Rules engine evaluation for policy decisions

摘要

Various exemplary embodiments relate to a method performed by a network policy node. The method may include: translating a policy into a plurality of rule objects, the policy including an applicability condition and one or more action rules; generating a selection rule table based on the applicability condition of one or more policies; generating an action rule table from the one or more action rules of an applicable policy, an action rule including an action condition and an action path; determining a set of applicable policies by evaluating the selection rule table using a rules engine; and selecting an action path by evaluating the action rule table using the rules engine. Various exemplary embodiments relate to a network policy node including a scanner that generates rules objects and rule tables based on one or more policies, a context information storage, and a rules engine that evaluates rule tables.

主权项

1. A method performed by a network policy node, the method comprising:
translating a policy into a plurality of rule objects, the policy including an applicability condition and one or more action rules; generating a selection rule table based on the applicability condition of one or more policies; determining a set of applicable policies by evaluating the selection rule table using a rules engine to compare the applicability conditions and context information; generating an action rule table from the one or more action rules of the set of applicable policies, an action rule including an action rule condition and an action path defining an action to be executed by the network policy node; and selecting an action path by evaluating the action rule table using the rules engine to compare the action rule condition and the context information.