Security

Practical Declarative Network Management

Download Now Free registration required

Executive Summary

The paper presents Flow-based Management Language (FML), a declarative policy language for managing the configuration of enterprise networks. FML was designed to replace the many disparate configuration mechanisms traditionally used to enforce policies within the enterprise. These include ACLs, VLANs, NATs, policy-routing, and proprietary admission control systems. FML balances the desires to express policies naturally and enforce policies efficiently. The paper has implemented FML and has used it to manage multiple operational enterprise networks for over a year.

  • Format: PDF
  • Size: 1164.2 KB