Range Encoding-Based Network Verification in SDN

In modern networks, faults in the network state, e.g., loops, black holes and access control violations that make services unavailable, arise commonly. To ensure networks' correctness, existing approaches verify network-wide invariants. However, these approaches cannot detect or prevent faults immediately as they arise, so that network performance is not affected. In this paper, we present a data plane verification algorithm with low latency. To provide live protection, our algorithm detects faulty rules issued by SDN applications, and prevent them from reaching the data plane of network. According to experiments which use real world network rule sets, our algorithm efficiently processes rule update and verification.