Real Time Network Policy Checking using Header Space Analysis

• verification 5

NSDI’13 author page, NetPlumber based on Header Space Analysis (HSA)

Checking Policies and Invariants

1. checking loops and black holes
2. checking reachability policies: basic reachability policy, reachability via waypoint, path length constraints

Evaluation

(Our) data set - Google WAN: … connects Google dta centers world-wide. … Overall there are more than 143,000 OpenFlow rules installed in these switches. - Stanford University Backbone Network: … more than 757,000 forwarding entries, 100+ VLANs and 1,500 ACL rules.