The disclosed embodiments provide a system for propagating network configuration policies using a publish-subscribe messaging system. During operation, the system receives, through the publish-subscribe messaging system, one or more messages containing a first representation of a configuration policy from a policy server. Next, the system uses a data model to convert the first representation into a second representation of the configuration policy. The system then uses the second representation to apply the configuration policy during processing of network traffic.