查看文章

Frank Brockners, Shwetha Bhandari, Tal Mizrahi, Sashank Dara, Stephen Youell

2020/11/23

Internet Engineering Task Force, Internet-Draft draft-ietf-sfcproof-of-transit-06

Always on visibility: In-band OAM for IPv6 Page 1 Proof of Transit Frank Brockners, Shwetha Bhandari, Sashank Dara, Carlos Pignataro (Cisco) Hannes Gedler (rtbrick) Steve Youell (JMPC) John Leddy (Comcast) David Mozes (Mellanox Technologies) Tal Mizrahi (Marvell) IETF 99 Prague – OPSEC WG; July 19th, 2017 draft-brockners-proof-of-transit-03.txt Page 2 Consider TE, Service Chaining, Policy Based Routing, etc... “How do you prove that traffic follows the selected path?” Page 3 X B C A Verifier Page 4 • Meta-data added to all user traffic • Based on “Share of a secret” • Provisioned by controller over secure channel to hops where “proof of transit” is required • Updated at every hop where proof of transit is required • Verifier checks whether collected meta-data allows retrieval of secret • “Proof of Transit”: Path verified Ensuring Path and/or Service Chain Integrity Approach Controller Secret X B C A Verifier Page …