Cross-Domain Policy Orchestration with Merged Policy Matrices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network solutions for cross-domain orchestration face challenges in maintaining policy independence and flexibility across multiple domains, leading to restrictive or unrestrictive policies and difficulties in network deployment and administration.
Innovation Solution
A cross-domain automation (CDA) controller performs macro-segmentation and micro-segmentation of domains using metadata and merged policy matrices to enable independent and flexible policy orchestration across domains, allowing administrators to visualize and adjust policies seamlessly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common policies are enforced at each domain to ensure interworking, then interworking between domains is improved, but policy independence between domains is lost and policies become too restrictive or unrestrictive
Solution Approach 1:
The patent segments policy management into two levels: macro-segmentation divides the network into multiple independent domains, each with its own policy set, while micro-segmentation allows fine-grained policy control within each domain. This hierarchical segmentation enables both interworking through defined interfaces and policy independence within domains.
Solution Approach 2:
The patent introduces a policy orchestration controller as an intermediary that manages policy enforcement at domain boundaries. This controller enables interworking between domains by coordinating policies across domain interfaces while allowing each domain to maintain its own internal policy independence through local policy servers.
2Adaptability or versatility
If different policies are allowed at each domain to maintain policy independence, then policy flexibility is improved, but interworking communications between domains become difficult
Solution Approach 1:
The patent creates a universal policy framework that can accommodate multiple domain-specific policies. The macro-segmentation structure provides a common interface layer that works universally across all domains, enabling interworking communications while allowing each domain to maintain its unique policy characteristics through micro-segmentation.
Solution Approach 2:
The policy orchestration controller acts as a mediator that translates between different domain policies and a common policy language. This intermediary enables interworking communications by coordinating policy decisions across domains with different policy frameworks while preserving each domain's policy independence.
3Adaptability or versatility
If macro-segmentation and micro-segmentation are implemented for cross-domain orchestration, then policy independence and flexibility are improved, but system complexity increases
Solution Approach 1:
The patent divides the complex policy management system into manageable segments: macro-segmentation handles high-level domain boundaries and interworking policies, while micro-segmentation manages detailed intra-domain policies. This segmentation reduces complexity by organizing policy management into hierarchical layers with clear responsibilities at each level.
Solution Approach 2:
The policy orchestration controller serves as an intermediary that abstracts the complexity of coordinating multiple domains. It provides a unified interface for policy management while handling the complex interactions between domains internally, thereby reducing the apparent complexity for administrators and operators.
Data Source
AI summary
A method of cross-domain policy orchestration may include executing, with a cross-domain automation (CDA) controller, a macro-segmentation of a plurality of domains based at least in part on metadata defining a mapping to a corresponding plurality of domain controllers, and executing, with the CDA controller, a micro-segmentation of policies within a group based at least in part on a merged policy matrix obtained from policies of the domain controllers.