Intent-driven network management

Patent metadata

Field	Value
Publication number	US-12155530-B1
Application number	US-202318518751-A
Country	US
Kind code	B1
Filing date	Nov 24, 2023
Priority date	Nov 24, 2023
Publication date	Nov 26, 2024
Grant date	Nov 26, 2024

Abstract

Network management systems and associated methods are described for providing intent-driven management of networks using one or more compilers. An intent identifying an expectation for behavior in a network and entity associations for the intent may be received at a compiler. The compiler may determine one or more artifacts for the respective entities based on the intent. The compiler may output instructions based on the artifacts for the consumers. The instructions may be in a language and/or format corresponding to the consumers.

First claim

What is claimed is:

1. A computing system comprising:
a network management system including one or more services comprising one or more storage devices storing instructions executable to:
receive, at a token service including a first compiler, a request including a proposed intent identifying an expectation for behavior in a network and one or more intent associations of entities for the intent,
process the request with the first compiler by selectively generating first, verification testing output usable by a first test authority to verify whether the proposed intent is allowed to be applied to the network and second, network updating output usable by a change service to update network devices or services in the network to control the network devices or services to comply with the proposed intent,
receive, at an authority service, request data corresponding to the request, the authority service configured to update a transaction journal to include a transaction corresponding to a change to add the proposed intent for the network,
receive, at a second compiler, change data regarding the change from the authority service,
process, with the second compiler, the change data to generate third, validation testing output usable by a second test authority to perform a validation of the change, and
output an indication of a validation issue responsive to detecting a violation of one or more applied intents in the transaction journal based on the validation.

2. The computing system of claim 1 , wherein the validation includes a comparison of monitored behavior of the network or network devices to an intended behavior of the network or the network devices.

3. The computing system of claim 1 , wherein the proposed intent is provided to the first compiler in a first language, and wherein the first compiler is configured to generate one or both of the first, verification testing output or the second, network updating output in a second language that is different from the first language.

4. The computing system of claim 3 , wherein the second language is selected to be compatible with the first or second test authority or the network devices or services.

5. The computing system of claim 3 , wherein the first compiler is configured to generate the first, verification testing output in the second language that is compatible with the first test authority and to generate the second, network updating output in a third language that is compatible with one or more of the network devices or services.

6. The computing system of claim 1 , wherein verifying whether the proposed intent is allowed to be applied to the network comprises running a simulation to determine an effect of the proposed intent on the network and determining if the effect of the proposed intent violates another intent in the transaction journal, and wherein the first, verification testing output is generated in a language or format that is compatible with one or more devices used for the simulation.

7. A computer-implemented method comprising:
receiving, at a compiler, a request including an intent identifying an expectation for behavior in a network and one or more entity associations for the intent;
for respective entities of the one or more entity associations, determining artifacts for the respective entities based on the intent; and
outputting, to consumers included in the respective entities, instructions based on the artifacts for the consumers.

8. The computer-implemented method of claim 7 , wherein the data relating to the artifacts includes instructions to perform a verification of the intent prior to applying the intent to the network, and wherein the consumers include a test authority or test scheduler for configuring and performing the verification.

9. The computer-implemented method of claim 7 , wherein the data relating to the artifacts includes instructions to control network devices or services to comply with the intent, and wherein the consumers include the network devices or services.

10. The computer-implemented method of claim 9 , wherein the data is output responsive to a determination that the intent is verified as being allowed to be applied to the network.

11. The computer-implemented method of claim 10 , wherein the determination that the intent is verified comprises determining that the intent is not predicted to violate one or more other applied intents of the network based on a performance of one or more tests.

12. The computer-implemented method of claim 7 , wherein the data relating to the artifacts includes instructions to perform a validation of the intent.

13. The computer-implemented method of claim 12 , wherein performing the validation comprises monitoring behavior of the network to determine observed behavior, comparing the observed behavior to intended behavior that is based on applied intents for the network, and outputting an indication of drift responsive to determining a difference between the intended behavior and the observed behavior or responsive to determining that the observed behavior violates an applied intent for the network.

14. The computer-implemented method of claim 7 , wherein the intent is received at the compiler in a first language that is different from a native language used by the consumers.

15. The computer-implemented method of claim 14 , wherein determining the artifacts for the respective entities based on the intent comprises determining an association between the intent and the respective entity using entity information and entity state retrieved from an authority service.

16. One or more computer-readable storage media comprising computer-executable instructions that, when executed, cause a computing system to perform a method comprising:
receiving, at a compiler, a request including an intent identifying an expectation for behavior in a network and one or more associations of entities to the intent;
processing, with the compiler, the intent using entity information and entity state retrieved from an authority service; and
generating output for one or more consumers corresponding to the intent, the output including one or more of: data for performing a verification of the intent prior to applying the intent to the network, data for controlling network devices or services to comply with the proposed intent, or data to perform a validation of the intent.

17. The one or more computer-readable storage media of claim 16 , wherein the intent is received in a first language that is different from a respective native language for the one or more consumers.

18. The one or more computer-readable storage media of claim 16 , wherein the verification comprises determining an effect of the intent on the network and determining if the effect of the intent violates another intent for the network.

19. The one or more computer-readable storage media of claim 16 , wherein the verification comprises determining if the intent is allowed to be applied to the network based on one or more rules regarding timing of applying changes to the network.

20. The one or more computer-readable storage media of claim 16 , wherein the validation comprises performing a comparison of monitored behavior of the network or the network devices or services to an intended behavior of the network or the network devices or services.

Assignees

• Amazon Tech Inc

Inventors

• Backes John David
• Bernardi Giacomo
• Giannarakis Nikolaos
• Heorhiadi Viktor
• Callaghan Stephen

Classifications

• H04L41/0869

  Validating the configuration within one network element · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L41/0883 Primary

  Semiautomatic configuration, e.g. proposals from system · CPC title