Policy validation and translation in policy networks for end-to-end quality of service over the internet

Publication Type:
Thesis
Issue Date:
2006
Full metadata record
Policy-Based Networks (PBNs) provide greater control and simple and automatic network administration, and make networks more secure, intelligent and centrally managed. These benefits are achieved by specifying High-Level Business Policies rather than configuring individual network devices. All these benefits of PBNs help achieve end-to-end Quality of Service (QoS) over the internet, thus making Policy-Based Networking an important and significant area of research. High-Level Business Policies follow a validation step before their conversion to devicelevel policies. The focus of this thesis is on policy validation and translation in PBNs. It explores the appropriate techniques or methods for validating rule based High-Level policies, a policy specification approach defined by the IETF as well as considering alternatives. Existing solutions for Policy-Based Network Management (PBNM) use their own proprietary language or logic for specifying policies. Since these methods use different semantics and logics for evaluating policies, these solutions are not able to interpret policies specified by other systems and hence policy negotiation and merging cannot take place. Moreover, each solution uses its own method for policy analysis to implement constraints and detect conflicts among defined policies. These methods of policy validation are largely dependent on the methods of specifying policies, which is why a policy defined in one system cannot be validated by another system. One aim of this research is to find a way for different PBNs to interact. This research project investigates policy validation and compatibility issues among different systems due to proprietary methods of policy specification. This thesis demonstrates how these issues can be resolved using XML-based policy languages and rule engines. It demonstrates the validity of the concepts and presented ideas through results obtained with test-case implementations. This dissertation concludes that High-Level Policies can be expressed in XML-based policy languages, and that constraints, policy validation and conflict detection can be implemented effectively using XML schema and rule engines. Moreover, interoperability among different domains for policy negotiation and merging, is achievable by agreeing on a minimum set of requirements as described in this thesis.
Please use this identifier to cite or link to this item: