er capabilities 3. VFs of any type for auto-attachment to the appropriate policy framework and distribution mechanism instances, and most importantly 4. Individual policies to aid in management and distribution of the policies 7.7.5 POLICY TECHNOLOGIES Policy in the network cloud will utilize various technologies (samples shown in Figure 7.12). These will be used, for example, via translation capabilities, to achieve the best-possible solution that takes advantage of helpful technologies while still providing in effect a single policy system. Building the Network of the Future Technology Description (Initial) Scope Policy Applications Plug-ins (in some fashion) to the Policy Platform, Additional functionality, e.g. for Conflict providing needed functions. Detection XACML++ XACML 3.0, extended for purposes beyond 1. Overarching/core policies XACML's traditional access control focus. 2. Policies not handled by DS technologies OpenStack Congress OpenStack policy-as-a-service Detect policy violation for OpenStack resources OpenStack Heat OpenStack cloud orchestration Resource orchestration policies, delegated OpenStack GBP Group-Based Policy (GBP) for OpenStack- Neutron (networking), followed by Nova managed resources (compute), Swift (storage), etc OpenDaylight GBP Group-Based Policy (GBP) for network resources Service Function Chaining (SFC) under SDN control ASTRA Policy-enabled firewall control, etc. Security policies, firewall etc., delegated. IAM / IDAM Identity and Access Management Security policies, Identity/Access, delegated. YANG / TOSCA Modeling approaches, SDN and higher level Significant portion of SDN control Drools Business rules management system Attribute/model based rule evaluation FIGURE 7.12 ONAP sample policy technologies. 7.7.6 POLICY USE At runtime, policies that were previously distributed to policy-enabled components will be used by those components to control or influence their functionality and behavior, including any actions that are taken. In many cases, those policies will be utilized t