NDD: A Decision Diagram for Network Verification
Zechun Li, Peng Zhang, Yichi Zhang, Hongkun Yang
Abstract
Decision Diagram (BDD) as the underlying data structure to represent the network state and equivalence classes. Despite its wide usage, we find BDD is not ideal for network verification: verifiers need to handle the low-level computation of equivalence classes, and still face scalability issues when the network state has a lot of bits.
To this end, this paper introduces Network Decision Diagram (NDD), a new decision diagram customized for network verification. In a nutshell, NDD wraps BDD with another layers of decision diagram, such that each NDD node represents a field of the network, and each edge is labeled with a BDD encoding the values of that field. We designed and implemented a library for NDD, which features a native support for equivalence classes, and higher efficiency in memory and computation. Using the NDD library, we re-implemented five BDD-based verifiers with minor modifications to their original codes, and observed a 100× reduction in memory cost and 100× speedup. This indicates that NDD provides a drop-in replacement of BDD for network verifiers.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 9a245bac-112a-4f76-a041-dbe77c4fcf34Cited by top-tier papers2
- Janus: Enabling Expressive and Efficient ACLs in High-speed RDMA CloudsZiteng Chen, Menghao Zhang, Jiahao Cao, Xuzheng Chen et al.NDSS 2026
- AccessRefinery: Fast Mining Concise Access Control Intents on Public CloudNing Kang, Peng Zhang, Jianyuan Zhang, Hao Li et al.FSE 2026
Builds on14
- Tiramisu: Fast Multilayer Network VerificationAnubhavnidhi Abhashkumar, Aaron Gember-Jacobson, Aditya AkellaNSDI 2020 · 146 citations
- Plankton: Scalable network configuration verification through model checkingSanthosh Prabhu, Kuan-Yen Chou, Ali Kheradmand, Brighten Godfrey et al.NSDI 2020 · 130 citations
- APKeep: Realtime Verification for Real NetworksPeng Zhang, Xu Liu, Hongkun Yang, Ning Kang et al.NSDI 2020 · 99 citations
- Accuracy, Scalability, Coverage: A Practical Configuration Verifier on a Global WANFangdan Ye, Da Yu, Ennan Zhai, Hongqiang Harry Liu et al.SIGCOMM 2020 · 55 citations
- Finding Network Misconfigurations by Automatic Template InferenceSiva Kesava Reddy K., Alan Tang, Ryan Beckett, Karthick Jayaraman et al.NSDI 2020 · 53 citations
Related papers
- Accurate BDD-based unitary operator manipulation for scalable and robust quantum circuit verificationChun-Yu Wei, Yuan-Hung Tsai, Chiao-Shan Jhang, Jie-Hong R. JiangDAC 2022 · 28 citations
- Symbolic router executionPeng Zhang, Dan Wang, Aaron Gember-JacobsonSIGCOMM 2022 · 31 citations
- RexBDDs: Reduction-on-Edge Complement-and-Swap Binary Decision DiagramsGianfranco Ciardo, Andrew S. Miner, Lichuan Deng, Junaid BabarDAC 2024
- FeynmanDD: Quantum Circuit Analysis with Classical Decision DiagramsZiyuan Wang, Bin Cheng, Longxiang Yuan, Zhengfeng JiCAV 2025 · 8 citations
- Lessons from the evolution of the Batfish configuration analysis toolMatt Brown, Ari Fogel, Daniel Halperin, Victor Heorhiadi et al.SIGCOMM 2023 · 37 citations
