基于形式化描述的交换机网络自动配置策略的设计与实现

A formal approach to the design and implementation of configuration strategy automation for switch network

配置管理是网络管理中的重要组成部分,随着IPv6的使用、安全机制的完善,园区网的配置变得更加复杂。该文提出交换机网络自动配置策略并实现原型系统。该系统以网络拓扑为基础,将其自动转化成alloy语言的描述,通过对配置规则进行形式化描述,计算出可行的配置解,自动完成交换机各参数的配置。该文以配置交换机网络的源地址验证(SAVI)功能为例,通过多线程的方式对各个子网同时进行规则推理,可以完成千级数量SAVI交换机的自动配置。

Configuration management is an important part of network management. With the use of IPv6 protocol and the improvement of security mechanism, configuration of enterprise network has become more and more complex. The paper presents a method for automatic configuration of switch network and implements a prototype system. The system automatically translates network topology into formal description with Alloy language. Through the formal description of the configuration rules, the system finds a solution satisfying all the rules, and finally enforces the configuration of switches automatically. By using multi-threads to find a solution satisfying rules for each subnet simultaneously, the system can finish the automatic configuration of a campus network with a thousand of SAV1 switches within reasonable time.