Supporting a vendor-neutral policy configuration on a network device with a vendor-specific policy configuration
A network device may receive a vendor-neutral policy configuration, and may translate the vendor-neutral policy configuration to a first family filter and a second family filter. The network device may associate each of the first family filter and the second family filter with a routing instance and an interface, and may generate a policy configuration supported by the network device based on the first family filter, the second family filter, the routing instance, and the interface.
1. A method, comprising:
receiving, by a network device, a vendor-neutral policy configuration;
translating, by the network device, the vendor-neutral policy configuration to a first family filter and a second family filter;
associating, by the network device, each of the first family filter and the second family filter with a routing instance and an interface;
generating, by the network device, a policy configuration supported by the network device based on the first family filter, the second family filter, the routing instance, and the interface;
processing, by the network device, packets with the policy configuration to generate first operational state data associated with the first family filter and second operational state data associated with the second family filter;
receiving, by the network device, a request for operational state data associated with the vendor-neutral policy configuration;
aggregating, by the network device, the first operational state data and the second operational state data to generate the operational state data associated with the vendor-neutral policy configuration; and
returning, by the network device, the operational state data associated with the vendor-neutral policy configuration.
2. The method of claim 1 , further comprising:
receiving the packets.
3. The method of claim 2 , wherein each of the first operational state data and the second operational state data is monitoring data or telemetry data.
4. The method of claim 2 , further comprising:
storing the first operational state data in a first data structure; and
storing the second operational state data in a second data structure.
5. The method of claim 1 , wherein the vendor-neutral policy configuration is an openconfig network instance policy configuration.
6. The method of claim 1 , wherein the vendor-neutral policy configuration is an openconfig access control list policy configuration.
7. A network device, comprising:
one or more memories; and
one or more processors, coupled to the one or more memories, configured to:
receive a vendor-neutral policy configuration;
translate the vendor-neutral policy configuration to a first family filter and a second family filter;
associate each of the first family filter and the second family filter with a routing instance and an interface;
generate a policy configuration supported by the network device based on the first family filter, the second family filter, the routing instance, and the interface;
receive packets;
process the packets with the policy configuration to generate first operational state data associated with the first family filter and second operational state data associated with the second family filter;
receive a request for operational state data associated with the vendor-neutral policy configuration;
aggregate the first operational state data and the second operational state data to generate the operational state data associated with the vendor-neutral policy configuration; and
return the operational state data associated with the vendor-neutral policy configuration.
8. The network device of claim 7 , wherein the vendor-neutral policy configuration includes vendor-neutral data models.
9. The network device of claim 7 , wherein each of the first family filter and the second family filter is a Layer-3 filter.
10. The network device of claim 7 , wherein the first family filter is for family Internet protocol version 4 address match conditions.
11. The network device of claim 7 , wherein the second family filter is for family Internet protocol version 6 address match conditions.
12. The network device of claim 7 , wherein the first family filter includes a first set of terms and the second family filter includes a second set of terms.
13. The network device of claim 7 , wherein the policy configuration is for a firewall component of the network device.
14. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a network device, cause the network device to:
receive a vendor-neutral policy configuration;
translate the vendor-neutral policy configuration to a first family filter and a second family filter;
associate each of the first family filter and the second family filter with a routing instance and an interface;
generate a policy configuration supported by the network device based on the first family filter, the second family filter, the routing instance, and the interface,
wherein the policy configuration is for a firewall component of the network device;
process packets with the policy configuration to generate first operational state data associated with the first family filter and second operational state data associated with the second family filter;
receive a request for operational state data associated with the vendor-neutral policy configuration;
aggregate the first operational state data and the second operational state data to generate the operational state data associated with the vendor-neutral policy configuration; and
return the operational state data associated with the vendor-neutral policy configuration.
15. The non-transitory computer-readable medium of claim 14 , wherein the one or more instructions further cause the network device to:
receive packets;
store the first operational state data in a first data structure; and
store the second operational state data in a second data structure.
16. The non-transitory computer-readable medium of claim 14 , wherein the vendor-neutral policy configuration is an openconfig network instance policy configuration or an openconfig access control list policy configuration.
17. The non-transitory computer-readable medium of claim 14 , wherein each of the first family filter and the second family filter is a Layer-3 filter.
18. The non-transitory computer-readable medium of claim 14 , wherein the first family filter is for family Internet protocol version 4 address match conditions, and the second family filter is for family Internet protocol version 6 address match conditions.
19. The method of claim 1 , wherein the policy configuration is for a firewall component of the network device.
20. The non-transitory computer-readable medium of claim 14 , wherein each of the first operational state data and the second operational state data is monitoring data or telemetry data.