5vMvPyAgABc2FCAAIJpAP//i1lAgAB+hAD//434oIAAeZoA//+MdRA= Date: Tue, 12 Aug 2014 17:57:44 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB24CD@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2460@dfweml701-chm.china.huawei.com> <53EA4D5E.70303@gmail.com> In-Reply-To: <53EA4D5E.70303@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.144.204] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/DMUfrUVA65KpCTCpIIa5sPDrQFs Subject: Re: [Nsaas] =?utf-8?b?562U5aSNOiAgRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhp?= =?utf-8?q?ngs?= X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Aug 2014 17:57:54 -0000 TWVsaW5kYSwgDQoNCkFuc3dlcnMgYXJlIGluc2VydGVkIGJlbG93Og0KDQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KRnJvbTogTWVsaW5kYSBTaG9yZSBbbWFpbHRvOm1lbGluZGEuc2hvcmVA Z21haWwuY29tXSANClNlbnQ6IFR1ZXNkYXksIEF1Z3VzdCAxMiwgMjAxNCAxMjoyMyBQTQ0KVG86 IExpbmRhIER1bmJhcjsgbnNhYXNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbTnNhYXNdIOetlOWk jTogRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhpbmdzDQoNCk9uIDgvMTIvMTQgOTowOCBBTSwgTGlu ZGEgRHVuYmFyIHdyb3RlOg0KPiBUaGFuayB5b3UgZm9yIHRoZSBsaXN0aW5nLiBUaGVyZSBpcyBh bHNvIFNBQ00uIA0KPiBJIHdpbGwgaW5jbHVkZSB0aG9zZSBJRVRGIGluaXRpYXRpdmVzIGluIHRo ZSBleGlzdGluZyB3b3JrIG9mIElFVEYuIEdhcCBhbmFseXNpcyB3aWxsIGJlIG5lZWRlZC4gDQoN CkkgdGhpbmsgYSBnYXAgYW5hbHlzaXMgaXMgcHJlbWF0dXJlLCBnaXZlbiB0aGUgbGFjayBvZiBh IHNlbnNlIG9mIG92ZXJhbGwgZGlyZWN0aW9uLiAgQW5kIG15IHF1ZXN0aW9uIHJlYWxseSBpcyAq bm90KiBhYm91dCB3aHkgdGhlc2UgcHJvdG9jb2xzIG1heSBub3QgYmUgYXBwbGljYWJsZS4gIE15 IHF1ZXN0aW9uIGlzIHdoeSB5b3UgZmVlbCB0aGF0IG5ldyB3b3JrIHdvdWxkIGJlIHN1Y2Nlc3Nm dWwgZ2l2ZW4gdGhlIGxhY2sgb2YgaW1wbGVtZW50YXRpb24gYW5kIGRlcGxveW1lbnQgb2YgcHJl dmlvdXMgZWZmb3J0cyAoYW5kIGFsc28gZ2l2ZW4gdGhhdCBPcGVuU3RhY2sgaGFzIGFuIGltcGxl bWVudGF0aW9uIG9mIHRoZWlyIG93biBkZXNpZ24pLg0KDQpbTGluZGFdIFRoZXJlIGlzIGFscmVh ZHkgd2lkZSBhY2NlcHRhbmNlIG9mIHNlY3VyaXR5IGZ1bmN0aW9ucyB0aGF0IGFyZSBub3QgcnVu bmluZyBvbiBjdXN0b21lci9lbnRlcnByaXNlIHByZW1pc2VzLiBOdW1lcm91cyBzZWN1cml0eSB2 ZW5kb3JzIGFyZSBub3cgbGV2ZXJhZ2luZyBjbG91ZCBiYXNlZCBtb2RlbHMgdG8gZGVsaXZlciBz ZWN1cml0eSBzb2x1dGlvbnMuIEFjY29yZGluZyB0byBbR2FydG5lci0yMDEzXSwgdGhlIGRlbWFu ZCBmb3IgY2xvdWQtYmFzZWQgc2VjdXJpdHkgc2VydmljZXMgaXMgZ3Jvd2luZy4gU21hbGwgYW5k IG1lZGl1bS1zaXplZCBidXNpbmVzc2VzIChTTUJzKSBhcmUgaW5jcmVhc2luZ2x5IGFkb3B0aW5n IGNsb3VkLWJhc2VkIHNlY3VyaXR5IHNlcnZpY2VzIHRvIHJlcGxhY2Ugb24tcHJlbWlzZXMgc2Vj dXJpdHkgdG9vbHMsIHdoaWxlIGxhcmdlciBlbnRlcnByaXNlcyBhcmUgZGVwbG95aW5nIGEgbWl4 IG9mIHRyYWRpdGlvbmFsIGFuZCBjbG91ZC1iYXNlZCBzZWN1cml0eSBzZXJ2aWNlcy4NCg0KSW4g YWRkaXRpb24sIE5TYWFTIGlzIHZlcnkgZGlmZmVyZW50IGZyb20gYWxsIHRob3NlIGxpc3RlZCBp bml0aWF0aXZlcy4gDQoNClRoZXJlIGFyZSB0aHJlZSBhc3BlY3RzIHRvIE5TYWFTOg0KLSBEZWZp bmUgdGhlIG1lY2hhbmlzbSBmb3IgY3JlYXRpbmcgdmlydHVhbCBzZWN1cml0eSBmdW5jdGlvbnMg b24gcGh5c2ljYWwgYXBwbGlhbmNlcywNCi0gU3BlY2lmeSBjb25jcmV0ZSBydWxlcyAob3IgYXR0 cmlidXRlcykgZm9yIGluc3RhbnRpYXRpbmcgVk1zIGZvciB2aXJ0dWFsIHNlY3VyaXR5IGZ1bmN0 aW9ucyAoTkZWIGluaXRpYXRpdmUpLCBhbmQNCi0gRGVmaW5lIHRoZSBtZWNoYW5pc21zIGZvciBj bGllbnRzIChhcHBsaWNhdGlvbnMpIHRvIHJlcXVlc3QvbmVnb3RpYXRlL3ZhbGlkYXRlIHNlY3Vy aXR5IGZ1bmN0aW9ucyB0aGF0IGFyZSBub3QgcGh5c2ljYWxseSBsb2NhdGVkIG9uIHRoZSBsb2Nh bCBwcmVtaXNlcy4gDQoNCkFsbCB0aG9zZSBhc3BlY3RzIHNoYXJlIGEgY29tbW9uIG5lZWQ6IEF0 dHJpYnV0ZXMgZm9yIHRoZSBuZWVkZWQgdmlydHVhbCBzZWN1cml0eSBmdW5jdGlvbnMsIHRoZSBy ZXF1ZXN0L25lZ290aWF0ZSBtZWNoYW5pc20gZm9yIHZpcnR1YWwgZnVuY3Rpb25zIChvbiBwaHlz aWNhbCBhcHBsaWFuY2VzLCBmcm9tIHJlbW90ZSBkb21haW5zLCBvciBvdGhlcnMpLg0KDQpMaW5k YSANCg0KDQo= From debu.nayak@huawei.com Tue Aug 12 20:07:54 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 572231A00BB for ; Tue, 12 Aug 2014 20:07:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.866 X-Spam-Level: X-Spam-Status: No, score=-4.866 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_ONLY_32=0.001, HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rM5ZzVNrIYIq for ; Tue, 12 Aug 2014 20:07:52 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 482F81A00B0 for ; Tue, 12 Aug 2014 20:07:50 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLE22354; Wed, 13 Aug 2014 03:07:49 +0000 (GMT) Received: from SZXEML418-HUB.china.huawei.com (10.82.67.157) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 13 Aug 2014 04:07:46 +0100 Received: from szxeml555-mbx.china.huawei.com ([169.254.1.65]) by szxeml418-hub.china.huawei.com ([10.82.67.157]) with mapi id 14.03.0158.001; Wed, 13 Aug 2014 11:07:43 +0800 From: Debu nayak To: "NSaaS@ietf.org" Thread-Topic: Subscribe Thread-Index: Ac+2o79vmww1zmw5Qdq+3GsVmNNajw== Date: Wed, 13 Aug 2014 03:07:44 +0000 Message-ID: Accept-Language: en-GB, zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.195.55.52] Content-Type: multipart/related; boundary="_004_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_"; type="multipart/alternative" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/8O_dmMnx7NzmBW1OU-lvHBEn7Cw X-Mailman-Approved-At: Wed, 13 Aug 2014 07:29:25 -0700 Subject: [Nsaas] Subscribe X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Aug 2014 03:09:26 -0000 --_004_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_ Content-Type: multipart/alternative; boundary="_000_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_" --_000_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subscribe Dr Debu Chief Security Officer MTech in Internet security,PhD in Information security, IIT Bombay. Huawei Telecommunication India pvt Ltd 8588856306 - cell [cid:image001.jpg@01CFB6D1.D92367B0] --_000_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Subscribe

 

Dr Debu

Chief  Security O= fficer

MTech in Internet = ; security,PhD in Information security, IIT Bombay.

