November 2013 - Nsi-wg - lists.ogf.org

Wednesday's NSI conf call
by Guy Roberts 26 Nov '13

26 Nov '13

The following is dial-in information for Wednesday's NSI call, time: 7:00 PDT 10:00 EDT, 15:00 GMT, 16:00 CET, 24:00 JST 1. Dial Toll-Free Number: 866-740-1260 (U.S. & Canada) 2. International participants dial: Toll Number: 303-248-0285 Or International Toll-Free Number: http://www.readytalk.com/intl 3. Enter 7-digit access code 8937606, followed by "#" Agenda: - Agree the outstanding issues for NSI CS specification. - John to present STP type as per email of 19 Nov - Error message queries. - Support for adaptation? - OGF 40 in Oxford _____________________________________________________________________ Guy Roberts PhD Senior Transport Network Architect DANTE Cambridge, UK +44 1223 371316 DANTE is the project co-ordinator and operator of GÉANT, the high-speed pan-European research and education network that is transforming the way researchers collaborate. Learn more at: www.geant.net<http://www.geant.net/> Like us on: www.facebook.com/GEANTnetwork<http://www.facebook.com/GEANTnetwork> Follow us at: www.twitter.com/GEANTnews<http://www.twitter.com/GEANTnews> DANTE is the trading name of Delivery of Advanced Network Technology to Europe Limited registered in England & Wales. Registration Number 2806796. Registered Office - 9400 Garsington Road, Oxford Business Park, Oxford OX4 2HN. _____________________________________________________________________

1 0

NSI meeting in Oxford
by Guy Roberts 26 Nov '13

26 Nov '13

Hello NSI team, I have requested 6 NSI sessions for OGF40 in Oxford, this will ensure that we have plenty of time to close down NSI CS v2.0. Meeting details are here: http://www.ogf.org/dokuwiki/doku.php/events/ogf-40 I am also planning a dinner in one of the old Oxford colleges (details to be confirmed), could you please let me know if you would like to attend the dinner? NML members are also invited to the dinner. Thanks, Guy _____________________________________________________________________ Guy Roberts PhD Senior Transport Network Architect DANTE Cambridge, UK +44 1223 371316 DANTE is the project co-ordinator and operator of GÉANT, the high-speed pan-European research and education network that is transforming the way researchers collaborate. Learn more at: www.geant.net<http://www.geant.net/> Like us on: www.facebook.com/GEANTnetwork<http://www.facebook.com/GEANTnetwork> Follow us at: www.twitter.com/GEANTnews<http://www.twitter.com/GEANTnews> DANTE is the trading name of Delivery of Advanced Network Technology to Europe Limited registered in England & Wales. Registration Number 2806796. Registered Office - 9400 Garsington Road, Oxford Business Park, Oxford OX4 2HN. _____________________________________________________________________

1 0

Subscription to the GLIF NSI Implementation working group
by Inder Monga 25 Nov '13

25 Nov '13

Hi All, Based on discussion at SC, it was decided that there are three best practices/agreements that are standing between NSI 2.0 specification and production NSI service. These are: 1. Security Specification for interoperability 2. Service Definition for end-to-end Ethernet service 3. Topology distribution agreement. These are sufficiently different from the NSI standards process and what needs to be standardized. So rather than clutter the NSI mailing list, we should move this discussion to the GLIF mailing list. Whoever is interested in contributing to that discussion, please subscribe: http://www.terena.org/mailinglists.php?list=nsi-imp@glif.is Also, please feel free to forward this message. Thanks! Inder Inder Monga | imonga(a)es.net Chief Technologist and Area Lead | http://www.es.net/inder Energy Sciences Network (ESnet) <http://www.es.net>

1 0

NICT booth presentation at SC13, 11:00-12:00, November 20, 2013
by Jin Tanaka 20 Nov '13

20 Nov '13

Dear all, We are sorry for late notice. Actually, we JGN-X/KDDIlabs/NICT will make a booth presentation related to A-GOLE/NSI at 11:00-11:45 today. Here are presenters: 1) JGN-X Japan : Jin Tanaka 2) SINET4, Japan : Michihiro Aoki 3) GEANT EU : Richard.Hughes-Jones So if you have a time, please visit to our NICT booth #4341. And also we prepare some novelties for A-GOLE/NSI partners. Best Regards, Jin Tanaka

1 0

Some comments for latest service definitions
by Henrik Thostrup Jensen 19 Nov '13

19 Nov '13

Hi In revision 101 label got re-added under StpType, which fits with what we agreed with on the call as far as I can remember. However sourceVLAN and destVLAN still exists in the EthernetVlanType. Is there a reason for this, or did we just forgot to take them out. Further is there a reason to keep EthernetVlanType around? If one wants a VLAN, one just specifies a label and if one wants plain ethernet, no label should be specified (right?). We also have some discrepency between NML and STPs. A Port/PortGroup in NML can only have a single label, which has a single value. Our StpType can have multiple labels. Furthermore a label can have multiple values, which confuses me a bit, but it might be related to the next issue. Overqualifying labels is something that isn't really documented anywhere AFAICT. In NML we specify ranges with "start-end" and AFAIK, can also be comma-seperated. In NSI I reckon we should do the same when overqualifying, and only have a single value in the label. Furthermore we should have it written down... somewhere... how to overqualify a label with the "start-end" semantics. Best regards, Henrik Henrik Thostrup Jensen <htj at nordu.net> Software Developer, NORDUnet

