Practical declarative network management
Authors:
Open Access
- 21 August 2009
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1-10
Abstract
We present Flow-based Management Language (FML), a declarative policy language for managing the conguration of enterprise networks. FML was designed to replace the many disparate conguration mechanisms traditionally used to enforce policies within the enterprise. These include ACLs, VLANs, NATs, policy-routing, and proprietary admission control systems. FML balances the desires to express poli- cies naturally and enforce policies eciently. We have im- plemented FML and have used it to manage multiple oper- ational enterprise networks for over a year.Keywords
This publication has 13 references indexed in Scilit:
- NOXACM SIGCOMM Computer Communication Review, 2008
- FirmatoACM Transactions on Computer Systems, 2004
- Conflict and combination in privacy policy languages2004
- Routing design in operational networks2004
- Using first-order logic to reason about policies2004
- Policy algebras for access control2001
- Implementing a distributed firewall2000
- A modular approach to composing access control policies2000
- A flexible authorization mechanism for relational data management systemsACM Transactions on Information Systems, 1999
- A calculus for access control in distributed systemsACM Transactions on Programming Languages and Systems, 1993