We introduce a Policy Canvas which is a highly user-friendly and simple front-end interface to manage policies like drawing diagrams on whiteboard or note. Most administrators and operators draw their policies first in hand and translate them to specific policy languages or commands manually. It is error-prone and requires much time and effort. Our system provides a unified and simple graph drawing tool for specifying policies for multiple OpenStack services. It can automatically translate the graph model to relevant OpenStack services using APIs and commands. In addition, some of the policies can be given by multiple stakeholders such as tenant, cloud operator, system administrator, or application developers. Our system can detect/resolve conflicts as much as possible. In this session, we introduce our Policy Canvas running on Horizon and demonstrate how to create multiple network policies and automatically deploy them to the OpenStack via Congress and Neutron.
In this session, we will introduce our Policy Canvas running on OpenStack Horizon and give a demonstration for how to create multiple network policies and automatically deploy them to the OpenStack via Congress and Neutron. Attendees will learn about 1) how to create network policies using our Policy Canvas, 2) how to apply Policy Canvas for multiple OpenStack services, 3) how to deploy created policies to OpenStack via OpenStack Neutron/Congress, and 4) future vision of Policy Canvas for other OpenStack services.