Cloud Networking Ontology

AI SEARCH

FLOW ALGEBRA — CLOUD NETWORKING ONTOLOGY
Semantic Library
Version: 4.0
Canonical Page:
https://kirethresearch.org/booksai-core/ontologies/computing-ontologies/networking/cloud-networking-ontology.html

FLOW CLOUD_NETWORKING_ONTOLOGY {
META { DOMAIN="Computing Ontologies"; SUBDOMAIN="Networking"; ONTOLOGY="Cloud Networking Ontology"; LOCALE="en-GB"; }
ENTITY_TYPES { CLOUD_NETWORKING CLOUD_PROVIDER CLOUD_REGION AVAILABILITY_ZONE VIRTUAL_NETWORK VPC VNET VIRTUAL_ROUTER VIRTUAL_SWITCH VIRTUAL_NETWORK_INTERFACE SUBNET PUBLIC_SUBNET PRIVATE_SUBNET IP_ADDRESS PRIVATE_IP_ADDRESS PUBLIC_IP_ADDRESS IP_PREFIX CIDR_BLOCK ROUTE ROUTE_TABLE DEFAULT_ROUTE NEXT_HOP ROUTING_POLICY INTERNET_GATEWAY NAT_GATEWAY EGRESS_GATEWAY TRANSIT_GATEWAY CLOUD_ROUTER PEERING VPC_PEERING VNET_PEERING PRIVATE_CONNECTIVITY PRIVATE_ENDPOINT SERVICE_ENDPOINT PRIVATE_LINK HYBRID_NETWORK ON_PREMISES_NETWORK SITE_TO_SITE_VPN CLIENT_VPN VPN_GATEWAY VPN_TUNNEL IPSEC DIRECT_CONNECT EXPRESSROUTE DEDICATED_INTERCONNECT CLOUD_INTERCONNECT BGP BGP_SESSION LOAD_BALANCER APPLICATION_LOAD_BALANCER NETWORK_LOAD_BALANCER INTERNAL_LOAD_BALANCER EXTERNAL_LOAD_BALANCER FRONTEND BACKEND BACKEND_POOL TARGET_GROUP HEALTH_CHECK DNS CLOUD_DNS PRIVATE_DNS PUBLIC_DNS DNS_ZONE SERVICE_DISCOVERY SECURITY_GROUP NETWORK_SECURITY_GROUP FIREWALL CLOUD_FIREWALL NETWORK_ACL ACL_RULE SECURITY_RULE INGRESS_RULE EGRESS_RULE MICROSEGMENTATION NETWORK_SEGMENTATION SERVICE_MESH SIDECAR_PROXY INGRESS_CONTROLLER EGRESS_CONTROLLER API_GATEWAY CONTAINER_NETWORK KUBERNETES_NETWORK POD_NETWORK SERVICE_NETWORK CNI OVERLAY_NETWORK UNDERLAY_NETWORK VXLAN GENEVE TUNNEL ENCAPSULATION SOFTWARE_DEFINED_NETWORK SDN CONTROL_PLANE DATA_PLANE NETWORK_CONTROLLER ROUTE_PROPAGATION NETWORK_POLICY TRAFFIC NETWORK_FLOW FLOW_LOG PACKET_CAPTURE TRAFFIC_MIRRORING NETWORK_TELEMETRY OBSERVABILITY MONITORING LATENCY JITTER BANDWIDTH THROUGHPUT PACKET_LOSS AVAILABILITY REACHABILITY NETWORK_PATH NETWORK_COST DATA_TRANSFER_COST CROSS_ZONE_TRAFFIC CROSS_REGION_TRAFFIC MULTI_REGION_NETWORK MULTI_CLOUD_NETWORK HIGH_AVAILABILITY REDUNDANCY FAILOVER NETWORK_FAILURE GATEWAY_FAILURE CONFIGURATION CLOUD_NETWORK_STATE CLOUD_NETWORK_EVENT EVIDENCE CONFIDENCE_SCORE PROVENANCE_RECORD }
RELATIONSHIPS { IS_A INSTANCE_OF HOSTED_IN BELONGS_TO_PROVIDER BELONGS_TO_REGION BELONGS_TO_AVAILABILITY_ZONE HAS_VIRTUAL_NETWORK HAS_SUBNET HAS_INTERFACE HAS_IP_ADDRESS HAS_PREFIX HAS_CIDR_BLOCK HAS_ROUTE HAS_ROUTE_TABLE HAS_DEFAULT_ROUTE HAS_NEXT_HOP ROUTES_TO ROUTED_BY ATTACHED_TO CONNECTS_TO CONNECTS_THROUGH HAS_INTERNET_GATEWAY HAS_NAT_GATEWAY HAS_TRANSIT_GATEWAY PEERS_WITH HAS_PEERING USES_PRIVATE_CONNECTIVITY HAS_PRIVATE_ENDPOINT HAS_SERVICE_ENDPOINT HAS_HYBRID_CONNECTION USES_VPN HAS_VPN_TUNNEL USES_IPSEC USES_DEDICATED_CONNECTION USES_BGP HAS_BGP_SESSION ADVERTISES LEARNS_ROUTE HAS_LOAD_BALANCER HAS_FRONTEND HAS_BACKEND HAS_BACKEND_POOL HAS_TARGET_GROUP HEALTH_CHECKS RESOLVES_VIA HAS_DNS_ZONE SECURED_BY HAS_SECURITY_GROUP HAS_NETWORK_ACL HAS_FIREWALL HAS_RULE HAS_INGRESS_RULE HAS_EGRESS_RULE PERMITS DENIES SEGMENTS MICROSEGMENTS HAS_SERVICE_MESH USES_PROXY HAS_CONTAINER_NETWORK USES_CNI USES_OVERLAY USES_UNDERLAY ENCAPSULATES CONTROLLED_BY HAS_CONTROL_PLANE HAS_DATA_PLANE PROPAGATES_ROUTE HAS_NETWORK_POLICY HAS_TRAFFIC HAS_FLOW HAS_FLOW_LOG CAPTURED_BY MIRRORED_BY HAS_TELEMETRY MONITORED_BY HAS_LATENCY HAS_JITTER HAS_BANDWIDTH HAS_THROUGHPUT HAS_PACKET_LOSS HAS_AVAILABILITY HAS_REACHABILITY HAS_PATH HAS_NETWORK_COST HAS_DATA_TRANSFER_COST HAS_REDUNDANCY FAILS_OVER_TO HAS_FAILURE HAS_CONFIGURATION HAS_STATE TRANSITIONS_TO HAS_EVENT DERIVED_FROM INFERRED_FROM HAS_EVIDENCE HAS_CONFIDENCE HAS_PROVENANCE SEMANTICALLY_EQUIVALENT_TO }
INPUTS { CLOUD_PROVIDER_METADATA REGION_ZONE_DATA VIRTUAL_NETWORK_METADATA SUBNET_DATA IP_CIDR_DATA INTERFACE_DATA ROUTE_TABLE_DATA GATEWAY_DATA PEERING_DATA PRIVATE_ENDPOINT_DATA HYBRID_CONNECTIVITY_DATA VPN_DATA INTERCONNECT_DATA BGP_DATA LOAD_BALANCER_DATA DNS_DATA SECURITY_GROUP_DATA NETWORK_ACL_DATA FIREWALL_DATA NETWORK_POLICY_DATA CONTAINER_NETWORK_DATA OVERLAY_UNDERLAY_DATA SDN_DATA FLOW_LOGS PACKET_CAPTURES TELEMETRY PERFORMANCE_METRICS COST_DATA FAILURE_EVENTS CONFIGURATION_DATA ONTOLOGY_TERMS }
