Fabric-Based Virtual Air Gap Provisioning, Systems and Methods

摘要

A device configured to or programmed to instantiate an isolated sub-fabric is presented. A network configuration device uses a virtual air gap policy to instantiate a sub-fabric from a fabric of networking nodes. The sub-fabric is configured with an internal routing policy that respects the nature of the defined isolation. Further, the fabric is provisioned with a virtual air gap that ensures the external networking nodes respect the isolation of the sub fabric.

主权项

1. A network configuration device coupled with a fabric of physical interconnected networking nodes, the network configuration device comprising:
a memory configured to store a virtual air gap policy comprising fabric isolation criteria defined with respect to a fabric configuration space; and a fabric provisioning router coupled with the memory and configured to:
instantiate a sub-fabric within the fabric from at least some of the networking nodes;configure the sub-fabric with an internal routing policy according to the fabric isolation criteria;provision the fabric with a virtual air gap relative to the sub-fabric according to the virtual air gap policy; andcause the sub-fabric to be activated.