AegisPath: Privacy-Preserving Interdomain Data-Plane Verification with Versioned Verifiable Evidence

Abstract

Network verification checks whether forwarding behavior satisfies intended invariants. In interdomain settings, data-plane verification is challenging because forwarding configurations are private, while post-incident review requires repeatable, version-specific checking without costly online coordination. We present AegisPath, it replaces centralized verification with distributed witness generation to protect AS-local configurations, decouples witness generation from repeated auditing through a commit-and-prove design, uses zero-knowledge proofs to answer queries without revealing forwarding paths, and supports incremental updates. Experiments show that offline Secure Multi-Party Computation (SMPC) witness generation takes from thousands to over 104 seconds, online Zero-Knowledge (ZK) auditing remains sub-second, and incremental maintenance yields substantial speedups over full re-computation.