Techniques for network policies analysis in container frameworks

A computing device, comprising:

• one or more processors;
• and
• one or more memories storing computer-executable instructions that, when executed by the one or more processors causes the computing device to:
• obtain a path data structure defining a network connectivity path between at least one pair of computing components of a network;
• obtain a communication policy data structure defining a network security rule;
• receive a request identifying the network connectivity path and the network security rule;
• identify output data indicating whether the network security rule allows network traffic along the network connectivity path, the output data being
• identified based at least in part on executing a set of operations utilizing the path data structure and the communication policy data structure;
• and
• respond to the request with the output data.

A non-transitory computer readable storage medium storing computer-executable instructions that, when executed by one or more processors of a computing device, cause the computing device to:

• obtain a path data structure defining a network connectivity path between at least one pair of computing components of a network;
• obtain a communication policy data structure defining a network security rule;
• receive a request identifying the network connectivity path and the network security rule;
• identify output data indicating whether the network security rule allows network traffic along the network connectivity path, the output data being identified based at least in part on executing a set of operations utilizing the path data structure and the communication policy data structure;
• and
• respond to the request with the output data.