Highlights Tenant Guard, a VM-level network isolation verification system Pairwise reachability for over 25K VMs in 3s Built on Open Stack, a popular cloud management platform Based on a hierarchical model for virtual networks Leveraging efficient data structures, incremental verification and parallel computationHighlights