US 12,764,166 B2 · Resolving access policies between intent-based network architectures and cloud native architectures

Abstract

Techniques for expressing, communicating, de-conflicting, and enforcing consistent access policies between an IBN architecture and a Cloud-Native architecture. Generally, network administrators and/or users of a Cloud-Native architecture and an IBN architecture express access policies independently for the two different domains or architectures. According to the techniques described herein, a Network Service Endpoint (NSE) of the Cloud-Native architecture may exchange access policies with a network device of the IBN architecture. After exchanging access policies, conflicts between the sets of access policies may be identified, such as differences between allowing or denying communications between microservices and/or applications. The conflicts may be de-conflicted using various types of heuristics or rules, such as always selecting an access policy of the IBN architecture when conflicts arise. After the access policies have been de-conflicted, the IBN architecture and Cloud-Native architecture may then apply consistent access policies for traffic and communications in their respective network architectures.

Claims20

Dependent claims

A system comprising:

one or more processors;
and
one or more non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, at an intent translator, network intent defined for an Intent-Based Networking (IBN) architecture;
receiving, at the intent translator, indications of virtual resources in a virtualized-application network;
translating the network intent from a first data format associated with the IBN architecture into a second data format associated with the virtualized-application network;
receiving, at the intent translator, and indication of interfaces associated with the virtualized-application network through which to deploy the network intent in the second format;
and
deploying the network intent to the virtualized-application network through the interfaces such that the network intent is implemented for the virtual resources.

6 more elements

Dependencies are inferred from the claim text.

Resolving access policies between intent-based network architectures and cloud native architectures

Life of this patent

Resolving access policies between intent-based network architectures and cloud native architectures

Life of this patent

Abstract

Claims20