Verifying Configuration


Why? Unlike most protocols, BGP's correctness depends heavily on how it is configured.

How? To validate a property:
enumerate aspects of configuration that affect it
test that those aspects conform to certain rules

Limitations? Some aspects involve cooperation across ASes; not really possible today.

That's OK, plenty goes wrong inside of one AS, too.