Darren Loher comments

Results 810 comments of


                                            Darren Loher

Security Analysis Changes Part 6

/gcbrun

Security Analysis Changes Part 6

/gcbrun

Final Security Analysis Changes

/gcbrun

Final Security Analysis Changes

/gcbrun

Clarify and update the ordering in which decapsulation and encapsulation happens in NH AFT entry state

Please see #1371 . It's likely the ordering specified there also applies to AFT. If yes, we could revise it accordingly

Add `gre` container under next-hops aft entry state. Add `src-ip`, `dst-ip` and `ttl` under `gre` aft entry state for telemetry.

/gcbrun

Add `gre` container under next-hops aft entry state. Add `src-ip`, `dst-ip` and `ttl` under `gre` aft entry state for telemetry.

/gcbrun

Add `gre` container under next-hops aft entry state. Add `src-ip`, `dst-ip` and `ttl` under `gre` aft entry state for telemetry.

> > Doesn't need to be handled in this PR -- but in reviewing this I had a thought. If we were doing MPLS over GRE then we'll specify something...

Add `gre` container under next-hops aft entry state. Add `src-ip`, `dst-ip` and `ttl` under `gre` aft entry state for telemetry.

How about defining containers for each encap with it's own set of custom state leaves? Since encaps can be quite different, I am not sure it is feasible to have...

Add `gre` container under next-hops aft entry state. Add `src-ip`, `dst-ip` and `ttl` under `gre` aft entry state for telemetry.

> > https://github.com/openconfig/public/blob/master/release/models/aft/openconfig-aft-common.yang#L272 > > Description of tunnel-src-ip-address is confusing. It can be used to populate gre tunnel src address. can we update the description to make it specific to...