Collaborative Research: NBD: An Abstraction Driven Approach to Characterizing and Designing Networks with Analyzable Properties

该项目研究了一类新的抽象，以简化网络设计和配置，这是（i）任务驱动，即，捕获网络设计的预期性能、安全性、可靠性或弹性;以及（ii）网络范围，即，捕获整个网络的需求，而不是单个设备的需求。这是一个从根本上脱离以往的努力，只是模型的基础协议和机制。重点是企业网络，一个领域，研究人员在很大程度上尚未探索。通过对实际企业网络设计的自下而上的研究，该项目深入了解了运营商对其网络的目标。这些研究采用了独特的？白盒？该项目制定了抽象概念，沿着了衡量其在三个领域的有效性的理由和标准：㈠实施安全和弹性政策; ㈡利用可持续发展简化管理; ㈢通过有计划的维护实现网络演进。它展示了这些抽象在简化自顶向下的网络设计和网络属性验证方面的强大功能。更具体地说，它发展的理论？配置器？，或者可以从高级设计需求生成框级配置的系统，以及预先选择的一组协议和机制，它会调查吗？语义审计？用于正式验证网络的现有盒级配置产生预期网络行为的技术。更广泛的影响：该研究旨在产生将网络设计和配置转化为科学的基础知识和原则。它还将有助于扩大网络管理在本科生和研究生课程中的覆盖面。一个新的网络管理研究生班将在普渡大学创建，抽象的可用性将使用控制研究进行验证，涉及学生培训成为IT专业人员。

This project investigates a new class of abstractions to simplify network design and configuration which is (i) task-driven, i.e., captures the intended performance, security, manageability, or resilience of a network design; and (ii) network-wide, i.e., captures the requirements of the network as a whole rather than of individual devices. It is a radical departure from prior efforts that merely model the underlying protocols and mechanisms.The focus is on enterprise networks, an area largely unexplored by researchers. Through bottom-up studies of actual enterprise network designs, the project obtains insights into the goals operators have for their networks. The studies employ unique ?white-box? methodologies involving extensive and iterative interactions with operators.The project develops abstractions, along with the rationale and criteria for measuring their effectiveness in three areas: (i) implementation of security and resilience policies; (ii) use of VLANs to simplify management; and (iii) network evolution through planned maintenance. It demonstrates the power of these abstractions in simplifying both top-down network design, and validation of network properties. More specifically, it develops the theory for ?configurators?, or systems that can generate box level configuration from high-level design requirements, and a pre-selected set of protocols and mechanisms, and it investigates ?semantic auditing? techniques for formally verifying that a network's existing box-level configuration produces the intended network behavior. Broader Impact: The research aims to produce fundamental knowledge and principles for turning network design and configuration into a science. It will also help enhance the coverage of network management in undergraduate and graduate curriculum. A new graduate class on Network Management will be created at Purdue and the usability of abstractions will be validated using controlled studies involving students training to become IT professionals.