...
A third approach is to have two policy sets running in each PDP, an active set and a standby set. However such an approach would increase the complexity of implementation in PDPs significantly.
2.2.6 Policy Monitoring
*******
x.y.z Policy Execution Architecture
- The PAP will do run time monitoring of policy and context .
- Policy does instance monitoring, monitoring of PDPs in real time etc.
- Inter-PDP protocol is the protocol that instances of any PDP type can use to communicate with each other to manage state and deployment
- Intra-PDP protocol is the protocol that instances of a particular PDP type use to communicate with each other, to manage state and deployment
- Load balancing of events towards PDP pools could be done with DMaap using the underlying Kafka consumer group mechanisms
...
PDPs provide a periodic report of their status to the PAP. All PDPs report using a standard reporting format that is extended to provide information for specific PDP types. PDPs provide at least the information below:
| Field | Description |
|---|---|
| State | Lifecycle State (PASSIVE/TEST/SAFE/ACTIVE) |
| Timestamp | Time the report record was generated |
| InvocationCount | The number of execution invocations the PDP has processed since the last report |
| LastInvocationTime | The time taken to process the last execution invocation |
| AverageInvocationTime | The average time taken to process an invocation since the last report |
| StartTime | The start time of the PDP |
| UpTime | The length of time the PDP has been executing |
2.2.7 PEP Registration and Enforcement Guidelines
- Pamela Dragosh
How do we set that up?
How do we ensure the API's allow flexibility for getting policy decisions?
...