Abstract: A network configuration change validation environment is disclosed. In particular, this disclosure is related to an interface to initiate automated test actions (e.g., network monitoring commands, application monitoring commands, etc.) and to view results in an efficient manner to support a network communication infrastructure. In one example, results of a set of commands executed prior to a configuration change may serve as a baseline and one or more results of the same set of commands may be intelligently compared to the baseline to identify any potential issues that have arisen. For example, as a result of a specific network configuration change or application update. The disclosed network change validation command initiator and validation report viewer represent part of an overall network configuration change validation environment that includes automated techniques such that it may be used within a given change window.

Abstract: A network configuration change validation environment is disclosed. In particular, this disclosure is related to an interface to initiate automated test actions (e.g., network monitoring commands, application monitoring commands, etc.) and to view results in an efficient manner to support a network communication infrastructure. In one example, results of a set of commands executed prior to a configuration change may serve as a baseline and one or more results of the same set of commands may be intelligently compared to the baseline to identify any potential issues that have arisen. For example, as a result of a specific network configuration change or application update. The disclosed network change validation command initiator and validation report viewer represent part of an overall network configuration change validation environment that includes automated techniques such that it may be used within a given change window.

Abstract: Examples disclosed herein relate to performing an action based on an advertisement indicator is present in a network packet. In one example, a network packet identified by a network infrastructure device as matching criteria associated with a pre-identified request is received. A parameter within the network packet is identified. A rule is used to determine whether the parameter indicates that an advertisement indicator is present in a flow associated with the network packet. An action is performed based on whether the advertisement indicator is present in the network packet.

Abstract: A controller, which manages nodes that provide virtual entities, receives information from a first of the nodes, where the received information relates to a characteristic of a virtual entity provided by the first node. The controller determines that the received information is inconsistent with information, maintained by the controller, relating to the characteristic of the virtual entity provided by the first node. In response to the determining, the controller reconciles an inconsistency between the received information and the information maintained by the controller.

Abstract: Systems and methods are provided for dynamic grammar augmentation for editing multiple network switch configuration files as a single file. The method includes identifying a first base grammar of a first network switch; identifying a second base grammar of a second network switch; identifying first and second patch grammars for the first and second network switches; generating an augmented grammar based on the first and second patch grammars and the first and second base grammars; identifying a first configuration file for the first network switch; identifying a second configuration file for the second network switch; generating a base merged configuration file, the base merged configuration file representing the first and second configuration files modified according to the augmented grammar.

Abstract: In some examples, a method includes accessing an orthogonal network policy set that represents a first intent-based network policy and a second intent-based network policy. The method may also include determining multiple reduced orthogonal network policy sets from the orthogonal network policy set. The multiple reduced orthogonal network policy sets may differ from one another, and each represent the first and second intent-based network policies. The method may further include selecting a particular reduced orthogonal network policy set among the multiple reduced orthogonal network policy sets to implement on a target switching device.

Abstract: An example consistent with this disclosure includes a controller that is communicatively coupled to dataflow devices in a network. The controller receives device information from a dataflow device and determines features supported by the dataflow device based, in part, on the device information received from the dataflow device. Using a driver configured to use the features supported by the dataflow device, the controller transmits a command to the dataflow device. The controller then receives a response to the command from the dataflow device. The response to the command may include information that indicates different features are supported by the dataflow device than previously determined. The controller updates its determination of the features supported by the dataflow device and updates the driver used to transmit the command to the dataflow device.

Abstract: Methods for systems are provided. In one aspect, a method for minimizing a network outage includes identifying one or more paths connecting a resource node of the network to an edge switch of one or more edge switches of the network. Each edge switch is connected to one or more endpoint devices to allow resources coupled to the resource node to be provided to the one or more endpoint devices. The method further includes calculating endpoint downtime costs corresponding to rebooting each of the common switches in the network. The common switches are present in all paths connecting the resource node to the edge switch. The calculated endpoint downtime costs corresponding to the one or more common switches are compared. One of the common switches with a highest endpoint downtime cost is identified as a candidate switch for redundancy based on the comparison.

Abstract: Example embodiments disclosed herein relate to determining whether a device exhibits anomalous behavior based on a set of rules, address usage information, and address range information. Address usage information for a device communicating on a data plane of a network implemented using switches is received via a control plane. Address range information for the network is maintained. Whether the device exhibits anomalous behavior is determined based on the set of rules, address usage information, and address range information.

Abstract: Example implementations relate to generating a packet processing pipeline definition. According to an example, an SDN controller includes a flow class module to receive flow class registrations specifying flow classes. The flow classes specify characteristics of expected network flows. The controller also includes a pipeline generating module to generate a packet processing pipeline definition to accommodate the expected network flows, the packet processing pipeline definition including table definitions for the flow classes. The SDN controller further includes a communication interface to send the packet processing pipeline definition to a switch.