2 1

NML Security Requirements
by Henrik Thostrup Jensen 14 Nov '13

14 Nov '13

So, requirements for secure topology distribution. Personally, I don't quite believe in "requirements", as system design inherently contains tradeoffs between functionality, complexity, security, and usability (we usually only focus on the first). However it is topic that deservices some more light. Some basic stuff: * An NSA should be able to publish its topology, and others NSAs should be able to retrieve it in such a way that it has not been tampered with. * There should be a mechanism to prevent (well filter/detect) NSAs from publishing topologies, where ids overwrite other ids (injection). Any further requirements depend on what functionality it is we want have in topology distribution and how topology and path finding should work (which is, at least to me - still up in the air). One thing, I think we should start making clear is what it means when an NSI XML document has multiple (NML) topologies in it? * Does it mean that it administrates the topology (I believe we agreed on this) * That it peers with the NSAs of the respective topologies (and can hence setup circuits on it) * That it is simply relaying information somehow One solution that have come up to prevent injection / to allow an NSA to publish topologies for altnernate domains (those two things are more or less the same, but with very different intentions) is to sign the nml:Topology element. E.g., the NORDUnet NSA could announce both the nordu.net topology and the deic.dk (the danish NREN) topology. However, NORDUnet and DeIC are different adminstrative organizations, and NORDUnet should not have their certificate (hence I cannot use SUNET as an example). Certificates should not be thrown around like that. Of course DeIC could publish their own topology, but it is difficult to see what is gained by having NORDUnet relay it. Furthermore we do not have an everyone-trusts-everyone model in NSI (which is a good thing), but instead have transitive trust. There is no guarantie that anyone else than your peers (whatever that means), actually knows your certificate. Further questions: * Can topology information be sensitive? I.e. have limited distribution? Since topology is - inherently - meant for distribution, it is difficult to restrict the distribution of it. I suggest we try not to deal with this. Remember, that termination points should not have to be listed, as there might be an awful lot of them, and that the core point of topology exchange is to facilitate pathfinding. Best regards, Henrik Henrik Thostrup Jensen <htj at nordu.net> Software Developer, NORDUnet

4 3

minutes from today's NSI conf call
by Guy Roberts 13 Nov '13

13 Nov '13

.... are available here: https://redmine.ogf.org/dmsf/nsi-wg?folder_id=6529 _____________________________________________________________________ Guy Roberts PhD Senior Transport Network Architect DANTE Cambridge, UK +44 1223 371316 DANTE is the project co-ordinator and operator of GÉANT, the high-speed pan-European research and education network that is transforming the way researchers collaborate. Learn more at: www.geant.net<http://www.geant.net/> Like us on: www.facebook.com/GEANTnetwork<http://www.facebook.com/GEANTnetwork> Follow us at: www.twitter.com/GEANTnews<http://www.twitter.com/GEANTnews> DANTE is the trading name of Delivery of Advanced Network Technology to Europe Limited registered in England & Wales. Registration Number 2806796. Registered Office - 9400 Garsington Road, Oxford Business Park, Oxford OX4 2HN. _____________________________________________________________________

1 0

QueryNotification changes
by John MacAuley 13 Nov '13

13 Nov '13

All, Please find a modified presentation from Maastricht on the topic. I have added slides 13 - 20 describing the proposed changes. John

1 0

today's NSI conf call
by Guy Roberts 13 Nov '13

13 Nov '13

The following is dial-in information for Wednesday's NSI call, time: 7:00 PDT 10:00 EDT, 15:00 GMT, 16:00 CET, 24:00 JST 1. Dial Toll-Free Number: 866-740-1260 (U.S. & Canada) 2. International participants dial: Toll Number: 303-248-0285 Or International Toll-Free Number: http://www.readytalk.com/intl 3. Enter 7-digit access code 8937606, followed by "#" Agenda: - Preparation for SC13 - Action points from last week - Getting NSI CS specification finalised this year. _____________________________________________________________________ Guy Roberts PhD Senior Transport Network Architect DANTE Cambridge, UK +44 1223 371316 DANTE is the project co-ordinator and operator of GÉANT, the high-speed pan-European research and education network that is transforming the way researchers collaborate. Learn more at: www.geant.net<http://www.geant.net/> Like us on: www.facebook.com/GEANTnetwork<http://www.facebook.com/GEANTnetwork> Follow us at: www.twitter.com/GEANTnews<http://www.twitter.com/GEANTnews> DANTE is the trading name of Delivery of Advanced Network Technology to Europe Limited registered in England & Wales. Registration Number 2806796. Registered Office - 9400 Garsington Road, Oxford Business Park, Oxford OX4 2HN. _____________________________________________________________________

1 0

dynamicKL status
by 이경민 13 Nov '13

13 Nov '13

Dear Gerben and all I will let you know dynamicKL status 1. dynamicKL(NSIv2.0) implementation is complete! 2. and also dynamicKL working as a aggregator - anybody can use dynamicKL as a aggregator 3. in case of request to surfnet,g-lambda-a,kddi-labs, I received confirm message well - Could you confirm that NSI message is correct? - the other site is not recheachable 4. I need confirm as a provide, please anybody request to dynamicKL 5. vlc server is ready for sending and receiving. we need vlan number and port(vlc) number. 6. Vlans are all ok between krlight and StarLight Best regards. -------------------------------------------------------- Korea Institute of Science and Technology Information(KISTI) Networking Service Development Team Lee KyoungMin Mobile : 82+10-9958-8979 e-mail : tsoc(a)kisti.re.kr

2 1