NANOG Meeting Presentation Abstract

Proactive Network Configuration Validation with Batfish
Meeting:	NANOG65
Date / Time:	2015-10-07 4:30pm - 5:00pm
Room:	Le Grand Salon & Marquette
Presenters:	Speakers: Todd Millstein, University of California, Los Angeles. ratul mahajan, microsoft research. Ari Fogel, UCLA I am a 5th-year Ph.D. student at the Department of Computer Science at University of California, Los Angeles. My research has focused on static analysis of network configurations, with an eye toward detecting deviations from operator intent. On this work I have collaborated with researchers at University of Southern California and Microsoft Research, where I am currently interning. Meg Walraed-Sullivan, Space Exploration Technologies.
Abstract:	Batfish is an open-source network configuration analysis tool in active development produced jointly by researchers at University of California, Los Angeles; University of Southern California; and Microsoft Research. Though its individual modules have various applications, its primary purpose is to detect bugs in network configurations. Batfish takes as input a set of network configurations, and an environment, which consists of a set of (in)active links and a set of external BGP advertisements. Users are able to ask customized queries about the control plane using Batfish's domain-specific query language e.g. whether all loopback addresses are being advertised into OSPF, or whether all route policies attached to eBGP neighbors apply a particular community to incoming routes. Batfish also is able to compute the convergent data plane for a network, which provides further query facilities. Given the data plane, users can employ an off-the-shelf data plane checker or use Batfish's data-plane queries to check common properties such as reachability/black holes, loops, etc, as well as novel properties (introduced at NSDI'15) regarding equivalence of multipath routes, fault-tolerance, and unique delegation of customer address space, with more to come.
Files:	Proactive Network Configuration Validation with Batfish(PDF) Proactive Network Configuration Validation with Batfish Proactive Network Configuration Validation with Batfish (slides)(PTX)
Sponsors:	None.

Back to NANOG65 agenda.

NANOG65 Abstracts

• Show All

• Conference Opening
  Speakers:
  Tony Tauber, Comcast; Christian S. TacitTorIX; .
  Philippe Couture, Videotron; Clinton Work, TELUS;

• Conference Opening
  Speakers:
  Tony Tauber, Comcast; Christian S. TacitTorIX; .
  Philippe Couture, Videotron; Clinton Work, TELUS;

• Conference Opening
  Speakers:
  Tony Tauber, Comcast; Christian S. TacitTorIX; .
  Philippe Couture, Videotron; Clinton Work, TELUS;

• Conference Opening
  Speakers:
  Tony Tauber, Comcast; Christian S. TacitTorIX; .
  Philippe Couture, Videotron; Clinton Work, TELUS;

• NANOG 65 Keynote Address
  Speakers:
  Jack Waters, Level3 Communications;

• Your Bitcoins or Your Site: An Analysis of the DDoS for Bitcoins (DD4BC) DDoS Extortion Campaign.
  Speakers:
  Roland Dobbins, Arbor Networks;

• The many uses of NetFlow and flow-like data
  Speakers:
  Avi Freedman, Kentik;

• NANOG Board Candidates
  Moderators:
  William CharnockPacketFabric; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• Data Center Track
  Moderators:
  Gabe Cole, RTE Group, Inc.;

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• DNS Track
  Speakers:
  Geoff HustonAPNIC; .
  Duane Wessels, VeriSign; Keith MithcellDNS-OARC; .
  Brian SomersOpenDNS ; .
  Ray BellisInternet Systems Consortium; .
  Eddie Winstead.
  Tomas HlavacekCZ.NIC; .
  

• NetDevOps - Ansible 101 to network nirvana
  Speakers:
  Bronwyn Lewis, Packet Clearing House; Matt Peterson, Cumulus Networks;

• NetDevOps - Ansible 101 to network nirvana
  Speakers:
  Bronwyn Lewis, Packet Clearing House; Matt Peterson, Cumulus Networks;

• Demystifying Pros & Cons of large Scale BGP RR deployments
  Speakers:
  rohit bothra, Brocade Communications;

• DDoS Tutorial
  Speakers:
  Krassimir Tzvetanov, A10 Networks, Inc.;

• Security Track
  Speakers:
  Krassimir Tzvetanov, A10 Networks, Inc.;

• Wi-Fi: Fundamentals, Design and Troubleshooting
  Speakers:
  Troy Martin, Aerohive Networks;

• 10 Weird (and Possibly Useful) Things You Didn't Know about International Networks
  Speakers:
  Tim Stronge, TeleGeography;

• Monitor BGP using open source OpenBMP and Apache Kafka
  Speakers:
  Tim Evens, Cisco;

• Building a smallish DC...for the rest of us
  Speakers:
  Karl Brumund, Dyn;

• Running MPLS efficiently in ring networks
  Speakers:
  Ravi Singh, Juniper Networks;

• BGPuma -- Border Gateway Protocol Update Metric Analysis
  Speakers:
  Leigh Metcalf, CERT;

• Whack-a-Mole Routing: The effects of ISP Traffic Engineering on Non-ISP Networks
  Speakers:
  Rick Casarez, Salesforce;

• Distributed Route Aggregation on the Global Network (DRAGON)
  Speakers:
  João Luís Sobrinho, Instituto de Telecomunicações, University of Lisbon;

• Cloudy with a chance of Breach: Forecasting Cyber Security Incidents
  Speakers:
  Manish Karir, QuadMetrics;

• Optimal routing vs. Route Reflector VNF - reconcile the fire with water
  Speakers:
  Rafal Szarecki, Juniper Networks;

• The future of North American Regional BCOP
  Speakers:
  Aaron Hughes6connect; .
  Chris Grundemann.
  

• The future of North American Regional BCOP
  Speakers:
  Aaron Hughes6connect; .
  Chris Grundemann.
  

• Lightning Talks
  Speakers:
  NANOG Lightning TalksNANOG Community; .
  

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Strategies of packet buffering inside Routers
  Speakers:
  Rafal Szarecki, Juniper Networks;

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Peering Track
  Moderators:
  Sylvie LaPerriere, Google Inc.; Patrick Gilmore, Markley Group; Panelists:
  David E. Young, Verizon; Hank Hultquist, AT&T; Joseph Cavender, Level 3 Communications; Speakers:
  Jon Nistor, TorIX;

• Proactive Network Configuration Validation with Batfish
  Speakers:
  Todd MillsteinUniversity of California, Los Angeles; .
  ratul mahajanmicrosoft research; .
  Ari Fogel, UCLA; Meg Walraed-SullivanSpace Exploration Technologies; .
  

• Proactive Network Configuration Validation with Batfish
  Speakers:
  Todd MillsteinUniversity of California, Los Angeles; .
  ratul mahajanmicrosoft research; .
  Ari Fogel, UCLA; Meg Walraed-SullivanSpace Exploration Technologies; .
  

• Proactive Network Configuration Validation with Batfish
  Speakers:
  Todd MillsteinUniversity of California, Los Angeles; .
  ratul mahajanmicrosoft research; .
  Ari Fogel, UCLA; Meg Walraed-SullivanSpace Exploration Technologies; .
  

• Proactive Network Configuration Validation with Batfish
  Speakers:
  Todd MillsteinUniversity of California, Los Angeles; .
  ratul mahajanmicrosoft research; .
  Ari Fogel, UCLA; Meg Walraed-SullivanSpace Exploration Technologies; .
  

• Deploying IPv6 at Scale as an ISP
  Speakers:
  Clinton Work, TELUS;

• Closing Remarks
  Speakers:
  Betty Burke, NANOG Executive Director;