Virtual Network Policy Tester for Production Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for testing configuration changes in communication networks often fail to accurately predict their effects in production environments, either due to the complexity and cost of replicating large networks or the inability to detect adverse effects in a timely manner, especially when quick changes are necessary for security.
Innovation Solution
A virtual network is generated using a virtual network generator, with transaction logs obtained from test traffic to compare the impact of policy changes, allowing for the validation of policy changes before deployment in a production network, including access restriction and traffic regulation policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If a physical replica of the customer network is constructed in the lab environment, then the testing accuracy of configuration changes is improved, but the cost and complexity of implementation increases significantly
Solution Approach 1:
The patent creates a virtual copy of the production network environment using virtualization technology. Instead of building a physical replica, the system generates virtual network devices, configurations, and topologies that mirror the production environment. This virtual copy can be rapidly deployed and modified for testing purposes without the high costs and complexities of physical network replication.
2Reliability
If configuration changes are tested in the lab environment, then the risk of adverse effects on the production network is reduced, but the testing results may not accurately reflect production network behavior
Solution Approach 1:
The patent performs configuration change testing in a virtual environment that closely mirrors the production network before deploying changes to the actual production network. By conducting preliminary tests in this virtual replica, potential adverse effects can be identified and resolved before they impact the production network, ensuring both safety and accuracy of testing results.
3Speed
If configuration changes are implemented directly in the production network, then the response time to security threats is improved, but the risk of undetected adverse effects increases
Solution Approach 1:
The system enables rapid configuration changes to be tested in a virtual production environment before actual deployment. This preliminary action allows security responses to be prepared and validated quickly, maintaining fast response times while ensuring network reliability through pre-deployment validation in the virtual environment.
Data Source
AI summary
Embodiments of the present invention are directed to testing policy changes associated with a production network. A virtual network that represents at least a portion of the production network can be generated. A first transaction log based on a first execution of the virtual network using test traffic and a first set of policies that are implemented in the production network can be obtained. A second transaction log based on a second execution of the virtual network using the test traffic and a second set of policies to be implemented in the production network can be obtained. Based on a comparison of the first and second transaction logs, it can be determined whether the second set of policies has a desired effect in the virtual network.