Huawei Telecommunicati= on India pvt Ltd

8588856306 - cell=

 

--_000_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_-- --_004_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_ Content-Type: image/jpeg; name="image001.jpg" Content-Description: image001.jpg Content-Disposition: inline; filename="image001.jpg"; size=5685; creation-date="Wed, 13 Aug 2014 03:07:43 GMT"; modification-date="Wed, 13 Aug 2014 03:07:43 GMT" Content-ID: Content-Transfer-Encoding: base64 /9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7 Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCABhAPQDASIA AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3 ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3 uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD1Oxsb aazSSSMs7EkkseeT71P/AGZZ/wDPH/x4/wCNGmf8g+L8f5mrdZjKn9mWf/PH/wAeP+NH9mWf/PH/ AMeP+NW6KQFT+zLP/nj/AOPH/Gj+zLP/AJ4/+PH/ABq3RQBU/syz/wCeP/jx/wAaP7Ms/wDnj/48 f8at0UAVP7Ms/wDnj/48f8aP7Ms/+eP/AI8f8at0UAVP7Ms/+eP/AI8f8aP7Ms/+eP8A48f8at0U AVP7Ms/+eP8A48f8aP7Ms/8Anj/48f8AGrdFAFT+zLP/AJ4/+PH/ABo/syz/AOeP/jx/xq3RQBU/ syz/AOeP/jx/xo/syz/54/8Ajx/xq3RQBU/syz/54/8Ajx/xo/syz/54/wDjx/xq3Ve+nktbGaeG Bp5I1JWNerGhuw4pyaSGf2ZZ/wDPH/x4/wCNH9mWf/PH/wAeP+NYtxrWtRSW09vaQXNlKcSSjIEX vkEn68cVrWeqpcv5U0T202eEcghvdWHBFSqiZ0Tw1SEebdeTJP7Ms/8Anj/48f8AGj+zLP8A54/+ PH/GrdFUcxU/syz/AOeP/jx/xo/syz/54/8Ajx/xq3RQBU/syz/54/8Ajx/xo/syz/54/wDjx/xq 3RQBU/syz/54/wDjx/xo/syz/wCeP/jx/wAat0UAclry/ZNQEduzxIYwSFduuT70Uvib/kKL/wBc h/M0UxnQ6Z/yD4vx/mat1U0z/kHxfj/M1boEFFFFIAooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKAKctm0crXNmQkrcuh+5L9fQ+/86pOkU8b+XGy+Wf3luR88R9V9u/HXqOa2aq3ll9oKyxS GG5j/wBXKB09iO49qiUbnRTq6+99/wDX9L8Cvp+prLKLSdx523dG2eJV9R61pVyt/Absuhja3vYD 5rRxH5lP/PaI9/de/Q89dXQ9X/tGHypyguo1BbZ92Rezr7H9DxUwlrZmtfD+77SHzXbz9DVooorU 4gooooAKKKKAOU8Tf8hRf+uQ/maKTxN/yFF/65D+ZopjOh0z/kHxfj/M1bqppn/IPi/H+Zq3QIKh urqK0tZrmVsJChZ8dgBmnzO0cEjqu5lUkD1OK8j0bxFML+8h1GZjbamGSct/Ax4Dfh/KsqlTksj0 cFgZYpSkn8NtO/8ASOy8PeMJ9a1XyZII4YJAfLAyWBHIya1I9bb7WyuqmEvtUjqO2a858OzSab4i htphtkjm2mtjT9QSe5XzHxFH+8lb0Ucn/D8a4vbTVlfqevisupKo3CPu2X6no2RnGeaWvNbbxRdX vjO1miJKyyiIxjoIz2/rXpG8ZxXbTqKabR4eLwc8K4qfVXHUVmaT4g07W5ryGwmaR7KXypgUK4bn 169Kqy+MtEhfVEe4cHSQDd/um+TJwMev4VocZu0Vn/23Yf2F/bfmn7F5Hn79pzsxnOOtNg8Qabca B/bqT4sPKMvmMpHyjOeOvagDSorCtfGeiXugXGuW9y8llbEiVhG25cY/h69xVibxNpMHh1dfe5xp 7IHEgUkkE4HHXOaYGrRWXb+JNKufD7a9Fc5sFRnMhUggDrx1zxVO48c+HrTSbbVLm/8AKguwWgDI 2+QA4yFxmgDoKK53S/Heg6w9wlnPMxt4Wnk3wOuEXqeRz9K1NG1my17TY9R0+RpLeQkKzKVJwcHg 0ATwzO93cRHG2Pbt/EVPVS3/AOQhef8AAP5VbpAFcx4o126029ghto2YKvnPtcD5QcHjv9Kvat4j t9OkW3jQz3DnARTwMcnJ9q4jVdbj1e7NxPayb4h5Y8rPzLuO76gYzXDWxlOL5U9fL+kbQpStex6D dWSapZwybmhnUCSGZPvRtj9R6jvXL6hcnTb6KabZaXav84H3GY/xp/ssOq/1HM+l+NI9qxTxqI0U /MpxtUHaCfrWtrqrqfhy4ks7WC+k8smNJBnnvj3pwrU6y916o7MNOVKahPWL0+/9PU0LXUIbiyFy 7LEMfPuYYU/X09/Sm22raddtttr+3lb0SUE/lXk1rFb/AGVWlJlCYV3uXIjjP90L1JFJdtFBbARI gkWZZIX8vYSCeg74zWH9oe9y8p6Dyem5uKk9+2n5/wCR7NUNzd21mm+5uI4V9ZGAzWZoviO31YfZ 3At75B+8t2P6r6iqHii6hvY4LOGWNy0vzOmGMZBx+B7foetd7qrk5oankU8LN1lTmrFDVfiGtrKV tIo2xyokySw9Tjpmtjwz4qh8QxFWi8i4UZKbtwI9Qf6Vwmt6GYZnUwBnAJ8237j/AGkPt3XNWPhx Y3EuvtdorfZ4I2DP2LHgD+tcdGrVcrS/r0PerYDB/UpVIaNK9/67/edP4m/5Ci/9ch/M0UeJv+Qo v/XIfzNFekfLnQaZ/wAg+L8f5mrRYVV0z/kHxfj/ADNW6TEcv48udVs9CS+0qSSN7aZXkKD+DBBy O45FecSXljrj+c4jsbx+WYf6mU+v+wT+X0r2yRkCkPggjBB5zXmOq+Gdc/tmRbPQdLmt5HykyxbA B/tDdwfwrnqwbPcyzFwpXi9H32/4cZpOk3t3qdjNLARPbOqzZ5Dpg7HB6EdifpVCfTruzszaYEbS YkupXbCxj+FCfXuR9K9E0DRJdKsBDKyO7HJWJCsa+wGaq+JfDt3qSrPZx20ksY/1NwmVb6HPBrN0 Xy+Z1wzVOvytrl7+l/8AP5aHn9rqsWj5/spPMu2G37XIvK57Ivb6nmvSNFkvl0m1S6mZpxGPMLdc 9eaxPC+g6tFqP2nUNGsLSOPpiMF2PtycfWuwkRH/ANZEQfUdaulBrVnLmuKp1ZKEFfq3e9zyrwmn iV9X8QHQr2xt1+3HzftURcsctjGKzwl8U8dpfvHNeCFDK0KkKSG5IHpXqNnotlpUlxLp0CIbl/Mm xnc7ev60220rTILu6uobSNJ7z/j4Y5Jk+oNdNzxTm/7SsP8AhT3/AB9w5/s3ysbxnftxtx65rmr/ AFGc+A/Dnhu2hnnmvIxNcRQLlzCGJwB79fwruR4F8LfaPP8A7Ett2c4525+mcVqQ6RpsGqf2pHZx reeWIvNGchOmAOgH0pXA870C9jsPGF3pc2lXWm6Tr8RiS3uk27X2447c8j8RWfbXFxcWVn8PbjcZ ItY2ye8I5/nk161qGk6XrZgOo2qTtbvvhLEgo3qCPpTf+Ec0gaz/AGyLCL+0D/y8c7umPp0ouFjy m7uLjTrLVPh/Bu8y41RFt/8Arixz/RfzNaHiOzudN+JWl2trcWdosNikVnLfpuhG1SPzz+teiv4f 0mTWU1iXT4nv48bZzncMDA9ulWdT0fStegWHVLGG7RTlRIuSp9j1FPmE0c5bvr7afqo1XWdHvYfs Eu2OxXDhtvU+3Wn/AAo/5J/Y/wC/J/6Ga19O8G+HNKeZ7DSoYGniMMhUn5kPUda0NN0yy0exSy0+ 3W3t0JKxrnAycnrTJC3/AOQhef8AAP5VX17Uf7O01nUgO/yqc4xVi3/5CF5/wD+Vc749Ba1hU48v ndnHqPXj865MZNwotr0+92NaSTmrnG3WoMY83cW4SSZjjkALoc4PI9Oar3LzCW7SO6lQ2oz2Ct7e 1VdQIa6t87Y49ikDGAKuzy295FdvNMPsxkBicAg7sfd6V4iioJNL+ro+xoUY0acJJXutXv1X/B0K VvfiaQR3YDAkYfHOR0z6iuz8JavNaXxs7mQsrMV3dj6H9R2rgZPs5izGGWQNggtkEeo4rotNaU6l bFVm5Vd5QDZnH8XfNa1H7NqpHRr+vxMc2w1PlVSKtfRm743srC3ng1C0hP2+WTCxhcrN6kj1HrXG Xk7TJDLJAQQ/76Rjlt3pjsPQV6R4l8P6lfXUGoabNE0kMRT7PKMBgTk4PY1574hh1FboNe6bJaYG CSuQx9d3Q1016cnW5uXTuVlNSM4QjzJteeq8rdvvO08N6Fb65Yy6lfW7RmaQfZXViskarxkEepzV HVfB+paLJ/aunXQu1tyZGR8rIc9SSOv6Vl6f4gvND0uKzvHa4s7lDiJXKSwjsUbt61peHfF2pRXL wX+p2OoaYiFvPuD5N0qgdCmNrntx1rooqhKmlHocdb67h6rnTXNTbt3Vtrd0c7dahqFzHIl6TAXO XcK37z8Bx+PFd98Pr21m0BbSJo1ngY+YirtYgnhj659a86s5tSvtQ+y6YZR50h8uFTkKCf0Ar1nw 9oaaJY7HkM11JgzTHqx9B7ClhlU523t/X9bm+cuFPD+ylo27pL9dNvn6GT4m/wCQov8A1yH8zRR4 m/5Ci/8AXIfzNFeifJnQ6Z/yD4vx/maskMe+KraZ/wAg+L8f5mrdJiKt5c22n2xuLhiFBCjAJZmJ wAAOSSaqS+ILC2KLMk8RKhnDQn9ypO0F/wC6Cam1iwlv7aL7O6JPbzpPFvBKllPQ47EZrLvtD1K+ a6Je2jXUIUhuQGZvLCk8pxzlWxzjmiwFybxRpUEF5NJMwWyuBbyjYchzjGB3HPX2NE3ijSreG9lk mYLYzrBMNhyHOMYHfr1+tZF74Nubm4uXS6iVJ2kcoQeW3fIT9Azj8qW+8HXV1cXci3USpctI5Qg8 tn92T9Az/pTGbcmvWEalmkfAeWP7h6xglv0BpsPiPTLiOCSKZmWdYmQ7DyJCVX9Qc+lZ0vhy8lnm XzoBAXuJYjzvLSqVwR0wMnke1RW3hK6truRkuYfs5lt5I48HKbGLOPoSSR9aBGnJrGmvbXV0VmFv bBi04iO1sHBCn+I544qpdaraJLCoW4kE8BnjlSIkFAASc+2R+dIuhal/Z8Gk/aYUs4Jw4mTPmsis WVSpBXOcZ9cUQeG7uKOGJrqORYLe5gRmzuKyEFM4GOAMGlZDuRp4gsfNjjLyFZBH+9EZ2Jv+4GPY miLxLpMtubhbhhGPNyShGPL+9n8xj1qMeFLsRfZRPB9nmNu87c7w0QUEKOhB2Dr05qlB4Ru7G8jl 320sZglSWGTOyR2PBzjptwD9KVirm1JqkMGnG/ljnjjBA2tEQ/JAHy+5IotvEdhNPbW4kfzbkuqI yEEFPvBvQ5zWb/Y1y3h19KnmCu0oZMuxEaBwwQMeTgDANNm8MuLtrizuBbiJ4mt4hyp2sWYuSCck s3Q0hmj/AMJXpjQTThbkpCpdsQHJQMVLD1AIIqT/AISLTlnlhZpYpokjkeN4yGAdtq/qRn0zWJb+ Frm2s72BLiMm8tmjYsWO1i7MMei4bkeoqfU/DtzfXjXUVxEknmwEFgeY1xvU/XAI+lPQRsDxJaLB JMYboxpN5IYQn94+7ZhfX5hitGxvoNRtEurZi0b5xkYIIOCCOxBBFcsPDtw1rNavHABJei4aWOdw zL5pfGMfKcHGRWto8N3pmlw2TIjmEFQwb7wycE++Ovvmi4rGhb/8hC8/4B/KqPijS4tT0vEqBxE2 /aTjI71IgvftM0mY0Eu3GOSMDFTraFzulYyH/aPH5VnVgqkHB9Rxbi7nmesaTFLBELcJG68Imcbv YVjxq62cllcRvGS4dH2kgN0wcV6VrngyLUXW5tZjBcJnbg8Cuem0XxDbSeU3kzHPDMATj8O/vXh+ yrUY8klfz/q/4n0WGzVRp8kldLbujnLLRjKVeZwqlwPb/PtXZaLo9vLq0dwIwvlD53z1A7fpUFt4 N1HUJUl1Gcxoo/1anjrnOOxrs7PTbeziCIucdSe9aU8NVrVFKekV0OXG5jKvv8iaW8jiieU52IpZ mPAAHWuA17xLqOvWc0VnGltppU7pJeGmA9M9BXQ+Ob77F4daBDh7x1hX6Hr+n8689vbLUdV1Z7ay tpp1iwiqg+VePXoK7cTVnzqnB77m+U4SDXtp28m9la2v4/Kxm312by6aXBVcBUX0AqfSNEvtcuhb 2UJbH35DwqD1Jrr9F+GkjFZtZnCr18iE8n6t/hXe2dja6fbLb2cCQxL0VBinSwzsk9Eeji86o0I+ zw/vNfcv8zM8OeGLPw7a7Yv3ly4/ezkct7D0FbVFFdyioqyPkKtWdabnN3bOT8Tf8hRf+uQ/maKX xN/yFF/65D+ZoqiDoNM/5B8X4/zNW6pabLGLCIGRQee49TVrzov+eqf99CgQ+imedF/z1T/voUed F/z1T/voUgH0Uzzov+eqf99Cjzov+eqf99CgB9FM86L/AJ6p/wB9Cjzov+eqf99CgB9FM86L/nqn /fQo86L/AJ6p/wB9CgB9IyhhhhkU3zov+eqf99Cjzov+eqf99CgCJ4Co+TDL/daoRDCTj5o29M1b 86L/AJ6p/wB9Cms8Dj5nQ/8AAhSsNMrm1PaX8xSfZX/56fpUpEI+5Oo/4EKTdj/ltGf+BClZlXIx a+shNPESqO9LuH/PWP8A76FHyHrOn/fVFmF0MPy9KaGnJwjY/CpwLcdZVP8AwIVIJYV6SIP+BCnY VyAW00g/eTtj0HFSx2scX3Rz60/zov8Anqn/AH0KPOi/56p/30KdhXF2ClAA7U3zov8Anqn/AH0K