Verifying network intents

Patent metadata

Field	Value
Publication number	US-2019238410-A1
Application number	US-201815885202-A
Country	US
Kind code	A1
Filing date	Jan 31, 2018
Priority date	Jan 31, 2018
Publication date	Aug 1, 2019
Grant date	—

Abstract

A method for verifying network intents may include decomposing at least one network intent into a plurality of sub-verification tasks, generating a set of normalized configurations for a plurality of network devices in a target network based on a set of current configurations for the plurality of network devices and generating a network graph based on the set of normalized configurations and a topology of the target network. The method may further include analyzing the plurality of sub-verification tasks and the network graph to determine if the set of current configurations for the plurality of network devices satisfies the at least one network intent. If the at least one network intent is not satisfied, a report may be generated indicating that the target network is not in compliance. If the at least one network intent is satisfied, information may be provided indicating that target network is in compliance.

First claim

We claim:

1 . A method for verifying network intents comprising:
decomposing at least one network intent into a plurality of sub-verification tasks; generating a set of normalized configurations for a plurality of network devices in a target network based on a set of current configurations for the plurality of network devices; generating a network graph based on the set of normalized configurations and a topology of the target network; analyzing the plurality of sub-verification tasks and the network graph to determine if the set of current configurations for the plurality of network devices satisfies the at least one network intent; if the at least one network intent is not satisfied, generating a report indicating that the target network is not in compliance; and if the at least one network intent is satisfied, providing information indicating that target network is in compliance.

2 . The method according to claim 1 , wherein decomposing at least one network intent further comprises slicing the at least one network intent into a plurality of portions for verification.

3 . The method according to claim 2 , wherein decomposing the at least one network intent further comprises segmenting the target network into a plurality of segments.

4 . The method according to claim 1 , wherein generating the set of normalized configurations further comprises converting the set of current configurations to the set of normalized configurations using a data modeling language.

5 . The method according to claim 4 , wherein the data modeling language is YANG.

6 . The method according to claim 4 , wherein data modeling language includes at least one extension directed to at least one function of a network function.

7 . The method according to claim 1 , wherein an SMT solver is used to analyze the set of sub-verification tasks and the network graph to determine if the set of current configurations for the plurality of network devices satisfies the at least one network intent.

8 . The method according to claim 1 , wherein decomposing at least one network intent into a plurality of sub-verification tasks includes receiving the at least one network intent and receiving a set of labels.

9 . The method according to claim 8 , wherein the at least one network intent is defined by an intent management service and the set of labels are generated by a label management service.

10 . The method according to claim 1 , wherein the set of current network configurations and the topology of the target network are provided by a network management system.

11 . A system for verifying network intents comprising:
a decomposer to decompose at least one network intent into a plurality of sub-verification tasks; a configuration normalizer to generate a set of normalized configurations for a plurality of network devices in a target network based on a set of current configurations for the plurality of network devices; a network graph builder coupled to the configuration normalizer, the network graph builder to generate a network graph based on the set of normalized configurations and a topology of the target network; an SMT solver coupled to the decomposer and the network graph builder, the SMT solver to analyze the set of normalized configurations and the network graph to determine violations of the at least one network intent by the set of current configurations for the plurality of network devices; and a violation analyzer coupled to the SMT solver, the violation analyzer to generate a report identifying the violations.

12 . The system according to claim 11 , wherein decomposing the at least one network intent comprises slicing the at least one network intent into a plurality of portions for verification.

13 . The system according to claim 12 , wherein decomposing the at least one network intent further comprises segmenting the target network into a plurality of segmentsr.

14 . The system according to claim 11 , wherein generating the set of normalized configurations comprises converting the set of current configurations to the set of normalized configurations using a data modeling language.

15 . The system according to claim 14 , wherein the data modeling language is YANG.

16 . The system according to claim 14 , wherein data modeling language includes at least one extension directed to at least one function of a network function.

17 . The system according to claim 11 , wherein the decomposer receives the at least one network intent from an intent management service.

18 . The system according to claim 11 , wherein the decomposer receives a set of labels from a label management service.

19 . The system according to claim 11 , wherein the configuration normalizer receives the set of current network configurations from a network management system.

20 . The system according to claim 11 , wherein the network graph builder receives the topology of the target network from a network management system.

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Kang Joon Myung
• Wang Huazhe
• Sharma Puneet

Classifications

• H04L41/0853 Primary

  by actively collecting configuration information or by backing up configuration information · CPC title

• H04L43/04

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L41/0823

  characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability (for optimising operational conditions of wireless networks H04W24/02) · CPC title

• H04L41/0866

  Checking the configuration · CPC title