PoP - - An Automated An Automated PoP Policy Replacement Policy - - PowerPoint PPT Presentation

PoP PoP -

• An Automated

An Automated Policy Replacement Policy Replacement Architecture for PBNM Architecture for PBNM

Lisandro Zambenedetti Lisandro Zambenedetti Granville Granville Gustavo Gustavo Augusto Faraco Augusto Faraco de de Sá Coelho Sá Coelho Maria Maria Janilce Bosquiroli Janilce Bosquiroli Almeida Almeida Liane Margarida Rockenbach Tarouco Liane Margarida Rockenbach Tarouco Federal University of Rio Grande do Federal University of Rio Grande do Sul Sul

PoP PoP -

• POLICY 2002

POLICY 2002

2 2

Outline Outline

• Motivation

Motivation

• Policy review

Policy review

• PoP

PoP -

• Policy of Policies

Policy of Policies

• PoP

PoP architecture architecture

• Conclusions and future work

Conclusions and future work

PoP PoP -

• POLICY 2002

POLICY 2002

3 3

Motivation Motivation

• In QoS

In QoS-

• enabled networks, administrators are forced

enabled networks, administrators are forced to use different solutions to proceed with policy to use different solutions to proceed with policy deployment and QoS monitoring deployment and QoS monitoring

Managed network Managed network Managed network PBNM system PBNM system PBNM system Monitoring system Monitoring system Monitoring system Policy deployment Policy deployment and replacement and replacement QoS monitoring QoS monitoring

PoP PoP -

• POLICY 2002

POLICY 2002

4 4

Policy Policy replacement replacement

Motivation Motivation

• How to integrate policy deployment and QoS

How to integrate policy deployment and QoS monitoring? monitoring?

• How to automate policy replacement?

How to automate policy replacement?

Managed network Managed network Managed network PBNM system PBNM system PBNM system Monitoring system Monitoring system Monitoring system Policy deployment Policy deployment

PoP PoP -

• POLICY 2002

POLICY 2002

5 5

Policy review Policy review

• A policy can be composed by one policy rule,

A policy can be composed by one policy rule, creating a simple policy, or a policy can be creating a simple policy, or a policy can be composed by two or more policy rules, creating composed by two or more policy rules, creating more complex policies more complex policies

• Composed policies ease the policy maintenance

Composed policies ease the policy maintenance task, since they keep together rules with common task, since they keep together rules with common goals goals

PoP PoP -

• POLICY 2002

POLICY 2002

6 6

Policy review Policy review

• Example: policy composed by four rules

Example: policy composed by four rules

Rule 3 Rule 3: : HTTP traffic from office HTTP traffic from office if if (Application = HTTP) (Application = HTTP) and and (User = Executive) (User = Executive) then then Up to 256Kbps: Priority = 3 Up to 256Kbps: Priority = 3 Up to 0.5Mbps: Priority = 2 Up to 0.5Mbps: Priority = 2 Else : Priority = 1 Else : Priority = 1 Rule 4 Rule 4: : Other is basically best effort Other is basically best effort if if (Application = Other) (Application = Other) then Priority = 0 then Priority = 0 Rule 1 Rule 1: : ERP and Sales applications receive highest priority ERP and Sales applications receive highest priority if if (Application = ERP) (Application = ERP) or

• r (Application = Sales)

(Application = Sales) then then Priority = 4 Priority = 4 Rule 2 Rule 2: : VoIP VoIP if if (Application = (Application = VoIP VoIP) ) and and ((User = executive) ((User = executive) or

• r (User = Sales))

(User = Sales)) then then One One-

• Way

Way-

• Delay < 400ms

Delay < 400ms MAX_BW < 64Kbps ; per call MAX_BW < 64Kbps ; per call MAX_AGGR_BW < 512Kbps ; for all calls MAX_AGGR_BW < 512Kbps ; for all calls

PoP PoP -

• POLICY 2002

POLICY 2002

7 7

Policy review Policy review

• Administrators are expected to have, even

Administrators are expected to have, even informally, a business plan of actions for the most informally, a business plan of actions for the most common degradation situations common degradation situations

• Example:

Example:

• Policy #1 for normal conditions

Policy #1 for normal conditions

• Policy #2 for

Policy #2 for VoIP VoIP degradations degradations

• Policy #3 for ERP degradations

Policy #3 for ERP degradations

• Policy #4 for general problems

Policy #4 for general problems

• …

…

PoP PoP -

• POLICY 2002

POLICY 2002

8 8

Policy review Policy review

• Policy replacement is a task manually executed by

Policy replacement is a task manually executed by

• administrators. Besides overloading them, policy
• administrators. Besides overloading them, policy

replacement can be badly executed or can be replacement can be badly executed or can be delayed because it depends on human intervention delayed because it depends on human intervention

• Although grouping policies allows for keeping rules

Although grouping policies allows for keeping rules with common objectives together, there is still a lack with common objectives together, there is still a lack

• f another mechanism that allows the automation of
• f another mechanism that allows the automation of

the replacement of such policies when special the replacement of such policies when special events are observed events are observed

PoP PoP -

• POLICY 2002

POLICY 2002

9 9

PoP PoP -

• Policy of Policies

Policy of Policies

• Our approach:

Our approach:

• Allow the creation of higher level policies (

Allow the creation of higher level policies (PoPs PoPs) to ) to coordinate the replacement of standard policies coordinate the replacement of standard policies

• Thus,

Thus, PoPs PoPs can be seen as meta can be seen as meta-

• policies designed

policies designed to orchestrate the deployment and replacement of to orchestrate the deployment and replacement of standard QoS policies when special events occur standard QoS policies when special events occur

• Such special events are typically triggered when

Such special events are typically triggered when problems in previously deployed policies are identified problems in previously deployed policies are identified

PoP PoP -

• POLICY 2002

POLICY 2002

10 10

PoP PoP -

• Policy of Policies

Policy of Policies

• PoP

PoP requires: requires:

• References to every possible policy that can be

References to every possible policy that can be deployed in a policy target (policy #1, #2, #3, #4, …), deployed in a policy target (policy #1, #2, #3, #4, …), either for direct deployment or defined to be the either for direct deployment or defined to be the replacement of other policies replacement of other policies

• Identification of events that can trigger a policy

Identification of events that can trigger a policy replacement replacement

PoP PoP -

• POLICY 2002

POLICY 2002

11 11

PoP PoP -

• Policy of Policies

Policy of Policies

• PoPs

PoPs are defined through a finite state machine are defined through a finite state machine

S1 S1 S1 S2 S2 S2 T1 T1 S1 script: S1 script: action 1 action 1 action 2 action 2 : : action n action n S2 script: S2 script: action 1 action 1 action 2 action 2 : : action m action m

PoP PoP -

• POLICY 2002

POLICY 2002

12 12

PoP PoP -

• Policy of Policies

Policy of Policies

• Example:

Example:

S2 S S2 2 S3 S S3 3 S4 S S4 4 S1 S S1 1

VoIPproblem VoIPproblem ERPproblem ERPproblem GeneralProblem GeneralProblem GeneralProblem GeneralProblem GeneralProblem GeneralProblem ERPproblem ERPproblem Normal Normal Normal Normal Normal Normal S S1 1: : remove remove all all deploy deploy Policy1 Policy1 S S2 2: : remove remove Policy1 Policy1 deploy deploy Policy2 Policy2 S S3 3: : remove remove Policy1 Policy1 remove remove Policy2 Policy2 deploy deploy Policy3 Policy3 S S4 4: : remove remove all all deploy deploy Policy4 Policy4

PoP PoP -

• POLICY 2002

POLICY 2002

13 13

PoP PoP architecture architecture

PR (policy repository) PR ( PR (policy policy repository repository) ) UI (user interface) UI ( UI (user user interface) interface) PDP (policy decision point) PDP ( PDP (policy decision point policy decision point) ) IPDP (internal PDP) IPDP ( IPDP (internal internal PDP) PDP) IM (internal manager) IM ( IM (internal manager internal manager) ) EI EI IPR (internal PR) IPR ( IPR (internal internal PR) PR)

… …

ES #1 (event source) ES #1 ( ES #1 (event source event source) ) ES #2 (event source) ES #2 ( ES #2 (event source event source) ) PEP (policy enforcement point) PEP ( PEP (policy enforcement point policy enforcement point) )

PoP PoP -

• POLICY 2002

POLICY 2002

14 14

Conclusions Conclusions

• Policy rules and standard policy definition

Policy rules and standard policy definition

• PoPs

PoPs allow the definition of the replacement allow the definition of the replacement strategy of policies, while strategy of policies, while PoP PoP architecture architecture implements the mechanisms needed to proceed implements the mechanisms needed to proceed with such replacement with such replacement

• Policies have to be planned in a different way when

Policies have to be planned in a different way when PoPs PoPs are present are present

• PoPs

PoPs make the definition of policies more complex, make the definition of policies more complex, but the current manual replacement of policies is but the current manual replacement of policies is even more complex even more complex

PoP PoP -

• POLICY 2002

POLICY 2002

15 15

Future work Future work

• A prototype for the

A prototype for the PoP PoP architecture has to be architecture has to be implemented in order to verify the practical aspects implemented in order to verify the practical aspects involved in involved in PoP PoP

• PoP

PoP and temporal issues still have to be and temporal issues still have to be investigated investigated

• Will we have more conflicts with

Will we have more conflicts with PoP PoP? ?

PoP PoP -

• POLICY 2002

POLICY 2002

16 16

Questions? Questions?

• Contact information:

Contact information:

• Lisandro Zambenedetti

Lisandro Zambenedetti Granville Granville

• Federal University of Rio Grande do

Federal University of Rio Grande do Sul Sul

• E

E-

• mail:

mail: granville granville@inf. @inf.ufrgs ufrgs. .br br

• Thanks for your attention!

Thanks for your attention!