VeriFlow: Verifying network-wide invariants in real time

Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2013

Volumn , Issue , 2013, Pages 15-27

  Khurshid, Ahmed ^a   Zou, Xuan ^a   Zhou, Wenxuan ^a   Caesar, Matthew ^a   Brighten Godfrey, P ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEMS ANALYSIS;

DATA PLANES; LOW LATENCY; NETWORK CONFIGURATION; NETWORK DEVICES; NETWORK STATE; OPENFLOW NETWORKS; PROTOTYPE IMPLEMENTATIONS; TIME-SCALES;

PROGRAM DEBUGGING;

EID: 85076705859     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. Beacon OpenFlow Controller. https://openflow.stanford.edu/display/ Beacon/Home.
2. Floodlight Open SDN Controller. http://floodlight.openflowhub.org.
3. Mininet: Rapid prototyping for software defined networks. http://yuba.stanford.edu/foswiki/bin/view/OpenFlow/Mininet.
4. NuSMV: A new symbolic model checker. http://nusmv.fbk.eu.
5. Open vSwitch. http://openvswitch.org.
6. OpenFlow switch specification. http://www.openflow.org/documents/ openflow-spec-v1.1.0.pdf.
7. Rocketfuel: An ISP topology mapping engine. http://www.cs.washington.edu/research/networking/rocketfuel.
8. University of Oregon Route Views Project. http://www.routeviews.org.
9. AL-SHAER, E., AND AL-HAJ, S. FlowChecker: Configuration analysis and verification of federated OpenFlow infrastructures. In SafeConfig (2010).
10. AL-SHAER, E., MARRERO, W., EL-ATAWY, A., AND ELBADAWI, K. Network configuration in a box: Towards end-to-end verification of network reachability and security. In ICNP (2009).
11. CAI, Z., COX, A. L., AND NG, T. S. E. Maestro: A system for scalable openflow control. http://www.cs.rice.edu/~eugeneng/papers/TR10-11.pdf.
12. CANINI, M., VENZANO, D., PERESINI, P., KOS-TIC, D., AND REXFORD, J. A NICE way to test OpenFlow applications. In NSDI (2012).
13. FEAMSTER, N., AND BALAKRISHNAN, H. Detecting BGP configuration faults with static analysis. In NSDI (2005).
14. GUDE, N., KOPONEN, T., PETTIT, J., PFAFF, B., CASADO, M., MCKEOWN, N., AND SHENKER, S. NOX: Towards an operating system for networks. In SIGCOMM CCR (2008).
15. JOHN, J. P., KATZ-BASSETT, E., KRISHNAMURTHY, A., ANDERSON, T., AND VENKATARAMANI, A. Consensus routing: The Internet as a distributed system. In NSDI (2008).
16. KAZEMIAN, P., CHANG, M., ZENG, H., VARGHESE, G., MCKEOWN, N., AND WHYTE, S. Real time network policy checking using header space analysis. In NSDI (2013).
17. KAZEMIAN, P., VARGHESE, G., AND MCKEOWN, N. Header space analysis: Static checking for networks. In NSDI (2012).
18. KHURSHID, A., ZHOU, W., CAESAR, M., AND GODFREY, P. B. VeriFlow: Verifying network-wide invariants in real time. In HotSDN (2012).
19. MAI, H., KHURSHID, A., AGARWAL, R., CAESAR, M., GODFREY, P. B., AND KING, S. T. Debugging the data plane with Anteater. In SIGCOMM (2011).
20. MCGEER, R. A safe, efficient update protocol for OpenFlow networks. In HotSDN (2012).
21. MCKEOWN, N., ANDERSON, T., BALAKRISHNAN, H., PARULKAR, G., PETERSON, L., REXFORD, J., AND SHENKER, S. OpenFlow: Enabling innovation in campus networks. In SIGCOMM CCR (2008).
22. NATARAJAN, S., HUANG, X., AND WOLF, T. Efficient conflict detection in flow-based virtualized networks. In ICNC (2012).
23. PORRAS, P., SHIN, S., YEGNESWARAN, V., FONG, M., TYSON, M., AND GU, G. A security enforcement kernel for OpenFlow networks. In HotSDN (2012).
24. REITBLATT, M., FOSTER, N., REXFORD, J., SCHLESINGER, C., AND WALKER, D. Abstractions for network update. In SIGCOMM (2012).
25. SHERWOOD, R., GIBB, G., YAP, K.-K., APPENZELLER, G., CASADO, M., MCKEOWN, N., AND PARULKAR, G. Can the production network be the testbed? In OSDI (2010).
26. VARGHESE, G. Network Algorithmics: An interdisciplinary approach to designing fast networked devices, 2004.
27. XIE, G., ZHAN, J., MALTZ, D., ZHANG, H., GREENBERG, A., HJALMTYSSON, G., AND REXFORD, J. On static reachability analysis of IP networks. In INFOCOM (2005).
28. YUAN, L., MAI, J., SU, Z., CHEN, H., CHUAH, C.-N., AND MOHAPATRA, P. FIREMAN: A toolkit for firewall modeling and analysis. In SnP (2006).