Network Service Chain Construction via Policy Priority Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In software-defined networks (SDNs), conflicts arise when multiple applications attempt to instruct network devices to perform different actions, and network administrators face challenges in selecting between overlapping network policies, leading to unapplied or rejected policies, especially when policies direct network traffic to different services at different times.
Innovation Solution
The system detects overlapping portions of network policies using an intent format and constructs a network service chain by prioritizing and ordering network services based on policy priorities, allowing for the resolution of conflicts and efficient application of policies by determining the appropriate actions for network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple network policies are applied to direct network traffic to different services, then network service functionality is improved, but policy conflicts arise causing policies to be unapplied or rejected
Solution Approach 1:
The patent segments overlapping network policies into distinct priority levels, separating conflicting policies into ordered groups where higher-priority policies are evaluated and applied before lower-priority ones. This segmentation resolves conflicts by establishing a clear evaluation sequence rather than treating all policies equally.
Solution Approach 2:
The patent introduces policy priority as a new parameter to distinguish and order network policies. By assigning different priority values to policies, the system can differentiate between conflicting policies and determine which should be applied first, transforming the undifferentiated policy set into an ordered hierarchy.
2Reliability
If network administrators manually select between overlapping network policies, then policy conflicts can be resolved, but administrative overhead increases
Solution Approach 1:
The patent enables the network system to automatically resolve policy conflicts through self-service mechanisms. The system autonomously evaluates policies according to their assigned priorities and determines application order without requiring manual administrator intervention, thereby reducing administrative overhead while maintaining reliable conflict resolution.
Solution Approach 2:
By introducing policy priority as an automated differentiation parameter, the system enables automatic conflict resolution algorithms to operate without human intervention. The priority parameter serves as the basis for automated decision-making, replacing manual administrator selection with systematic automated evaluation.
3Adaptability or versatility
If network policies are applied without priority ordering, then all policies can be considered equally, but policy conflicts cause policies to be rejected
Solution Approach 1:
The patent introduces policy priority as a differentiating parameter that transforms the policy management system from handling undifferentiated policies to managing prioritized policies. This parameter enables the system to process multiple policies systematically by establishing an evaluation order, reducing rejection caused by conflicts while maintaining comprehensive policy applicability.
Solution Approach 2:
The patent segments the policy evaluation process into priority-based stages, where policies are processed in ordered groups rather than as a single undifferentiated set. This segmentation of the evaluation process reduces complexity by creating a structured approach to handling multiple policies, preventing rejection through systematic conflict resolution.
Data Source
AI summary
Example implementations relate to construction of a network service chain. For example, a system for construction of a network service chain can include a detection engine to detect a portion of a first network policy directing a subset of packets to a first service and a portion of a second network policy directing the subset of packets to a second service, and a construction engine to construct a network service chain of the first service and the second service in an order determined from a priority assigned to the first network policy and a priority assigned to the second network policy.