NETCONF G. Zheng Internet-Draft T. Zhou Intended status: Standards Track A. Clemm Expires: January 1, 2019 Huawei June 30, 2018 UDP based Publication Channel for Streaming Telemetry draft-ietf-netconf-udp-pub-channel-03 Abstract This document describes a UDP-based publication channel for streaming telemetry use to collect data from devices. A new shim header is proposed to facilitate the distributed data collection mechanism which directly pushes data from line cards to the collector. Because of the lightweight UDP encapsulation, higher frequency and better transit performance can be achieved. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on January 1, 2019. Copyright Notice Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved. Zheng, et al. Expires January 1, 2019 [Page 1] Internet-Draft udp-pub-channel June 2018 This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4 3. Solution Overview . . . . . . . . . . . . . . . . . . . . . . 4 4. Transport Mechanisms . . . . . . . . . . . . . . . . . . . . 5 4.1. Dynamic Subscription . . . . . . . . . . . . . . . . . . 5 4.2. Configured Subscription . . . . . . . . . . . . . . . . . 7 5. UDP Transport for Publication Channel . . . . . . . . . . . . 8 5.1. Design Overview . . . . . . . . . . . . . . . . . . . . . 8 5.2. Data Format of the UPC Message Header . . . . . . . . . . 8 5.3. Options . . . . . . . . . . . . . . . . . . . . . . . . . 10 5.3.1. Reliability Option . . . . . . . . . . . . . . . . . 10 5.3.2. Fragmentation Option . . . . . . . . . . . . . . . . 11 5.4. Data Encoding . . . . . . . . . . . . . . . . . . . . . . 12 6. Using DTLS to Secure UPC . . . . . . . . . . . . . . . . . . 12 6.1. Transport . . . . . . . . . . . . . . . . . . . . . . . . 12 6.2. Port Assignment . . . . . . . . . . . . . . . . . . . . . 13 6.3. DTLS Session Initiation . . . . . . . . . . . . . . . . . 13 6.4. Sending Data . . . . . . . . . . . . . . . . . . . . . . 14 6.5. Closure . . . . . . . . . . . . . . . . . . . . . . . . . 14 7. Congestion Control . . . . . . . . . . . . . . . . . . . . . 15 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 15 9. Security Considerations . . . . . . . . . . . . . . . . . . . 16 10. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 16 11. References . . . . . . . . . . . . . . . . . . . . . . . . . 16 11.1. Normative References . . . . . . . . . . . . . . . . . . 16 11.2. Informative References . . . . . . . . . . . . . . . . . 17 11.3. URIs . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Appendix A. Change Log . . . . . . . . . . . . . . . . . . . . . 18 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 19 1. Introduction Streaming telemetry refers to sending a continuous stream of operational data from a device to a remote receiver. This provides an ability to monitor a network from remote and to provide network analytics. Devices generate telemetry data and push that data to a Zheng, et al. Expires January 1, 2019 [Page 2] Internet-Draft udp-pub-channel June 2018 collector for further analysis. By streaming the data, much better performance, finer-grained sampling, monitoring accuracy, and bandwidth utilization can be achieved than with polling-based alternatives. Sub-Notif [I-D.ietf-netconf-subscribed-notifications] defines a mechanism that allows a collector to subscribe to updates of YANG- defined data that is maintained in a YANG [RFC7950] datastore. The mechanism separates the management and control of subscriptions from the transport that is used to actually stream and deliver the data. Two transports, NETCONF transport [I-D.ietf-netconf-netconf-event-notifications] and HTTP transport [I-D.ietf-netconf-restconf-notif], have been defined so far for the notification messages. While powerful in its features and general in its architecture, in its current form the mechanism needs to be extended to stream telemetry data at high velocity from devices that feature a distributed architecture. The transports that have been defined so far, NETCONF and HTTP, are ultimately based on TCP and lack the efficiency needed to stream data continuously at high velocity. A lighter-weight, more efficient transport, e.g. a transport based on UDP is needed. o Firstly, data collector will suffer a lot of TCP connections from, for example, many line cards equipped on different devices. o Secondly, as no connection state needs to be maintained, UDP encapsulation can be easily implemented by hardware which will further improve the performance. o Thirdly, because of the lightweight UDP encapsulation, higher frequency