| Rule-Based Building-Block Architecture for Policy-based Networking (2003) | |||||||||||||||||
Abstract | |||||||||||||||||
| We developed two rule-based building-block architectures, i.e., pipe-connection and label-connection architectures, for describing complex and structured policies, especially network QoS policies. The latter is focused on in this study. The relationships or connections between building blocks are specified by the dataflow and control flow between them. The dataflow is specified by tags, including virtual flow labels (VFLs), which are data attached to "outside packets". The control flow can be classified and specified by four control structures: concatenation, parallel application, selection, and repetition. We have designed fine-grained and coarse-grained building blocks and methods for specifying dataflow and control flow in differentiated services (Diffserv), and implemented the coarse-grained ones in a policy server. Two cases of building-block use are described, and we concluded that there are five advantages of building-block-based policies, i.e., expressibility, uniform semantics, simplicity, flexibility, and managementtask -oriented design. We also developed techniques for transforming building-block policies into executable ones, which are called policy division and fusion. | |||||||||||||||||
Publication details | |||||||||||||||||
| |||||||||||||||||