Differential Network Analysis
Talkat 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI '22) · 2022-04-04..04-06·
summary
Framework called differential network analysis incrementally processes differences in configs, routes, and links to output changed end-to-end behaviors instead of re-running snapshot verifiers. It implements control-plane simulation in ddlog, batches updates into a modified APKeep data-plane model, and compares to Batfish; on a 28-router, 50-link campus trace with 66 edits it reports reachability diffs in seconds — up to three orders of magnitude faster (control-plane ~10 ms, data-plane hundreds ms, property checking milliseconds). Limitation: handles one change type at a time.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:55Existing control plane verifiers
- 2:42Changes are often small Analyzing from scratch is wasteful
- 4:36Hard to select properties to reverify
- 6:04Make differences first class citizens!
- 8:00Differential control plane simulation
- 11:41Modular, three-stage framework Incrementally
- 12:39Evaluation: end-to-end
- 13:54Evaluation: three stages
- 15:05Evaluation: generality & scalability
related talks
25mDataplane equivalence and its applications
30mValidating Network High Availability With Batfish
29mNetwork Fault Finding System: Packet Loss Triangulation
17mReasoning about Network Traffic Load Property at Production Scale
12mDebugging Transient Faults in Data Centers using Synchronized Network-wide Packet
18mAPKeep: Realtime Verification for Real Networks
24mAutomatically Correcting Networks with NEAt
15mNDD: A Decision Diagram for Network Verification