Policy Processing Method and Network Device

A multi-service policy processing method, comprising:

• performing a mixed orchestration on all service rules corresponding to multiple service applications to extract conditions of all the service rules, wherein each service rule comprises a condition and an action;
• using the extracted conditions to construct at least one condition set;
• generating mapping relationship data for recording a mapping relationship between each service rule and the condition in the condition set;
• performing, according to each constructed condition set, condition matching on packet feature information of a received network data packet;
• outputting a condition matching result set, wherein the condition matching result set is used to record the condition that is matched successfully;
• determining, according to the condition matching result set and the generated mapping relationship data, the service rule that is matched successfully;
• and
• triggering the service application corresponding to the successfully matched service rule to execute the action corresponding to the successfully matched service rule.

A network device, comprising:

• a processor;
• and
• a memory, wherein the processor and the memory are connected through a bus, wherein the memory is configured to store an executable program code, wherein the processor is configured to read the executable program code stored in the memory to run the program corresponding to the executable program code so as to:
• perform a mixed orchestration on all service rules corresponding to multiple service applications to extract conditions of all the service rules, wherein each service rule comprises a condition and an action;
• use the extracted conditions to construct at least one condition set;
• generate mapping relationship data for recording a mapping relationship between each service rule and the condition in the condition set;
• perform, according to each constructed condition set, condition matching on packet feature information of a received network data packet;
• output a condition matching result set, wherein the condition matching result set is used to record the condition that is matched successfully;
• determine, according to the condition matching result set and the generated mapping relationship data, a service rule that is matched successfully;
• trigger the service application corresponding to the successfully matched service rule to execute an action corresponding to the successfully matched service rule.

A non-transitory computer readable medium including operations stored thereon that when processed by at least one processing unit cause a system to perform the acts of:

• performing a mixed orchestration on all service rules corresponding to multiple service applications to extract conditions of all the service rules, wherein each service rule comprises a condition and an action;
• using the extracted conditions to construct at least one condition set;
• generating mapping relationship data for recording a mapping relationship between each service rule and the condition in the condition set;
• performing, according to each constructed condition set, condition matching on packet feature information of a received network data packet;
• outputting the condition matching result set, wherein the condition matching result set is used to record a condition that is matched successfully;
• determining, according to the condition matching result set and the generated mapping relationship data, a service rule that is matched successfully;
• and
• triggering a service application corresponding to the successfully matched service rule to execute an action corresponding to the successfully matched service rule.