and better transit performance can be achieved, which is important for streaming telemetry. This document specifies a higher-performance transport option for Sub-Notif that leverages UDP. Specifically, it facilitates the distributed data collection mechanism described in [I-D.zhou-netconf-multi-stream-originators]. In the case of data originating from multiple line cards, the centralized design requires data to be internally forwarded from those line cards to the push server, presumably on a main board, which then combines the individual data items into a single consolidated stream. The centralized data collection mechanism can result in a performance bottleneck, especially when large amounts of data are involved. What is needed instead is the support for a distributed mechanism that allows to directly push multiple individual substreams, e.g. one from each line card, without needing to first pass them through an Zheng, et al. Expires January 1, 2019 [Page 3] Internet-Draft udp-pub-channel June 2018 additional processing stage for internal consolidation, but still allowing those substreams to be managed and controlled via a single subscription. The proposed UDP based Publication Channel (UPC) natively supports the distributed data collection mechanism. The transport described in this document can be used for transmitting notification messages over both IPv4 and IPv6 [RFC8200]. While this document will focus on the data publication channel, the subscription can be used in conjunction with the mechanism proposed in [I-D.ietf-netconf-subscribed-notifications] with extensions [I-D.zhou-netconf-multi-stream-originators]. 2. Terminology Streaming Telemetry: refers to sending a continuous stream of operational data from a device to a remote receiver. This provides an ability to monitor a network from remote and to provide network analytics. Component Subscription: A subscription that defines the data from each individual telemetry source which is managed and controlled by a single Subscription Server. Component Subscription Server: An agent that streams telemetry data per the terms of a component subscription. 3. Solution Overview The typical distributed data collection solution is shown in Fig. 1. Both the Collector and the Publisher can be distributed. The Collector includes the Subscriber and a set of Receivers. And the Publisher includes a Subscription Server and a set of Component Subscription Servers. The Subscriber cannot see the Component Subscription Servers directly, so it will send the Global Subscription information to the Subscription Server (e.g., main board) via the Subscription Channel. When receiving a Global Subscription, the Subscription Server decomposes the subscription request into multiple Component Subscriptions, each involving data from a separate internal telemetry source, for example a line card. The Component Subscriptions are distributed to the Component Subscription Server. Subsequently, each data originator generates its own stream of telemetry data, collecting and encapsulating the packets per the Component Subscription and streaming them to the designated Receivers. This distributed data collection mechanism may form multiple Publication Channels to the Receivers. The Receiver is able to assemble many pieces of data associated with one Global Subscription. Zheng, et al. Expires January 1, 2019 [Page 4] Internet-Draft udp-pub-channel June 2018 The Publication Channel supports the reliable data streaming, for example for some alarm events. The Collector has the option of deducing the packet loss and the disorder based on the information carried by the notification data. And the Collector may decide the behavior to request retransmission. The rest of the draft describes the UDP based Publication Channel (UPC). +-------------------------------------+ | Collector | | | | +------------+ +-----------+ | | | Subscriber | | Receivers | | | +----+-------+ +--^----^---+ | | | | | | +-------------------------------------+ | | | Subscription | | | Publication Channel | | | Channel | +---------+ | | | | +-------------------------------------+ | | | | | | +----v---+-----+ +------+-------+ | | | Subscription | | Component | | | | Server | | Subscription | | | | | | Servers | | | +--------------+ +--------------+ | | | | Publisher | +-------------------------------------+ Fig. 1 Distributed Data Collection 4. Transport Mechanisms For a complete pub-sub mechanism, this section will describe how the UPC is used to interact with the Subscription Channel relying on NETCONF or RESTCONF. 