Dynamically installing and uninstalling group-based policies based on application operating environment activity

A non-transitory storage medium that stores hardware processor-readable instructions that, when executed by a hardware processor of a network device, cause the network device to:

• detect presence of an application operating environment on a network associated with the network device;
• responsive to the detecting the presence of the application operating environment:
• determine an Internet Protocol (IP) address of the application operating environment;
• determine a role associated with the application operating environment based on the IP address;
• identify a group-based policy corresponding to the role;
• and
• install the group-based policy on the network device, wherein the network device regulates a network traffic based on the group-based policy to enforce the group-based policy;
• and
• selectively uninstall the group-based policy based on a network activity associated with the application operating environment.

A system comprising:

• a server to host an application operating environment deployed by an orchestrator, wherein the application operating environment comprises an operating system, and wherein the application operating environment to provide a gratuitous address resolution protocol (ARP) packet;
• and
• a network switch to:
• responsive to the ARP packet, associate an Internet Protocol (IP) address with the application operating environment;
• receive data generated by the orchestrator and representing a role associated with the application operating environment;
• associate the role with a group-based policy;
• regulate network traffic flows based on the group-based policy to enforce the group-based policy;
• and
• manage installation of the group-based policy on the network device responsive to a network activity associated with the application operating environment.