Abstract

Presented herein is a security mechanism that prevents service theft with software-defined networking in a wide area network (SD-WAN) services provided with Segment Routing over IPv6 dataplane (SRv6). The security mechanism described herein is valid in SRv6 deployments, but also provides line-rate security at PEs that do not have dedicated crypto-hardware.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS