Distributed service level enforcement in distributed system

A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause a first network device to perform operations for managing operation of a distributed system, the operations comprising:

• making, by a management controller of the first network device, an identification that a control plane of the first network device is suspected of being compromised;
• identifying, by the management controller and based on the identification, a level of network service provided by a data plane of the first network device and that is governed by a subscription;
• making, by the management controller, a first determination regarding whether the level of network service is commensurate with the subscription;
• in a first instance of the first determination where the level of network service is not commensurate with the subscription:
• identifying, by the management controller, a configuration of the data plane that is out of compliance with the subscription;
• initiating, at least in part by the management controller and based on the configuration, remote enforcement of the subscription by a second network device to conform operation of the data plane to the subscription to obtain an updated data plane;
• and
• providing, by the first network device, network data unit processing services using the updated data plane.

A first network device, comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the network device to perform operations for managing operation of a distributed system, the operations comprising:
• making, by a management controller of the first network device, an identification that a control plane of the first network device is suspected of being compromised;
• identifying, by the management controller and based on the identification, a level of network service provided by a data plane of the first network device and that is governed by a subscription;
• making, by the management controller, a first determination regarding whether the level of network service is commensurate with the subscription;
• in a first instance of the first determination where the level of network service is not commensurate with the subscription:
• identifying, by the management controller, a configuration of the data plane that is out of compliance with the subscription;
• initiating, at least in part by the management controller and based on the configuration, remote enforcement of the subscription by a second network device to conform operation of the data plane to the subscription to obtain an updated data plane;
• and
• providing, by the first network device, network data unit processing services using the updated data plane.