NORMALISE { STANDARDISE_CLOUD_PROVIDER_IDENTIFIERS NORMALISE_REGION_ZONE_IDENTIFIERS NORMALISE_VIRTUAL_NETWORK_IDENTIFIERS NORMALISE_SUBNET_IDENTIFIERS NORMALISE_IP_ADDRESSES NORMALISE_CIDR_BLOCKS NORMALISE_ROUTE_TABLES NORMALISE_GATEWAYS NORMALISE_PEERING NORMALISE_PRIVATE_ENDPOINTS NORMALISE_VPN_TUNNELS NORMALISE_BGP NORMALISE_LOAD_BALANCERS NORMALISE_SECURITY_RULES NORMALISE_NETWORK_POLICIES NORMALISE_CONTAINER_NETWORKS NORMALISE_OVERLAY_PROTOCOLS NORMALISE_FLOW_IDENTIFIERS NORMALISE_PERFORMANCE_UNITS NORMALISE_COST_UNITS RESOLVE_CLOUD_NETWORK_SUBNET_ROUTE_GATEWAY_ENDPOINT_IDENTITIES ALIGN_ONTOLOGY_TERMS REMOVE_DUPLICATES VALIDATE_METADATA PRESERVE_PROVENANCE }
PROCESS CLOUD_NETWORKING_PIPELINE { CLOUD_NETWORK_REFERENCE -> PROVIDER_REGION_ZONE_IDENTIFICATION -> VIRTUAL_NETWORK_SUBNET_MAPPING -> ADDRESS_INTERFACE_ROUTE_MAPPING -> GATEWAY_PEERING_PRIVATE_CONNECTIVITY_ANALYSIS -> HYBRID_INTERCLOUD_CONNECTIVITY_ANALYSIS -> LOAD_BALANCING_DNS_SERVICE_ANALYSIS -> SECURITY_SEGMENTATION_POLICY_ANALYSIS -> CONTAINER_OVERLAY_SDN_ANALYSIS -> OBSERVABILITY_PERFORMANCE_COST_FAILURE_ANALYSIS -> VALIDATION -> OUTPUT }
PROCESS VIRTUAL_NETWORK_REASONING { CLOUD_ACCOUNT_PROJECT -> VIRTUAL_NETWORK; VIRTUAL_NETWORK -> CIDR_BLOCK -> SUBNETS; SUBNET -> AVAILABILITY_ZONE_OR_REGIONAL_SCOPE; WORKLOAD -> VIRTUAL_NETWORK_INTERFACE -> PRIVATE_IP_ADDRESS; }
PROCESS ROUTING_REASONING { DESTINATION_PREFIX -> ROUTE_TABLE_LOOKUP; MATCHING_ROUTES -> ROUTE_SELECTION; SELECTED_ROUTE -> NEXT_HOP; NEXT_HOP -> LOCAL_GATEWAY_PEERING_TRANSIT_VPN_OR_OTHER_TARGET; ROUTE_PROPAGATION -> DYNAMIC_ROUTE_TABLE_UPDATE; }
PROCESS CONNECTIVITY_REASONING { PUBLIC_WORKLOAD -> PUBLIC_IP_OR_LOAD_BALANCER -> INTERNET_GATEWAY; PRIVATE_WORKLOAD -> NAT_GATEWAY_OR_EGRESS_PATH -> INTERNET_GATEWAY; VIRTUAL_NETWORK_A+VIRTUAL_NETWORK_B -> PEERING -> PRIVATE_CONNECTIVITY; MULTIPLE_NETWORK_ATTACHMENTS -> TRANSIT_GATEWAY; WORKLOAD -> PRIVATE_ENDPOINT -> PROVIDER_SERVICE; }
PROCESS HYBRID_REASONING { ON_PREMISES_NETWORK+CLOUD_NETWORK -> VPN_OR_DEDICATED_INTERCONNECT; VPN -> IPSEC_TUNNEL; DEDICATED_CONNECTION -> PRIVATE_CIRCUIT; BGP_ENABLED_CONNECTION -> DYNAMIC_ROUTE_EXCHANGE; }