4.1. Dynamic Subscription Dynamic subscriptions for Sub-Notif are configured and managed via signaling messages transported over NETCONF [RFC6241] or RESTCONF [RFC8040]. The Sub-Notif defined RPCs which are sent and responded via the Subscription Channel (a), between the Subscriber and the Subscription Server of the Publisher. In this case, only one Zheng, et al. Expires January 1, 2019 [Page 5] Internet-Draft udp-pub-channel June 2018 Receiver is associated with the Subscriber. In the Publisher, there may be multiple data originators. Notification messages are pushed on separate channels (b), from different data originators to the Receiver. +--------------+ +--------------+ | Collector | | Publisher | | | | | | (a) (b) | | (a) (b) | +--+------+----+ +--+-------+---+ | | | | | | RPC:establish-subscription | | +----------------------------------------> | | | RPC Reply: OK | | <----------------------------------------+ | | | UPC:notifications | | | <-----------------------------------------+ | | | | | | RPC:modify-subscription | | +----------------------------------------> | | | RPC Reply: OK | | <----------------------------------------+ | | | UPC:notifications | | | <-----------------------------------------+ | | | | | | RPC:delete-subscription | | +----------------------------------------> | | | RPC Reply: OK | | <----------------------------------------+ | | | | | | | | | + + + + Fig. 2 Call Flow For Dynamic Subscription In the case of dynamic subscription, the Receiver and the Subscriber SHOULD be colocated. So UPC can use the source IP address of the Subscription Channel as it's destination IP address. The Receiver MUST support listening messages at the IANA-assigned PORT-X or PORT- Y, but MAY be configured to listen at a different port. The Publication Channels MUST share fate with the subscription session. In other words, when the delete-subscription is received or the subscription session is broken, all the associated Publication Channels MUST be closed. Zheng, et al. Expires January 1, 2019 [Page 6] Internet-Draft udp-pub-channel June 2018 4.2. Configured Subscription For a Configured Subscription, there is no guarantee that the Subscriber is currently in place with the associated Receiver(s). As defined in Sub-Notif, the subscription configuration contains the location information of all the receivers, including the IP address and the port number. So that the data originator can actively send generated messages to the corresponding Receivers via the UPC. The first message MUST be a separate subscription-started notification to indicate the Receiver that the pushing is started. Then, the notifications can be sent immediately without any wait. All the subscription state notifications, as defined in [I-D.ietf-netconf-subscribed-notifications], MUST be encapsulated to be separated notification messages. +--------------+ +--------------+ | Collector | | Publisher | | | | | | (a) (b) | | (a) (b) | +--+------+----+ +--+-------+---+ | | | | | | Capability Exchange | | <----------------------------------------> | | | | | | | Edit config(create) | | +----------------------------------------> | | | RPC Reply: OK | | <----------------------------------------+ | | | UPC:subscription started | | | <-----------------------------------------+ | | UPC:notifications | | | <-----------------------------------------+ | | | | | | Edit config(delete) | | +----------------------------------------> | | | RPC Reply: OK | | <----------------------------------------+ | | | UPC:subscription terminated | | | <-----------------------------------------+ | | | | | | | | + + + + Fig. 3 Call Flow For Configured Subscription Zheng, et al. Expires January 1, 2019 [Page 7] Internet-Draft udp-pub-channel June 2018 5. UDP Transport for Publication Channel 5.1. Design Overview As specified in Sub-Notif, the telemetry data is encapsulated in the NETCONF/RESTCONF notification message, which is then encapsulated and carried in the transport protocols, e.g. TLS, HTTP2. The following figure shows the overview of the typical UPC message structure. o The Message Header contains information that can facilitate the message transmission before de-serializing the notification message. o Notification Message is the encoded content that the publication channel transports. The common encoding method includes GPB [1], CBOR [RFC7049], JSON, and XML. [I-D.ietf-netconf-notification-messages] describes the structure of the Notification Message for both single notification and multiple bundled notifications. +-------+ +--------------+ +--------------+ | UDP | | Message | | Notification | | | | Header | | Message | +-------+ +--------------+ +--------------+ Fig. 4 UDP Publication Message Overview 5.2. Data Format of the UPC Message Header The UPC Message Header contains information that can facilitate the message transmission before de-serializing the notification message. The data format is shown as follows. