Interactive hierarchical network chord diagram for application dependency mapping
The technology visualizes data flows within a datacenter in an interactive hierarchical network chord diagram. Based on analyzed data describing data flows, a portion of the data flows that originate at the same first endpoint and terminate at the same second endpoint can be grouped. Subsequently, the dataflow monitoring system displays an interactive hierarchical network chord diagram to include a chord with a first endpoint and a second endpoint. The chord represents the grouped portion of data flows that originate at the same first endpoint and terminate at the same second endpoint. Upon receiving a selection of the chord or the first endpoint of the chord, the dataflow monitoring system expands the grouped portion of the data flows into a more granular representation of the network.
1. A dataflow monitoring system comprising:
one or more processors; and
a memory containing instructions that, when executed by the one or more processors, cause the dataflow monitoring system to generate an interactive chord chart by:
determining a grouped portion of data flows that originate from a first endpoint and terminate at a second endpoint;
displaying the interactive chord chart to include a chord with the first endpoint and the second endpoint, the chord representing the grouped portion of the data flows that originate from the first endpoint and terminate at the second endpoint;
receiving a selection of the chord or the first endpoint; and
after receiving the selection of the chord or the first endpoint, updating display of the interactive chord chart to include a set of sub-chords representing sub-groupings of data flows that originate from a set of sub-endpoints of the first endpoint.
2. The dataflow monitoring system of claim 1 , wherein the first endpoint represents a first subnet and the second endpoint represents a second subnet.
3. The dataflow monitoring system of claim 2 , wherein the instructions further cause the dataflow monitoring system to expand the grouped portion of the data flows into the sub-groupings of data flows and the set of sub-endpoints of the first endpoint, wherein the sub-endpoints represent a cluster of hosts.
4. The dataflow monitoring system of claim 1 , wherein the first endpoint represents a first cluster of hosts and the second endpoint represents a second cluster of hosts.
5. The dataflow monitoring system of claim 4 , wherein the instructions further cause the dataflow monitoring system to expand the grouped portion of the data flows into the sub-groupings of data flows and the set of sub-endpoints of the first endpoint, wherein the sub-endpoints represent a plurality of individual hosts.
6. The dataflow monitoring system of claim 1 , wherein the chord represents policies that are enforced within the grouped portion of the data flows that originate from the first endpoint and terminate at the second endpoint.
7. The dataflow monitoring system of claim 1 , wherein after receiving the selection of the chord or the second endpoint, the instructions, when executed by the one or more processors, further cause the dataflow monitoring system to generate the interactive chord chart by:
expanding the second endpoint into a second set of sub-endpoints; and
updating display of the interactive chord chart to include the set of sub-chords terminating at the second set of sub-endpoints.
8. A non-transitory computer readable medium containing instructions that, when executed by a dataflow monitoring device, cause the dataflow monitoring device to:
determine a grouped portion of data flows that originate from a first endpoint and terminate at a second endpoint;
display a network chord chart to include a chord with the first endpoint and the second endpoint, the chord representing the grouped portion of the data flows that originate from the first endpoint and terminate at the second endpoint;
receive a selection of the chord or the first endpoint; and
after receiving the selection of the chord or the first endpoint, update display of the network chord chart to include a set of sub-chords representing sub-groupings of data flows that originate from a set of sub-endpoints of the first endpoint.
9. The non-transitory computer readable medium of claim 8 , wherein the selection of the chord or the first endpoint, further causes the dataflow monitoring device to:
expand the set of sub-endpoints of the first endpoint; and
update display of the network chord chart to include the set of sub-chords originating from the set of sub-endpoints.
10. The non-transitory computer readable medium of claim 9 , wherein the set of sub-endpoints represents clusters of hosts.
11. The non-transitory computer readable medium of claim 9 , wherein the set of sub-endpoints represents a plurality of individual hosts.
12. The non-transitory computer readable medium of claim 9 , wherein the set of sub-chords corresponds to policies that are enforced within sub-groupings of data flows originating from the set of sub-endpoints.
13. The non-transitory computer readable medium of claim 8 , wherein the instructions further cause the dataflow monitoring device to: record the data describing the data flows between hosts in two or more subnets, the data describing a first data flow includes a sending host, a receiving host, a sending host subnet, a receiving host subnet, and a policy corresponding to the first data flow.
14. The non-transitory computer readable medium of claim 8 , wherein the first endpoint represents a first subnet and the second endpoint represents a second subnet.
15. The non-transitory computer readable medium of claim 8 , wherein the first endpoint represents a first cluster of hosts and the second endpoint represents a second cluster of hosts.
16. The non-transitory computer readable medium of claim 8 , wherein the chord represents one or more policies that are enforced within the grouped portion of the data flows that originate from the first endpoint and terminate at the second endpoint.
17. The non-transitory computer readable medium of claim 8 , wherein receiving a selection of the second endpoint or the chord, further causes the dataflow monitoring device to: expand the second endpoint into a set of second sub-endpoints; and
update display of the network chord chart to include the set of sub-chords terminating at the second set of sub-endpoints.
18. A computer-implemented method for generating an interactive chord chart comprising:
determining a grouped portion of data flows that originate from a first endpoint and terminate at a second endpoint;
displaying the interactive chord chart to include a chord with the first endpoint and the second endpoint, the chord representing the grouped portion of the data flows that originate from the first endpoint and terminate at the second endpoint;
receiving a selection of the chord or the first endpoint; and
after receiving the selection of the chord or the first endpoint, updating display of the interactive chord chart to include a set of sub-chords representing sub-groupings of data flows that originate from a set of sub-endpoints of the first endpoint.
19. The computer-implemented method of claim 18 , wherein after receiving the selection of the chord or the second endpoint, the method further comprises:
expanding the second endpoint into a second set of sub-endpoints; and
updating display of the interactive chord chart to include the set of sub-chords terminating at the second set of sub-endpoints.
20. The computer-implemented method of claim 18 , further comprising:
after receiving a selection of a sub-chord from the set of sub-chords, expanding a sub-grouping of the data flows into sub-sub-groupings of data flows and a sub-endpoint into a set of sub-sub-endpoints; and
updating display of the interactive chord chart to include a set of sub-sub-chords corresponding to at least the set of sub-sub-endpoints, the set of sub-sub-chords representing the sub-sub-groupings of data flows originating from the set of sub-sub-endpoints.