Re: [IPFIX] Promotion of Enterprise-Specific IEs to IANA IEs

Paul Aitken <[email protected]>
Newsgroups gmane.ietf.ipfix
Message-ID <[email protected]>
Benoit,

> Instead, just point the collector to the URI with all the information. 
> That's way easier for everybody: the exporters and the collector.

My constant point is that there's no way that network operators will 
allow this.

Network configuration is locked down, and only changeable during 
pre-planned maintenance windows. At such times, only known-good and 
pre-tested configurations are rolled out.

The equivalence option can be tested in isolation in a lab, and the 
configuration proven. There's no external influence upon the configuration.

Whereas the URI mechanism cannot be tested in isolation because it's 
dependent upon the URI content, which could be modified at any time 
without notice.

Also, this introduces a new attack vector upon the collector - ie, by 
feeding it malformed or incorrect data through the URI.

So from a network operator point of view, I wouldn't buy that.

P.
_______________________________________________
IPFIX mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipfix
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.