Context-aware software defined networking policy management and enforcement using semantic data modeling

1. A method comprising:

receiving, at a network node, from a controller, a first declarative policy;

generating a first semantic data query protocol (SDQP) transaction by:

retrieving a first semantic data model associated with the network node, wherein the first semantic data model describes a configuration domain of the network node; and

parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction, wherein parsing the first declarative policy comprises interpreting the first declarative policy based on a current configuration of the network node, as indicated by the first semantic data model, to generate a sequence of configuration actions; and

implementing the first declarative policy by executing the first SDQP transaction against a semantic database.

2. The method of claim 1 , wherein the configuration domain of the network node includes a plurality of configuration objects and relationships among the plurality of configuration objects.

3. The method of claim 2 , wherein the relationships among the plurality of configuration objects includes at least one of: (i) priority information, (ii) interdependency information, (iii) constraint information, and (iv) sequence information.

4. The method of claim 1 , the method further comprising:

receiving a system description of the network node, wherein the system description includes a set of configuration objects;

determining a set of relationships among the set of configuration objects; and

generating the first semantic data model for the network node based on the set of configuration objects and the set of relationships.

5. The method of claim 1 , the method further comprising:

receiving a semantic policy from a controller via a second SDQP transaction; and

implementing the semantic policy by querying a semantic database using the second SDQP transaction.

6. The method of claim 5 , wherein the semantic policy was generated by the controller by:

retrieving a second semantic data model associated with a network fabric, wherein the network fabric includes the network node, and wherein the second semantic data model describes a configuration domain of the network fabric; and

parsing a second declarative policy based on the second semantic data model to generate the second SDQP transaction.

7. The method of claim 6 , wherein the second semantic data model was generated by the controller by:

receiving a system description of the network fabric, wherein the system description includes a set of configuration objects for the network fabric;

determining a set of relationships among the set of configuration objects; and

generating the second semantic data model for the network node based on the set of configuration objects and the set of relationships.

8. A network node comprising:

one or more computer processors; and

a memory containing a program which when executed by the one or more computer processors performs an operation, the operation comprising:

receiving, from a controller, a first declarative policy;

generating a first semantic data query protocol (SDQP) transaction by:

retrieving a first semantic data model associated with the network node, wherein the first semantic data model describes a configuration domain of the network node; and

parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction, wherein parsing the first declarative policy comprises interpreting the first declarative policy based on a current configuration of the network node, as indicated by the first semantic data model, to generate a sequence of configuration actions; and

implementing the first declarative policy by executing the first SDQP transaction against a semantic database.

9. The network node of claim 8 , wherein the configuration domain of the network node includes a plurality of configuration objects and relationships among the plurality of configuration objects.

10. The network node of claim 9 , wherein the relationships among the plurality of configuration objects includes at least one of: (i) priority information, (ii) interdependency information, (iii) constraint information, and (iv) sequence information.

11. The network node of claim 8 , the operation further comprising:

receiving a system description of the network node, wherein the system description includes a set of configuration objects;

determining a set of relationships among the set of configuration objects; and

generating the first semantic data model for the network node based on the set of configuration objects and the set of relationships.

12. The network node of claim 8 , the operation further comprising:

receiving a semantic policy from a controller via a second SDQP transaction; and

implementing the semantic policy by querying a semantic database using the second SDQP transaction.

13. The network node of claim 12 , wherein the semantic policy was generated by the controller by:

retrieving a second semantic data model associated with a network fabric, wherein the network fabric includes the network node, and wherein the second semantic data model describes a configuration domain of the network fabric; and

parsing a second declarative policy based on the second semantic data model to generate the second SDQP transaction.

14. The network node of claim 13 , wherein the second semantic data model was generated by the controller by:

receiving a system description of the network fabric, wherein the system description includes a set of configuration objects for the network fabric;

determining a set of relationships among the set of configuration objects; and

generating the second semantic data model for the network node based on the set of configuration objects and the set of relationships.

15. A computer product comprising logic encoded in a non-transitory medium, the logic executable by operation of one or more computer processors to perform an operation comprising:

receiving, at a network node, from a controller, a first declarative policy;

generating a first semantic data query protocol (SDQP) transaction by:

retrieving a first semantic data model associated with the network node, wherein the first semantic data model describes a configuration domain of the network node; and

parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction, wherein parsing the first declarative policy comprises interpreting the first declarative policy based on a current configuration of the network node, as indicated by the first semantic data model, to generate a sequence of configuration actions; and

implementing the first declarative policy by executing the first SDQP transaction against a semantic database.

16. The computer product of claim 15 , wherein the configuration domain of the network node includes a plurality of configuration objects and relationships among the plurality of configuration objects, wherein the relationships among the plurality of configuration objects includes at least one of: (i) priority information, (ii) interdependency information, (iii) constraint information, and (iv) sequence information.

17. The computer product of claim 15 , the operation further comprising:

receiving a system description of the network node, wherein the system description includes a set of configuration objects;

determining a set of relationships among the set of configuration objects; and

generating the first semantic data model for the network node based on the set of configuration objects and the set of relationships.

18. The computer product of claim 15 , the operation further comprising:

receiving a semantic policy from a controller via a second SDQP transaction; and

implementing the semantic policy by querying a semantic database using the second SDQP transaction.

19. The computer product of claim 18 , wherein the semantic policy was generated by the controller by:

retrieving a second semantic data model associated with a network fabric, wherein the network fabric includes the network node, and wherein the second semantic data model describes a configuration domain of the network fabric; and

parsing a second declarative policy based on the second semantic data model to generate the second SDQP transaction.

20. The computer product of claim 19 , wherein the second semantic data model was generated by the controller by:

receiving a system description of the network fabric, wherein the system description includes a set of configuration objects for the network fabric;

determining a set of relationships among the set of configuration objects; and

generating the second semantic data model for the network node based on the set of configuration objects and the set of relationships.