Verifying the Correctness of Wide-Area Internet Routing

Several studies have shown that wide-area Internet routing is fragile, with failures occurring for a variety of reasons. Routing fragility is largely due to the flexible and powerful ways in which BGP can be configured to perform various tasks, which range from implementing the policies of commercia...

Full description

Bibliographic Details
Main Authors: Feamster, Nick, Balakrishnan, Hari
Other Authors: Networks and Mobile Systems
Language:en_US
Published: 2005
Online Access:http://hdl.handle.net/1721.1/30471
_version_ 1826211462449725440
author Feamster, Nick
Balakrishnan, Hari
author2 Networks and Mobile Systems
author_facet Networks and Mobile Systems
Feamster, Nick
Balakrishnan, Hari
author_sort Feamster, Nick
collection MIT
description Several studies have shown that wide-area Internet routing is fragile, with failures occurring for a variety of reasons. Routing fragility is largely due to the flexible and powerful ways in which BGP can be configured to perform various tasks, which range from implementing the policies of commercial relationships to configuring backup paths. Configuring routers in an AS is like writing a distributed program, and BGP's flexible configuration and today's relatively low-level configuration languages make the process error-prone. The primary method used by operators to determine whether their complex configurations are correct is to try them out in operation.We believe that there is a need for a systematic approach to verifying router configurations before they are deployed. This paper develops a static analysis framework for configuration checking, and uses it in the design of rcc, a ``router configuration checker''. rcc takes as input a set of router configurations and flags anomalies and errors, based on a set of well-defined correctness conditions. We have used rcc to check BGP configurations from 9 operational networks, testing nearly 700 real-world router configurations in the process. Every network we analyzed had configuration errors, some of which were potentially serious and had previously gone unnoticed. Our analysis framework and results also suggest ways in which BGP and configuration languages should be improved. rcc has also been downloaded by 30 network operators to date.
first_indexed 2024-09-23T15:06:15Z
id mit-1721.1/30471
institution Massachusetts Institute of Technology
language en_US
last_indexed 2024-09-23T15:06:15Z
publishDate 2005
record_format dspace
spelling mit-1721.1/304712019-04-12T08:37:48Z Verifying the Correctness of Wide-Area Internet Routing Feamster, Nick Balakrishnan, Hari Networks and Mobile Systems Several studies have shown that wide-area Internet routing is fragile, with failures occurring for a variety of reasons. Routing fragility is largely due to the flexible and powerful ways in which BGP can be configured to perform various tasks, which range from implementing the policies of commercial relationships to configuring backup paths. Configuring routers in an AS is like writing a distributed program, and BGP's flexible configuration and today's relatively low-level configuration languages make the process error-prone. The primary method used by operators to determine whether their complex configurations are correct is to try them out in operation.We believe that there is a need for a systematic approach to verifying router configurations before they are deployed. This paper develops a static analysis framework for configuration checking, and uses it in the design of rcc, a ``router configuration checker''. rcc takes as input a set of router configurations and flags anomalies and errors, based on a set of well-defined correctness conditions. We have used rcc to check BGP configurations from 9 operational networks, testing nearly 700 real-world router configurations in the process. Every network we analyzed had configuration errors, some of which were potentially serious and had previously gone unnoticed. Our analysis framework and results also suggest ways in which BGP and configuration languages should be improved. rcc has also been downloaded by 30 network operators to date. 2005-12-22T01:31:12Z 2005-12-22T01:31:12Z 2004-05-17 MIT-CSAIL-TR-2004-031 MIT-LCS-TR-948 http://hdl.handle.net/1721.1/30471 en_US Massachusetts Institute of Technology Computer Science and Artificial Intelligence Laboratory 14 p. 28764880 bytes 1265172 bytes application/postscript application/pdf application/postscript application/pdf
spellingShingle Feamster, Nick
Balakrishnan, Hari
Verifying the Correctness of Wide-Area Internet Routing
title Verifying the Correctness of Wide-Area Internet Routing
title_full Verifying the Correctness of Wide-Area Internet Routing
title_fullStr Verifying the Correctness of Wide-Area Internet Routing
title_full_unstemmed Verifying the Correctness of Wide-Area Internet Routing
title_short Verifying the Correctness of Wide-Area Internet Routing
title_sort verifying the correctness of wide area internet routing
url http://hdl.handle.net/1721.1/30471
work_keys_str_mv AT feamsternick verifyingthecorrectnessofwideareainternetrouting
AT balakrishnanhari verifyingthecorrectnessofwideareainternetrouting