POi/56p/30KLCIbvT7O+MZu7aOcxHcnmLnaanSNIkCRoqKOgUYFJ50X/AD1T/voUedF/z1T/AL6F FupTlJqzeg+imedF/wA9U/76FHnRf89U/wC+hQSPopnnRf8APVP++hR50X/PVP8AvoUAcv4m/wCQ ov8A1yH8zRTfEro2pqVZT+6HQ+5opjNN/vt/vH+dJRRQUFFFFABRRRQAUUUUAFFFFABRRRQAUUUU CCiiigYUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUCFXv9aKKKAP/Z --_004_A24410F972E32E498A40582A63BFB91C8D95E0C9szxeml555mbxchi_-- From nobody Fri Aug 15 14:20:16 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D808E1A066D for ; Fri, 15 Aug 2014 14:20:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.868 X-Spam-Level: X-Spam-Status: No, score=-4.868 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2hU5th0t8YEo for ; Fri, 15 Aug 2014 14:19:53 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7CA31A066F for ; Fri, 15 Aug 2014 14:19:52 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLH79162; Fri, 15 Aug 2014 21:19:51 +0000 (GMT) Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Fri, 15 Aug 2014 22:19:49 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm.china.huawei.com ([169.254.5.198]) with mapi id 14.03.0158.001; Fri, 15 Aug 2014 14:19:37 -0700 From: Linda Dunbar To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: Comparing NSIS and the work to be done by NSaaS Thread-Index: AQHPuM6emKLMM+CUUkiepBZ4APAupA== Date: Fri, 15 Aug 2014 21:19:37 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB5514@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> In-Reply-To: <53EA4704.2090401@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.152.101] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F645DB5514dfweml701chmchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/pOLXqkEcxN7UNepA1laxUlP38TU Subject: [Nsaas] Comparing NSIS and the work to be done by NSaaS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Aug 2014 21:20:02 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F645DB5514dfweml701chmchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TWVsaW5kYSwNCg0KVGhhbmsgeW91IGZvciBsaXN0aW5nIHRob3NlIHJlbGF0ZWQgZXhpdGluZyB3 b3JrIGJ5IElFVEYgZm9yIE5TYWFTLiBJIGRpZCBzb21lIHN0dWR5IG9uIE5TSVMuIEhlcmUgaXMg bXkgZmluZGluZywgcGxlYXNlIGxldCBtZSBrbm93IGlmIG15IGZpbmRpbmdzIG1pc3MgYW55dGhp bmc6DQoNCi0gRGlmZmVyZW5jZXMgYmV0d2VlbiBOU0lTIGFuZCBOU2FhUzoNCg0KICAgICAgTlNJ UyBpcyBmb3Igc3RhbmRhcmRpemluZyBhbiBJUCBzaWduYWxpbmcgcHJvdG9jb2wgKFJTVlApIGFs b25nIGRhdGEgcGF0aCBmb3IgZW5kIHBvaW50cyB0byByZXF1ZXN0IGl0cyB1bmlxdWUgUW9TIGNo YXJhY3RlcmlzdGljcywgdW5pcXVlIEZXIHBvbGljaWVzIG9yIE5BVCBuZWVkcyAoUkZDNTk3Mykg dGhhdCBhcmUgZGlmZmVyZW50IGZyb20gdGhlIEZXL05BVCBvcmlnaW5hbCBzZXR0aW5nLiBUaGUg cmVxdWVzdHMgYXJlIGNvbW11bmljYXRlZCBkaXJlY3RseSB0byB0aGUgRlcvTkFUIGRldmljZXMu IE5TSVMgaXMgbGlrZSBlYXN0LXdlc3QgcHJvdG9jb2xzIHRoYXQgcmVxdWlyZXMgYWxsIGludm9s dmVkIGRldmljZXMgdG8gZnVsbHkgY29tcGx5IHRvIG1ha2UgaXQgd29yay4NCg0KICAgICAgTlNh YVMgaGFzIHRocmVlIHBvdGVudGlhbCBhc3BlY3RzOg0KICAgICAgLSBEZWZpbmUgdGhlIHN0YW5k YXJkIG1lY2hhbmlzbXMgZm9yIGNsaWVudHMgKGFwcGxpY2F0aW9ucykgdG8gcmVxdWVzdC9uZWdv dGlhdGUvdmFsaWRhdGUgc2VjdXJpdHkgZnVuY3Rpb25zIHRoYXQgYXJlIG5vdCBwaHlzaWNhbGx5 IGxvY2F0ZWQgb24gdGhlIGxvY2FsIHByZW1pc2VzLiBJdCBpcyBtb3JlIHRoYW4gU0ZDIHRoYXQg dHJlYXRzIGFsbCDigJxGdW5jdGlvbnPigJ0gYXMgYmxhY2sgYm94LiBOU2FhUyBpcyB0YXJnZXRl ZCB0byBkZWZpbmUgdGhlIHNlbWFudGljcyAodGhlIGFjdHVhbCBydWxlcyAmIHBvbGljaWVzKSBv ZiB0aGUgc2VjdXJpdHkgZnVuY3Rpb25zIG5lZWRlZCBhbmQgdGhlIG5lZ290aWF0aW9uIHNjaGVt ZS4gIFRoZSByZXF1ZXN0cyBkb27igJl0IHVzdWFsbHkgZ29lcyB0byBGVyBkZXZpY2VzLCBidXQg aW5zdGVhZCB0byBjb250cm9sbGVyIHRoYXQgY2FuIGRpc3NlbWluYXRlIHRvIHRoZSBpbnZvbHZl ZCBkZXZpY2VzIGluIHRoZSBpbnRlcmZhY2UgdGhhdCB0aGV5IHN1cHBvcnQuDQoNCg0KICAgICAg LSBEZWZpbmUgdGhlIG1lY2hhbmlzbSBmb3IgZm9ybXVsYXRpbmcgdmlydHVhbCBzZWN1cml0eSBm dW5jdGlvbnMgb24gcGh5c2ljYWwgYXBwbGlhbmNlcyAoIGluIGEgc2ltaWxhciB3YXkgdG8gaG93 IFZQTiB2aXJ0dWFsaXplcyB0aGUgY2FycmllciBuZXR3b3JrKQ0KDQogICAgICAtIFNwZWNpZnkg Y29uY3JldGUgcnVsZXMgKHBvbGljaWVzIG9yIGF0dHJpYnV0ZXMpIGZvciBpbnN0YW50aWF0aW5n IFZNcyBmb3IgdmlydHVhbCBzZWN1cml0eSBmdW5jdGlvbnMgKE5GViBpbml0aWF0aXZlKS4gICBU aGlzIGlzIG9uIHRoZSBzZXJ2aWNlIGZ1bGZpbGxtZW50IHNpZGUuDQoNCg0KDQotIFdoeSB3ZSBi ZWxpZXZlIE5TYWFTIGhhcyBoaWdoZXIgY2hhbmNlIHRvIGJlIGRlcGxveWVkIHRoYW4gTlNJUzoN Cg0KMS4gICAgICBPcGVuU3RhY2sgYWxyZWFkeSBoYXMgcHJlbGltaW5hcnkgaW1wbGVtZW50YXRp b24sIGJ1dCB0aGUgc3BlY2lmaWNhdGlvbiBpcyBub3QgY29tcGxldGUuIElFVEYgY2FuIHBsYXkg YW4gYWN0aXZlIHJvbGUgdG8gbWFrZSB0aGUgc3BlY2lmaWNhdGlvbiBjb21wbGV0ZS4gRXh0ZW5k IHdoYXQgT3BlblN0YWNrIGhhcyB0byBhIG1vcmUgY29tcHJlaGVuc2l2ZSBzcGVjaWZpY2F0aW9u cyB0aGF0IGNhbiBtZWV0IG9wZXJhdG9ycyByZXF1aXJlbWVudCwgYW5kIHRoZW4gaGF2ZSBvcGVy YXRvcnMgZW5jb3VyYWdlIHRoZWlyIHN1cHBsaWVycyB0byBjb250cmlidXRlIG9wZW4gc291cmNl IHBlciBJRVRGIHNwZWNpZmljYXRpb25zIHRvIHRoZSBPcGVuU3RhY2sgY29tbXVuaXR5LiBBcyB0 aGUgc29mdHdhcmUgZGV2ZWxvcG1lbnQgY3ljbGU6IEFyY2hpdGVjdHVyZSwgRGVzaWduIHNwZWNp ZmljYXRpb24sIGFuZCBjb2Rpbmc6IElFVEYgY2FuIHRha2UgdGhlIG93bmVyc2hpcCBvZiB0aGUg Zmlyc3QgdHdvIHN0ZXBzLg0KDQoyLiAgICAgIFRoZSByZXF1ZXN0cyBhcmUgdG8gY29udHJvbGxl cnMsIGluc3RlYWQgb2YgdG8gZGV2aWNlcy4gSXQgZG9lc27igJl0IHJlcXVpcmUgYWxsIG1pZGRs ZSBib3hlcyB0byBiZSBjaGFuZ2VkIHRvIG1ha2UgaXQgd29yay4gVGhlIHNlY3VyaXR5IGNhbiBi ZSBiZXR0ZXIgY29udHJvbGxlZCBieSB0aGUgY29udHJvbGxlcnMuDQoNCjMuICAgICAgVGhlcmUg aXMgdmVyeSBzdHJvbmcgbW9tZW50dW0gdG8gbWFrZSB2aXJ0dWFsaXplZCBuZXR3b3JrIGZ1bmN0 aW9ucyB0byBiZSBkZXBsb3llZCBieSBvcGVyYXRvcnMgKE5GViBpbml0aWF0aXZlKS4NCg0KDQpM aW5kYQ0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBNZWxpbmRhIFNob3Jl IFttYWlsdG86bWVsaW5kYS5zaG9yZUBnbWFpbC5jb21dDQpTZW50OiBUdWVzZGF5LCBBdWd1c3Qg MTIsIDIwMTQgMTE6NTYgQU0NClRvOiBMaW5kYSBEdW5iYXI7IG5zYWFzQGlldGYub3JnDQpTdWJq ZWN0OiBSZTogW05zYWFzXSDnrZTlpI06IEV4aXN0aW5nIHdvcmssIG90aGVyIHRoaW5ncw0KDQpP biA4LzEyLzE0IDg6NTEgQU0sIExpbmRhIER1bmJhciB3cm90ZToNCj4gW0xpbmRhXSBJJ3ZlIHNl ZW4gSUVURiB3b3JrIG9uIGdlbmVyYWwgY29udHJvbCA8LT4gYWdlbnQsIGJ1dCBub3QNCj4gc3Bl Y2lmaWNhbGx5IHRvIFNlY3VyaXR5IGZ1bmN0aW9ucywgbGlrZSBGVyBwb2xpY2llcywgbmVnb3Rp YXRpb25zLA0KPiBhbmQgdmFsaWRhdGlvbnMgb2Ygc2VjdXJpdHkgZnVuY3Rpb25zIHRoYXQgYXJl IG5vdCBwaHlzaWNhbGx5IGxvY2F0ZWQNCj4gaW4gdGhlIGN1c3RvbWVyIHByZW1pc2VzIGJ1dCBh Y2Nlc3NlZCB2aWEgcmVtb3RlbHkuDQoNCm1pZGNvbSwgbnNpcywgcGNwLCAoYXJndWFibHkpIFNP Q0tTLg0KDQpNZWxpbmRhDQoNCg0K --_000_4A95BA014132FF49AE685FAB4B9F17F645DB5514dfweml701chmchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVu dD0iTWljcm9zb2Z0IEV4Y2hhbmdlIFNlcnZlciI+DQo8IS0tIGNvbnZlcnRlZCBmcm9tIHJ0ZiAt LT4NCjxzdHlsZT48IS0tIC5FbWFpbFF1b3RlIHsgbWFyZ2luLWxlZnQ6IDFwdDsgcGFkZGluZy1s ZWZ0OiA0cHQ7IGJvcmRlci1sZWZ0OiAjODAwMDAwIDJweCBzb2xpZDsgfSAtLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHk+DQo8Zm9udCBmYWNlPSJDb25zb2xhcyIgc2l6ZT0iMiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Ij4NCjxkaXY+TWVsaW5kYSwgPC9kaXY+DQo8ZGl2PiZuYnNw OzwvZGl2Pg0KPGRpdj5UaGFuayB5b3UgZm9yIGxpc3RpbmcgdGhvc2UgcmVsYXRlZCBleGl0aW5n IHdvcmsgYnkgSUVURiBmb3IgTlNhYVMuIEkgZGlkIHNvbWUgc3R1ZHkgb24gTlNJUy4gSGVyZSBp cyBteSBmaW5kaW5nLCBwbGVhc2UgbGV0IG1lIGtub3cgaWYgbXkgZmluZGluZ3MgbWlzcyBhbnl0 aGluZzo8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+DQo8ZGl2Pi0gRGlmZmVyZW5jZXMgYmV0d2Vl biBOU0lTIGFuZCBOU2FhUzo8L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+DQo8ZGl2IHN0eWxlPSJw YWRkaW5nLWxlZnQ6MzZwdDsiPk5TSVMgaXMgZm9yIHN0YW5kYXJkaXppbmcgYW4gSVAgc2lnbmFs aW5nIHByb3RvY29sIChSU1ZQKSBhbG9uZyBkYXRhIHBhdGggZm9yIGVuZCBwb2ludHMgdG8gcmVx dWVzdCBpdHMgdW5pcXVlIFFvUyBjaGFyYWN0ZXJpc3RpY3MsIHVuaXF1ZSBGVyBwb2xpY2llcyBv