Header space analysis: Static checking for networks

Introduction

三个目标：

• Help system administrators statically analyze production networks today
• Make it easier for system administrators to guarantee isolation between sets of hosts, users or traffic
• Take the notion of isolation further, and enable the static analysis of networks sliced in more general ways

The Geometric Model

• Header Space：$\mathcal{H}$，将包头视为一和零的平面序列 { 0 , 1 } L \{0,1\}^L { 0,1}L
• Network Space：$\mathcal{N}$，表示为 { 0 , 1 } L × { 1 , ⋯   , P } \{0,1\}^L \times \{1,\cdots,P\} { 0,1}L×{ 1,⋯,P}， { 1 , ⋯   , P } \{1,\cdots,P\} { 1,⋯,P}为端口
• Network Transfer Function：$\Psi ()$，
  $$\Psi (h,p)=\{\begin{array}{l}{T}_1(h,p)ifp\in switc{h}_1\\ \cdots \cdots \\ T_n(h.p)ifp\in switc{h}_n\end{array}$$
  其中$T_i$表示第$i$个boxes的转换函数： T ( h , p ) : ( h , p ) → { ( h 1 , p 1 ) , ( h 2 , p 2 ) , ⋯   } T(h,p) : (h,p) \to \{(h_1,p_1), (h_2,p_2), \cdots\} T(h,p):(h,p)→{ (h1​,p1​),(h2​,p2​),⋯}
• Topology Transfer Function：$\Gamma ()$，
  Γ ( h , p ) { { h , p ∗ }      i f    p    c o n n e c t e d    t o    p ∗ { }      i f    p    i s    n o t    c o n n e c t e d \Gamma(h,p) \left\{ \begin{array}{lr} \{h,p^*\} \;\; if \; p \; connected \; to \; p^* \\ \{\} \;\; if \; p \; is \; not \; connected \end{array} \right. Γ(h,p){ { h,p∗}ifpconnectedtop∗{ }ifpisnotconnected​
  在链路的一端接受一个数据包，并在另一端返回相同的数据包，保持不变。请注意，链接在此模型中是单向的。
• Multihop Packet Traversal：$\Phi (.)=\Psi (\Gamma (.))$，$k$跳简记为${\Phi }^k(h,p)$，其中$\Gamma$在链接上转发数据包，$\Psi$ 传递包通过box
• Slice：$S$，被定义为*(Slice network space, Permission, Slice Transfer Function)*
  • Slice network space：subset of the network space controlled by the slice
  • Permission：subset of { r