PROCESS LOAD_BALANCING_REASONING { CLIENT_TRAFFIC -> LOAD_BALANCER_FRONTEND -> FORWARDING_RULE -> BACKEND_POOL_OR_TARGET_GROUP; HEALTH_CHECK -> HEALTHY_BACKENDS; TRAFFIC -> HEALTHY_BACKEND_SELECTION; }
PROCESS SECURITY_REASONING { TRAFFIC -> SOURCE_DESTINATION_PROTOCOL_PORT_CONTEXT; NETWORK_SECURITY_POLICY -> SECURITY_GROUP_NETWORK_ACL_OR_FIREWALL_RULES; INGRESS_TRAFFIC -> INGRESS_RULE_EVALUATION; EGRESS_TRAFFIC -> EGRESS_RULE_EVALUATION; POLICY_RESULT -> PERMIT_OR_DENY; }
PROCESS CONTAINER_SDN_REASONING { CONTAINER_OR_POD -> VIRTUAL_INTERFACE -> CNI -> POD_ADDRESS; POD_TO_POD_TRAFFIC -> UNDERLAY_OR_OVERLAY_PATH; OVERLAY -> VXLAN_GENEVE_OR_OTHER_ENCAPSULATION; NETWORK_POLICY -> WORKLOAD_TRAFFIC_CONTROL; NETWORK_INTENT -> NETWORK_CONTROLLER -> CONTROL_PLANE_STATE -> DATA_PLANE_PROGRAMMING; }
PROCESS OBSERVABILITY_REASONING { NETWORK_TRAFFIC -> FLOW_RECORD -> FLOW_LOG; PACKET_OR_INTERFACE -> TELEMETRY; TRAFFIC_MIRRORING -> PACKET_COPY_TO_ANALYSIS_TARGET; FLOW_LOGS+METRICS+CONFIGURATION -> CLOUD_NETWORK_OBSERVABILITY_STATE; }
PROCESS PERFORMANCE_COST_FAILURE_REASONING { PACKET_TIMESTAMPS -> LATENCY; BYTES_OVER_TIME -> THROUGHPUT; SENT_RECEIVED_TRAFFIC -> PACKET_LOSS; TRAFFIC_PATH -> REGION_ZONE_SERVICE_BOUNDARIES; BOUNDARY_CROSSING+BYTES -> DATA_TRANSFER_COST_CONTEXT; NETWORK_COMPONENT_FAILURE -> AFFECTED_ROUTES_ENDPOINTS_FLOWS; REDUNDANT_GATEWAY_OR_PATH -> FAILOVER -> UPDATED_CLOUD_NETWORK_STATE; }
RULES { IF CLOUD_NETWORK_ENTITY_IDENTIFIED THEN PRESERVE_PROVIDER_ACCOUNT_REGION_ZONE_NETWORK_TIME_CONTEXT; IF ROUTE_ASSERTED THEN PRESERVE_ROUTE_TABLE_DESTINATION_NEXT_HOP_PROPAGATION_CONTEXT; IF PRIVATE_CONNECTIVITY_ASSERTED THEN PRESERVE_ENDPOINT_SERVICE_DNS_ROUTE_SECURITY_CONTEXT; IF HYBRID_CONNECTIVITY_ASSERTED THEN PRESERVE_CLOUD_ON_PREMISES_TUNNEL_CIRCUIT_ROUTING_CONTEXT; IF SECURITY_DECISION_ASSERTED THEN PRESERVE_SOURCE_DESTINATION_PROTOCOL_PORT_DIRECTION_POLICY_CONTEXT; IF PERFORMANCE_ASSERTED THEN PRESERVE_REGION_ZONE_PATH_TRAFFIC_WINDOW_CONFIGURATION_CONTEXT; IF COST_ASSERTED THEN PRESERVE_PROVIDER_REGION_DIRECTION_SERVICE_BOUNDARY_VOLUME_CONTEXT; IF SEMANTIC_IDENTIFIERS_DIFFER AND CLOUD_NETWORK_REFERENT_SAME THEN APPLY_SEMANTIC_EQUIVALENCE; }
