/plushcap/analysis/cloudflare/cloudflare-topaz-policy-engine-design

How we prevent conflicts in authoritative DNS configuration using formal verification

What's this blog post about?

Cloudflare has implemented a formal verification system called Topaz to ensure the correctness of its internal DNS addressing behavior. The system uses a custom Lisp-like programming language and runs in production, checking for bugs before programs are deployed. Topaz is part of a larger addressing system and helps make the internet more reliable by providing an example of formal verification applied to networked systems. It also allows Cloudflare engineers to write certain programs that absolutely cannot overlap with other programs, ensuring their consistency and reliability.

Company
Cloudflare

Date published
Nov. 8, 2024

Author(s)
James Larisch, Suleman Ahmad, Marwan Fayed

Word count
3736

Hacker News points
None found.

Language
English


By Matt Makai. 2021-2024.