Translation of a source intent policy model to a target intent policy model

Patent metadata

Field	Value
Publication number	US-12224907-B2
Application number	US-202218087574-A
Country	US
Kind code	B2
Filing date	Dec 22, 2022
Priority date	Sep 16, 2022
Publication date	Feb 11, 2025
Grant date	Feb 11, 2025

Abstract

A system identifies a source intent policy model that is associated with a graph having a plurality of source nodes connected by a plurality of source edges, identifies a set of source nodes of the plurality of source nodes, and translates the set of source nodes to generate a set of target nodes. The system identifies a subset of target nodes, of the set of target nodes, that are not included in a target intent policy model that is associated with a graph having a plurality of target nodes connected by a plurality of target edges. The system determines a hierarchical order associated with the subset of target nodes and the plurality of target node, and causes the target intent policy model to be updated to include the subset of target nodes and the plurality of target nodes, such that the graph is ordered according to the hierarchical order.

First claim

What is claimed is:

1. A method, comprising:
identifying, by a system, a source intent policy model that is associated with a first graph having a plurality of source nodes connected by a plurality of source edges,
wherein the source intent policy model is associated with cloud services for one or more network devices;

identifying, by the system, a set of source nodes of the plurality of source nodes;
translating, by the system, the set of source nodes to generate a set of target nodes,
wherein translating the set of source nodes comprises:
recursively traversing the set of source nodes to generate the set of target nodes,
wherein each source node of the set of source nodes corresponds to at least one target node of the set of target nodes;

identifying, by the system, a subset of target nodes, of the set of target nodes, that are not included in a target intent policy model that is associated with a second graph having a plurality of target nodes connected by a plurality of target edges,
wherein the target intent policy model is associated with on-device services of a network device of the one or more network devices;

determining, by the system, a hierarchical order associated with the subset of target nodes and the plurality of target nodes;
identifying and resolving by the system:
one or more conflicts between the subset of target nodes and the plurality of target nodes, or
one or more redundancies between the subset of target nodes and the plurality of target nodes; and

causing, by the system, the target intent policy model to be updated to include the subset of target nodes and the plurality of target nodes based on identifying and resolving the one or more conflicts or the one or more redundancies, such that the second graph is ordered according to the hierarchical order.

2. The method of claim 1 , wherein:
the plurality of source nodes includes one or more source intent nodes that are each associated with a source intent of the source intent policy model,
the plurality of source nodes includes one or more source intent object nodes that are each associated with a source intent object of the source intent policy model, and
the plurality of source edges indicate associations between the plurality of source nodes.

3. The method of claim 1 , wherein identifying the set of source nodes comprises:
identifying a first group of source nodes of the plurality of source nodes;
identifying a second group of source nodes, of the plurality of source nodes, that depend from the first group of source nodes; and
identifying the set of source nodes as comprising the first group of source nodes and the second group of source nodes.

4. The method of claim 1 , wherein translating the set of source nodes to generate the set of target nodes comprises:
traversing, using a depth first search technique, the set of source nodes; and
translating, using a translation technique and based on traversing the set of source nodes, a source node to a target node,
wherein the translation technique is associated with the target intent policy model.

5. The method of claim 1 , wherein:
the plurality of target nodes includes one or more target intent nodes that are each associated with a target intent of the target intent policy model,
the plurality of target nodes includes one or more target intent object nodes that are each associated with a target intent object of the target intent policy model, and
the plurality of target edges indicate associations between the plurality of target nodes.

6. The method of claim 1 , wherein identifying the subset of target nodes that are not included in the target intent policy model comprises:
for each target node of the set of target nodes:
processing the target node to determine a hash value;
determining whether one of the plurality of target nodes is associated with the hash value; and
identifying the subset of target nodes as comprising the target node based on determining that one of the plurality of target nodes is not associated with the hash value.

7. The method of claim 1 , wherein identifying and resolving one or more conflicts between the subset of target nodes and the plurality of target nodes comprises:
determining, based on determining the hierarchical order associated with the subset of target nodes and the plurality of target nodes, that a first target node, of the subset of target nodes, and a second target node, of the plurality of target nodes, conflict with each other.

8. The method of claim 7 , further comprising:
causing, based on determining that the first target node and the second target node conflict with each other, the second target node to be ordered before the first target node in the hierarchical order.

9. The method of claim 1 , wherein identifying and resolving one or more redundancies between the subset of target nodes and the plurality of target nodes comprises:
identifying, based on determining the hierarchical order associated with the subset of target nodes and the plurality of target nodes, that a target node, of the subset of target nodes and the plurality of target nodes, is redundant with another target node, of the subset of target nodes and the plurality of target nodes; and
removing the target node from the subset of target nodes and the plurality of target nodes.

10. The method of claim 1 , further comprising:
identifying, after causing the target intent policy model to be updated, a change to a particular source node of the plurality of source nodes;
identifying a group of one or more source nodes, of the plurality of source nodes, that includes the particular source node;
translating the group of one or more source nodes to generate a group of one or more target nodes; and
for each target node of the group of one or more target nodes:
identifying a corresponding target node, of the subset of target nodes and the plurality of target nodes,
determining whether the target node matches the corresponding target node, and
replacing the corresponding target node with the target node based on determining that the target node does not match the corresponding target node.

11. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a system, cause the system to:
identify a source intent policy model that is associated with a first graph having a plurality of source nodes connected by a plurality of source edges,
wherein the source intent policy model is associated with cloud services for one or more network devices;

identify a set of source nodes of the plurality of source nodes;
translate the set of source nodes to generate a set of target nodes,
wherein the one or more instructions, that cause the system to translate the set of source nodes, cause the system to:
recursively traverse the set of source nodes to generate the set of target nodes,
 wherein each source node of the set of source nodes corresponds to at least one target node of the set of target nodes;

identify a subset of target nodes, of the set of target nodes, that are not included in a target intent policy model that is associated with a second graph having a plurality of target nodes connected by a plurality of target edges,
wherein the target intent policy model is associated with on-device services of a network device of the one or more network devices;

identify and resolve:
one or more conflicts between the subset of target nodes and the plurality of target nodes, or
one or more redundancies between the subset of target nodes and the plurality of target nodes; and

cau

Assignees

• Juniper Networks Inc

Inventors

• A Chandrasekhar
• R Jayanthi
• N Premchandar

Classifications

• H04L41/0873

  Checking configuration conflicts between network elements · CPC title

• H04L41/40

  using virtualisation of network functions or resources, e.g. SDN or NFV entities · CPC title

• H04L41/0893

  Assignment of logical groups to network elements · CPC title

• H04L41/0894 Primary

  Policy-based network configuration management · CPC title