Abstract:Fault localization is a core element in SDN network management. Many SDN fault reasoning and verification techniques assist operators focus on either analyzing the control plane configuration or checking the data plane network behavior. These solutions are limited in that they cannot correlate network symptoms between the control and the data planes, and are harder to generalize across protocols since they have to model complex configuration languages and dynamic protocol behavior. This paper proposes a new approach called Service Oriented Verification Integrated Reasoning (SOVIR) to tackle SDN fault reasoning. In the SOVIR system, a network user can request one or multiple network services via a high level Service Provisioning Language (SPL). SOVIR automatically parses each provisioned service and presents it as a logical Service View, which consists of a pair of logical end nodes, a service specification, and a list of required network functions (e.g., load balancer). After provisioned in an SDN network, SOVIR queries the controller about the network topology and flow rules from all SDN switches. Based on the flow rules and the configuration of end nodes and network function nodes, SOVIR maps the Service View to an Implementation View, in which all the logical components in the Service View are mapped to the actual system components along with the actual network topology. SOVIR uses an extended Symptom-Fault-Verification model to incorporate various verification techniques systematically into fault reasoning process to localize the faults in SDN. SOVIR has been evaluated in a simulation environment for its accuracy and efficiency. The evaluation shows that with SOVIR, both performance and accuracy of fault reasoning in the simulated SDN networks can be greatly improved by taking properly selected verification tools on specific network entities.

LFVeri: Network Configuration Verification for Virtual Private Cloud Networks

VeriReach: A Formally Verified Algorithm for Reachability Analysis in Virtual Private Cloud Networks

Service Oriented Verification Integrated Fault Reasoning for SDNs

An Implementation of LVS-based Highly-Available Radius Server

Assisting Reachability Verification of Network Configurations Updates with NUV

Virtual Network Diagnosis As a Service

Vsfc: Generic and Agile Verification of Service Function Chains in the Cloud

VERCEL: Verification and Rectification of Configuration Errors with Least Squares

NPV: Fast Network Policy Verification for Cloud-Native Networking

NFV-Inspector: A Systematic Approach to Profile and Analyze Virtual Network Functions

Real Time Control Plane Verification.

Achelous: Enabling Programmability, Elasticity, and Reliability in Hyperscale Cloud Networks.

Toward Comprehensive Network Verification: Practices, Challenges and Beyond

Sdn Based Vxlan Optimization In Cloud Computing Networks

Network Can Help Check Itself: Accelerating SMT-based Network Configuration Verification Using Network Domain Knowledge

Towards Automatic Root Cause Diagnosis of Persistent Packet Loss in Cloud Overlay Network

Proactively Verifying Quantitative Network Policy Across Unsafe and Unreliable Environments

Placement of Highly Available Virtual Network Functions Through Local Rerouting

REALIZING ENTERPRISE VIRTUAL PRIVATE CLOUD ARCHITECTURE BASED ON VPN

NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systems

VTrace: Automatic Diagnostic System for Persistent Packet Loss in Cloud-Scale Overlay Network