Cross-plane monitoring intent and policy instantiation for network analytics and assurance

1 . A method, comprising:

receiving, at an access policy enforcement service, an authentication request from a local device of a network;

identifying, by the access policy enforcement service, a telemetry collection intent from the authentication request;

determining, by the access policy enforcement service, a monitoring policy based on the telemetry collection intent identified from the authentication request; and

configuring, by the access policy enforcement service and according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the network.

2 . The method as in claim 1 , wherein identifying the telemetry collection intent from the authentication request comprises:

extracting the telemetry collection intent from the authentication request.

3 . The method as in claim 2 , wherein the local device of the network inserts the telemetry collection intent into the authentication request.

4 . The method as in claim 2 , wherein an edge device inserts the telemetry collection intent into the authentication request.

5 . The method as in claim 1 , wherein configuring the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the network comprises:

configuring the one or more telemetry collection agents to collect control plane telemetry and data plane telemetry for the traffic associated with the local device of the network.

6 . The method as in claim 1 , wherein configuring the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the network comprises:

configuring the one or more telemetry collection agents to capture packets from the traffic associated with the local device of the network.

7 . The method as in claim 1 , wherein configuring the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the network comprises:

configuring the one or more telemetry collection agents to perform a test of a network path used by the traffic.

8 . The method as in claim 1 , wherein the monitoring policy specifies that a particular type of telemetry should be captured for traffic associated with the local device of the network and a specified online application.

9 . The method as in claim 1 , wherein at least one of the one or more telemetry collection agents is executed by an edge device.

10 . The method as in claim 1 , wherein at least one of the one or more telemetry collection agents is a cloud-hosted telemetry collection agent.

11 . An apparatus, comprising:

a network interface to communicate with a computer network;

a processor coupled to the network interface and configured to execute one or more processes; and

a memory configured to store a process that is executed by the processor, the process when executed configured to:

receive an authentication request from a local device of the computer network;

identify a telemetry collection intent from the authentication request;

determine a monitoring policy, based on the telemetry collection intent identified from the authentication request; and

configure, according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the computer network.

12 . The apparatus as in claim 11 , wherein the apparatus identifies the telemetry collection intent from the authentication request by:

extracting the telemetry collection intent from the authentication request.

13 . The apparatus as in claim 12 , wherein the local device of the computer network inserts the telemetry collection intent into the authentication request.

14 . The apparatus as in claim 12 , wherein an edge device inserts the telemetry collection intent into the authentication request.

15 . The apparatus as in claim 11 , wherein the apparatus configures the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the computer network by:

configuring the one or more telemetry collection agents to collect control plane telemetry and data plane telemetry for the traffic associated with the local device of the computer network.

16 . The apparatus as in claim 11 , wherein the apparatus configures the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the computer network by:

configuring the one or more telemetry collection agents to capture packets from the traffic associated with the local device of the computer network.

17 . The apparatus as in claim 11 , wherein the apparatus configures the one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the computer network by:

configuring the one or more telemetry collection agents to perform a test of a network path used by the traffic.

18 . The apparatus as in claim 11 , wherein the monitoring policy specifies that a particular type of telemetry should be captured for traffic associated with the local device of the computer network and a specified online application.

19 . The apparatus as in claim 11 , wherein at least one of the one or more telemetry collection agents is executed by an edge device.

20 . A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:

receiving an authentication request from a local device of a network;

identifying a telemetry collection intent from the authentication request;

determining a monitoring policy based on the telemetry collection intent identified from the authentication request; and

configuring, according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the local device of the network.