ciBOQVQgbmVlZHMgKFJGQzU5NzMpIHRoYXQgYXJlIGRpZmZlcmVudCBmcm9tIHRoZSBGVy9OQVQg b3JpZ2luYWwgc2V0dGluZy4NClRoZSByZXF1ZXN0cyBhcmUgY29tbXVuaWNhdGVkIGRpcmVjdGx5 IHRvIHRoZSBGVy9OQVQgZGV2aWNlcy4gTlNJUyBpcyBsaWtlIGVhc3Qtd2VzdCBwcm90b2NvbHMg dGhhdCByZXF1aXJlcyBhbGwgaW52b2x2ZWQgZGV2aWNlcyB0byBmdWxseSBjb21wbHkgdG8gbWFr ZSBpdCB3b3JrLiAgPC9kaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6MzZwdDsiPjxmb250 IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdiBzdHlsZT0i cGFkZGluZy1sZWZ0OjM2cHQ7Ij48Zm9udCBmYWNlPSJDYWxpYnJpIiBzaXplPSIyIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExcHQ7Ij5OU2FhUyBoYXM8Zm9udCBmYWNlPSJDb25zb2xhcyIgc2l6 ZT0iMiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Ij4gdGhyZWUgcG90ZW50aWFsIGFz cGVjdHM6PC9zcGFuPjwvZm9udD48L3NwYW4+PC9mb250PjwvZGl2Pg0KPGRpdiBzdHlsZT0icGFk ZGluZy1sZWZ0OjM2cHQ7Ij4tIERlZmluZSB0aGUgc3RhbmRhcmQgbWVjaGFuaXNtcyBmb3IgY2xp ZW50cyAoYXBwbGljYXRpb25zKSB0byByZXF1ZXN0L25lZ290aWF0ZS92YWxpZGF0ZSBzZWN1cml0 eSBmdW5jdGlvbnMgdGhhdCBhcmUgbm90IHBoeXNpY2FsbHkgbG9jYXRlZCBvbiB0aGUgbG9jYWwg cHJlbWlzZXMuIEl0IGlzIG1vcmUgdGhhbiBTRkMgdGhhdCB0cmVhdHMgYWxsIOKAnEZ1bmN0aW9u c+KAnSBhcyBibGFjayBib3guDQpOU2FhUyBpcyB0YXJnZXRlZCB0byBkZWZpbmUgdGhlIHNlbWFu dGljcyAodGhlIGFjdHVhbCBydWxlcyAmYW1wOyBwb2xpY2llcykgb2YgdGhlIHNlY3VyaXR5IGZ1 bmN0aW9ucyBuZWVkZWQgYW5kIHRoZSBuZWdvdGlhdGlvbiBzY2hlbWUuICBUaGUgcmVxdWVzdHMg ZG9u4oCZdCB1c3VhbGx5IGdvZXMgdG8gRlcgZGV2aWNlcywgYnV0IGluc3RlYWQgdG8gY29udHJv bGxlciB0aGF0IGNhbiBkaXNzZW1pbmF0ZSB0byB0aGUgaW52b2x2ZWQgZGV2aWNlcyBpbiB0aGUN CmludGVyZmFjZSB0aGF0IHRoZXkgc3VwcG9ydC4gPC9kaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5n LWxlZnQ6MzZwdDsiPjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiIgc2l6ZT0iMiI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMXB0OyI+Jm5ic3A7PC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXYg c3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIiBz aXplPSIyIiBjb2xvcj0iI0MwMDAwMCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyI+Jm5i c3A7PC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+ LSBEZWZpbmUgdGhlIG1lY2hhbmlzbSBmb3IgZm9ybXVsYXRpbmcgdmlydHVhbCBzZWN1cml0eSBm dW5jdGlvbnMgb24gcGh5c2ljYWwgYXBwbGlhbmNlcyAoIGluIGEgc2ltaWxhciB3YXkgdG8gaG93 IFZQTiB2aXJ0dWFsaXplcyB0aGUgY2FycmllciBuZXR3b3JrKTwvZGl2Pg0KPGRpdiBzdHlsZT0i cGFkZGluZy1sZWZ0OjM2cHQ7Ij48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iIHNpemU9IjIi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTFwdDsiPiZuYnNwOzwvc3Bhbj48L2ZvbnQ+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6MzZwdDsiPi0gU3BlY2lmeSBjb25jcmV0ZSBydWxl cyAocG9saWNpZXMgb3IgYXR0cmlidXRlcykgZm9yIGluc3RhbnRpYXRpbmcgVk1zIGZvciB2aXJ0 dWFsIHNlY3VyaXR5IGZ1bmN0aW9ucyAoTkZWIGluaXRpYXRpdmUpLiAgPGZvbnQgZmFjZT0iQ2Fs aWJyaSIgc2l6ZT0iMiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyI+IFRoaXMgaXMgb24g dGhlIHNlcnZpY2UgZnVsZmlsbG1lbnQgc2lkZS48L3NwYW4+PC9mb250PjwvZGl2Pg0KPGRpdiBz dHlsZT0icGFkZGluZy1sZWZ0OjM2cHQ7Ij48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZu YnNwOzwvZm9udD48L2Rpdj4NCjxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+PGZvbnQg ZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2IHN0eWxlPSJw YWRkaW5nLWxlZnQ6MzZwdDsiPjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9m b250PjwvZGl2Pg0KPGRpdj4tIFdoeSB3ZSBiZWxpZXZlIE5TYWFTIGhhcyBoaWdoZXIgY2hhbmNl IHRvIGJlIGRlcGxveWVkIHRoYW4gTlNJUzo8L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMg TmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8b2wgc3R5bGU9Im1hcmdpbjowO3BhZGRp bmctbGVmdDo1NHB0OyI+DQo8bGk+T3BlblN0YWNrIGFscmVhZHkgaGFzIHByZWxpbWluYXJ5IGlt cGxlbWVudGF0aW9uLCBidXQgdGhlIHNwZWNpZmljYXRpb24gaXMgbm90IGNvbXBsZXRlLiBJRVRG IGNhbiBwbGF5IGFuIGFjdGl2ZSByb2xlIHRvIG1ha2UgdGhlIHNwZWNpZmljYXRpb24gY29tcGxl dGUuIEV4dGVuZCB3aGF0IE9wZW5TdGFjayBoYXMgdG8gYSBtb3JlIGNvbXByZWhlbnNpdmUgc3Bl Y2lmaWNhdGlvbnMgdGhhdCBjYW4gbWVldCBvcGVyYXRvcnMgcmVxdWlyZW1lbnQsDQphbmQgdGhl biBoYXZlIG9wZXJhdG9ycyBlbmNvdXJhZ2UgdGhlaXIgc3VwcGxpZXJzIHRvIGNvbnRyaWJ1dGUg b3BlbiBzb3VyY2UgcGVyIElFVEYgc3BlY2lmaWNhdGlvbnMgdG8gdGhlIE9wZW5TdGFjayBjb21t dW5pdHkuIEFzIHRoZSBzb2Z0d2FyZSBkZXZlbG9wbWVudCBjeWNsZTogQXJjaGl0ZWN0dXJlLCBE ZXNpZ24gc3BlY2lmaWNhdGlvbiwgYW5kIGNvZGluZzogSUVURiBjYW4gdGFrZSB0aGUgb3duZXJz aGlwIG9mIHRoZSBmaXJzdCB0d28gc3RlcHMuDQo8L2xpPjwvb2w+DQo8ZGl2IHN0eWxlPSJwYWRk aW5nLWxlZnQ6NTRwdDsiPjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250 PjwvZGl2Pg0KPG9sIHN0YXJ0PSIyIiBzdHlsZT0ibWFyZ2luOjA7cGFkZGluZy1sZWZ0OjU0cHQ7 Ij4NCjxsaT5UaGUgcmVxdWVzdHMgYXJlIHRvIGNvbnRyb2xsZXJzLCBpbnN0ZWFkIG9mIHRvIGRl dmljZXMuIEl0IGRvZXNu4oCZdCByZXF1aXJlIGFsbCBtaWRkbGUgYm94ZXMgdG8gYmUgY2hhbmdl ZCB0byBtYWtlIGl0IHdvcmsuIFRoZSBzZWN1cml0eSBjYW4gYmUgYmV0dGVyIGNvbnRyb2xsZWQg YnkgdGhlIGNvbnRyb2xsZXJzLiA8L2xpPjwvb2w+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nLWxlZnQ6 NTRwdDsiPjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0K PG9sIHN0YXJ0PSIzIiBzdHlsZT0ibWFyZ2luOjA7cGFkZGluZy1sZWZ0OjU0cHQ7Ij4NCjxsaT5U aGVyZSBpcyB2ZXJ5IHN0cm9uZyBtb21lbnR1bSB0byBtYWtlIHZpcnR1YWxpemVkIG5ldHdvcmsg ZnVuY3Rpb25zIHRvIGJlIGRlcGxveWVkIGJ5IG9wZXJhdG9ycyAoTkZWIGluaXRpYXRpdmUpLiA8 L2xpPjwvb2w+DQo8ZGl2Pjxmb250IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250 PjwvZGl2Pg0KPGRpdj48Zm9udCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPiZuYnNwOzwvZm9udD48 L2Rpdj4NCjxkaXY+TGluZGE8L2Rpdj4NCjxkaXYgc3R5bGU9InBhZGRpbmctbGVmdDozNnB0OyI+ ICA8L2Rpdj4NCjxkaXY+PGZvbnQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+ PC9kaXY+DQo8ZGl2Pi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPg0KDQpGcm9tOiBNZWxp bmRhIFNob3JlIFs8YSBocmVmPSJtYWlsdG86bWVsaW5kYS5zaG9yZUBnbWFpbC5jb20iPm1haWx0 bzptZWxpbmRhLnNob3JlQGdtYWlsLmNvbTwvYT5dDQo8YnI+DQoNClNlbnQ6IFR1ZXNkYXksIEF1 Z3VzdCAxMiwgMjAxNCAxMTo1NiBBTTxicj4NCg0KVG86IExpbmRhIER1bmJhcjsgbnNhYXNAaWV0 Zi5vcmc8YnI+DQoNClN1YmplY3Q6IFJlOiBbTnNhYXNdIDxmb250IGZhY2U9IlNpbVN1biI+562U 5aSNPC9mb250PjogRXhpc3Rpbmcgd29yaywgb3RoZXIgdGhpbmdzPC9kaXY+DQo8ZGl2Pjxmb250 IGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdj5PbiA4LzEy LzE0IDg6NTEgQU0sIExpbmRhIER1bmJhciB3cm90ZTo8L2Rpdj4NCjxkaXY+Jmd0OyBbTGluZGFd IEkndmUgc2VlbiBJRVRGIHdvcmsgb24gZ2VuZXJhbCBjb250cm9sICZsdDstJmd0OyBhZ2VudCwg YnV0IG5vdCA8L2Rpdj4NCjxkaXY+Jmd0OyBzcGVjaWZpY2FsbHkgdG8gU2VjdXJpdHkgZnVuY3Rp b25zLCBsaWtlIEZXIHBvbGljaWVzLCBuZWdvdGlhdGlvbnMsIDwvZGl2Pg0KPGRpdj4mZ3Q7IGFu ZCB2YWxpZGF0aW9ucyBvZiBzZWN1cml0eSBmdW5jdGlvbnMgdGhhdCBhcmUgbm90IHBoeXNpY2Fs bHkgbG9jYXRlZCA8L2Rpdj4NCjxkaXY+Jmd0OyBpbiB0aGUgY3VzdG9tZXIgcHJlbWlzZXMgYnV0 IGFjY2Vzc2VkIHZpYSByZW1vdGVseS48L2Rpdj4NCjxkaXY+Jm5ic3A7PC9kaXY+DQo8ZGl2Pm1p ZGNvbSwgbnNpcywgcGNwLCAoYXJndWFibHkpIFNPQ0tTLjwvZGl2Pg0KPGRpdj4mbmJzcDs8L2Rp dj4NCjxkaXY+TWVsaW5kYTwvZGl2Pg0KPGRpdj4mbmJzcDs8L2Rpdj4NCjxkaXY+PGZvbnQgZmFj ZT0iVGltZXMgTmV3IFJvbWFuIj4mbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8L3NwYW4+PC9mb250Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_4A95BA014132FF49AE685FAB4B9F17F645DB5514dfweml701chmchi_-- From nobody Fri Aug 15 20:43:44 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C315E1A6F0C for ; Fri, 15 Aug 2014 20:43:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yzCECf1jSILP for ; Fri, 15 Aug 2014 20:43:41 -0700 (PDT) Received: from mail-pa0-x22e.google.com (mail-pa0-x22e.google.com [IPv6:2607:f8b0:400e:c03::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8EF61A6EE0 for ; Fri, 15 Aug 2014 20:43:41 -0700 (PDT) Received: by mail-pa0-f46.google.com with SMTP id lj1so4506349pab.33 for ; Fri, 15 Aug 2014 20:43:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=OSNDp5qu97C+q2/aZKlutpA171c2JVP5fWVM5tUdGO4=; b=uOWFvQYeIhhMcpMu/21sQk8cSrcQnbk+J8OPIDmY7cimeuQ5ths8l/nt5ZjdpTj5YO XmZUeKek7rQMn2P9vgyE7VMmSWwvVh3JrPO1lo+xgqH4ZAh09I0KofSWW6aYHRVqY0OC IxjIsEbjX2caGkghSO5eYM7E1tUeWWWWHXkBEUMmbWDabBRuavC10TK1kWM0q3Qb334+ +2FL7fl2wnIkjuYQHkiJ2fTbpIm60vkqI/u4HoPLZFjzGtrUUFnOt8xMjBnG+JI6W4g2 Yje8RwLXG2u1qjzZwSr+5j8qRy7eRrlWuJXS37FhnXCYL7fGxGoqTysZST32/de8ikMc wHSQ== X-Received: by 10.66.141.109 with SMTP id rn13mr17752739pab.117.1408160619563; Fri, 15 Aug 2014 20:43:39 -0700 (PDT) Received: from spandex.local (209-193-57-253-rb1.fai.dsl.dynamic.acsalaska.net. [209.193.57.253]) by mx.google.com with ESMTPSA id br1sm9397166pbc.6.2014.08.15.20.43.38 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 15 Aug 2014 20:43:38 -0700 (PDT) Message-ID: <53EED368.20305@gmail.com> Date: Fri, 15 Aug 2014 19:43:36 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Linda Dunbar , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB5514@dfweml701-chm.china.huawei.com> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DB5514@dfweml701-chm.china.huawei.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/Bi6MQvz6LGINh_ppijoP4bCOoMY Subject: Re: [Nsaas] Comparing NSIS and the work to be done by NSaaS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Aug 2014 03:43:42 -0000 On 8/15/14 1:19 PM, Linda Dunbar wrote: > - Differences between NSIS and NSaaS: I think the most salient issue is that because NSIS is path-coupled, it's possible to message every participating device along a path without having to know its location, or its location relative to other devices (this is particularly a pressing issue when you've got one or more NATs present in the network, or when trying to locate appropriate tunnel endpoints). NSIS provides a signaling *model* that may or may not be useful. I'd say that industry did not find it useful except that other security device signaling models haven't been implemented and deployed, either, so the issue appears to be with the general class of solution rather than with this individual, particular solution. Getting these questions answered is not a hoop to jump through, but rather, I think, a very serious issue with the work going forward. Melinda From nobody Sat Aug 16 06:25:20 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0E5F1A879A for ; Sat, 16 Aug 2014 06:25:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n5YB0ND1sS9G for ; Sat, 16 Aug 2014 06:25:15 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C89301A8795 for ; Sat, 16 Aug 2014 06:25:14 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIH65734; Sat, 16 Aug 2014 13:25:13 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sat, 16 Aug 2014 14:25:12 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm.china.huawei.com ([169.254.4.217]) with mapi id 14.03.0158.001; Sat, 16 Aug 2014 06:24:58 -0700 From: Linda Dunbar To: Melinda Shore , "nsaas@ietf.org" Thread-Topic: Comparing NSIS and the work to be done by NSaaS Thread-Index: AQHPuM6emKLMM+CUUkiepBZ4APAupJvTDEAAgAAmWaA= Date: Sat, 16 Aug 2014 13:24:57 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DB5837@dfweml701-chm.china.huawei.com> References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB5514@dfweml701-chm.china.huawei.com> <53EED368.20305@gmail.com> In-Reply-To: <53EED368.20305@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.148.89] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/_j62Hto3pg211prYayH2JflVbU0 Subject: Re: [Nsaas] Comparing NSIS and the work to be done by NSaaS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Aug 2014 13:25:19 -0000 TWVsaW5kYSwgDQoNClRoYW5rcyBmb3IgdGhlIGFkZGl0aW9uYWwgYW5hbHlzaXMgb2YgTlNJUy4g DQoNCllvdSBzYWlkICIgTlNJUyBwcm92aWRlcyBhIHNpZ25hbGluZyAqbW9kZWwqIiB0aGF0IHRo ZSBpbmR1c3RyeSBkaWRuJ3QgZmluZCBpdCB1c2VmdWwuIA0KDQpMZXQncyBsb29rIGF0IHRoZSBy ZWNlbnQgc3Ryb25nIGluZHVzdHJ5IGluaXRpYXRpdmU6IE5GViAod2l0aCAzOCBvcGVyYXRvcnMg cGFydGljaXBhdGluZyBhbmQgd2FudGluZyB0aGUgc2VydmljZSkuIEluIG9yZGVyIGZvciBORlYg dG8gYmUgZGVwbG95ZWQgaW4gbmV0d29yaywgaXQgaXMgdmVyeSBlc3NlbnRpYWwgdG8gaGF2ZSBj b21tb24gcHJvdG9jb2xzIGZvciAiQ29udHJvbGxlciAob3IgT3JjaGVzdHJhdG9yKSIgdG8gDQoN Ci0gY3JlYXRlIGNsaWVudCBzcGVjaWZpYyBWaXJ0dWFsIEZpcmV3YWxsIHdpdGggdGhlIG5lZWRl ZCBydWxlcyAmIHBvbGljaWVzIG92ZXIgcGh5c2ljYWwgYXBwbGlhbmNlcyBmcm9tIGRpZmZlcmVu dCB2ZW5kb3JzLCB2ZXJ5IG11Y2ggaG93IHJvdXRlcnMgYmVpbmcgcGFydGl0aW9uZWQgZm9yIFZQ TnMuDQoNCi0gU3BlY2lmeSBjb25jcmV0ZSBydWxlcyAob3IgYXR0cmlidXRlcykgZm9yIGluc3Rh bnRpYXRpbmcgVk1zIGZvciB2aXJ0dWFsIHNlY3VyaXR5IGZ1bmN0aW9ucyAoTkZWIGluaXRpYXRp dmUpLCBhbmQNCg0KLSBEZWZpbmUgdGhlIG1lY2hhbmlzbXMgZm9yIGNsaWVudHMgKGFwcGxpY2F0 aW9ucykgdG8gcmVxdWVzdC9uZWdvdGlhdGUvdmFsaWRhdGUgc2VjdXJpdHkgZnVuY3Rpb25zIHRo YXQgYXJlIG5vdCBwaHlzaWNhbGx5IGxvY2F0ZWQgb24gdGhlIGxvY2FsIHByZW1pc2VzLg0KDQpU YWtlIEZpcmV3YWxsIGFzIGFuIGV4YW1wbGUsIHRoZSBydWxlcyBmb3IgYSBzcGVjaWZpYyBjbGll bnQgdkZXIGNhbiBpbmNsdWRlOg0KLSBhIDUtdHVwbGUgYW5kIGFuIGFjdGlvbiBzdWNoIGFzIGFs bG93IG9yIGRlbnkuIFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhlIHR1cGxlDQppbmNs dWRlcyBzb3VyY2UvZGVzdGluYXRpb24gSVAgYWRkcmVzc2VzLCB0cmFuc3BvcnQgcHJvdG9jb2ws IGFuZCBzb3VyY2UvZGVzdGluYXRpb24gcG9ydCBudW1iZXJzIChSRkM1OTczKS4NCg0KLSBUaGUg cG9saWN5IHJ1bGVzIGFsc28gcmVxdWlyZSBvcmRlciBjb250ZXh0LiBTaW5jZSBmaXJld2FsbHMg b3BlcmF0ZSBpbiBhIHRvcC1kb3duIGZpcnN0LW1hdGNoIG9yZGVyLCBhIHNldCBvZiBwb2xpY3kg cnVsZXMgd2l0aG91dCBvcmRlciBjb250ZXh0IGlzIGluc3VmZmljaWVudCAobmV3KS4NCg0KLSBU aGUgUkZDNTk3M+KAmXMgZGVmaW5pdGlvbiBpbXBsaWNpdGx5IGFzc3VtZXMgdGhhdCB0aGUgZmly ZXdhbGwgaGFzIHRoZSBpbnRlbGxpZ2VuY2UgdG8gcmVjb2duaXplIHJlbGF0ZWQgdHJhZmZpYyB0 aGF0IG1heSBub3QgbWF0Y2ggdGhlIG9yaWdpbmFsIDUtdHVwbGUuIFRoZSBwZXJmZWN0IGV4YW1w bGUgaXMgRlRQLCB3aGljaCBjb25zaXN0cyBvZiBjb250cm9sIGFuZCBkYXRhIGNvbm5lY3Rpb25z LiBUaGUgZmlyZXdhbGwgbmVlZHMgdG8gcmVjb2duaXplIGFuZCBwZXJtaXQgdGhlIGRhdGEgY29u bmVjdGlvbiB3aGljaCBpc27igJl0IGRlZmluZWQgaW4gdGhlIG9yaWdpbmFsIHJ1bGUsIHdoaWNo IGNvdmVycyBvbmx5IHRoZSBjb250cm9sIGNoYW5uZWwuIChUaGUgYWN0dWFsIHByb2Nlc3MgaXMg YSBiaXQgbW9yZSBjb21wbGljYXRlZOKAlGRlcGVuZGluZyBvbiB3aGV0aGVyIGl04oCZcyBhY3Rp dmUgb3IgcGFzc2l2ZSBtb2RlIEZUUCkuDQoNCk1vc3QsIGlmIG5vdCBhbGwsIGZpcmV3YWxscyB0 b2RheSBoYXZlIHByb3RvY29sLXNwZWNpZmljIEFMR3MgKGFwcCBsYXllciBnYXRld2F5cykgdGhh dCBzdXBwb3J0IG1vcmUgY29tcGxpY2F0ZWQgcHJvdG9jb2xzIGxpa2UgRlRQIGFuZCBTSVAuIE5T SVMgaXMgdG8gcmVtb3ZlIHRoZSBuZWVkIG9mIEFMRyAoUkZDNTk3MykuIE5TYWFTIGlzIHRvIGRl dmVsb3AgYSBwcm90b2NvbCB0byBBTEcuIA0KDQpUaGUgcHJvdG9jb2wgc2VtYW50aWNzIHNob3Vs ZCBhdCBsZWFzdCBpbmNsdWRlICJyZXF1ZXN0IGZyb20gY2xpZW50IHRvIHByb3ZpZGVyIiwgIm5l Z290aWF0aW9uIG9mIHRoZSBzdXBwb3J0ZWQgcnVsZXMgYmV0d2VlbiBwcm92aWRlciBhbmQgY2xp ZW50cyIsIGFuZCAidmVyaWZ5Ii4gDQoNCkl0IGlzIGFsc28gbmVjZXNzYXJ5IHRvIGhhdmUgY29t bW9uIHJlcHJlc2VudGF0aW9uIGZvciB2RlcuIFZlcnkgbXVjaCBsaWtlIFZQTiBJZGVudGlmaWVy LiANCg0KTGluZGENCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IE1lbGluZGEg U2hvcmUgW21haWx0bzptZWxpbmRhLnNob3JlQGdtYWlsLmNvbV0gDQpTZW50OiBGcmlkYXksIEF1 Z3VzdCAxNSwgMjAxNCAxMDo0NCBQTQ0KVG86IExpbmRhIER1bmJhcjsgbnNhYXNAaWV0Zi5vcmcN ClN1YmplY3Q6IFJlOiBDb21wYXJpbmcgTlNJUyBhbmQgdGhlIHdvcmsgdG8gYmUgZG9uZSBieSBO U2FhUw0KDQpPbiA4LzE1LzE0IDE6MTkgUE0sIExpbmRhIER1bmJhciB3cm90ZToNCj4gLSBEaWZm ZXJlbmNlcyBiZXR3ZWVuIE5TSVMgYW5kIE5TYWFTOg0KDQpJIHRoaW5rIHRoZSBtb3N0IHNhbGll bnQgaXNzdWUgaXMgdGhhdCBiZWNhdXNlIE5TSVMgaXMgcGF0aC1jb3VwbGVkLCBpdCdzIHBvc3Np