Automatic verification of safety for virtualized networks

1. An apparatus for enforcing safety rules on a virtualized wide area network (vWAN), comprising:

a memory storing one or more instructions for managing the vWAN, wherein the vWAN includes a plurality of virtual network entities associated with geographic locations and virtual connections between the virtual network entities, each virtual connection associated with a policy to provide a desired level of service for traffic between a pair of virtual network entities; and

at least one processor coupled to the memory and configured to execute the instructions, wherein the at least one processor is configured to:

receive a change to the policy and a configuration of a virtual connection between a first virtual entity in the vWAN and a second virtual entity in the vWAN from an operator of a network connected to the vWAN;

evaluate a set of safety rules for the operator based on the change to the policy and the configuration of the virtual connection of the vWAN and a network state of a physical WAN underlying the vWAN to determine whether conditions of the safety rules can be satisfied given the policy, the configuration, and the network state, wherein the set of safety rules includes a reachability rule defining whether the first virtual entity in the vWAN can reach the second virtual entity in the vWAN according to the policy and the configuration of the virtual connection; and

generate an error message in response to at least one of the set of safety rules failing the evaluation.

2. The apparatus of claim 1 , wherein the at least one processor is configured to block the change in response to at least one of the set of safety rules failing the evaluation.

3. The apparatus of claim 1 , wherein the policy or configuration is a match action rule.

4. The apparatus of claim 1 , wherein the at least one processor is configured to:

detect a change in the network state of the physical WAN underlying the vWAN; and

evaluate the set of safety rules for the operator based on the policy and configuration for the operator and the network state in response to detecting the change in the network state.

5. The apparatus of claim 1 , wherein the set of safety rules includes a negative reachability rule that prevents traffic originating in a first geographic location from entering a second geographic location.

6. The apparatus of claim 1 , wherein the set of safety rules includes a capacity rule defining whether the physical WAN underlying the vWAN can support the policy and configuration of the vWAN.

7. The apparatus of claim 6 , wherein evaluating the capacity rule includes evaluating the capacity rule for the operator in view of other vWANs sharing the physical WAN.

8. The apparatus of claim 1 , wherein the set of safety rules include a first set of rules defining compliance with government regulations and a second set of rules defining operator selected rules.

9. The apparatus of claim 1 , wherein the at least one processor is configured to receive a selection of the set of safety rules from the network operator.

10. A method of enforcing safety rules on a virtualized wide area network (vWAN), comprising:

receiving a change to a policy and a configuration of a virtual connection between a first virtual entity in the vWAN and a second virtual entity in the vWAN from an operator of a network connected to the vWAN, wherein the vWAN includes a plurality of virtual network entities associated with geographic locations and virtual connections between the virtual network entities, each virtual connection associated with a respective policy to provide a desired level of service for traffic between a pair of virtual network entities;

evaluating a set of safety rules for the operator based on the change to the policy and the configuration of the virtual connection of the vWAN and a network state of a physical WAN underlying the vWAN to determine whether conditions of the safety rules can be satisfied given the policy, the configuration, and the network state, wherein the set of safety rules includes a reachability rule defining whether the first virtual entity in the vWAN can reach the second virtual entity in the vWAN according to the policy and the configuration of the virtual connection; and

generating an error message in response to at least one of the set of safety rules failing the evaluation.

11. The method of claim 10 , further comprising blocking the change in response to at least one of the set of safety rules failing the evaluation.

12. The method of claim 10 , wherein the policy or configuration is a match action rule.

13. The method of claim 10 , further comprising:

detecting a change in the network state of the physical WAN underlying the vWAN; and

evaluating the set of safety rules for the operator based on the policy and configuration for the operator and the network state in response to detecting the change in the network state.

14. The method of claim 10 , wherein the set of safety rules includes restrictions that prevent traffic originating in a first geographic location from entering a second geographic location.

15. The method of claim 10 , wherein the set of safety rules includes capacity rules defining whether the physical WAN underlying the vWAN can support the policy and configuration of the vWAN.

16. The method of claim 15 , wherein evaluating the capacity rules includes evaluating the capacity rules for the operator in view of other vWANs sharing the physical WAN.

17. The method of claim 10 , wherein the set of safety rules include a first set of rules defining compliance with government regulations and a second set of rules defining operator rules.

18. A system for enforcing safety rules on a virtualized wide area network (vWAN), comprising:

a wide area network (WAN) including a plurality of geographically distributed physical computing resources and connections there between; and

a network orchestrator including a memory storing one or more parameters or instructions for managing the vWAN on the WAN and at least one processor coupled to the memory, wherein the vWAN includes a plurality of virtual network entities associated with geographic locations including the physical computing resources and virtual connections between the virtual network entities, each virtual connection associated with a policy to provide a desired level of service for traffic between a pair of virtual network entities, and wherein the at least one processor is configured to:

receive a change to the policy and a configuration of a virtual connection between a first virtual entity in the vWAN and a second virtual entity in the vWAN from an operator of a network connected to the vWAN;

evaluate a set of safety rules for the operator based on the change to the policy and the configuration of the virtual connection of the VWAN and a network state of the WAN underlying the vWAN to determine whether conditions of the safety rules can be satisfied given the policy, the configuration, and the network state, wherein the set of safety rules includes a reachability rule defining whether the first virtual entity in the vWAN can reach the second virtual entity in the vWAN according to the policy and the configuration of the virtual connection; and

generate an error message in response to at least one of the set of safety rules failing the evaluation.