Abstract: Systems and methods for more effectively monitoring the performance of applications with respect to their associated SD-WAN edge devices. Variables are formulated for measuring the performance of individual applications accessed from an individual edge device. In some embodiments of the disclosure, flow records such as Internet Protocol Flow Information Export (IPFIX) records are collected. Records specific to a particular application and a particular edge device from which the application is accessed may be extracted and assembled into a variable which illustrates the performance of that application from that edge device over time.

Abstract: This document describes a network policy evaluation platform that evaluates, validates, and troubleshoots network policy configurations. In one aspect, a method includes obtaining a first network policy applied by a container orchestration platform for managing network traffic for a cluster of container workloads. First network rules are extracted from the first network policy. A canonical rule model is generated for the first network rule(s). A second network policy applied by a network provider plugin configured to run within the cluster and to manage the network traffic for the cluster of container workloads is obtained. Second network rules are extracted from the second network policy. A canonical rule model is generated for the one or more second network rules. One or more conflicts between the first network policy and the second network policy are detected based on an evaluation of each first canonical rule model and each second canonical rule model.