Intent File Validation for Out-of-Band Network Changes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network devices may implement configuration changes outside the control of the network management system, which can render the intended configuration incompatible, complicating network management.
Innovation Solution
A controller device manages network devices by receiving intent files, translating them into low-level configurations, and storing backups. It generates flagged XPath operations to detect out-of-band configuration changes incompatible with the intended configuration, using a configuration database to determine compatibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network devices are allowed to implement configuration changes autonomously, then device adaptability and responsiveness are improved, but configuration compatibility and management control deteriorate
Solution Approach 1:
The system implements a feedback mechanism where the controller device receives notifications about configuration changes from network devices, compares these changes against the intended configuration from intent files, and can trigger restoration actions. This closed-loop feedback ensures that autonomous device changes are detected and corrected to maintain configuration compatibility.
Solution Approach 2:
The controller device stores backup configurations before pushing new configurations to network devices. When out-of-band changes are detected, these pre-stored backups enable rapid restoration to the intended state, preventing compatibility issues from persisting and maintaining system reliability.
2Reliability
If the controller device monitors and validates all configuration changes, then configuration compatibility is improved, but system complexity and processing overhead increase
Solution Approach 1:
The system extracts only the critical configuration parameters that are defined in the intent files for monitoring and validation. Rather than analyzing entire configuration sets, the controller focuses on specific flagged XPath operations corresponding to intent-defined parameters, reducing processing complexity while maintaining compatibility validation.
Solution Approach 2:
The monitoring and validation process applies different levels of scrutiny to different configuration parameters. Parameters defined in intent files receive strict validation with flagged XPath operations, while other parameters are monitored with less overhead. This localized quality approach optimizes the balance between reliability and complexity.
Data Source
AI summary
A controller device manages a plurality of network devices. The controller device includes a memory comprising a configuration database including a set of stored network device configurations, wherein each stored network device configuration of the set of stored network device configurations corresponds to a network device of the set of network devices. Additionally, the controller device includes processing circuitry configured to receive an intent file corresponding to an intended configuration for the set of network devices; receive a message from a network device of the set of network devices indicating an out-of-band configuration change at the network device; and determine, based on a stored network device configuration corresponding to the network device and an actual configuration of the network device, whether the intent file is compatible with the out-of-band configuration change.