Rules engine evaluation for policy decisions

摘要

Various exemplary embodiments relate to a method performed by a network policy node. The method may include: translating a policy into a plurality of rule objects, the policy including an applicability condition and one or more action rules; generating a selection rule table based on the applicability condition of one or more policies; generating an action rule table from the one or more action rules of an applicable policy, an action rule including an action condition and an action path; determining a set of applicable policies by evaluating the selection rule table using a rules engine; and selecting an action path by evaluating the action rule table using the rules engine. Various exemplary embodiments relate to a network policy node including a scanner that generates rules objects and rule tables based on one or more policies, a context information storage, and a rules engine that evaluates rule tables.