<i>Verikube</i>: Automatic and Efficient Verification for Container Network Policies

Recently, Linux Container has been the de-facto standard for a cloud system, enabling providers to create virtual environment in much more scaled manner. However, configuring container networks remains immature and requires automatic verification efficient management. We propose Verikube, which utilizes novel graph structure representing policies reduce memory consumption accelerate verification. Moreover, unlike existing works, Verikube is compatible with complex semantics of Cilium Policy adopts from its advantage performance. Our evaluation results show that performs at least seven times better efficiency, 1.5 faster data management, 20K