YmxlIHRvIG1lc3NhZ2UgZXZlcnkgcGFydGljaXBhdGluZyBkZXZpY2UgYWxvbmcgYSBwYXRoIHdp dGhvdXQgaGF2aW5nIHRvIGtub3cgaXRzIGxvY2F0aW9uLCBvciBpdHMgbG9jYXRpb24gcmVsYXRp dmUgdG8gb3RoZXIgZGV2aWNlcyAodGhpcyBpcyBwYXJ0aWN1bGFybHkgYSBwcmVzc2luZyBpc3N1 ZSB3aGVuIHlvdSd2ZSBnb3Qgb25lIG9yIG1vcmUgTkFUcyBwcmVzZW50IGluIHRoZSBuZXR3b3Jr LCBvciB3aGVuIHRyeWluZyB0byBsb2NhdGUgYXBwcm9wcmlhdGUgdHVubmVsIGVuZHBvaW50cyku ICBOU0lTIHByb3ZpZGVzIGEgc2lnbmFsaW5nICptb2RlbCogdGhhdCBtYXkgb3IgbWF5IG5vdCBi ZSB1c2VmdWwuICBJJ2Qgc2F5IHRoYXQgaW5kdXN0cnkgZGlkIG5vdCBmaW5kIGl0IHVzZWZ1bCBl eGNlcHQgdGhhdCBvdGhlciBzZWN1cml0eSBkZXZpY2Ugc2lnbmFsaW5nIG1vZGVscyBoYXZlbid0 IGJlZW4gaW1wbGVtZW50ZWQgYW5kIGRlcGxveWVkLCBlaXRoZXIsIHNvIHRoZSBpc3N1ZSBhcHBl YXJzIHRvIGJlIHdpdGggdGhlIGdlbmVyYWwgY2xhc3Mgb2Ygc29sdXRpb24gcmF0aGVyIHRoYW4g d2l0aCB0aGlzIGluZGl2aWR1YWwsIHBhcnRpY3VsYXIgc29sdXRpb24uDQoNCg0KR2V0dGluZyB0 aGVzZSBxdWVzdGlvbnMgYW5zd2VyZWQgaXMgbm90IGEgaG9vcCB0byBqdW1wIHRocm91Z2gsIGJ1 dCByYXRoZXIsIEkgdGhpbmssIGEgdmVyeSBzZXJpb3VzIGlzc3VlIHdpdGggdGhlIHdvcmsgZ29p bmcgZm9yd2FyZC4NCg0KTWVsaW5kYQ0KDQo= From nobody Sat Aug 16 11:06:36 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 412491A0080 for ; Sat, 16 Aug 2014 11:06:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FGRoDuNFZPiQ for ; Sat, 16 Aug 2014 11:06:32 -0700 (PDT) Received: from mail-pa0-x22d.google.com (mail-pa0-x22d.google.com [IPv6:2607:f8b0:400e:c03::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A7701A0087 for ; Sat, 16 Aug 2014 11:06:32 -0700 (PDT) Received: by mail-pa0-f45.google.com with SMTP id eu11so5242123pac.32 for ; Sat, 16 Aug 2014 11:06:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=Xav8oZXKaX4Yxw19EuLiubqs0R2RR7fDpvqU0AMiHEY=; b=Fb/g5BvJ/1g+Xp8tS9J439e+vc2i6xK4DVIpJxopfZh8XUOMZmSkqQBT/osdkJNzOE w8fk0bh94xtqPW8xgLemK9oWf8dKqcjpgNTEfyDy3aaMumesf5IBGnJ/KqPA52uhZHhp J9/41AXmtN06FrV+VIYwcL/nWYfxUkLqNM98woQt7W+aOPv++JN5Hmi8B4uFVuyheAPk eWQ+5AvZGlqBcdsFEVyQ7/XvSWCs/qAMyTcy29stbpuDJu4d9bE2QEF++1O5x9/QnwJQ SJ3ZaV3sgoDuEWU0TZFnHuUAwciinjZHhQNZYxIl/4XgrUqgJCSC/3iRryzNRTYXYBlL CvPg== X-Received: by 10.66.161.169 with SMTP id xt9mr22160937pab.102.1408212392087; Sat, 16 Aug 2014 11:06:32 -0700 (PDT) Received: from spandex.local (74-124-100-167-rb2.fai.dsl.dynamic.acsalaska.net. [74.124.100.167]) by mx.google.com with ESMTPSA id j1sm17274399pdh.31.2014.08.16.11.06.30 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 16 Aug 2014 11:06:31 -0700 (PDT) Message-ID: <53EF9DA1.8070703@gmail.com> Date: Sat, 16 Aug 2014 10:06:25 -0800 From: Melinda Shore User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: Linda Dunbar , "nsaas@ietf.org" References: <53E97DB5.3040106@gmail.com> <53E98377.1030902@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB236D@dfweml701-chm.china.huawei.com> <53EA3EBE.50200@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB2420@dfweml701-chm.china.huawei.com> <53EA4704.2090401@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB5514@dfweml701-chm.china.huawei.com> <53EED368.20305@gmail.com> <4A95BA014132FF49AE685FAB4B9F17F645DB5837@dfweml701-chm.china.huawei.com> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DB5837@dfweml701-chm.china.huawei.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/JlT_1U0ccJoc_Yz2bgFBqV3wz14 Subject: Re: [Nsaas] Comparing NSIS and the work to be done by NSaaS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Aug 2014 18:06:34 -0000 On 8/16/14 5:24 AM, Linda Dunbar wrote: > Take Firewall as an example, the rules for a specific client vFW can > include: - a 5-tuple and an action such as allow or deny. The > information contained in the tuple includes source/destination IP > addresses, transport protocol, and source/destination port numbers > (RFC5973). You might want to check out the midcom protocol semantics RFC. Melinda From nobody Thu Aug 28 09:06:08 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C276D1A8771 for ; Thu, 28 Aug 2014 09:04:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lFLxv1JT6PBW for ; Thu, 28 Aug 2014 09:04:26 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7EDC1A8778 for ; Thu, 28 Aug 2014 09:04:25 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLW57667; Thu, 28 Aug 2014 16:04:24 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml405-hub.china.huawei.com ([10.201.5.242]) with mapi id 14.03.0158.001; Thu, 28 Aug 2014 17:03:47 +0100 From: Hosnieh Rafiee To: "nsaas@ietf.org" Thread-Topic: Some thoughts about SAAS Thread-Index: Ac/C2aY9o39tM7ggQpS6YIhOHJvDog== Date: Thu, 28 Aug 2014 16:03:47 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A29DBF@lhreml513-mbb.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/9eUqr3SXWuKb1Zk80cm_OJrLuDE X-Mailman-Approved-At: Thu, 28 Aug 2014 09:06:06 -0700 Subject: [Nsaas] Some thoughts about SAAS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Aug 2014 16:04:27 -0000 SGVsbG8sDQoNClNpbmNlIHNlY3VyaXR5IGFzIGEgc2VydmljZSAoU0FBUykgaXMgcmVhbGx5IGEg Y3JpdGljYWwgcm9sZSBmb3IgZWFjaCBjdXN0b21lcnMgaW4gZGlmZmVyZW50IGNvdW50cmllcyBh bmQgZm9yIGdvdmVybm1lbnRzIGFzIHdlbGwsIEkgYW0gdGhpbmtpbmcgYWJvdXQgaG93IHdvdWxk IGJlIHBvc3NpYmxlIHRvIGFsc28gcHJvdGVjdCBjdXN0b21lcnMgZnJvbSBTdXJ2ZWlsbGFuY2Ug YWdlbnRzIGFuZCBtb25pdG9yaW5nLiANCg0KQmVjYXVzZSBpZiBTQUFTIGlzIG9mZmVyZWQgYnkg YSBjb3VudHJ5IHRoYXQgaXRzIGdvdmVybm1lbnQgaXMga25vd24gdG8gYmUgYSBzdXJ2ZWlsbGFu Y2UgYWdlbnQsIElzIHRoZXJlIGFueSBwYXJ0aWN1bGFyIHJlcXVpcmVtZW50IHNob3VsZCBiZSBj b25zaWRlcmVkIGluIHN0YW5kYXJkIGFyY2hpdGVjdHVyZXMgdG8gYXZvaWQgc3VjaCByb2xlPyAN Cg0KSWYgdGhlIHRhcmdldCBjdXN0b21lciBpcyBhIGdvdmVybm1lbnQvb3IgYW55IGltcG9ydGFu dCBjb21wYW55IGluIGEgY291bnRyeSwgZG9lcyBpdCBhY2NlcHQgdG8gdXNlIGEgU0FBUyB0aGF0 IGlzIGxvY2F0ZWQgaW4gYW5vdGhlciBjb3VudHJ5PyAoZmVhcmluZyBvZiBzcHkpDQoNCkhvdyB0 byBhdm9pZCBnb3Zlcm5tZW50cyB0byBmb3JjZSBTQUFTIHZlbmRvcnMvb3BlcmF0b3JzIHRvIGFj Y2VzcyB0aGUgZGV0YWlsIGluZm9ybWF0aW9uIGFib3V0IHNlY3VyaXR5IHNlcnZpY2VzIHNvIHRo YXQgdGhleSBjYW4gbW9uaXRvciBhbmQgYWNjZXNzIGN1c3RvbWVyJ3MgZGF0YS4gQXJlIHRoZXNl IGFzc3VtcHRpb25zIG9ubHkgb3BlcmF0aW9uYWwgaXNzdWVzIG9yIGl0IG1pZ2h0IGFsc28gaW1w YWN0IHRoZSBzdGFuZGFyZHMgaW4gdGhpcyByZWdhcmQ/DQoNClRoYW5rcywNCkJlc3QsDQpIb3Nu aWVoDQo= From nobody Thu Aug 28 13:48:29 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BE9F1A0099 for ; Thu, 28 Aug 2014 13:48:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHAI3vd36-oF for ; Thu, 28 Aug 2014 13:48:25 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFC4C1A0067 for ; Thu, 28 Aug 2014 13:48:24 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLW71908; Thu, 28 Aug 2014 20:48:21 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Thu, 28 Aug 2014 21:48:19 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0158.001; Thu, 28 Aug 2014 13:48:04 -0700 From: Linda Dunbar To: Hosnieh Rafiee , "nsaas@ietf.org" Thread-Topic: Some thoughts about SAAS Thread-Index: Ac/C2aY9o39tM7ggQpS6YIhOHJvDogAJnMqQ Date: Thu, 28 Aug 2014 20:48:04 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DDDC3E@dfweml701-chm> References: <814D0BFB77D95844A01CA29B44CBF8A7A29DBF@lhreml513-mbb.china.huawei.com> In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A7A29DBF@lhreml513-mbb.china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.95] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/QKToHke9nOBdKOxfvKXnpHAPPS4 Subject: Re: [Nsaas] Some thoughts about SAAS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Aug 2014 20:48:27 -0000 Hosnieh,=20 Are you saying having a way for customers to avoid being monitored by gover= nment?