Abstract: In one embodiment, an illustrative method herein may comprise: determining, by a network controller, physical network topology of a data center network; collecting, by the network controller, virtual machine related network topology of the data center network from a virtual machine manager for the data center network; collecting, by the network controller, virtual ethernet flow mapping information of the data center network from a blade system management software for the data center network; collecting, by the network controller, container workload information of the data center network from a container orchestrator for the data center network; and generating, by the network controller, an integrated correlated visualization mapping of containers and associated network attachment points in the data center network based on the physical network topology, the virtual machine related network topology, the virtual ethernet flow mapping information, and the container workload information.

Abstract: A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first microservice; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second microservice; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second microservice. The posture of the first microservice includes an identification of one or more types of personally identifiable information that the first microservice is authorized to distribute and one or more types of personally identifiable information that the first microservice is authorized to receive.

Abstract: A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first micro service; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second micro service; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second micro service.

Abstract: Techniques for policy management and enforcement using semantic data modeling are provided. A first declarative policy is received at a network node from a controller. A first semantic data query protocol (SDQP) transaction is generated by retrieving a first semantic data model associated with the network node, where the first semantic data model describes a configuration domain of the network node, and parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction. The first declarative policy is then implemented by executing the first SDQP transaction against a semantic database.

Abstract: A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first micro service; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second micro service; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second micro service.

Abstract: The disclosure provides a secure and scalable approach for (a) exchanging, between a first network and a second network, provisioning requirements of a user device, (b) executing a smart contract that includes the provisioning requirements, and (c) connecting the user device to one of the networks. The method comprises connecting the user device to a first network, and connecting the first and second networks through a scalable blockchain network. The method further comprises sending a smart contract, by the first network to the second network, through the blockchain network. The second network either accepts or rejects the contract. If the second network accepts, then the user device connects to the second network and the second network provides network services to the user device. The provided network services comply with the conditions or parameters of the smart contract.

Abstract: Techniques for policy management and enforcement using semantic data modeling are provided. A first declarative policy is received at a network node from a controller. A first semantic data query protocol (SDQP) transaction is generated by retrieving a first semantic data model associated with the network node, where the first semantic data model describes a configuration domain of the network node, and parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction. The first declarative policy is then implemented by executing the first SDQP transaction against a semantic database.

Abstract: The disclosure provides a secure and scalable approach for (a) exchanging, between a first network and a second network, provisioning requirements of a user device, (b) executing a smart contract that includes the provisioning requirements, and (c) connecting the user device to one of the networks. The method comprises connecting the user device to a first network, and connecting the first and second networks through a scalable blockchain network. The method further comprises sending a smart contract, by the first network to the second network, through the blockchain network. The second network either accepts or rejects the contract. If the second network accepts, then the user device connects to the second network and the second network provides network services to the user device. The provided network services comply with the conditions or parameters of the smart contract.

Abstract: A method and system for managing the delivery of content over a content network is described. In one embodiment, a method for managing the delivery of content over a content network involves maintaining a transcoding brokerage policy for a transcoding system that includes multiple transcoding engines, where the transcoding brokerage policy defines rules for selecting the transcoding engines, receiving a request for a content element that is stored at a content source, selecting one of the transcoding engines to transcode the requested content element according to the transcoding brokerage policy, and causing the requested content element to be transcoded by the selected transcoding engine. Other embodiments are also described.