Example implementations relate to network policy conflict detection and resolution. For example, a system for network policy conflict detection and resolution can include a policy compilation engine to compile a plurality of network policies based on an intent format, a conflict detection engine to detect a conflict between a first network policy among the plurality of network policies and a second network policy among the plurality of network policies, using the intent format, and a conflict resolution engine to resolve the detected conflict between the first network policy and the second network policy. Further, the system for network policy conflict detection and resolution can include a translation engine to translate the resolution of the detected conflict to a protocol-specific format.

Examples associated with ring network uplink designation are disclosed. One example includes detecting an operable connection between a member of a ring network and an external network. The operable connection may be detected by the member of the ring network. A signal is provided to a ring network management daemon. The signal may indicate the member of the ring network has the operable connection to the external network. A signal is received from the ring network management daemon. The signal may designate the ring network as an active uplink to the external network. The operable connection between the ring network and the external network is activated. Once activated, the operable connection may facilitate communication between members of the ring network and the external network.

A data processing method and device, a storage medium and an electronic device are disclosed. The method comprises responsive to determining that an application instance is established, generating, by an orchestrator, a data acquisition request message corresponding to the application instance and sending the data acquisition request message to a next communication node, wherein the next communication node includes one of a network control device and a target network node; acquiring, by the target network node, data according to the data acquisition request message received from the orchestrator or through the network control device, and sending a data acquisition result to a processing device of the application instance; and processing, by the processing device of the application instance, the data acquisition result through a model in the application instance and outputting a processing result.

The present disclosure pertains to systems and methods for establishing trust relationships between a software defined network (SDN) controller and a SDN communication device. In one embodiment, a SDN controller may comprise a communications interface configured to communicate with a plurality of SDN network devices. A commissioning subsystem configured to detect a new device associated with the SDN. In response to a new device, a user interface subsystem may be configured to receive a user approval to commission the new device. A trust subsystem configured to establish a first SDN controller trusted credential and to transmit a first device trusted credential based on the first SDN controller credential to the new device. Programming instructions to the new device authenticated using the first SDN controller trusted credential by a SDN programming subsystem.

This application provides example methods, systems, and devices for performing charging on a network resource. One example method includes sending, by a network slice charging function device, a first message to a network slice management function device, where the first message includes an identifier of a network slice instance and filtering information, the filtering information indicates the network slice management function device to send a value that is of a network slice performance indicator of the network slice instance and that matches the filtering information, and the network slice performance indicator describes network performance of the network slice instance. The network slice charging function device can then receive a second message from the network slice management function device, where the second message includes the value. The network slice charging function device can then perform charging on the network slice instance based on the value.

A network function virtualization service includes an action implementation layer and an action decisions layer. On a flow of network traffic received at the service, the action implementation layer performs a packet processing action determined at the action decisions layer.

A system includes one or more devices that include processors. The processors are configured to: receive a request to deploy a network slice within a network, retrieve network service descriptors, from a database, associated with the network slice; and instantiate the network slice within the network based on the network service descriptors.

In an apparatus of a communication network first packets of a data flow in a first direction are acquired, each having a first service chain identifier identifying a first chain of services which have been applied to the first packets in the first direction of the data flow. The first service chain identifier represents a classification result of classification functions used for selecting the first chain of services. Based on the first service chain identifier, a packet filter is calculated, which is associated with a second chain of services to be applied to second packets of the data flow in a second direction of the data flow when the second packets enter the communication network in the second direction.

Techniques for managing forwarding configurations in a data communications network include accessing, at the at least one controller, an algorithmic policy defined by a user comprising one or more programs written in a general-purpose programming language other than a language of data forwarding element forwarding rules, which algorithmic policy in particular defines a packet-processing function specifying how data packets are to be processed through the data communications network via the at least one controller. A forwarding configuration for at least one data forwarding element in the data communications network may be derived from the user-defined packet-processing policy, and may be applied to the at least one data forwarding element.

The present invention provides a method for receiving information, a method for sending information, and apparatuses for the same. The method for receiving information includes: when a control plane apparatus is capable of managing a forwarding plane apparatus, receiving, by the forwarding plane apparatus, information used for packet forwarding path calculation sent by the control plane apparatus, where the forwarding plane apparatus and the control plane apparatus are located in a network with a network architecture featuring forwarding and control element separation. According to the technical solutions provided in embodiments of the present invention, the forwarding plane apparatus does not need to actively obtain the information used for packet forwarding path calculation before calculating a packet forwarding path based on the information used for packet forwarding path calculation.