SR-SL: A Secure and Low-Cost Path Validation Based on SRv6
Xiaotian Ge, Xiaoliang Wang, Songtao Fu, Wenlong Chen · 2024
The authenticity of cloud computing forwarding paths is an important guarantee of Internet security and the foundation of a Path-aware network (PAN). Although related research has achieved remarkable results, designing practical path validation is still challenging due to additional overhead and protocol compatibility. The current rapid development of SRv6 may provide a new opportunity to solve the above problems. In this paper, we propose SR-SL, a new mechanism based on SRv6 that supports forwarding path validation. SR-SL designs low overhead generation and verification for cryptographic labels to sequentially encode path information into the segment list. Routers use the segment list to add and verify labels to ensure the authenticity of the forwarding path. We set up a test bed on BMv2 to evaluate the performance of SR-SL, and the results show that SR-SL can provide a path authenticity guarantee with little additional overhead.