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-------+---------------+-------+-------------------------------+ | Vers. | Flag | ET | Length | +-------+---------------+-------+-------------------------------+ | Message-Generator-ID | +---------------------------------------------------------------+ | Message ID | +---------------------------------------------------------------+ ~ Options ~ +---------------------------------------------------------------+ Fig. 3 UPC Message Header Format Zheng, et al. Expires January 1, 2019 [Page 8] Internet-Draft udp-pub-channel June 2018 The Message Header contains the following field: o Vers.: represents the PDU (Protocol Data Unit) encoding version. The initial version value is 0. o Flag: is a bitmap indicating what features this packet has and the corresponding options attached. Each bit associates to one feature and one option data. When the bit is set to 1, the associated feature is enabled and the option data is attached. The sequence of the presence of the options follows the bit order of the bitmap. In this document, the flag is specified as follows: * bit 0, the reliability flag; * bit 1, the fragmentation flag; * other bits are reserved. o ET: is a 4 bits identifier to indicate the encoding type used for the Notification Message. 16 types of encoding can be expressed: * 0: GPB; * 1: CBOR; * 2: JSON; * 3: XML; * others are reserved. o Length: is the total length of the message, measured in octets, including message header. o Message-Generator-ID: is a 32-bit identifier of the process which created the notification message. This allows disambiguation of an information source, such as the identification of different line cards sending the notification messages. The source IP address of the UDP datagrams SHOULD NOT be interpreted as the identifier for the host that originated the UPC message. The entity sending the UPC message could be merely a relay. o The Message ID is generated continuously by the message generator. Different subscribers share the same notification ID sequence. o Options: is a variable-length field. The details of the Options will be described in the respective sections below. Zheng, et al. Expires January 1, 2019 [Page 9] Internet-Draft udp-pub-channel June 2018 5.3. Options The order of packing the data fields in the Options field follows the bit order of the Flag field. 5.3.1. Reliability Option The UDP based publication transport described in this document provides two streaming modes, the reliable mode an the unreliable mode, for different SLA (Service Level Agreement) and telemetry requirements. In the unreliable streaming mode, the line card pushes the encapsulated data to the data collector without any sequence information. So the subscriber does not know whether the data is correctly received or not. Hence no retransmission happens. The reliable streaming mode provides sequence information in the UDP packet, based on which the subscriber can deduce the packet loss and disorder. Then the subscriber can decide whether to request the retransmission of the lost packets. In most case, the unreliable streaming mode is preferred. Because the reliable streaming mode will cost more network bandwidth and precious device resource. Different from the unreliable streaming mode, the line card cannot remove the sent reliable notifications immediately, but to keep them in the memory for a while. Reliable notifications may be pushed multiple times, which will increase the traffic. When choosing the reliable streaming mode or the unreliable streaming mode, the operate need to consider the reliable requirement together with the resource usage. When the reliability flag bit is set to 1 in the Flag field, the following option data will be attached 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +---------------------------------------------------------------+ | Previous Message ID | +---------------------------------------------------------------+ Fig. 4 Reliability Option Format Current Message ID and Previous Message ID will be added in the packets. For example, there are two subscriber A and B, Zheng, et al. Expires January 1, 2019 [Page 10] Internet-Draft udp-pub-channel June 2018 o Message IDs for the generator are : [1, 2, 3, 4, 5, 6, 7, 8, 9], in which Subscriber A subscribes [1,2,3,6,7] and Subscriber B subscribes [1,2,4,5,7,8,9]. o Subscriber A will receive [Previous Message ID, Current Message ID] like: [0,1][1,2][2,3][3,6][6,7]. o Subscriber B will receive [Previous Message ID, Current Message ID] like: [0,1][1,2][2,4][4,5][5,7][7,8][8,9]. 