Shadow configuration as a network management primitive

Alimi, Richard; Wang, Ye; Yang, Yufan

doi:10.1145/1402946.1402972

Cited by 41 publications

(23 citation statements)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Contrary to [23], IBSDN runs the IGP directly on the nodes (rather than just on the controller to compute forwarding paths), hence benefiting from IGP failure recovery abilities. In the context of traditional networks, the idea of relying on multiple control-planes running different instances of a distributed protocol has also been exploited by few other works, for purposes ranging from fast failure recovery [24] to pre-deployment configuration evaluation [25] and network reconfigurations [26], [27]. IBSDN uses multiple control-planes to combine SDN and IGP, introducing tailored techniques to efficiently ensure network robustness.…”

Section: Comparison With Related Workmentioning

confidence: 99%

IGP-as-a-backup for robust SDN networks

Tilmans

Vissicchio

2014

10th International Conference on Network and Service Management (CNSM) and Workshop

View full text Add to dashboard Cite

Abstract-One of the main concerns on SDN is relative to its ability to quickly react to network failures, while limiting both the control-plane overhead and the additional forwarding state kept by data-plane devices. Despite its practical importance, this concern is often overlooked in OpenFlow-based proposals.In this paper, we propose a new architecture, called IBSDN, in which a distributed routing protocol flanks OpenFlow to improve network robustness, reaction to failures, and controller scalability. In deeply exploring this idea, we complement our architecture with data-plane triggered mechanisms that improve its efficiency. We prove that the resulting solution ensures robustness for any combination of topological failures, and quickly reduces the path stretch. Finally, experimenting with a prototype implementation, we show that our approach is practical and overcomes the main limitations of previous work.

show abstract

Section: Comparison With Related Workmentioning

confidence: 99%

IGP-as-a-backup for robust SDN networks

Tilmans

Vissicchio

2014

10th International Conference on Network and Service Management (CNSM) and Workshop

View full text Add to dashboard Cite

show abstract

“…A general approach to deal with multiple configurations is proposed in [36]. In that work, Alimi et al propose firmware modifications that enable routers to manage a shadow configuration beyond the active configuration used for data traffic forwarding.…”

Section: Related Workmentioning

confidence: 99%

“…The entire approach could be seen as a way to implement two BGP control planes. However, our solution is more lightweight and easier to implement with respect to [36], as it requires no device modification, and no ad-hoc protocol for either tagging packets and committing configuration changes. In this paper, we also justified the need for an additional control plane to solve the BGP reconfiguration problem by a thorough theoretical study.…”

Section: Related Workmentioning

confidence: 99%

Improving Network Agility With Seamless BGP Reconfigurations

Vissicchio

Vanbever

Pelsser³

et al. 2013

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

Abstract-The network infrastructure of Internet Service Providers (ISPs) undergoes constant evolution. Whenever new requirements arise (e.g., the deployment of a new Point of Presence, or a change in the business relationship with a neighboring ISP), operators need to change the configuration of the network. Due to the complexity of BGP and to the lack of methodologies and tools, maintaining service availability during reconfigurations that involve BGP is a challenge for operators.In this paper, we show that the current best practices to reconfigure BGP do not provide guarantees with respect to traffic disruptions. Then, we study the problem of finding an operational ordering of BGP reconfiguration steps which guarantees no packet loss. Unfortunately, finding such an operational ordering, when it exists, is computationally hard. To enable lossless reconfigurations, we propose a framework that extends current features of carrier-grade routers to run two BGP control planes in parallel. We present a prototype implementation and we show the effectiveness of our framework through a case study.

show abstract

“…Many of these approaches are specific for BGP misconfiguration [9], [17], [11], [4]. [23], [13], [1], [24] focused on conflict analysis of firewalls configuration.…”

Section: Related Workmentioning

confidence: 99%

Towards a Unified Modeling and Verification of Network and System Security Configurations

Alsaleh

Al-Shaer

El-Atawy

2013

Automated Security Management

View full text Add to dashboard Cite

Abstract-Systems and networks access control configuration are usually analyzed independently although they are logically combined to define the end-to-end security property. While systems and applications security policies define access control based on user identity or group, request type and the requested resource, network security policies uses flow information such as host and service addresses for source and destination to define access control. Therefore, both network and systems access control have to be configured consistently in order to enforce endto-end security policies. Many previous research attempt to verify either side separately, but it does not provide a unified approach to automatically validate the logical consistency between both of them. Thus, using existing techniques requires error-prone manual and ad-hoc analysis to validate this link.In this paper, we introduce a cross-layer modeling and verification system that can analyze the configurations and policies across both application and network components as a single unit. It combines policies from different devices as firewalls, NAT, routers and IPSec gateways as well as basic RBACbased policies of higher service layers. This allows analyzing, for example, firewall polices in the context of application access control and vice versa. Thus, by incorporating policies across the network and over multiple layers, we provide a true endto-end configuration verification tool. Our model represents the system as a state machine where packet header, service request and location determine the state and transitions that conform with the configuration, device operations, and packet values are established. We encode the model as Boolean functions using binary decision diagrams (BDDs). We used an extended version of computational tree logic (CTL) to provide more useful operators and then use it with symbolic model checking to prove or find counter examples to needed properties. The tool is implemented and we gave special consideration to efficiency and scalability.

show abstract

Shadow configuration as a network management primitive

Cited by 41 publications

References 36 publications

IGP-as-a-backup for robust SDN networks

IGP-as-a-backup for robust SDN networks

Improving Network Agility With Seamless BGP Reconfigurations

Towards a Unified Modeling and Verification of Network and System Security Configurations

Contact Info

Product

Resources

About