Subject: [I2nsf] questions about the Capability Algebra described in draft-ietf-i2nsf-capability-02

From: Linda Dunbar <[email-masked]>
Date: Fri, 24 Aug 2018 22:46:33 +0000

John, Aldo, et al,

The Section 3.3.5 (Capability Algebra) of draft-ietf-i2nsf-capability-02 has good description of how multiple rules being added together and conflicts resolutions.

Are those the only two operators?

*        "U" is the union operation, A U B returns a new set that includes all the elements in A and all the elements in B

*        "\" is the set minus operation, A \ B returns all the elements that are in A but not in B.

The Software Defined Security Service WG in ONUG (Open Network User Group)  is working on a Reference Desgin, one of the component is the "Design Consideration for Policy Rules" coming from IT executive perspective. So it is pretty high level (see attached). It would be good for the industry if IETF work can be referenced and used  technical basis for the reference design.

It will be easier to reference if there is a table of "Rule Operators", and followed by the explanation and examples.

What do you think?

Thanks Linda