Presented herein is a security mechanism that prevents service theft with software-defined networking in a wide area network (SD-WAN) services provided with Segment Routing over IPv6 dataplane (SRv6). The security mechanism described herein is valid in SRv6 deployments, but also provides line-rate security at PEs that do not have dedicated crypto-hardware.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Filsfils, Clarence and Camarillo, Pablo, "ASIC-FRIENDLY SRV6-BASED SD-WAN SERVICE THEFT PREVENTION MECHANISM", Technical Disclosure Commons, (February 06, 2020)