Abstract: Methods, systems, and computer program products for diagnosing faults in stateless distributed computing platforms are provided herein. A computer-implemented method includes processing a plurality of communication messages exchanged between two or more distributed components within a stateless distributed system; determining a message context for each of the plurality of communication messages based on one or more message identifiers extracted from each of the plurality of communication messages; grouping the plurality of communication messages into multiple clusters pertaining to message invocation, wherein said grouping is based on the determined message context for each of the plurality of communication messages; generating a control flow graph by creating one or more connections across the multiple clusters; and detecting a causal chain of events associated with a detected fault in the stateless distributed system by navigating the control flow graph.

Abstract: Methods and arrangements for verifying controller actions in a clustered software defined network. A contemplated method includes: intercepting at least one message at the primary controller; wherein the at least one intercepted message comprises a message that induces one or more changes in the network; intercepting at least one cache update in the network; replicating the at least one intercepted message and the at least one cache update; directing the at least one replicated message and the at least one replicated cache update to a verification subsystem; and verifying the at least one replicated message and the at least one replicated cache update in the verification subsystem. Other variants and embodiments are broadly contemplated herein.

Abstract: Methods, systems, and computer program products for diagnosing faults in stateless distributed computing platforms are provided herein. A computer-implemented method includes processing a plurality of communication messages exchanged between two or more distributed components within a stateless distributed system; determining a message context for each of the plurality of communication messages based on one or more message identifiers extracted from each of the plurality of communication messages; grouping the plurality of communication messages into multiple clusters pertaining to message invocation, wherein said grouping is based on the determined message context for each of the plurality of communication messages; generating a control flow graph by creating one or more connections across the multiple clusters; and detecting a causal chain of events associated with a detected fault in the stateless distributed system by navigating the control flow graph.

Abstract: Methods and arrangements for verifying controller actions in a clustered software defined network. A contemplated method includes: intercepting at least one message at the primary controller; wherein the at least one intercepted message comprises a message that induces one or more changes in the network; intercepting at least one cache update in the network; replicating the at least one intercepted message and the at least one cache update; directing the at least one replicated message and the at least one replicated cache update to a verification subsystem; and verifying the at least one replicated message and the at least one replicated cache update in the verification subsystem. Other variants and embodiments are broadly contemplated herein.

Abstract: Methods and arrangements for securing a software defined network. One or more control messages are intercepted. Information is extracted from the one or more control messages to create a global network state model, and there is determined, from the extracted information, presence of at least one prospective modification to the global network state model. Thereupon, a determination is made as to whether the at least one prospective modification presents a threat to security of the software defined network. Other variants and embodiments are broadly contemplated herein.

Abstract: Methods and arrangements for securing a software defined network. One or more control messages are intercepted. Information is extracted from the one or more control messages to create a global network state model, and there is determined, from the extracted information, presence of at least one prospective modification to the global network state model. Thereupon, a determination is made as to whether the at least one prospective modification presents a threat to security of the software defined network. Other variants and embodiments are broadly contemplated herein.