US 2023/0145237 A1 · POLICY VALIDATION

Abstract

This disclosure describes techniques for policy validation techniques relating to data traffic routing among network devices. The techniques may include processing a validation request from a controller. A validation request may include information related to a computed path for routing data traffic in a computing network. The processing may include sending one or more path requests to one or more redundant controllers, and comparing computed paths from the redundant controller(s) to the originally computed path. The techniques may include generating a validation response based on comparing the computed paths. In some examples, the techniques may further include determining a health score for the controller. Policy validation techniques may improve data traffic routing among network devices by helping to ensure valid policies are produced.

Claims20

Dependent claims

A computer-implemented method comprising:

receiving, at a validation engine and from a primary controller, a validation request including a first computed path for routing data traffic in a computing network;
in response to receiving the validation request, sending, from the validation engine and to a redundant controller, a path request relating to the validation request;
receiving, at the validation engine and from the redundant controller, a second computed path relating to the path request;
comparing the first computed path to the second computed path;
based at least in part on the comparing, generating a validation response;
and
sending the validation response from the validation engine to the primary controller.

4 more elements

A computing device comprising:

one or more processors;
and
one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
receive, from a primary controller, a validation request including a first computed path for routing data traffic in a computing network;
in response to receiving the validation request, send, to a redundant controller, a path request relating to the validation request;
receive, from the redundant controller, a second computed path relating to the path request;
compare the first computed path to the second computed path;
based at least in part on comparing the first computed path to the second computed path, generate a validation response;
and
send the validation response to the primary controller.

7 more elements

Dependencies are inferred from the claim text.

Policy validation

Life of this patent

Policy validation

Life of this patent

Abstract

Claims20