NetGen: synthesizing data-plane configurations for network policies
NetGen: synthesizing data-plane configurations for network policies
复制标题
NetGen：综合网络策略的数据平面配置
DOI：
10.1145/2774993.2775006
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
P. Madhusudan
中科院分区：
文献类型：
--
作者：
Shambwaditya Saha;S. Prabhu;P. Madhusudan
网络很难维护。当物理网络发生变化或策略（最重要的是安全属性）发生变化时，很难在保持所有其他现有策略的同时更改网络。我们研究的问题，网络变化的合成，在给定的当前网络和所需的变化，它表示为一个高层次的政策，我们自动化的过程中的数据平面配置的合成变化，使政策得到满足。我们开发了一种新的语言，允许用户表达所需的重新路由，并给出这样的政策和当前的网络，我们设计了一种新的合成引擎的基础上抽象和约束求解，可以找到（最小）的变化，以满足当前的网络的政策。我们报告我们的技术的初步实施，表明我们可以有效地和高效地综合大型网络的变化。
Networks are hard to maintain. When the physical network changes or when policies, most importantly security properties change, it is hard to change the network while maintaining all other existing policies. We study the problem of network change synthesis, where given a current network and a desired change for it expressed as a high-level policy, we automate the process of synthesizing changes in the data-plane configuration so that the policy is met. We develop a new language that allows the user to express desired reroutings and, given such a policy and a current network, we design a novel synthesis engine based on abstraction and constraint-solving that can find (minimal) changes to the current network that satisfies the policy. We report on a preliminary implementation of our technique that shows that we can effectively and efficiently synthesize changes in large networks.