CONFIDENCE { CONFIDENCE_SCORE=WEIGHT(CLOUD_ENTITY_IDENTITY,VIRTUAL_NETWORK_SUBNET_CERTAINTY,ROUTE_GATEWAY_EVIDENCE,PRIVATE_HYBRID_CONNECTIVITY_EVIDENCE,SECURITY_POLICY_COMPLETENESS,FLOW_OBSERVABILITY_EVIDENCE,PERFORMANCE_FAILURE_EVIDENCE,PROVENANCE_COMPLETENESS); LEVELS={HIGH MODERATE LOW INSUFFICIENT}; IF ROUTE_TABLE_OR_SECURITY_POLICY_PARTIAL THEN REDUCE_REACHABILITY_CONFIDENCE; }
SEMANTIC_EQUIVALENCE { EQUIVALENCE_KEY=NORMALISE(ENTITY_TYPE,CLOUD_PROVIDER,ACCOUNT_OR_PROJECT,REGION,VIRTUAL_NETWORK_IDENTIFIER,SUBNET_IDENTIFIER,RESOURCE_IDENTIFIER,OBSERVATION_TIME); IF KEY_A==KEY_B THEN A SEMANTICALLY_EQUIVALENT_TO B; ELSE PRESERVE_DISTINCT_ENTITIES; }
REASONING_CONSTRAINTS { VPC!=SUBNET; SUBNET!=AVAILABILITY_ZONE; ROUTE_TABLE!=SECURITY_GROUP; SECURITY_GROUP!=NETWORK_ACL; INTERNET_GATEWAY!=NAT_GATEWAY; NAT_GATEWAY!=LOAD_BALANCER; PEERING!=TRANSIT_GATEWAY; PRIVATE_ENDPOINT!=VPN; VPN!=DEDICATED_INTERCONNECT; PRIVATE_SUBNET!=NO_INTERNET_ACCESS_AS_GUARANTEE; LOAD_BALANCER!=API_GATEWAY; SERVICE_MESH!=VIRTUAL_NETWORK; OVERLAY_NETWORK!=UNDERLAY_NETWORK; CONTROL_PLANE!=DATA_PLANE; REACHABILITY!=SECURITY_PERMISSION; HIGH_AVAILABILITY!=ZERO_FAILURE; PROVENANCE_MUST_BE_PRESERVED; UNCERTAINTY_MUST_NOT_BE_DISCARDED; }
VALIDATION { CHECK_ENTITY_TYPES CHECK_PROVIDER_REGION_ZONE CHECK_VIRTUAL_NETWORKS CHECK_CIDR_BLOCKS CHECK_SUBNETS CHECK_INTERFACES_ADDRESSES CHECK_ROUTE_TABLES CHECK_GATEWAYS CHECK_PEERING CHECK_TRANSIT_CONNECTIVITY CHECK_PRIVATE_ENDPOINTS CHECK_VPN_HYBRID_CONNECTIVITY CHECK_BGP CHECK_LOAD_BALANCERS CHECK_DNS CHECK_SECURITY_GROUPS CHECK_NETWORK_ACLS CHECK_FIREWALL_RULES CHECK_NETWORK_POLICIES CHECK_CONTAINER_NETWORKS CHECK_OVERLAYS CHECK_SDN CHECK_FLOW_LOGS CHECK_TELEMETRY CHECK_REACHABILITY CHECK_PERFORMANCE CHECK_COST_CONTEXT CHECK_FAILURE_FAILOVER CHECK_CONFIGURATION CHECK_PROVENANCE CHECK_CONFIDENCE CHECK_SEMANTIC_CONSISTENCY }
