Fast Verification of Network Configuration Updates  

作　　者：Jiangyuan Yao Zheng Jiang Kaiwen Zou Shuhua Weng Yaxin Li Deshun Li Yahui Li Xingcan Cao 

机构地区：[1]Scool of Computer Science and Technology,Hainan University,Haikou,570228,China [2]School of Cyberspace Security,Hainan University,Haikou,570228,China [3]School of Software Engineering,Jilin University,Changchun,130012,China [4]School of Software,Beijing Jiaotong University,Beijing,100091,China [5]University of British Columbia,Vancouver,V5K1K5,Canada

出　　处：《Computers, Materials & Continua》2023年第1期293-311,共19页计算机、材料和连续体（英文）

基　　金：supported by the Fundamental Research Funds for the Central Universities(2021RC239);the Postdoctoral Science Foundation of China(2021 M690338);theHainan Provincial Natural Science Foundation of China(620RC562,2019RC096,620RC560);the Scientific Research Setup Fund of Hainan University(KYQD(ZR)1877);the Program of Hainan Association for Science and Technology Plans to Youth R&D Innovation(QCXM201910);the National Natural Science Foundation of China(61802092,62162021).

摘　　要：With the expansion of network services,large-scale networks have progressively become common.The network status changes rapidly in response to customer needs and configuration changes,so network configuration changes are also very frequent.However,no matter what changes,the network must ensure the correct conditions,such as isolating tenants from each other or guaranteeing essential services.Once changes occur,it is necessary to verify the after-changed network.Whereas,for the verification of large-scale network configuration changes,many current verifiers show poor efficiency.In order to solve the problem ofmultiple global verifications caused by frequent updates of local configurations in large networks,we present a fast configuration updates verification tool,FastCUV,for distributed control planes.FastCUV aims to enhance the efficiency of distributed control plane verification for medium and large networks while ensuring correctness.This paper presents a method to determine the network range affected by the configuration change.We present a flow model and graph structure to facilitate the design of verification algorithms and speed up verification.Our scheme verifies the network area affected by obtaining the change of the Forwarding Information Base(FIB)before and after.FastCUV supports rich network attributes,meanwhile,has high efficiency and correctness performance.After experimental verification and result analysis,our method outperforms the state-of-the-art method to a certain extent.

关 键 词：Network verification configuration updates network control plane forwarding information base 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]