Reasoning about Network Traffic Load Property at Production Scale

This paper presents JINGUBANG, the first reported system for checking network traffic load properties (e.g., if any link's utilization would exceed 80% during a network change) in a production Wide Area Network (WAN). Motivated by our network operators, JINGUBANG should meet three important requirements: (R1) comprehensive support for complex traffic behavior under BGP, IS-IS, policy-based routes (PBR), and segment routes (SR), (R2) reasoning on traffic load of billions of flows across a period of time, (R3) realtime failure-tolerance analysis. These requirements pose challenges in modeling the complex traffic behavior and maintaining the checking efficiency. JINGUBANG has successfully addressed these challenges. First, we propose the traffic distribution graph (or TDG), capable of modeling equal-cost multipath (ECMP), packet rewriting, and tunneling, introduced by BGP/IS-IS, PBR, and SR, respectively. Second, we design an algorithm based on TDG to simulate traffic distribution for billions of flows across a time period both efficiently and accurately. Third, JINGUBANG proposes an incremental traffic simulation approach that first computes an incremental TDG and then simulates only the differential traffic distribution, avoiding the need to simulate the entire network traffic distribution from scratch. JINGUBANG has been used in the daily checking of our WAN for more than one year and prevented service downtime resulting from traffic load violations.