5.3.2. Fragmentation Option UDP palyload has a theoretical length limitation to 65535. Other encapsulation headers will make the actual payload even shorter. Binary encodings like GPB and CBOR can make the message compact. So that the message can be encapsulated within one UDP packet, hence fragmentation will not easily happen. However, text encodings like JSON and XML can easily make the message exceed the UDP length limitation. The Fragmentation Option can help not Application layer can split the YANG tree into several leaves. Or table into several rows. But the leaf or the row cannot be split any further. Now we consider a very long path. Since the GPB and CBOR are so compact, it's easy to fit into a UDP packet. But for JSON or XML, it is possible that even one leaf will exceed the UDP boundary. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-------------------------------------------------------------+-+ | Fagment Number |L| +-------------------------------------------------------------+-+ Fig. 5 Fragmentation Option Format The Fragmentation Option is available in the message header when the fragmentation flag is set to 1. The option contains: Fragment Number: indicates the sequence number of the current fragment. L: is a flag to indicate whether the current fragment is the last one. When 0 is set, current fragment is not the last one, hence more fragments are expected. When 1 is set, current fragment is the last one. Zheng, et al. Expires January 1, 2019 [Page 11] Internet-Draft udp-pub-channel June 2018 5.4. Data Encoding Subscribed data can be encoded in GPB, CBOR, XML or JSON format. It is conceivable that additional encodings may be supported as options in the future. This can be accomplished by augmenting the subscription data model with additional identity statements used to refer to requested encodings. Implementation may support different encoding method per subscription. When bundled notifications is supported between the publisher and the receiver, only subscribed notifications with the same encoding can be bundled as one message. 6. Using DTLS to Secure UPC The Datagram Transport Layer Security (DTLS) protocol [RFC6347] is designed to meet the requirements of applications that need secure datagram transport. DTLS can be used as a secure transport to counter all the primary threats to UDP based Publication Channel: o Confidentiality to counter disclosure of the message contents. o Integrity checking to counter modifications to a message on a hop- by-hop basis. o Server or mutual authentication to counter masquerade. In addition, DTLS also provides: o A cookie exchange mechanism during handshake to counter Denial of Service attacks. o A sequence number in the header to counter replay attacks. 6.1. Transport As shown in Figure 6, the DTLS is layered next to the UDP transport is to provide reusable security and authentication functions over UDP. No DTLS extension is required to enable UPC messages over DTLS. Zheng, et al. Expires January 1, 2019 [Page 12] Internet-Draft udp-pub-channel June 2018 +-----------------------------+ | UPC Message | +-----------------------------+ | DTLS | +-----------------------------+ | UDP | +-----------------------------+ | IP | +-----------------------------+ Fig. 6: Protocol Stack for DTLS secured UPC The application implementer will map a unique combination of the remote address, remote port number, local address, and local port number to a session. Each UPC message is delivered by the DTLS record protocol, which assigns a sequence number to each DTLS record. Although the DTLS implementer may adopt a queue mechanism to resolve reordering, it may not assure that all the messages are delivered in order when mapping on the UDP transport. Since UDP is an unreliable transport, with DTLS, an originator or relay may not realize that a collector has gone down or lost its DTLS connection state, so messages may be lost. The DTLS record has its own sequence number, the encryption and decryption will done by DTLS layer, UPC Message layer will not concern this. 6.2. Port Assignment The Publisher is always a DTLS client, and the Receiver is always a DTLS server. The Receivers MUST support accepting UPC Messages on the UDP port PORT-Y, but MAY be configurable to listen on a different port. The Publisher MUST support sending UPC messages to the UDP port PORT-Y, but MAY be configurable to send messages to a different port. The Publisher MAY use any source UDP port for transmitting messages. 