System and method for distribution of policy enforcement point

A non-transitory computer-readable storage medium storing computer-executable instructions that when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving a packet for a traffic flow going out of a network;
• performing a reverse lookup to identify an intermediate node within the network and traffic parameters associated with the packet at the identified intermediate node;
• translating a policy based on the traffic parameters at the identified intermediate node;
• and
• enabling the identified intermediate node to apply the policy to the traffic flow.

An edge device for distributed policy enforcement in a network, the edge device comprising:

• a memory;
• and
• one or more processors programmed to:
• receive a packet for a traffic flow going out of the network;
• perform a reverse lookup to identify an intermediate node within the network and traffic parameters associated with the packet at the identified intermediate node;
• translate a policy based on the traffic parameters at the identified intermediate node;
• and
• enable the identified intermediate node to apply the policy to the traffic flow.