首页> 外文会议>Asia-Pacific Network Operations and Management Symposium >Policy-based verification method for configurations of large network with header-space analyses
【24h】

Policy-based verification method for configurations of large network with header-space analyses

机译:带有标头空间分析的基于策略的大型网络配置验证方法

获取原文

摘要

Configuration of network is getting complex because the network has been equipped with much functionality. Meanwhile, the network should satisfy many requirements for sophisticated multi-tenancy, high-level security and so on. For example, a flow which should be secure has to go through a firewall. However, it is difficult for an operator to verify whether the configuration in large network can satisfy these requirements. The verification takes a lot of time and a lot of human work. In addition, the human operator may inherently overlook an erroneous configuration. In this paper, we propose a policy language, which can specify the requirements. We also propose two implementation designs of the policy language. The one of the methods is estimated to verify the configuration of large network.
机译:网络的配置变得越来越复杂,因为网络已经配备了许多功能。同时,网络应满足复杂的多租户,高级别安全性等许多要求。例如,应该安全的流必须经过防火墙。然而,对于运营商而言,难以验证大型网络中的配置是否可以满足这些要求。验证需要很多时间和大量的人工。另外,操作人员可能会固有地忽略错误的配置。在本文中,我们提出了一种可以指定要求的策略语言。我们还提出了策略语言的两种实现设计。估计其中一种方法可以验证大型网络的配置。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号