Juniper Networks, Inc.

Akhilesh Pathodia

Prasad Miriyala

Jeffrey S Marshall

Michael Henkel

Sajeesh Mathew

Tashi Garg

Senthilnathan Murugappan

Sangyeong Kim

A network controller for a software-defined networking (SDN) architecture system may receive a request to generate an access control policy for a role in a container orchestration system, where the request specifies a plurality of functions. The network controller may execute the plurality of functions and may log execution of the plurality of functions in an audit log. The network controller may parse the audit log to determine a plurality of resources of the container orchestration system accessed from executing the plurality of functions and, for each resource of the plurality of resources, a respective one or more types of operations performed on the respective resource. The network controller may create, based at least in part on the parsed audit log, the access control policy for the role that permits a role to perform, on each of the plurality of resources, the respective one or more types of operations.

Role-based access control autogeneration in a cloud native software-defined network architecture

In general, techniques are described that provide an analysis system for analyzing a software-defined networking (SDN) architecture system. The analysis system comprising the processing circuitry configured to obtain operational data representative of one or more of configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may identify dependencies between the operational data that identify dependencies between objects representative of the configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may perform, while traversing the dependences between the operational data, analysis with respect to the operational data in order to identify potential issues in the SDN architecture system, and output the potential issues in the SDN architecture system.

Analysis system for software-defined network architectures

A device comprising a memory and a processor may be configured to perform techniques by which to provide a runtime extensible application programming (API) server. The memory may store a datastore that includes a data model. The processor may execute the API server by which to access the data model stored to the datastore. The API server may receive, from a controller, a registration request (providing a resource definition specifying a semantic validation rule) to register a new data model to the datastore, and register the new data model to the datastore. The API server may next receive, from a client, a create request to create a resource for the new data model having initial data that conforms to the resource definition, apply the semantic validation rule to the initial data, and create, responsive to validating the create request, the resource for the new data model in the datastore.

Runtime extensible application programming interface server

Growing community of inventors

San Jose, CA, United States of America

Akhilesh Pathodia