Saved in:
Bibliographic Details
Main Authors: Chen, Shenshen, Luo, Jian, Guo, Dong, Gao, Kai, Yang, Yang Richard
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2401.13488
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866913752144674816
author Chen, Shenshen
Luo, Jian
Guo, Dong
Gao, Kai
Yang, Yang Richard
author_facet Chen, Shenshen
Luo, Jian
Guo, Dong
Gao, Kai
Yang, Yang Richard
contents Data plane verification (DPV) analyzes routing tables and detects routing abnormalities and policy violations during network operation and planning. Thus, it has become an important tool to harden the networking infrastructure and the computing systems building on top. Substantial advancements have been made in the last decade and state-of-the-art DPV systems can achieve sub-us verification for an update of a single forwarding rule. In this paper, we introduce fast inverse model transformation (FIMT), the first theoretical framework to systematically model and analyze centralized DPV systems. FIMT reveals the algebraic structure in the model update process, a key step in fast DPV systems. Thus, it can systematically analyze the correctness of several DPV systems, using algebraic properties. The theory also guides the design and implementation of NeoFlash, a refactored version of Flash with new optimization techniques. Evaluations show that NeoFlash outperforms existing state-of-the-art centralized DPV systems in various datasets and reveal insights to key techniques towards fast DPV.
format Preprint
id arxiv_https___arxiv_org_abs_2401_13488
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Fast Inverse Model Transformation: Algebraic Framework for Fast Data Plane Verification
Chen, Shenshen
Luo, Jian
Guo, Dong
Gao, Kai
Yang, Yang Richard
Networking and Internet Architecture
Data plane verification (DPV) analyzes routing tables and detects routing abnormalities and policy violations during network operation and planning. Thus, it has become an important tool to harden the networking infrastructure and the computing systems building on top. Substantial advancements have been made in the last decade and state-of-the-art DPV systems can achieve sub-us verification for an update of a single forwarding rule. In this paper, we introduce fast inverse model transformation (FIMT), the first theoretical framework to systematically model and analyze centralized DPV systems. FIMT reveals the algebraic structure in the model update process, a key step in fast DPV systems. Thus, it can systematically analyze the correctness of several DPV systems, using algebraic properties. The theory also guides the design and implementation of NeoFlash, a refactored version of Flash with new optimization techniques. Evaluations show that NeoFlash outperforms existing state-of-the-art centralized DPV systems in various datasets and reveal insights to key techniques towards fast DPV.
title Fast Inverse Model Transformation: Algebraic Framework for Fast Data Plane Verification
topic Networking and Internet Architecture
url https://arxiv.org/abs/2401.13488