Verikube: Automatic and Efficient Verification for Container Network Policies

Cited 1 time in webofscience Cited 0 time in scopus
  • Hit : 147
  • Download : 0
Recently, Linux Container has been the de-facto standard for a cloud system, enabling cloud providers to create a virtual environment in a much more scaled manner. However, configuring container networks remains immature and requires automatic verification for efficient cloud management. We propose Verikube, which utilizes a novel graph structure representing policies to reduce memory consumption and accelerate verification. Moreover, unlike existing works, Verikube is compatible with the complex semantics of Cilium Policy which a cloud adopts from its advantage of performance. Our evaluation results show that Verikube performs at least seven times better for memory efficiency, at least 1.5 times faster for data structure management, and 20K times better for verification.
Publisher
IEICE-INST ELECTRONICS INFORMATION COMMUNICATION ENGINEERS
Issue Date
2022-12
Language
English
Article Type
Article
Citation

IEICE TRANSACTIONS ON INFORMATION AND SYSTEMS, v.E105D, no.12, pp.2131 - 2134

ISSN
0916-8532
DOI
10.1587/transinf.2022EDL8046
URI
http://hdl.handle.net/10203/303142
Appears in Collection
EE-Journal Papers(저널논문)
Files in This Item
There are no files associated with this item.
This item is cited by other documents in WoS
⊙ Detail Information in WoSⓡ Click to see webofscience_button
⊙ Cited 1 items in WoS Click to see citing articles in records_button

qr_code

  • mendeley

    citeulike


rss_1.0 rss_2.0 atom_1.0