This paper introduces NEST (Network-Enforced Session Types), a runtime verification framework that moves application-level protocol monitoring into the network fabric. Unlike prior work that instruments or wraps application code, we synthesize packet-level monitors that enforce protocols directly in the data plane. We develop algorithms to generate network-level monitors from session types and extend them to handle packet loss and reordering. We implement NEST in P4 and evaluate it on applications including microservice and network-function models, showing that network-level monitors can enforce realistic non-trivial protocols.

翻译：本文提出NEST（网络增强会话类型），一种运行时验证框架，将应用层协议监控移入网络基础设施。与以往通过插桩或封装应用代码的方法不同，我们综合生成直接作用于数据平面的包级监视器，以实施协议约束。我们开发了从会话类型生成网络级监视器的算法，并扩展其以处理数据包丢失与重排序。我们在P4中实现NEST，并在微服务与网络功能模型等应用中进行了评估，结果表明网络级监视器能够有效实施非平凡的现实协议。