05-30-2023 TSC Meeting Minutes

TSC Meeting Zoom link

Meeting Recording: 

Meeting Chat File: 

Attendees & Representation. Please add your name to the attendance table below.

LF Staff: LJ Illuzzi 

Agenda

• LF Antitrust Policy

• Meeting note taker

• Welcome new attendees

• Issue discussion/Dev updates
  • Lead off with RBAC https://github.com/l3af-project/l3af-arch/discussions/57
• Release Management (Dhivya)
• LFN Developer & Testing Forum June 2023 - Review calendar/L3AF Schedule

• Optimising Traffic Mirroring
• AOB

• General Topics (cover as needed)

  • Use Cases

  • Roadmap

  • Project structure

    • Governance

    • Technical Steering Committee

Minutes/Updates

• Issue discussion/Dev updates
  • L3AF R2
    • RBAC https://github.com/l3af-project/l3af-arch/discussions/57
      • Option 1: RBAC framework using x.509 PKI Certificate Attributes
        • Not every CA will issue those types of certs (w/usernames)
      • Option 2 OATH
        • No work required. Just consume already existing resources.
        • Many enterprises already using it.
          • ex: Windows Active Directory
      • Option 3. Digital Signature based Authorization with mTLS
        • Minimal overhead.
        • Partly extensible. Partly standards compliant.
        • Protocols mature, framework not so mature.
      • Option 4. SHA256 Hash based Authorization with mTLS
        
        • Don't want l3af to be the actual auth service.
        • Custom implementation
    • https://github.com/l3af-project/l3afd/pull/229
    • https://github.com/l3af-project/l3afd/pull/242
    • Loading XDP and TC program blockers
      • https://github.com/l3af-project/l3afd/issues/191
      • https://github.com/florianl/go-tc/issues/17 - Need to update with our issue.
  • L3AFD v2.1
  • L3AF on Windows
    • LFN Mentorship Program for L3AF on Windows

• Release Management

• LFN Developer & Testing Forum June 2023 - June 6-8, 2023. Virtual event
  • Review calendar/L3AF Schedule
  • Link to L3AF topic submissions: 
  • Topics Submission Page
  • Virtual D&TF session guidelines
  • Reminder to Register
  • Best place for marketing the project- this is how we grow the community within LF/LFN
  • Question: should June 6 TSC meeting be canceled so the community can attend D&TF? (many LFN communities will cancel TSC meetings that week in lieu of D&TF).

• Optimising Traffic Mirroring (Arunkanth) Link

• Any Other Business

Action Items

• Dhivya R Release Management Plan- add milestones for testing, documentation, package. What else is needed from a delivery standpoint?
• LJ Illuzzi  Open SSF Scorecard. Is it visible on LFX Security
• LJ Illuzzi Draft LFN Board response to eBPF standards

Future Agenda Items

Start with 

• RBAC https://github.com/l3af-project/l3af-arch/discussions/57