Policy-Based Networking: Architecture and Algorithms

Policy Conflict Detection and Resolution

One of the key validation steps is to verify that the policies do not contradict each other. Given a set of policies, one or more policies may be applicable when a packet arrives at a router. If the actions specified by all the applicable policies can be taken, then there is no contradiction in the applicable policies. On the other hand, if the actions of two applicable policies cannot be taken simultaneously (for instance, one policy sets DiffServ field to be 0, other policy sets DiffServ field to be 1), there is a contradiction. A set of policies is consistent if it can be shown that no contradictory policies will ever be found. Regardless of the type of packet arriving at the router, the applicable ...