Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification
draft-ietf-dots-data-channel-27
|
| Document |
Type |
|
Active Internet-Draft (dots WG)
|
|
Last updated |
|
2019-03-13
(latest revision 2019-02-22)
|
|
Replaces |
|
draft-reddy-dots-data-channel
|
|
Stream |
|
IETF
|
|
Intended RFC status |
|
Proposed Standard
|
|
Formats |
|
plain text
xml
pdf
html
bibtex
|
|
Yang Validation |
|
☯
0 errors, 0 warnings.
draft-ietf-dots-data-channel-27.txt:
xym 0.4:
Extracting 'ietf-dots-data-channel@2019-02-14.yang'
Removed 0 empty lines
ietf-dots-data-channel@2019-02-14.yang:
pyang 1.7.8: pyang --verbose --ietf -p {libs} {model}:
# read ietf-dots-data-channel@2019-02-14.yang (CL)
# read /a/www/ietf-datatracker/6.94.1/env/share/yang/modules/ietf/ietf-inet-types.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-inet-types@2019-03-11.yang
# read /a/www/ietf-ftp/yang/rfcmod/ietf-access-control-list@2019-03-04.yang
# read /a/www/ietf-datatracker/6.94.1/env/share/yang/modules/ietf/ietf-yang-types.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-yang-types@2019-03-11.yang
# read /a/www/ietf-ftp/yang/rfcmod/ietf-packet-fields@2019-03-04.yang
# read /a/www/ietf-ftp/yang/rfcmod/ietf-ethertypes@2019-03-04.yang
# read /a/www/ietf-datatracker/6.94.1/env/share/yang/modules/ietf/ietf-interfaces.yang
# read /a/www/ietf-ftp/yang/rfcmod/ietf-interfaces@2018-02-20.yang
yanglint 0.14.80: yanglint --verbose -p {rfclib} -p {draftlib} -p {tmplib} {model} -i:
No validation errors
|
|
Reviews |
|
|
|
Additional URLs |
|
|
| Stream |
WG state
|
|
Submitted to IESG for Publication
(wg milestone:
Aug 2018 - Data channel documen...
)
|
|
Document shepherd |
|
Roman Danyliw
|
|
Shepherd write-up |
|
Show
(last changed 2019-02-27)
|
| IESG |
IESG state |
|
Waiting for Writeup
|
|
Consensus Boilerplate |
|
Yes
|
|
Telechat date |
|
|
|
Responsible AD |
|
Benjamin Kaduk
|
|
Send notices to |
|
Roman Danyliw <rdd@cert.org>
|
| IANA |
IANA review state |
|
IANA - Not OK
|
|
IANA action state |
|
None
|
DOTS M. Boucadair, Ed.
Internet-Draft Orange
Intended status: Standards Track T. Reddy, Ed.
Expires: August 26, 2019 McAfee
February 22, 2019
Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel
Specification
draft-ietf-dots-data-channel-27
Abstract
The document specifies a Distributed Denial-of-Service Open Threat
Signaling (DOTS) data channel used for bulk exchange of data that
cannot easily or appropriately communicated through the DOTS signal
channel under attack conditions.
This is a companion document to the DOTS signal channel
specification.
Editorial Note (To be removed by RFC Editor)
Please update these statements within the document with the RFC
number to be assigned to this document:
o "This version of this YANG module is part of RFC XXXX;"
o "RFC XXXX: Distributed Denial-of-Service Open Threat Signaling
(DOTS) Data Channel Specification";
o reference: RFC XXXX
Please update the "revision" date of the YANG module.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
Boucadair & Reddy Expires August 26, 2019 [Page 1]
Internet-Draft DOTS Data Channel Protocol February 2019
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on August 26, 2019.
Copyright Notice
Copyright (c) 2019 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 5
3. DOTS Data Channel . . . . . . . . . . . . . . . . . . . . . . 5
3.1. Design Overview . . . . . . . . . . . . . . . . . . . . . 5
3.2. DOTS Server(s) Discovery . . . . . . . . . . . . . . . . 7
3.3. DOTS Gateways . . . . . . . . . . . . . . . . . . . . . . 8
3.4. Detect and Prevent Infinite Loops . . . . . . . . . . . . 8
3.5. Stale Entries . . . . . . . . . . . . . . . . . . . . . . 9
4. DOTS Data Channel YANG Module . . . . . . . . . . . . . . . . 9
4.1. Generic Tree Structure . . . . . . . . . . . . . . . . . 9
4.2. Filtering Fields . . . . . . . . . . . . . . . . . . . . 13
4.3. YANG Module . . . . . . . . . . . . . . . . . . . . . . . 20
5. Managing DOTS Clients . . . . . . . . . . . . . . . . . . . . 37
5.1. Registering DOTS Clients . . . . . . . . . . . . . . . . 37
5.2. Unregistering DOTS Clients . . . . . . . . . . . . . . . 40
6. Managing DOTS Aliases . . . . . . . . . . . . . . . . . . . . 40
6.1. Create Aliases . . . . . . . . . . . . . . . . . . . . . 41
6.2. Retrieve Installed Aliases . . . . . . . . . . . . . . . 45
6.3. Delete Aliases . . . . . . . . . . . . . . . . . . . . . 47
7. Managing DOTS Filtering Rules . . . . . . . . . . . . . . . . 47
7.1. Retrieve DOTS Filtering Capabilities . . . . . . . . . . 47
7.2. Install Filtering Rules . . . . . . . . . . . . . . . . . 49
7.3. Retrieve Installed Filtering Rules . . . . . . . . . . . 52
7.4. Remove Filtering Rules . . . . . . . . . . . . . . . . . 59
8. Operational Considerations . . . . . . . . . . . . . . . . . 60
9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 60
Boucadair & Reddy Expires August 26, 2019 [Page 2]
Internet-Draft DOTS Data Channel Protocol February 2019
10. Security Considerations . . . . . . . . . . . . . . . . . . . 61
Show full document text