6.3. DTLS Session Initiation The Publisher initiates a DTLS connection by sending a DTLS Client Hello to the Receiver. Implementations MUST support the denial of service countermeasures defined by DTLS. When these countermeasures are used, the Receiver responds with a DTLS Hello Verify Request containing a cookie. The Publisher responds with a DTLS Client Hello containing the received cookie, which initiates the DTLS handshake. Zheng, et al. Expires January 1, 2019 [Page 13] Internet-Draft udp-pub-channel June 2018 The Publisher MUST NOT send any UPC messages before the DTLS handshake has successfully completed. Implementations MUST support DTLS 1.0 [RFC4347] and MUST support the mandatory to implement cipher suite, which is TLS_RSA_WITH_AES_128_CBC_SHA [RFC5246] as specified in DTLS 1.0. If additional cipher suites are supported, then implementations MUST NOT negotiate a cipher suite that employs NULL integrity or authentication algorithms. Where privacy is REQUIRED, then implementations must either negotiate a cipher suite that employs a non-NULL encryption algorithm or else achieve privacy by other means, such as a physically secured network. 6.4. Sending Data All UPC messages MUST be sent as DTLS "application data". It is possible that multiple UPC messages be contained in one DTLS record, or that a publication message be transferred in multiple DTLS records. The application data is defined with the following ABNF [RFC5234] expression: APPLICATION-DATA = 1*UPC-FRAME UPC-FRAME = MSG-LEN SP UPC-MSG MSG-LEN = NONZERO-DIGIT *DIGIT SP = %d32 NONZERO-DIGIT = %d49-57 DIGIT = %d48 / NONZERO-DIGIT UPC-MSG is defined in section 5.2. 6.5. Closure A Publisher MUST close the associated DTLS connection if the connection is not expected to deliver any UPC Messages later. It MUST send a DTLS close_notify alert before closing the connection. A Publisher (DTLS client) MAY choose to not wait for the Receiver's close_notify alert and simply close the DTLS connection. Once the Receiver gets a close_notify from the Publisher, it MUST reply with a close_notify. When no data is received from a DTLS connection for a long time (where the application decides what "long" means), Receiver MAY close Zheng, et al. Expires January 1, 2019 [Page 14] Internet-Draft udp-pub-channel June 2018 the connection. The Receiver (DTLS server) MUST attempt to initiate an exchange of close_notify alerts with the Publisher before closing the connection. Receivers that are unprepared to receive any more data MAY close the connection after sending the close_notify alert. Although closure alerts are a component of TLS and so of DTLS, they, like all alerts, are not retransmitted by DTLS and so may be lost over an unreliable network. 7. Congestion Control Congestion control mechanisms that respond to congestion by reducing traffic rates and establish a degree of fairness between flows that share the same path are vital to the stable operation of the Internet [RFC2914]. While efficient, UDP has no build-in congestion control mechanism. Because streaming telemetry can generate unlimited amounts of data, transferring this data over UDP is generally problematic. It is not recommended to use the UDP based publication channel over congestion-sensitive network paths. The only environments where the UDP based publication channel MAY be used are managed networks. The deployments require the network path has been explicitly provisioned for the UDP based publication channel through traffic engineering mechanisms, such as rate limiting or capacity reservations. 8. IANA Considerations This RFC requests that IANA assigns three UDP port numbers in the "Registered Port Numbers" range with the service names "upc" and "upc-dtls". These ports will be the default ports for the UDP based Publication Channel for NETCONF and RESTCONF. Below is the registration template following the rules in [RFC6335]. Service Name: upc Transport Protocol(s): UDP Assignee: IESG Contact: IETF Chair Description: UDP based Publication Channel Reference: RFC XXXX Port Number: PORT-X Service Name: upc-dtls Zheng, et al. Expires January 1, 2019 [Page 15] Internet-Draft udp-pub-channel June 2018 Transport Protocol(s): UDP Assignee: IESG Contact: IETF Chair Description: UDP based Publication Channel (DTLS) Reference: RFC XXXX Port Number: PORT-Y 9. Security Considerations TBD 10. Acknowledgements The authors of this documents would like to thank Eric Voit, Tim Jenkins, and Huiyang Yang for the initial comments. 