Early Review of draft-ietf-sfc-control-plane-02
review-ietf-sfc-control-plane-02-secdir-early-meadows-2015-12-10-00

A Service Function Chain is a chain of different services (firewalls, load
balancers, etc.) that are stitched together to provide a coordinated service.

This document describes requirements for conveying information between Service
Function Chaining (SFC) control elements and SFC function elements,

and identifies a set of interfaces to interact with SFC-aware elements to
establish, maintain or recover service function chains.  However,
recommendations

and specifications of specific protocols are explicitly out of scope.

The Security Considerations section of this document identifies the various
security threats and requirements.  It is very well-thought out and
comprehensive.

  It stops short of recommending any particular techniques (except in the very
  broad sense, e.g. authentication), but this is very much in the spirit of the

rest of the document, whose purpose is to identify requirements rather than to
recommend specific solutions.

I consider this document READY.

Catherine Meadows

Naval Research Laboratory

Code 5543

4555 Overlook Ave., S.W.

Washington DC, 20375

phone: 202-767-3490

fax: 202-404-7942

email:

catherine.meadows at nrl.navy.mil