Policy Orchestrator Cross-Correlating Network Policies
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network environments face challenges in optimizing network policy enforcement due to the complexity of determining appropriate enforcement points, which can lead to inefficient resource usage and increased network traffic.
Innovation Solution
The implementation of a policy orchestrator that correlates network policies with network topology and device capabilities to determine optimal enforcement points, optimizing policy enforcement by minimizing traffic and resource usage, and ensuring consistent policy execution across multiple domains.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network policies are enforced at multiple devices without optimization, then policy coverage is improved, but network traffic and resource usage increase
Solution Approach 1:
The patent segments the policy enforcement function by identifying specific enforcement points within the network topology. Instead of enforcing all policies at all devices, the system divides the network into segments and assigns policies to specific enforcement points based on topology analysis, device capabilities, and policy requirements, thereby reducing redundant traffic while maintaining comprehensive coverage
Solution Approach 2:
The system performs preliminary analysis of network topology, device capabilities, and policy requirements before enforcement. The policy orchestrator pre-determines optimal enforcement points by correlating policies with topology data and device capabilities in advance, avoiding runtime decisions that would generate additional traffic and processing overhead
2Reliability
If network policies are enforced at multiple devices without optimization, then policy coverage is improved, but device resource usage increases
Solution Approach 1:
The patent applies local quality by matching specific policy enforcement requirements with the local capabilities of individual devices. The system analyzes device capabilities (processing power, memory, enforcement functions) and assigns policies to devices that have the appropriate local qualities to handle them efficiently, avoiding overloading devices with policies beyond their capabilities
Solution Approach 2:
The system performs preliminary correlation of policies with device capabilities before enforcement. The policy orchestrator pre-assesses which devices are suitable for enforcing which policies based on their capabilities, and configures only the necessary policies at each device, preventing wasteful resource consumption from enforcing unnecessary policies
3Productivity
If policy enforcement points are determined without cross-correlation, then enforcement speed is improved, but policy consistency deteriorates
Solution Approach 1:
The patent introduces a policy orchestrator as an intermediary that mediates between policy definitions and enforcement devices. The orchestrator performs cross-correlation of policies with each other and with network topology, ensuring that policy decisions are consistent across the network while still enabling efficient enforcement at the selected points
Solution Approach 2:
The system implements feedback mechanisms where the policy orchestrator continuously monitors policy enforcement status and device states. This feedback enables the system to verify policy consistency across the network and make adjustments if inconsistencies are detected, maintaining stability without sacrificing enforcement speed
Data Source
AI summary
A plurality of policies to be enforced in a network environment via a plurality of devices are determined. A topology of the plurality of devices within the network environment is also determined. For each policy of the plurality of policies, a device of the plurality of devices is selected as the location at which to enforce the policy of the plurality of policies. Selecting the device for each policy of the plurality of policies includes correlating the policy of the plurality of policies with another of the plurality of policies and correlating the policy of the plurality of policies with the topology.