Abstract:Fault localization is a core element in SDN network management. Many SDN fault reasoning and verification techniques assist operators focus on either analyzing the control plane configuration or checking the data plane network behavior. These solutions are limited in that they cannot correlate network symptoms between the control and the data planes, and are harder to generalize across protocols since they have to model complex configuration languages and dynamic protocol behavior. This paper proposes a new approach called Service Oriented Verification Integrated Reasoning (SOVIR) to tackle SDN fault reasoning. In the SOVIR system, a network user can request one or multiple network services via a high level Service Provisioning Language (SPL). SOVIR automatically parses each provisioned service and presents it as a logical Service View, which consists of a pair of logical end nodes, a service specification, and a list of required network functions (e.g., load balancer). After provisioned in an SDN network, SOVIR queries the controller about the network topology and flow rules from all SDN switches. Based on the flow rules and the configuration of end nodes and network function nodes, SOVIR maps the Service View to an Implementation View, in which all the logical components in the Service View are mapped to the actual system components along with the actual network topology. SOVIR uses an extended Symptom-Fault-Verification model to incorporate various verification techniques systematically into fault reasoning process to localize the faults in SDN. SOVIR has been evaluated in a simulation environment for its accuracy and efficiency. The evaluation shows that with SOVIR, both performance and accuracy of fault reasoning in the simulated SDN networks can be greatly improved by taking properly selected verification tools on specific network entities.

Intelligence Enabled SDN Fault Localization Via Programmable In-band Network Telemetry

Automatic Belief Network Modeling Via Policy Inference for SDN Fault Localization.

Service Oriented Verification Integrated Fault Reasoning for SDNs

Toward Security-Enhanced In-band Network Telemetry in Programmable Networks

OpenINT: Dynamic In-band Network Telemetry with Lightweight Deployment and Flexible Planning

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

In-band Network Telemetry Manipulation Attacks and Countermeasures in Programmable Networks.

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Flow Anomaly Telemetry Driven by Programmable Data Plane

Combination Attacks and Defenses on SDN Topology Discovery.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Fault Localization in Large-Scale Network Policy Deployment

Thinking inside the Box: Differential Fault Localization for SDN Control Plane

How to Use In-Band Network Telemetry Wisely: Network-Wise Orchestration of Sel-INT

Status Monitoring and Fault Diagnosis Network System Based on Universal Plug and Play

Reliable and Distributed Network Monitoring via In-band Network Telemetry

Highly-Efficient and Adaptive Network Monitoring: when INT Meets Segment Routing

Sel-INT: A Runtime-Programmable Selective In-Band Network Telemetry System

SD-INT: Towards Lightweight Network-Wide Passive INT in the Self-Driving Way

Programmable Event Detection for In-Band Network Telemetry

Programmable Multilayer INT: an Enabler for AI-Assisted Network Automation