Intent-driven network management

Patent metadata

Field	Value
Publication number	US-2025175479-A1
Application number	US-202318518737-A
Country	US
Kind code	A1
Filing date	Nov 24, 2023
Priority date	Nov 24, 2023
Publication date	May 29, 2025
Grant date	—

Abstract

Network management systems and associated methods are described for providing intent-driven management of networks. A transaction journal of intents for a network may be maintained to define intended behavior of the network. A proposed intent may be received and verified, and the transaction journal may selectively be updated to include the proposed intent based on the verification. Changes for network devices and/or services may be propagated to control the network to adhere to the intents of the journal, including the proposed intent when verified. The network may be monitored to identify and mitigate violations of the intents of the journal or other issues.

First claim

What is claimed is:

1 . A computing system comprising:
a network management system including one or more services comprising one or more storage devices storing instructions executable to:
receive a proposed network intent, the network intent identifying an expectation for behavior in a network,
verify whether the proposed network intent is allowed to be applied to the network,
responsive to verifying that the proposed network intent is allowed to be applied to the network, update an applied intents journal to include a transaction corresponding to a change to add the proposed network intent for the network,
propagate device configurations or Application Programming Interface (API) calls to network switches in the network to control the switches to comply with the proposed network intent,
monitor behavior of the network or the network switches, and
output an indication of drift responsive to detecting a violation of one or more applied network intents in the applied intents journal based on a comparison of the monitored behavior of the network or the network switches to an intended behavior of the network or the network switches.

2 . The computing system of claim 1 , wherein the intended behavior of the network or network switches is based on the applied intents included in the applied intents journal.

3 . The computing system of claim 2 , wherein monitoring the behavior of the network or network switches further includes monitoring a state of the network switches and outputting the indication of drift responsive to detecting a difference between the monitored state and an intended state that is based on the applied intents included in the applied intents journal.

4 . The computing system of claim 1 , wherein the instructions are further executable to perform a rollback operation to revert the transaction corresponding to the change to add the proposed network intent responsive to detecting the violation of the one or more applied intents after adding the proposed intent to the applied intents journal.

5 . The computing system of claim 1 , wherein the instructions are further executable to adjust the one or more applied intents that are violated to allow a condition relating to the detected violation.

6 . The computing system of claim 1 , wherein verifying whether the proposed intent is allowed to be applied to the network comprises running a simulation to determine an effect of the proposed network intent on the network and determining if the effect of the proposed network intent violates another intent in the applied intents journal.

7 . A computer-implemented method comprising:
maintaining a transaction journal of intents for a network; receiving a proposed intent for the network; updating the transaction journal to include the proposed intent; propagating changes to network devices or services to control the network to adhere to the intents of the transaction journal; monitoring a state or behavior of the network to determine an effect of propagating the changes to the network devices or services; and selectively outputting an indication of drift based on the determined effect.

8 . The computer-implemented method of claim 7 , further comprising verifying the proposed intent and selectively updating the transaction journal based on a result of verifying the proposed intent, wherein verifying the proposed intent comprises determining whether applying the proposed intent to the network would violate another intent in the transaction journal.

9 . The computer-implemented method of claim 8 , wherein selectively updating the transaction journal comprises, in a first condition in which the proposed intent is determined to be verified, updating the transaction journal to include a transaction corresponding to an addition of the proposed intent, and, in a second condition in which the proposed intent is determined to not be verified, maintaining the transaction journal as unchanged without adding the proposed intent.

10 . The computer-implemented method of claim 7 , wherein the changes to the network devices or services comprise device configurations or Application Programming Interface (API) calls generated based on one or more entities determined to be a subject of the proposed intent.

11 . The computer-implemented method of claim 10 , wherein the one or more entities are determined to be a subject of the proposed intent based on a network entity system that stores information regarding entities in the network and relationships between entities and/or devices of an entity, wherein the entities of the network respectively include a device or set of devices acting as a single logical unit for a kind of desired behavior in the network.

12 . The computer-implemented method of claim 7 , wherein monitoring the state or behavior of the network comprises monitoring a state of the network devices or services to determine observed states, comparing the observed states to intended states that are based on the transaction journal, and outputting an indication of drift responsive to determining a difference between the observed configurations and the intended configurations.

13 . The computer-implemented method of claim 7 , wherein monitoring the state or behavior of the network comprises monitoring behavior of the network to determine observed behavior, comparing the observed behavior to intended behavior that is based on the transaction journal, and outputting an indication of drift responsive to determining a difference between the intended behavior and the observed behavior or responsive to determining that the observed behavior violates an intent of the transaction journal.

14 . The computer-implemented method of claim 13 , further comprising performing a rollback of a selected transaction in the transaction journal responsive to the indication of the drift.

15 . The computer-implemented method of claim 14 , wherein the selected transaction is selected based on a timestamp of the selected transaction relative to a time at which the drift was detected.

16 . The computer-implemented method of claim 13 , further comprising changing an intent in the transaction journal responsive to the indication of the drift and propagating further changes to the network devices or services to control the network to adhere to the changed intent of the transaction journal.

17 . One or more computer-readable storage media comprising computer-executable instructions that, when executed, cause a computing system to perform a method comprising:
receiving a proposed intent identifying an expectation for behavior in a network, updating an applied intents journal to include a transaction corresponding to an addition of the proposed intent for the network; propagating changes to devices in the network to control the devices to comply with the proposed intent; monitoring behavior of the network or the network devices; and rolling back a selected transaction in the applied intents journal responsive to detecting a violation of one or more applied intents in the applied intents journal based on a comparison of the monitored behavior of the network or the network devices to an intended behavior of the network or the network devices.

18 . The one or more computer-readable storage media of claim 17 , wherein the selected transaction is selected based on a timestamp of the selected transaction that indicates that the selected transaction is a cause of the violation of the one or more applied intents.

19 . The one or more computer-reada

Assignees

• Amazon Tech Inc

Inventors

• Callaghan Stephen
• Rayhelson Michael
• Backes John David
• Roy Partha Pratim
• Flinn Sean
• Heorhiadi Viktor
• Grande Dominic Casanova
• Saha Vandana
• Veizades John
• Lapsley David Ee Kwung
• Rivers James Paul
• Bernardi Giacomo

Classifications

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L41/145

  involving simulating, designing, planning or modelling of a network · CPC title

• H04L43/06

  Generation of reports · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title