Communication framework for a federation of network controllers
View Patent ↗A communication framework is provided that can be configured to control or limit a network controller's ability to communicate, export, or share the network controller's data with others, such as with other network controllers in the network environment. As part of this framework, techniques are provided that enable constraints to be specified for a particular network controller, where the constraints control and limit the data that is permitted to be communicated from the particular network controller to other network controllers or intended data recipients in the network environment.
1. A system comprising:
one or more processors; and
a memory coupled with the one or more processors, the memory configured to store instructions that when executed by the one or more processors cause the one or more processors to:
serve as a first network controller configured to:
manage a first set of one or more network elements in a first domain, each network element in the first set of network elements configured to provide one or more networking functions;
receive a data request from a second network controller configured to manage one or more network elements in a second domain;
determine in response to the data request requesting communication of particular data from the first network controller to the second network controller, constraints information specified for the first network controller, the constraints information identifying a set of constraints on communication of data from the first network controller including information regarding a limit on a volume of data to be shared;
determine based upon the constraints information, that communication of the particular data from the first network controller to the second network controller is not permitted on condition that the particular data exceeds the limit on the volume of data; and
prevent communication of the particular data from the first network controller to the second network controller.
2. The system of claim 1 , wherein the first set of network elements managed by the first network controller comprises a virtual network element.
3. The system of claim 1 , wherein the first set of network elements managed by the first network controller comprises a physical network element.
4. The system of claim 1 , wherein the second network controller is in by a second system different from the system including the first network controller.
5. The system of claim 1 , wherein the one or more networking functions provided by the first set of network elements comprise at least one of a firewall function or a data forwarding function.
6. The system of claim 1 , wherein the set of constraints includes a constraint based upon a characteristic of a communication channel used for communications between the first network controller and the second network controller.
7. The system of claim 6 , wherein the characteristic of the communication channel is a type of the communication channel, a communication protocol to be used for communicating the particular data from the first network controller to the second network controller, or a state of the communication channel.
8. The system of claim 1 , wherein the set of constraints includes a constraint based upon a characteristic of the first network controller.
9. The system of claim 8 , wherein the characteristic of the first network controller is a location of the first network controller, a characteristic of a network element from the first set of network elements, a state of the first network controller, or a configuration parameter set for the first network controller.
10. The system of claim 1 , wherein the set of constraints includes a constraint based upon a characteristic of the second network controller.
11. The system of claim 10 , wherein:
the characteristic of the second network controller is a location of the second network controller, a characteristic of a network element controlled by the second network controller, a state of the second network controller, or a configuration parameter set for the second network controller.
12. The system of claim 1 , wherein the set of constraints includes a constraint based upon a characteristic of a tenant of the first network controller.
13. The system of claim 1 , wherein the set of constraints includes a constraint based upon a characteristic of the particular data requested by the data request.
14. The system of claim 1 , wherein the set of constraints includes a constraint based upon a state of a network environment in which the first network controller and the second network controller operate.
15. The system of claim 1 , wherein the set of constraints comprises a constraint that is set automatically using an automated learning technique.
16. The system of claim 1 , wherein:
a first data model is specified for the first network controller, the first data model identifying a subset of data stored for the first network controller; and
the constraints information comprises information specifying a constraint associated with the first model.
17. The system of claim 1 , wherein the constraints information is updated using an automated learning technique.
18. A method of operating a first network controller, the method comprising:
managing a first set of one or more network elements in a first domain, each network element in the first set of network elements configured to provide one or more networking functions;
receiving a data request from a second network controller configured to manage one or more network elements in a second domain requesting communication of particular data from the first network controller;
determining in response to the data request, constraints information specified for the first network controller including information regarding a limit on a volume of data to be shared;
determining based upon the constraints information, whether communication of the particular data from the first network controller to the second network controller is permitted; and
communicating the particular data to the second network controller only upon determining that, based upon the constraints information including that the particular data does not exceed the limit on the volume of data, communication of the particular data from the first network controller to the second network controller is permitted.
19. A non-transitory computer-readable medium storing instructions executable by one or more processors, the instructions when executed by the one or more processors causing the one or more processors to perform operations of operating a first network controller including:
managing a first set of one or more network elements in a first domain, each network element in the first set of network elements configured to provide one or more networking functions;
receiving a data request from a second network controller configured to manage one or more network elements in a second domain requesting communication of particular data from the first network controller;
determining in response to the data request, constraints information specified for the first network controller including information regarding a limit on a volume of data to be shared;
determining based upon the constraints information, whether communication of the particular data from the first network controller to the second network controller is permitted; and
communicating the particular data to the second network controller only upon determining that, based upon the constraints information including that the particular data does not exceed the limit on the volume of data, communication of the particular data from the first network controller to the second network controller is permitted.