公开(公告)号：US11509578B2

公开(公告)日：2022-11-22

申请号：US16713650

申请日：2019-12-13

Applicant: Cisco Technology, Inc.

Inventor： Gianluca Mardente ,  Shrey Ajmera ,  Cheng Wang ,  Maithili Narasimha ,  Aleksandr Oshurkov

IPC: G06F11/34 ,  G06F9/50 ,  H04L45/64 ,  H04L41/0893 ,  H04L43/08

Abstract: This disclosure describes a method of utilizing network controllers to store mappings between policies, dynamic operating attributes (DOA), and trigger values in a manifest and utilizing software agents in communication to monitor DOAs of respective workloads or workload groupings for trigger values associated with the DOAs to apply a corresponding policy at run-time. The method provides for flexible policy semantics and on-demand policy provisioning. The method includes receiving at a network controller, a definition of a policy, a DOA associated with a workload, and a trigger value associated with the DOA, storing a mapping between the policy, DOA and trigger value, sending the DOA and the trigger value to a datapath agent monitoring respective workloads, receiving an indication that a current value of the DOA of the workload corresponds to the trigger value from the software agent, and sending the policy to the software agent for distribution to the workload.

公开(公告)号：US20210182169A1

公开(公告)日：2021-06-17

申请号：US16713650

申请日：2019-12-13

Applicant: Cisco Technology, Inc.

Inventor： Gianluca Mardente ,  Shrey Ajmera ,  Cheng Wang ,  Maithili Narasimha ,  Aleksandr Oshurkov

IPC: G06F11/34 ,  G06F9/50

Abstract: This disclosure describes a method of utilizing network controllers to store mappings between policies, dynamic operating attributes (DOA), and trigger values in a manifest and utilizing software agents in communication to monitor DOAs of respective workloads or workload groupings for trigger values associated with the DOAs to apply a corresponding policy at run-time. The method provides for flexible policy semantics and on-demand policy provisioning. The method includes receiving at a network controller, a definition of a policy, a DOA associated with a workload, and a trigger value associated with the DOA, storing a mapping between the policy, DOA and trigger value, sending the DOA and the trigger value to a datapath agent monitoring respective workloads, receiving an indication that a current value of the DOA of the workload corresponds to the trigger value from the software agent, and sending the policy to the software agent for distribution to the workload.