The IESG has approved the following document:
- 'Manufacturer Usage Description Specification'
  (draft-ietf-opsawg-mud-25.txt) as Proposed Standard

This document is the product of the Operations and Management Area Working
Group.

The IESG contact persons are Warren Kumari and Ignas Bagdonas.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsawg-mud/




Technical Summary

  This memo specifies a component-based architecture for manufacturer
  usage descriptions (MUD).  The goal of MUD is to provide a means for
  Things to signal to the network what sort of access and network
  functionality they require to properly function.  The initial focus
  is on access control.  Later work can delve into other aspects.

  This memo specifies two YANG modules, IPv4 and IPv6 DHCP options, an
  LLDP TLV, a URL suffix specification, an X.509 certificate extension
  and a means to sign and verify the descriptions.

Working Group Summary

  There was excellent discussion and comments throughout.  The authors were 
quick to respond, and incorporate feedback as well as push back on items 
thought to be out of scope.  The discussions led to talks of subsequent work 
for future drafts.

Document Quality

  There are implementations in the works.  Eliot Lear has stood up a tool at 
https://mudmaker.org/ that builds MUD files as a way to help vendors.  There 
were numerous expert reviews including multiple areas and YANG Doctors.  Those 
reviews led to some tighter security considerations, as well as more explicit 
mention that MUD files are to be taken under operational advisement as it is 
not wise to blindly apply others' configurations to your network.  The YANG 
Doctors review, in particular, led to a better structure to the MUD YANG module 
that will allow it to provide a data definition, as well as be implemented on 
controllers if need be.

Personnel

  Who is the Document Shepherd? Who is the Responsible Area
  Director?
  
  Joe Clarke is the document shepherd.
  Ignas Bagdonas is the responsible AD.

Reply via email to