Splendid isolation: a slice abstraction for software-defined networks

Authors:
Stephen Gutz;Alec Story;Cole Schlesinger;Nate Foster
Affiliations:
Cornell University, Ithaca, NY, USA;Cornell University, Ithaca, NY, USA;Princeton University, Princeton, NJ, USA;Cornell University, Ithaca, NY, USA
Venue:
Proceedings of the first workshop on Hot topics in software defined networks
Year:
2012

Citing 11
Cited 5

Automatic verification of finite-state concurrent systems using temporal logic specifications

ACM Transactions on Programming Languages and Systems (TOPLAS)
Translation Validation

TACAS '98 Proceedings of the 4th International Conference on Tools and Algorithms for Construction and Analysis of Systems
NuSMV 2: An OpenSource Tool for Symbolic Model Checking

CAV '02 Proceedings of the 14th International Conference on Computer Aided Verification
OpenFlow: enabling innovation in campus networks

ACM SIGCOMM Computer Communication Review
Carving research slices out of your production networks with OpenFlow

ACM SIGCOMM Computer Communication Review
Virtualizing the network forwarding plane

Proceedings of the Workshop on Programmable Routers for Extensible Services of Tomorrow
Debugging the data plane with anteater

Proceedings of the ACM SIGCOMM 2011 conference
Frenetic: a network programming language

Proceedings of the 16th ACM SIGPLAN international conference on Functional programming
A compiler and run-time system for network programming languages

POPL '12 Proceedings of the 39th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Header space analysis: static checking for networks

NSDI'12 Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation
Abstractions for network update

Proceedings of the ACM SIGCOMM 2012 conference on Applications, technologies, architectures, and protocols for computer communication

NRS: a system for automated network virtualization in iaas cloud infrastructures

Proceedings of the 7th international workshop on Virtualization technologies in distributed computing
Composing software-defined networks

nsdi'13 Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation
A balance of power: expressive, analyzable controller programming

Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking
NetKAT: semantic foundations for networks

Proceedings of the 41st ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages
Tierless programming and reasoning for software-defined networks

NSDI'14 Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation

Quantified Score

Hi-index	0.00

Visualization

Abstract

The correct operation of many networks depends on keeping certain kinds of traffic isolated from others, but achieving isolation in networks today is far from straightforward. To achieve isolation, programmers typically resort to low-level mechanisms such as Virtual LANs, or they interpose complicated hypervisors into the control plane. This paper presents a better alternative: an abstraction that supports programming isolated slices of the network. The semantics of slices ensures that the processing of packets on a slice is independent of all other slices. We define our slice abstraction precisely, develop algorithms for compiling slices, and illustrate their use on examples. In addition, we describe a prototype implementation and a tool for automatically verifying formal isolation properties.