A general approach to network configuration analysis

摘要: We present an approach to detect network configuration errors, which combines the benefits of two prior approaches. Like techniques that analyze files, our can find errors proactively, before is applied, and answer "what if" questions. data-plane snapshots, check a broad range forwarding properties produce actual packets violate checked properties. accomplish this combination by faithfully deriving then analyzing data plane would emerge from configuration. Our derivation fully declarative, employing set logical relations represent control plane, their relationship. Operators query these understand identified provenance. use large university networks with qualitatively different routing designs many misconfigurations in each. have confirmed majority as fixed configurations accordingly.