Closing the Intent Gap: Policy-Driven Validation in Enterprise EVPN-VXLAN Data Center Architectures
Keywords:
Intent-Based Networking, EVPN-VXLAN, Data Center Automation, Policy Validation, Closed-Loop Automation, Multi-Tenant Networking, Network-as-Code, SDN Controllers, Observability, Intent GapAbstract
Intent-Based Networking abstracts enterprise data center management into policy definitions that automation systems translate into fabric configurations, a compelling operational model that carries a specific and underexamined risk when deployed over EVPN-VXLAN architectures. The translation chain connecting expressed intent to protocol-layer enforcement spans multiple abstraction layers, each capable of introducing divergence between what operators defined and what the fabric actually does. This article terms this divergence the "intent gap" and argues that its existence in unvalidated IBN deployments constitutes a false confidence problem with direct operational and security consequences. A taxonomy of intent gap types specific to EVPN-VXLAN environments is developed, covering BGP EVPN control-plane, VXLAN data-plane, policy enforcement, and temporal gap categories, and a protocol-layer validation architecture is proposed to address each category. The article further presents a closed-loop enforcement framework that converts validated gap detection into autonomous remediation, reducing correction latency from human response time to automation execution time. The framework is illustrated throughout using Cisco ACI/APIC constructs as a concrete reference implementation, though the underlying validation architecture is intended to generalize to other EVPN-VXLAN controller platforms that expose equivalent control-plane and data-plane primitives. Deploying this validation architecture alongside IBN provisioning systems is argued to be a necessary condition for IBN to deliver the operational consistency its adoption is intended to provide.
Downloads
References
A. Leivadeas and M. Falkner, "A Survey on Intent-Based Networking," IEEE Communications Surveys & Tutorials, vol. 25, no. 1, pp. 625–655, 2023. Available: https://ieeexplore.ieee.org/document/9925251
E. Coronado et al., "Zero Touch Management: A Survey of Network Automation Solutions for 5G and 6G Networks," IEEE Communications Surveys & Tutorials, vol. 24, no. 4, pp. 2535–2578, 2022. Available: https://ieeexplore.ieee.org/document/9913206
P. Almasan et al., "Network Digital Twin: Context, Enabling Technologies, and Opportunities," IEEE Communications Magazine, vol. 60, no. 11, pp. 22–27, 2022. Available: https://ieeexplore.ieee.org/document/9795043
M. Gharbaoui et al., "Assurance and Conflict Detection in Intent-Based Networking: A Comprehensive Survey and Insights on Standards and Open-Source Tools," IEEE Transactions on Network and Service Management, 2026. Available: https://ieeexplore.ieee.org/document/11334180
Yu-Cheng Yang et al., "SDN-Enabled EVPN-VXLAN With P4 Accelerated User Plane," 25th Asia-Pacific Network Operations and Management Symposium (APNOMS), 2025. Available: https://ieeexplore.ieee.org/document/11181298
Xiaoang Zheng and Aris Leivadeas, "Network Assurance in Intent-Based Networking Data Centers with Machine Learning Techniques," 17th International Conference on Network and Service Management (CNSM), 2021. Available: https://ieeexplore.ieee.org/document/9615580
Talvinder Singh et al., "VXLAN and EVPN for data center network transformation," 8th International Conference on Computing, Communication and Networking Technologies (ICCCNT), 2017. Available: https://ieeexplore.ieee.org/document/8203947
D. Kong et al., "Toward Security-Enhanced In-Band Network Telemetry in Programmable Networks," IEEE Transactions on Network and Service Management, vol. 20, no. 1, pp. 137–155, 2024. Available: https://ieeexplore.ieee.org/document/10764753
W. Zhong and X. Zhao, "Research on DCI Streaming Telemetry System Based on gNMI," 4th International Conference on Information Science, Parallel and Distributed Systems (ISPDS), 2023. Available: https://ieeexplore.ieee.org/document/10235592
P. Lechowicz et al., "Trade-Offs in Implementing Unsupervised Anomaly Detection with TAPI-Based Streaming Telemetry," IEEE 25th International Conference on High Performance Switching and Routing (HPSR), 2024. Available: https://ieeexplore.ieee.org/document/10635922
Vignesh Karunakaran et al., "TAPI-Based Telemetry Streaming in Multi-Domain Optical Transport Network," Optical Fiber Communications Conference and Exhibition (OFC), 2024. Available: https://ieeexplore.ieee.org/document/10526531
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.
IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.