=20 I can see the potential for customers to be notified when their traffic is = actually monitored. But if government wants to monitor someone, can you avo= id? Linda -----Original Message----- From: Nsaas [mailto:nsaas-bounces@ietf.org] On Behalf Of Hosnieh Rafiee Sent: Thursday, August 28, 2014 11:04 AM To: nsaas@ietf.org Subject: [Nsaas] Some thoughts about SAAS Hello, Since security as a service (SAAS) is really a critical role for each custo= mers in different countries and for governments as well, I am thinking abou= t how would be possible to also protect customers from Surveillance agents = and monitoring.=20 Because if SAAS is offered by a country that its government is known to be = a surveillance agent, Is there any particular requirement should be conside= red in standard architectures to avoid such role?=20 If the target customer is a government/or any important company in a countr= y, does it accept to use a SAAS that is located in another country? (fearin= g of spy) How to avoid governments to force SAAS vendors/operators to access the deta= il information about security services so that they can monitor and access = customer's data. Are these assumptions only operational issues or it might = also impact the standards in this regard? Thanks, Best, Hosnieh _______________________________________________ Nsaas mailing list Nsaas@ietf.org https://www.ietf.org/mailman/listinfo/nsaas From nobody Fri Aug 29 01:04:04 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 801C81A0679 for ; Fri, 29 Aug 2014 01:03:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p8af25FC2Bkl for ; Fri, 29 Aug 2014 01:03:58 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B92A1A013B for ; Fri, 29 Aug 2014 01:03:57 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BIV92530; Fri, 29 Aug 2014 08:03:56 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml406-hub.china.huawei.com ([10.201.5.243]) with mapi id 14.03.0158.001; Fri, 29 Aug 2014 09:03:48 +0100 From: Hosnieh Rafiee To: Linda Dunbar Thread-Topic: Some thoughts about SAAS Thread-Index: Ac/C2aY9o39tM7ggQpS6YIhOHJvDogAJnMqQABe+/BA= Date: Fri, 29 Aug 2014 08:03:48 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A29F39@lhreml513-mbb.china.huawei.com> References: <814D0BFB77D95844A01CA29B44CBF8A7A29DBF@lhreml513-mbb.china.huawei.com> <4A95BA014132FF49AE685FAB4B9F17F645DDDC3E@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DDDC3E@dfweml701-chm> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/gh0h2fKeyA-uMRbOvt8FtEH1Qi4 Cc: "nsaas@ietf.org" Subject: Re: [Nsaas] Some thoughts about SAAS X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Aug 2014 08:04:02 -0000 Linda, > Are you saying having a way for customers to avoid being monitored by > government? Both government or any other surveillance agents. > I can see the potential for customers to be notified when their traffic > is actually monitored. But if government wants to monitor someone, can > you avoid? The answer is really difficult. But this raises the next questions that are= whether or not this impacts on the standards? Whether or not it leads to h= aving each country follow certain specifications and again there is problem= for operators to offer service to customers or force to be limited to the = service offered by their own country? Isn't it difficult to think about a u= nified framework? Thanks, Best, Hosnieh From nobody Fri Aug 29 11:24:51 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08C151A6F65; Fri, 29 Aug 2014 11:24:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.869 X-Spam-Level: X-Spam-Status: No, score=-4.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id enllROqD8Igy; Fri, 29 Aug 2014 11:24:42 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 427AB1A6ED8; Fri, 29 Aug 2014 11:21:05 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLX58235; Fri, 29 Aug 2014 18:21:03 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Fri, 29 Aug 2014 19:21:00 +0100 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0158.001; Fri, 29 Aug 2014 11:20:53 -0700 From: Linda Dunbar To: "ietf@ietf.org" , "nsaas@ietf.org" , Hosnieh Rafiee Thread-Topic: Is it possible for individuals to avoid being monitored by Government agencies? Thread-Index: Ac/C2aY9o39tM7ggQpS6YIhOHJvDogA115NA Date: Fri, 29 Aug 2014 18:20:53 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F645DDE517@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.158.191] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/hZ7UMATYwKMm8IzH2PNVaBiZsx8 Subject: [Nsaas] Is it possible for individuals to avoid being monitored by Government agencies? X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Aug 2014 18:24:44 -0000 Network Security as a Service (NSaaS non-WG) is for discussing topics rela= ted to interfaces and architectures for "Clients/Requesters" to ask for (or= negotiate) the network security related functions, that are not physically= present at Requesters' premises, as well as the associated attributes. There is a question on if it is possible for individuals to avoid being mon= itored by Government agencies. Does anyone know where to check? Thanks, Linda -----Original Message----- From: Nsaas [mailto:nsaas-bounces@ietf.org] On Behalf Of Hosnieh Rafiee Sent: Thursday, August 28, 2014 11:04 AM To: nsaas@ietf.org Subject: [Nsaas] Some thoughts about SAAS Hello, Since security as a service (SAAS) is really a critical role for each custo= mers in different countries and for governments as well, I am thinking abou= t how would be possible to also protect customers from Surveillance agents = and monitoring.=20 Because if SAAS is offered by a country that its government is known to be = a surveillance agent, Is there any particular requirement should be conside= red in standard architectures to avoid such role?=20 If the target customer is a government/or any important company in a countr= y, does it accept to use a SAAS that is located in another country? (fearin= g of spy) How to avoid governments to force SAAS vendors/operators to access the deta= il information about security services so that they can monitor and access = customer's data. Are these assumptions only operational issues or it might = also impact the standards in this regard? Thanks, Best, Hosnieh _______________________________________________ Nsaas mailing list Nsaas@ietf.org https://www.ietf.org/mailman/listinfo/nsaas From nobody Fri Aug 29 14:42:43 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F217B1A00DB; Fri, 29 Aug 2014 13:52:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.568 X-Spam-Level: X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.668] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ymH0hVVTPOO; Fri, 29 Aug 2014 13:52:57 -0700 (PDT) Received: from shell-too.nominum.com (shell-too.nominum.com [64.89.228.229]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7125B1A017D; Fri, 29 Aug 2014 13:52:57 -0700 (PDT) Received: from archivist.nominum.com (archivist.nominum.com [64.89.228.108]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.nominum.com", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by shell-too.nominum.com (Postfix) with ESMTP id E883F1B8983; Fri, 29 Aug 2014 13:52:56 -0700 (PDT) Received: from webmail.nominum.com (cas-01.win.nominum.com [64.89.228.131]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by archivist.nominum.com (Postfix) with ESMTP id 66DE453E072; Fri, 29 Aug 2014 13:52:56 -0700 (PDT) Received: from vpna-167.vpn.nominum.com (64.89.227.167) by CAS-01.WIN.NOMINUM.COM (192.168.1.100) with Microsoft SMTP Server (TLS) id 14.3.195.1; Fri, 29 Aug 2014 13:52:56 -0700 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Ted Lemon In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F645DDE517@dfweml701-chm> Date: Fri, 29 Aug 2014 16:52:33 -0400 Content-Transfer-Encoding: quoted-printable Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F645DDE517@dfweml701-chm> To: Linda Dunbar X-Mailer: Apple Mail (2.1878.6) X-Originating-IP: [64.89.227.167] Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/4oxeYC_FRsWvhAPtTEXShewdPGA X-Mailman-Approved-At: Fri, 29 Aug 2014 14:42:42 -0700 Cc: Hosnieh Rafiee , "nsaas@ietf.org" , "ietf@ietf.org" Subject: Re: [Nsaas] Is it possible for individuals to avoid being monitored by Government agencies? X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Aug 2014 20:52:59 -0000 On Aug 29, 2014, at 2:20 PM, Linda Dunbar = wrote: > There is a question on if it is possible for individuals to avoid = being monitored by Government agencies. Does anyone know where to check? It's not realistically possible for an individual who is being targeted = for monitoring by government agencies of any major government to avoid = being monitored. It is (maybe) possible for individuals who are not = targeted to avoid being swept up in a monitoring dragnet, if they are = careful about how they communicate online. From nobody Fri Aug 29 14:42:45 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDC341A6F06; Fri, 29 Aug 2014 14:03:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.568 X-Spam-Level: X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.668] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b-cZePIDdokZ; Fri, 29 Aug 2014 14:03:23 -0700 (PDT) Received: from darkstar.isi.edu (darkstar.isi.edu [128.9.128.127]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D0971A01DD; Fri, 29 Aug 2014 14:03:23 -0700 (PDT) Received: from [192.168.122.70] ([124.205.5.98]) (authenticated bits=0) by darkstar.isi.edu (8.13.8/8.13.8) with ESMTP id s7TL2YIu016304 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 29 Aug 2014 14:02:39 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\)) Content-Type: text/plain; charset=us-ascii From: manning bill In-Reply-To: Date: Fri, 29 Aug 2014 14:02:22 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <57747ED2-8084-43C4-8B37-D6AC6E58E96B@isi.edu> References: <4A95BA014132FF49AE685FAB4B9F17F645DDE517@dfweml701-chm> To: Ted Lemon X-Mailer: Apple Mail (2.1878.2) X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: bmanning@isi.edu Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/np8micYtQOsfshadMle5uqqy2ww X-Mailman-Approved-At: Fri, 29 Aug 2014 14:42:42 -0700 Cc: "nsaas@ietf.org" , "ietf@ietf.org" , Linda Dunbar Subject: Re: [Nsaas] Is it possible for individuals to avoid being monitored by Government agencies? X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Aug 2014 21:03:25 -0000 it is possible to dramatically reduce the monitoring surface of any = given entity, however in todays environment, such=20 avoidance comes at a significant cost. If one is prepared to abandon = electronic communications, a huge step forward in anonymity is taken. One can not have ones cake and eat it also. =20 /bill PO Box 12317 Marina del Rey, CA 90295 310.322.8102 On 29August2014Friday, at 13:52, Ted Lemon = wrote: > On Aug 29, 2014, at 2:20 PM, Linda Dunbar = wrote: >> There is a question on if it is possible for individuals to avoid = being monitored by Government agencies. Does anyone know where to check? >=20 > It's not realistically possible for an individual who is being = targeted for monitoring by government agencies of any major government = to avoid being monitored. It is (maybe) possible for individuals who = are not targeted to avoid being swept up in a monitoring dragnet, if = they are careful about how they communicate online. >=20 From nobody Sun Aug 31 06:24:17 2014 Return-Path: X-Original-To: nsaas@ietfa.amsl.com Delivered-To: nsaas@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E2A01A870D; Fri, 29 Aug 2014 19:35:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xk5o_ZfoCzdV; Fri, 29 Aug 2014 19:35:52 -0700 (PDT) Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27E6F1A8708; Fri, 29 Aug 2014 19:35:52 -0700 (PDT) Received: from [192.168.1.66] (76-218-8-156.lightspeed.sntcca.sbcglobal.net [76.218.8.156]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id s7U2ZmmE019997 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 29 Aug 2014 19:35:51 -0700 Message-ID: <540137D7.5000701@dcrocker.net> Date: Fri, 29 Aug 2014 19:32:55 -0700 From: Dave Crocker Organization: Brandenburg InternetWorking User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 MIME-Version: 1.0 To: manning bill , Ted Lemon References: <4A95BA014132FF49AE685FAB4B9F17F645DDE517@dfweml701-chm> <57747ED2-8084-43C4-8B37-D6AC6E58E96B@isi.edu> In-Reply-To: <57747ED2-8084-43C4-8B37-D6AC6E58E96B@isi.edu> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.66]); Fri, 29 Aug 2014 19:35:51 -0700 (PDT) Archived-At: http://mailarchive.ietf.org/arch/msg/nsaas/FwMD_9pMDh4luHdm4LqvBRHn36Y X-Mailman-Approved-At: Sun, 31 Aug 2014 06:24:16 -0700 Cc: "nsaas@ietf.org" , "ietf@ietf.org" Subject: Re: [Nsaas] Is it possible for individuals to avoid being monitored by Government agencies? X-BeenThere: nsaas@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: dcrocker@bbiw.net List-Id: "*NSaaS: Network Security as a Service mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Aug 2014 02:35:54 -0000 Quite a good consideration of this is in: Dragnet Nation: A Quest for Privacy, Security, and Freedom in a World of Relentless Surveillance Julia Angwin The Stanford interview with her, about the book, was quite excellent: http://juliaangwin.com/stanford-law-school-lecture/ d/ On 8/29/2014 2:02 PM, manning bill wrote: > it is possible to dramatically reduce the monitoring surface of any > given entity, however in todays environment, such avoidance comes at > a significant cost. If one is prepared to abandon electronic > communications, a huge step forward in anonymity is taken. One can > not have ones cake and eat it also. > > /bill PO Box 12317 Marina del Rey, CA 90295 310.322.8102 > > On 29August2014Friday, at 13:52, Ted Lemon > wrote: > >> On Aug 29, 2014, at 2:20 PM, Linda Dunbar >> wrote: >>> There is a question on if it is possible for individuals to avoid >>> being monitored by Government agencies. Does anyone know where to >>> check? >> >> It's not realistically possible for an individual who is being >> targeted for monitoring by government agencies of any major >> government to avoid being monitored. It is (maybe) possible for >> individuals who are not targeted to avoid being swept up in a >> monitoring dragnet, if they are careful about how they communicate >> online. -- Dave Crocker Brandenburg InternetWorking bbiw.net