RUN-TIME VERIFICATION OF MIDDLEBOX ROUTING AND TRAFFIC PROCESSING

摘要

The subject disclosure is directed towards verifying correct middlebox operation/behavior, including while the middlebox is running in a network. Probe traffic is sent to a middlebox, with the middlebox output monitored to determine whether the middlebox correctly processed the traffic. For example, the verification may be directed towards evaluating that only legitimate traffic is passed, and that the legitimate traffic is correctly routed. Also described is the use of a summary data structure to track traffic flows, and the detection of routing loops.

主权项

1. In a computing environment, a method, comprising, sending probe traffic to a middlebox in a network, and monitoring middlebox output to determine whether the middlebox is operating correctly according to a specified set of rules with respect to performing routing or traffic processing, or both routing and traffic processing.