Abstract:Fault localization is a core element in SDN network management. Many SDN fault reasoning and verification techniques assist operators focus on either analyzing the control plane configuration or checking the data plane network behavior. These solutions are limited in that they cannot correlate network symptoms between the control and the data planes, and are harder to generalize across protocols since they have to model complex configuration languages and dynamic protocol behavior. This paper proposes a new approach called Service Oriented Verification Integrated Reasoning (SOVIR) to tackle SDN fault reasoning. In the SOVIR system, a network user can request one or multiple network services via a high level Service Provisioning Language (SPL). SOVIR automatically parses each provisioned service and presents it as a logical Service View, which consists of a pair of logical end nodes, a service specification, and a list of required network functions (e.g., load balancer). After provisioned in an SDN network, SOVIR queries the controller about the network topology and flow rules from all SDN switches. Based on the flow rules and the configuration of end nodes and network function nodes, SOVIR maps the Service View to an Implementation View, in which all the logical components in the Service View are mapped to the actual system components along with the actual network topology. SOVIR uses an extended Symptom-Fault-Verification model to incorporate various verification techniques systematically into fault reasoning process to localize the faults in SDN. SOVIR has been evaluated in a simulation environment for its accuracy and efficiency. The evaluation shows that with SOVIR, both performance and accuracy of fault reasoning in the simulated SDN networks can be greatly improved by taking properly selected verification tools on specific network entities.

A General and Efficient Approach to Verifying Traffic Load Properties under Arbitrary K Failures

Service Oriented Verification Integrated Fault Reasoning for SDNs

Toward Comprehensive Network Verification: Practices, Challenges and Beyond

Assisting Reachability Verification of Network Configurations Updates with NUV

Proactively Verifying Quantitative Network Policy Across Unsafe and Unreliable Environments

Kuijia: Traffic Rescaling in Data Center Wans

Beyond a Centralized Verifier: Scaling Data Plane Checking Via Distributed, On-Device Verification.

Accuracy, Scalability, Coverage

Carbide: Highly Reliable Networks Through Real-Time Multiple Control Plane Composition

A Highly Compatible Verification Framework with Minimal Upgrades to Secure An Existing Edge Network

A Survey on Network Verification and Testing With Formal Methods: Approaches and Challenges

Verification of Interdomain Routing System Based on Formal Methods

A General Approach to Generate Test Packets With Network Configurations

Dynamic Packet Forwarding Verification in SDN

LFVeri: Network Configuration Verification for Virtual Private Cloud Networks

A Lightweight Packet Forwarding Verification in SDN using Sketch

Metro: an Efficient Traffic Fast Rerouting Scheme with Low Overhead.

USTR: A High-Performance Traffic Engineering Approach for the Failed Link.

Enabling Efficient Source and Path Verification Via Probabilistic Packet Marking

SmartVerif: Push the Limit of Automation Capability of Verifying Security Protocols by Dynamic Strategies.

Toward a Unified Framework for Verifying and Interpreting Learning-Based Networking Systems.