Secure and Extensible Platform Architecture for Enterprise Network Orchestration
Abstract
There is a growing demand to have enterprise network orchestration platforms to be extensible in the sense that they can be able to integrate different services, automation tools, external systems and independently developed capabilities without affecting the architectural stability and operational control. The paper presents a safe and scalable platform architecture that puts emphasis on controlled extension plane which isolates orchestration invariants of the core and optional capabilities. Typical used architecture is versioned capability contracts, service catalog, event-based subscriptions, isolated execution environment, delegated authorization, resource quotas, conformance testing and governance of lifecycle. It can engage in the orchestration ecosystem by having explicit ownership, compatibility requirements, data classes, resource budgets and failure-handling policies. Security is integrated during the registration, discovery, execution, upgrade, monitoring and retirement of extensions as opposed to being considered only as a runtime issue. The framework also provides compatibility management, policy enforcement, observability and faulty or nonconforming extensions recovery mechanisms. Framework assessment includes effort on integration, preservation of compatibility, isolation of execution, enforcement of authorization, observability of operations, and effectiveness of recovery. Work offered architecture not only offers independent teams and external systems to develop capabilities, but also offers standardized interfaces and governance boundaries and minimizes dependency on internal data stores and release processes. The resulting model is able to maintain platform development particularly in regards to orchestration core that is maintained, audited, and governed by policy and remains stable platforms
Article Information
Journal |
International Journal of Science, Research and Technology |
|---|---|
Volume (Issue) |
Vol. 8 No. 1 (2025): International Journal of Science, Research and Technology (IJSRAT) |
DOI |
|
Pages |
13534-13544 |
Published |
January 12, 2025 |
| Copyright |
All rights reserved |
Open Access |
This work is licensed under a Creative Commons Attribution 4.0 International License. |
How to Cite |
Manevannan Ramasamy (%2025). Secure and Extensible Platform Architecture for Enterprise Network Orchestration. International Journal of Science, Research and Technology , Vol. 8 No. 1 (2025): International Journal of Science, Research and Technology (IJSRAT) , pp. 13534-13544. https://doi.org/10.15662/IJSRAT.2025.0801006 |
References
[2] S. Rose et al., Zero Trust Architecture, NIST Special Publication 800-207, Aug. 2020, doi: 10.6028/NIST.SP.800-207.
[3] SPIFFE Project, “Secure Production Identity Framework for Everyone (SPIFFE) Specification.” [Online]. Available: SPIFFE Specification
[4] SLSA Project, “Supply-chain Levels for Software Artifacts (SLSA) Specification.” [Online]. Available: SLSA Specification
[5] OpenTelemetry, “OpenTelemetry Specification.” [Online]. Available: OpenTelemetry Specification
[6] R. Chandramouli, Security Strategies for Microservices-Based Application Systems, NIST Special Publication 800-204, Aug. 2019, doi: 10.6028/NIST.SP.800-204.
[7] N. F. S. De Sousa, D. L. Perez, C. E. Rothenberg, and P. H. Gomes, “End-to-end service monitoring for zero-touch networks,” J. ICT Standardization, vol. 9, no. 2, pp. 91–112, May 2021.
[8] K. Abbas, M. Afaq, T. A. Khan, A. Rafiq, and W.-C. Song, “Slicing the core network and radio access network domains through intent-based networking for 5G networks,” Electronics, vol. 9, no. 10, Art. no. 1710, Oct. 2020, doi: 10.3390/electronics9101710.
[9] L. Pang, C. Yang, D. Chen, Y. Song, and M. Guizani, “A survey on intent-driven networks,” IEEE Access, vol. 8, pp. 22862–22873, 2020, doi: 10.1109/ACCESS.2020.2969208.
[10] G. Zhou, L. Zhao, G. Zheng, S. Song, J. Zhang, and L. Hanzo, “Multiobjective optimization of space–air–ground-integrated network slicing relying on a pair of central and distributed learning algorithms,” IEEE Internet Things J., vol. 11, no. 5, pp. 8327–8344, Mar. 2024, doi: 10.1109/JIOT.2023.3319130.
[11] Y. Gao, Z. Ye, and H. Yu, “Cost-efficient computation offloading in SAGIN: A deep reinforcement learning and perception-aided approach,” IEEE J. Sel. Areas Commun., vol. 42, no. 12, pp. 3462–3476, Dec. 2024, doi: 10.1109/JSAC.2024.3459073.
[12] C. Qiu, H. Yao, X. Wang, N. Zhang, F. R. Yu, and D. Niyato, “AI-chain: Blockchain energized edge intelligence for beyond 5G networks,” IEEE Netw., vol. 34, no. 6, pp. 62–69, Nov./Dec. 2020, doi: 10.1109/MNET.021.1900617.
[13] J. Du, C. Jiang, J. Wang, Y. Ren, and M. Debbah, “Machine learning for 6G wireless networks: Carrying forward enhanced bandwidth, massive access, and ultrareliable/low-latency service,” IEEE Veh. Technol. Mag., vol. 15, no. 4, pp. 122–134, Dec. 2020, doi: 10.1109/MVT.2020.3019650.
[14] C. Zhou, W. Wu, H. He, P. Yang, F. Lyu, N. Cheng, and X. Shen, “Deep reinforcement learning for delay-oriented IoT task scheduling in SAGIN,” IEEE Trans. Wireless Commun., vol. 20, no. 2, pp. 911–925, Feb. 2021, doi: 10.1109/TWC.2020.3029143.
[15] Q. Chen, W. Meng, S. Han, C. Li, and H.-H. Chen, “Robust task scheduling for delay-aware IoT applications in civil aircraft-augmented SAGIN,” IEEE Trans. Commun., vol. 70, no. 8, pp. 5368–5385, Aug. 2022, doi: 10.1109/TCOMM.2022.3186997.
[16] Q. Chen, Z. Guo, W. Meng, S. Han, C. Li, and T. Q. S. Quek, “A survey on resource management in joint communication and computing-embedded SAGIN,” IEEE Commun. Surveys Tuts., early access, Jul. 2024, doi: 10.1109/COMST.2024.3421523.