Nutanix, Inc.
POLICY AGGREGATION

Abstract:

Systems and methods for aggregating policies to enforce on computing entities of a computing system. A method embodiment commences upon administrative definition of a set of named policy associations that are applicable to various types of such computing entities. The occurrence of two or more named policy associations that are associated with a particular computing entity cause the policies to be processed to detect and reconcile possible conflicts. Reconciliation is accomplished by applying a set of conflict resolution rules. The result of detection and reconciliation of conflicts is a policy aggregate that comprises two or more non-conflicting policy subcomponents. During ongoing uses of the computing entities, policy actions are taken so as to enforce the semantics of the policy subcomponents onto the computing entity. When the computing system undergoes changes that could affect the policy assignments and/or enforcement semantics of the underlying policy subcomponents, the reconciliation process is repeated.