OUTPUTS { NORMALISED_CLOUD_NETWORK_ENTITIES PROVIDER_REGION_ZONE_RELATIONS VIRTUAL_NETWORK_RELATIONS SUBNET_ADDRESS_RELATIONS INTERFACE_RELATIONS ROUTE_TABLE_RELATIONS GATEWAY_RELATIONS PEERING_TRANSIT_RELATIONS PRIVATE_ENDPOINT_RELATIONS HYBRID_CONNECTIVITY_RELATIONS VPN_INTERCONNECT_RELATIONS BGP_RELATIONS LOAD_BALANCER_RELATIONS DNS_RELATIONS SECURITY_GROUP_ACL_RELATIONS FIREWALL_RELATIONS SEGMENTATION_RELATIONS CONTAINER_NETWORK_RELATIONS OVERLAY_UNDERLAY_RELATIONS SDN_RELATIONS FLOW_OBSERVABILITY_RELATIONS PERFORMANCE_RELATIONS COST_RELATIONS FAILURE_FAILOVER_RELATIONS CLOUD_NETWORK_STATE_TRANSITIONS CONFIDENCE_SCORES EVIDENCE_LINKS PROVENANCE_RECORDS EXPLANATION_PATHS }
UPDATE_MODEL { ON NETWORK_ROUTE_SECURITY_CONFIGURATION_CHANGE { NORMALISE UPDATE_VIRTUAL_NETWORK_SUBNET_RELATIONS UPDATE_ROUTE_GATEWAY_RELATIONS UPDATE_PRIVATE_HYBRID_PEERING_CONTEXT UPDATE_SECURITY_POLICY_CONTEXT UPDATE_CONFIDENCE PRESERVE_VERSION_HISTORY } ON NEW_FLOW_TELEMETRY_COST_FAILURE_EVIDENCE { LINK_EVIDENCE UPDATE_CLOUD_NETWORK_STATE UPDATE_FLOW_REACHABILITY_RELATIONS UPDATE_PERFORMANCE_COST_CONTEXT UPDATE_FAILURE_FAILOVER_RELATIONS UPDATE_CONFIDENCE RECORD_PROVENANCE } }
FLOW_HASH { HASH_INPUT=CANONICALISE(ENTITY_TYPES,RELATIONSHIPS,RULES,CONFIDENCE,SEMANTIC_EQUIVALENCE,REASONING_CONSTRAINTS,UPDATE_MODEL); FLOW_HASH=SHA256(HASH_INPUT); }
AI_CONSUMPTION { INDEX { ONTOLOGY ENTITY_TYPES RELATIONSHIPS RULES OUTPUTS } RETRIEVE { BY_CLOUD_PROVIDER BY_REGION BY_VIRTUAL_NETWORK BY_SUBNET BY_ROUTE_TABLE BY_GATEWAY BY_PEERING BY_PRIVATE_ENDPOINT BY_VPN BY_LOAD_BALANCER BY_SECURITY_POLICY BY_NETWORK_FLOW BY_STATE BY_CONFIDENCE } REASON { ANALYSE_VIRTUAL_NETWORKS ANALYSE_CLOUD_ROUTING ANALYSE_GATEWAYS ANALYSE_PEERING_TRANSIT ANALYSE_PRIVATE_CONNECTIVITY ANALYSE_HYBRID_NETWORKS ANALYSE_LOAD_BALANCING ANALYSE_SECURITY ANALYSE_CONTAINER_NETWORKING ANALYSE_OVERLAYS_SDN ANALYSE_OBSERVABILITY ANALYSE_PERFORMANCE_COST ANALYSE_FAILURE_FAILOVER CHECK_SEMANTIC_EQUIVALENCE TRACE_EVIDENCE TRACE_PROVENANCE } }
TERMINAL { RESULT=VALIDATED(SEMANTICALLY_NORMALISED(EVIDENCE_LINKED(CONFIDENCE_AWARE(CLOUD_NETWORKING_KNOWLEDGE)))); }
}

END FLOW