We present Minesweeper, a tool to verify that a network satisfies a wide range of intended
properties such as reachability or isolation among nodes, waypointing, black holes …

We present an approach to detect network configuration errors, which combines the benefits
of two prior approaches. Like prior techniques that analyze configuration files, our approach …

This paper presents a new publicly available dataset from GÉANT, the European Research
and Educational Network. This dataset consists of traffic matrices built using full IGP routing …

In-network Access Control List (ACL) is an important technique in ensuring network-wide
connectivity and security. As cloud-scale WANs today constantly evolve in size and …

Today's distributed network control planes are highly sophisticated, with multiple interacting
protocols operating at layers 2 and 3. The complexity makes network configurations highly …

This paper presents Aquila, the first practically usable verification system for Alibaba's
production-scale programmable data planes. Aquila addresses four challenges in building a …

Not all important network properties need to be enforced all the time. Often, what matters
instead is the fraction of time/probability these properties hold. Computing the probability of …

We present path splicing, a new routing primitive that allows network paths to be constructed
by combining multiple routing trees (" slices") to each destination over a single network …

This paper presents Hoyan--the first reported large scale deployment of configuration
verification in a global-scale wide area network (WAN). Hoyan has been running in …

Networks are constantly changing. To avoid outages, operators need to know whether
prospective changes in a network's control plane will cause undesired changes in end-to …