P4v: Practical verification for programmable data planes
We present the design and implementation of p4v, a practical tool for verifying data planes
described using the P4 programming language. The design of p4v is based on classic …
described using the P4 programming language. The design of p4v is based on classic …
A framework for eBPF-based network functions in an era of microservices
By moving network functionality from dedicated hardware to software running on end-hosts,
Network Functions Virtualization (NFV) pledges the benefits of cloud computing to packet …
Network Functions Virtualization (NFV) pledges the benefits of cloud computing to packet …
Safely and automatically updating in-network acl configurations with intent language
In-network Access Control List (ACL) is an important technique in ensuring network-wide
connectivity and security. As cloud-scale WANs today constantly evolve in size and …
connectivity and security. As cloud-scale WANs today constantly evolve in size and …
Debugging P4 programs with Vera
We present Vera, a tool that verifies P4 programs using symbolic execution. Vera
automatically uncovers a number of common bugs including parsing/deparsing errors …
automatically uncovers a number of common bugs including parsing/deparsing errors …
Hyperkernel: Push-button verification of an OS kernel
L Nelson, H Sigurbjarnarson, K Zhang… - Proceedings of the 26th …, 2017 - dl.acm.org
This paper describes an approach to designing, implementing, and formally verifying the
functional correctness of an OS kernel, named Hyperkernel, with a high degree of proof …
functional correctness of an OS kernel, named Hyperkernel, with a high degree of proof …
Validating datacenters at scale
We describe our experiences using formal methods and automated theorem proving for
network operation at scale. The experiences are based on develo** and applying the …
network operation at scale. The experiences are based on develo** and applying the …
PacketMill: toward per-Core 100-Gbps networking
We present PacketMill, a system for optimizing software packet processing, which (i)
introduces a new model to efficiently manage packet metadata and (ii) employs code …
introduces a new model to efficiently manage packet metadata and (ii) employs code …
Performance interfaces for network functions
Modern programmers routinely use third-party code, and infrastructure operators deploy
software they did not write. This would not be possible without semantic interfaces …
software they did not write. This would not be possible without semantic interfaces …
Verifying software network functions with no verification expertise
We present the design and implementation of Vigor, a software stack and toolchain for
building and running software network middleboxes that are guaranteed to be correct, while …
building and running software network middleboxes that are guaranteed to be correct, while …
Beyond a Centralized Verifier: Scaling Data Plane Checking via Distributed, On-Device Verification
Q **ang, C Huang, R Wen, Y Wang, X Fan… - Proceedings of the …, 2023 - dl.acm.org
Centralized data plane verification (DPV) faces significant scalability issues in large
networks (ie, the verifier being a performance bottleneck and single point of failure and …
networks (ie, the verifier being a performance bottleneck and single point of failure and …