Abstract: Example implementations relate to network policy distribution. For example, a system for network policy distribution can include a state engine to determine a change in a state of a network, a policy engine to determine a number of policy changes based on the change in the state of the network, an identification engine to identify a number of network endpoints that correspond to the number of policy changes, and a distribution engine to load instructions based on the number of policy changes to the number of endpoints that correspond to the number of policy changes.

Abstract: In an example, a method is disclosed for implementing forwarding behavior based on communication activity between an SDN controller and a network device. The method includes generating, for the network device, a first flow table rule to implement first forwarding behavior for a network flow if communication to the SDN controller is active. The first flow table rule comprises match criteria for matching to the network flow, a first timeout value, and a first priority value. The method also includes generating, for the network device, a second flow table rule to implement second forwarding behavior for the network flow if communication to the SDN controller is not active. The second flow table rule comprises match criteria for matching to the network flow, a second timeout value, and a second priority value. The method further includes instructing the network device to implement the first and second flow table rules.

Abstract: Methods for systems are provided. In one aspect, a method for minimizing a network outage includes identifying one or more paths connecting a resource node of the network to an edge switch of one or more edge switches of the network. Each edge switch is connected to one or more endpoint devices to allow resources coupled to the resource node to be provided to the one or more endpoint devices. The method further includes calculating endpoint downtime costs corresponding to rebooting each of the common switches in the network. The common switches are present in all paths connecting the resource node to the edge switch. The calculated endpoint downtime costs corresponding to the one or more common switches are compared. One of the common switches with a highest endpoint downtime cost is identified as a candidate switch for redundancy based on the comparison.

Abstract: In an example implementation according to aspects of the present disclosure, a method may include identifying, by a computing system, an infrastructure device and an end-host device within a network. The method may further include disseminating, by the computing system, network traffic rules to the infrastructure device, the network traffic rules to route network traffic between end-host devices through the infrastructure device. Further, the network traffic transmitted from a first end-host device to a second end-host device is passed through the infrastructure device to the second end-host device in accordance with the network traffic rules, and network traffic transmitted from the first end-host device to the infrastructure device is blocked by the infrastructure device in accordance with the network traffic rules.

Abstract: An example method is described for monitoring a network. The method includes detecting that a network attribute has been updated at a network device. The method further includes selecting, based in part on the updated network attribute, a set of network functionality tests from a group of network functionality tests. The method further includes executing the set of network functionality tests. The method further includes receiving information describing functionality of the network during the set of network functionality tests at the network device. The method further includes determining results of the set of network functionality tests based on the information describing functionality of the network. The method further includes calculating a network functionality score based, in part, on the results of the set of network functionality tests.

Abstract: A network configuration change validation environment is disclosed. In particular, this disclosure is related to an interface to initiate automated test actions (e.g., network monitoring commands, application monitoring commands, etc.) and to view results in an efficient manner to support a network communication infrastructure. In one example, results of a set of commands executed prior to a configuration change may serve as a baseline and one or more results of the same set of commands may be intelligently compared to the baseline to identify any potential issues that have arisen. For example, as a result of a specific network configuration change or application update. The disclosed network change validation command initiator and validation report viewer represent part of an overall network configuration change validation environment that includes automated techniques such that it may be used within a given change window.

Abstract: Example implementations relate to network policy conflict detection and resolution. For example, a system for network policy conflict detection and resolution can include a policy compilation engine to compile a plurality of network policies based on an intent format, a conflict detection engine to detect a conflict between a first network policy among the plurality of network policies and a second network policy among the plurality of network policies, using the intent format, and a conflict resolution engine to resolve the detected conflict between the first network policy and the second network policy. Further, the system for network policy conflict detection and resolution can include a translation engine to translate the resolution of the detected conflict to a protocol-specific format.

Abstract: Systems, methods, and storage mediums for determining a network cloud containing an uncontrolled network device based on link data of controlled network devices. The link data of controlled network devices can indicate which controlled network devices are linked together, whether the links between controlled network devices are multi-hop links, and whether the links between controlled network devices are bi-directional.

Abstract: In an example, a method is disclosed for implementing forwarding behavior based on communication activity between an SDN controller and a network device. The method includes generating, for the network device, a first flow table rule to implement first forwarding behavior for a network flow if communication to the SDN controller is active. The first flow table rule comprises match criteria for matching to the network flow, a first timeout value, and a first priority value. The method also includes generating, for the network device, a second flow table rule to implement second forwarding behavior for the network flow if communication to the SDN controller is not active. The second flow table rule comprises match criteria for matching to the network flow, a second timeout value, and a second priority value. The method further includes instructing the network device to implement the first and second flow table rules.

Abstract: In some examples, a method includes accessing an orthogonal network policy set that represents a first intent-based network policy and a second intent-based network policy. The method may also include determining multiple reduced orthogonal network policy sets from the orthogonal network policy set. The multiple reduced orthogonal network policy sets may differ from one another, and each represent the first and second intent-based network policies. The method may further include selecting a particular reduced orthogonal network policy set among the multiple reduced orthogonal network policy sets to implement on a target switching device.