P4v: Practical verification for programmable data planes

J Liu, W Hallahan, C Schlesinger, M Sharif… - Proceedings of the …, 2018 - dl.acm.org
We present the design and implementation of p4v, a practical tool for verifying data planes
described using the P4 programming language. The design of p4v is based on classic …

A framework for eBPF-based network functions in an era of microservices

S Miano, F Risso, MV Bernal… - IEEE Transactions on …, 2021 - ieeexplore.ieee.org
By moving network functionality from dedicated hardware to software running on end-hosts,
Network Functions Virtualization (NFV) pledges the benefits of cloud computing to packet …

Safely and automatically updating in-network acl configurations with intent language

B Tian, X Zhang, E Zhai, HH Liu, Q Ye… - Proceedings of the …, 2019 - dl.acm.org
In-network Access Control List (ACL) is an important technique in ensuring network-wide
connectivity and security. As cloud-scale WANs today constantly evolve in size and …

Debugging P4 programs with Vera

R Stoenescu, D Dumitrescu, M Popovici… - Proceedings of the …, 2018 - dl.acm.org
We present Vera, a tool that verifies P4 programs using symbolic execution. Vera
automatically uncovers a number of common bugs including parsing/deparsing errors …

Hyperkernel: Push-button verification of an OS kernel

L Nelson, H Sigurbjarnarson, K Zhang… - Proceedings of the 26th …, 2017 - dl.acm.org
This paper describes an approach to designing, implementing, and formally verifying the
functional correctness of an OS kernel, named Hyperkernel, with a high degree of proof …

Validating datacenters at scale

K Jayaraman, N Bjørner, J Padhye, A Agrawal… - Proceedings of the …, 2019 - dl.acm.org
We describe our experiences using formal methods and automated theorem proving for
network operation at scale. The experiences are based on develo** and applying the …

PacketMill: toward per-Core 100-Gbps networking

A Farshin, T Barbette, A Roozbeh… - Proceedings of the 26th …, 2021 - dl.acm.org
We present PacketMill, a system for optimizing software packet processing, which (i)
introduces a new model to efficiently manage packet metadata and (ii) employs code …

Performance interfaces for network functions

R Iyer, K Argyraki, G Candea - 19th USENIX Symposium on Networked …, 2022 - usenix.org
Modern programmers routinely use third-party code, and infrastructure operators deploy
software they did not write. This would not be possible without semantic interfaces …

Verifying software network functions with no verification expertise

A Zaostrovnykh, S Pirelli, R Iyer, M Rizzo… - Proceedings of the 27th …, 2019 - dl.acm.org
We present the design and implementation of Vigor, a software stack and toolchain for
building and running software network middleboxes that are guaranteed to be correct, while …

Beyond a Centralized Verifier: Scaling Data Plane Checking via Distributed, On-Device Verification

Q **ang, C Huang, R Wen, Y Wang, X Fan… - Proceedings of the …, 2023 - dl.acm.org
Centralized data plane verification (DPV) faces significant scalability issues in large
networks (ie, the verifier being a performance bottleneck and single point of failure and …