11. References 11.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC2914] Floyd, S., "Congestion Control Principles", BCP 41, RFC 2914, DOI 10.17487/RFC2914, September 2000, . [RFC4347] Rescorla, E. and N. Modadugu, "Datagram Transport Layer Security", RFC 4347, DOI 10.17487/RFC4347, April 2006, . [RFC5234] Crocker, D., Ed. and P. Overell, "Augmented BNF for Syntax Specifications: ABNF", STD 68, RFC 5234, DOI 10.17487/RFC5234, January 2008, . [RFC5246] Dierks, T. and E. Rescorla, "The Transport Layer Security (TLS) Protocol Version 1.2", RFC 5246, DOI 10.17487/RFC5246, August 2008, . Zheng, et al. Expires January 1, 2019 [Page 16] Internet-Draft udp-pub-channel June 2018 [RFC6241] Enns, R., Ed., Bjorklund, M., Ed., Schoenwaelder, J., Ed., and A. Bierman, Ed., "Network Configuration Protocol (NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011, . [RFC6335] Cotton, M., Eggert, L., Touch, J., Westerlund, M., and S. Cheshire, "Internet Assigned Numbers Authority (IANA) Procedures for the Management of the Service Name and Transport Protocol Port Number Registry", BCP 165, RFC 6335, DOI 10.17487/RFC6335, August 2011, . [RFC6347] Rescorla, E. and N. Modadugu, "Datagram Transport Layer Security Version 1.2", RFC 6347, DOI 10.17487/RFC6347, January 2012, . [RFC7049] Bormann, C. and P. Hoffman, "Concise Binary Object Representation (CBOR)", RFC 7049, DOI 10.17487/RFC7049, October 2013, . [RFC7950] Bjorklund, M., Ed., "The YANG 1.1 Data Modeling Language", RFC 7950, DOI 10.17487/RFC7950, August 2016, . [RFC8040] Bierman, A., Bjorklund, M., and K. Watsen, "RESTCONF Protocol", RFC 8040, DOI 10.17487/RFC8040, January 2017, . [RFC8200] Deering, S. and R. Hinden, "Internet Protocol, Version 6 (IPv6) Specification", STD 86, RFC 8200, DOI 10.17487/RFC8200, July 2017, . 11.2. Informative References [I-D.ietf-netconf-netconf-event-notifications] Voit, E., Clemm, A., Prieto, A., Nilsen-Nygaard, E., and A. Tripathy, "NETCONF Support for Event Notifications", draft-ietf-netconf-netconf-event-notifications-09 (work in progress), May 2018. [I-D.ietf-netconf-notification-messages] Voit, E., Birkholz, H., Bierman, A., Clemm, A., and T. Jenkins, "Notification Message Headers and Bundles", draft-ietf-netconf-notification-messages-03 (work in progress), February 2018. Zheng, et al. Expires January 1, 2019 [Page 17] Internet-Draft udp-pub-channel June 2018 [I-D.ietf-netconf-restconf-notif] Voit, E., Rahman, R., Nilsen-Nygaard, E., Clemm, A., and A. Bierman, "RESTCONF and HTTP Transport for Event Notifications", draft-ietf-netconf-restconf-notif-06 (work in progress), June 2018. [I-D.ietf-netconf-subscribed-notifications] Voit, E., Clemm, A., Prieto, A., Nilsen-Nygaard, E., and A. Tripathy, "Customized Subscriptions to a Publisher's Event Streams", draft-ietf-netconf-subscribed- notifications-13 (work in progress), June 2018. [I-D.zhou-netconf-multi-stream-originators] Zhou, T., Zheng, G., Voit, E., Clemm, A., and A. Bierman, "Subscription to Multiple Stream Originators", draft-zhou- netconf-multi-stream-originators-02 (work in progress), May 2018. 11.3. URIs [1] https://developers.google.com/protocol-buffers/ Appendix A. Change Log (To be removed by RFC editor prior to publication) A.1. draft-ietf-zheng-udp-pub-channel-00 to v00 o Modified the message header format. o Added a section on the Authentication Option. o Cleaned up the text and removed unnecessary TBDs. A.2. v01 o Removed the detailed description on distributed data collection mechanism from this document. Mainly focused on the description of a UDP based publication channel for telemetry use. o Modified the message header format. A.2. v02 o Add the section on the transport mechanism. o Modified the fixed message header format. Zheng, et al. Expires January 1, 2019 [Page 18] Internet-Draft udp-pub-channel June 2018 o Add the fragmentation option for the message header. A.2. v03 o Clarify term through the document. o Add a section on DTLS support. Authors' Addresses Guangying Zheng Huawei 101 Yu-Hua-Tai Software Road Nanjing, Jiangsu China Email: zhengguangying@huawei.com Tianran Zhou Huawei 156 Beiqing Rd., Haidian District Beijing China Email: zhoutianran@huawei.com Alexander Clemm Huawei 2330 Central Expressway Santa Clara, California USA Email: alexander.clemm@huawei.com Zheng, et al. Expires January 1, 2019 [Page 19]