Validating the validator
Batfish provides a unique power to its users: validate network configurations before pushing them to the network. Its analysis is production-scale—unlike with emulation, you don’t need to build a trimmed version of your network. It is also comprehensive—considers all traffic, not just a few flows. These abilities help network engineers proactively fix errors that are…
Read MoreLesson from a network outage: Networks need automated reasoning
In the afternoon of October 23, within a few minutes of each other, two friends sent me a link to the recently-released “June 15, 2020 T-Mobile Network Outage Report” by the Public Safety and Homeland Security Bureau (PSHB) of the FCC. Given what Intentionet does, the report sounded interesting and I started reading it immediately….
Read MorePre-deployment validation of BGP route policies
A common culprit behind some of the biggest outages in the Internet is misconfigured BGP route policies. For example: BGP Leak Causing Internet Outages in Japan and Beyond How a Tiny Error Shut Off the Internet for Parts of the US Telia engineer error to blame for massive net outage Such outages typically occur…
Read MoreA practical approach to building a network CI/CD pipeline
Continuous integration and continuous deployment (CI/CD) is the practice of automatically packaging, testing, and deploying code, generally in small increments. This modern DevOps practice has made software development agile and reliable, and it holds the same promise for networking as more environments transition to the infrastructure-as-code (IaC) model. In this post, we’ll outline a practical…
Read MoreCome and get your free Batfish Enterprise Cloud View trial for AWS
As your company moves applications from on-premises datacenters to the cloud, your network toolchain can become a bottleneck. Simply visualizing your cloud infrastructure can be a challenge. And forget about using traceroute as a mechanism to see where packets are being dropped when machines in the cloud can’t talk to each other. With our…
Read MoreNetwork as code: From hype to substance
Last week, Arista and Cumulus hosted webinars on building CI/CD pipelines for the network (see Arista Webinar, Cumulus Webinar). Both webinars communicated a vision that included generating configuration (changes) automatically, pre-deployment validation, and automated deployment, followed by post-deployment validation. I found these webinars exciting for two reasons. The first was the emphasis they placed on…
Read MoreAnnouncing Ansible modules for Batfish
We are excited to announce Ansible modules for Batfish. Now, network engineers can invoke the power of Batfish within Ansible-based automation workflows. Network automation is like a car with a powerful engine— it may get you places quickly, but does not guarantee that you’ll get there safely. Safe driving requires advanced collision prevention systems. Similarly,…
Read MoreAnnouncing AI-ML
We are proud to announce Batfish AI-ML®, our latest product. Batfish AI-ML, or Automatic Intent Mind Link, is the industry’s first and only automatic intent extraction solution. It works seamlessly across all networks, be they data centers, enterprise campuses, service provider networks, or hybrid and multi-cloud deployments. Why Batfish AI-ML? Network engineers have told us repeatedly that the…
Read MoreDesigning a Network Validation Pipeline
The networking industry is on an exciting journey of automating tasks that engineers have historically done manually, such as deploying configuration changes to devices and reasoning about the correctness of those changes before and after deployment. These capabilities can tame the complexity of modern networks and make them more agile, reliable, and secure. Success on…
Read MoreThe what, when, and how of network validation
When historically tasked with configuring and managing a computer network, engineers have been forced to do almost everything manually: generate device configurations (and changes to them), commit them to the network, and check that the network behaves as expected afterward. These tasks are not only laborious but also anxiety-inducing, since a single mistake can bring…
Read MoreWe made networks work. Now let’s make them work well.
A few decades ago, car odometers were designed to roll over to zero after 99,999 miles because it was rare for cars to last that long. But today cars come with a warranty for 100,000 miles because it is rare for cars to not last that long. This massive reliability improvement has come about despite…
Read MoreNetwork Engineers: Time to Restock your Tool Chest
At Future: Net 2017, our CEO Ratul Mahajan introduced a new network engineering workflow. Designed to evaluate the operation of ever more complex and scaled networks, this workflow aims to eliminate misconfigurations that can lead to a downward spiral of outages, security breaches, and other failures; and to make networks less of a long pole…
Read MorePlug the hole in your network automation — validate changes before you deploy
We are excited to announce the release of pybatfish, an open-source Python SDK for Batfish. Batfish is an open-source, multi-vendor network validation framework that enables network engineers, architects and operators to proactively test and validate network design and configuration. It is being used in some of the world’s largest networks to prevent deployment of incorrect configurations…
Read MoreAutomation without validation: Risky operation
To err is human; to really foul things up requires a computer. — BILL VAUGHAN If you run a large, complex network, you have either already heavily invested in automating key management tasks or are about to. Network automation is a great way to reduce human errors and accomplish those tasks with consistency and speed….
Read MoreIntent specification languages – simplifying network configuration
The growing scale and complexity of today’s networks have outpaced network engineers’ ability to reason about their correct operation. As a consequence, misconfigurations that lead to downtime and security breaches have become all too common. In his keynote presentation at Future: NET 2017, Ratul Mahajan, the CEO of Intentionet, introduced a new network engineering workflow…
Read MoreDon’t accidentally break the Internet like Level 3 (or Google, Telia, Telekom Malaysia, …)
How to safely make network configuration changes On Monday, Nov 6th, 2017, Level 3 Communications (now part of CenturyLink) made national headlines when a configuration error resulted in a massive outage for many users in the USA. The impacted users were customers of several large ISPs, including Comcast. It took 90 minutes for Level 3…
Read MoreThe New Network Engineering Workflow – Formal Validation
At Future:NET 2017, hosted by VMWare in Las Vegas on August 30th and 31st, our CEO Ratul Mahajan gave the keynote presentation. Ratul spoke at length about how we can help network engineers and operators make their networks highly agile, reliable, and secure by adapting proven approaches employed by hardware and software engineers. Ratul observed that…
Read More