Network configuration verification in computing systems
US11516088B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Dec 3, 2021 |
| Grant date | Nov 29, 2022 |
| Priority date | — |
| Expiry date | Dec 3, 2041 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L41/40
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Techniques of network configuration verification are disclosed herein. One example process includes, upon receiving a query to determine whether a packet from a first endpoint is reachable to a second endpoint in a virtual network, identifying a network path between the first endpoint to the second endpoint in a network graph. The network graph has nodes representing corresponding enforcement points of network policies in the virtual network and edges connecting pairs of the nodes. The example process can also include generating compound function representing conjoined individual constraints of the network policies at each of the nodes in the network graph along the identified network path, compiling the generated compound function into a Boolean formula, and solving the compiled Boolean formula to determine whether an assignment of values to packet fields of the packet exists such that all the conjoined individual constraints of the compound function can be satisfied.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.